504 B IP
ASN #20940 Akamai International B.V.
Hash 72e206e9b89445fb2fb4031a6abe6169
a18bebfb86a71685bd817c15e348cfb5ea438c72
856f85441e043130f88668be6cf68110187856f17999bddc4332437d383c79b6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "856F85441E043130F88668BE6CF68110187856F17999BDDC4332437D383C79B6"
Last-Modified: Mon, 23 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8881
Expires: Wed, 25 Sep 2024 17:08:09 GMT
Date: Wed, 25 Sep 2024 14:40:08 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 28e78d8178ae1eb54a5649b6d53b28c1
db0751a25e0edeb1d0fc2e12857887f921415115
eed92ba0d6fcda7b8365052a0abbb873be47acc3c38537efc9e089fc9acbfe82
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EED92BA0D6FCDA7B8365052A0ABBB873BE47ACC3C38537EFC9E089FC9ACBFE82"
Last-Modified: Wed, 25 Sep 2024 11:06:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20565
Expires: Wed, 25 Sep 2024 20:22:53 GMT
Date: Wed, 25 Sep 2024 14:40:08 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash b864476fa0457236e163a06e1cad5279
e9acc26214498b6861058be05885f07275075406
55fa8283fbd284a294b1853b35eb0bbbdfd3dd6de3cb3ebf441f0a7f6296d41d
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "55FA8283FBD284A294B1853B35EB0BBBDFD3DD6DE3CB3EBF441F0A7F6296D41D"
Last-Modified: Wed, 25 Sep 2024 10:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11054
Expires: Wed, 25 Sep 2024 17:44:22 GMT
Date: Wed, 25 Sep 2024 14:40:08 GMT
Connection: keep-alive
14 kB URL ak.vialotadom.com/afu.php?zoneid=7922810&ymid=BD1727275167405kav2imd5q&var=1
IP
ASN #20940 Akamai International B.V.
File type HTML document, ASCII text, with very long lines (17217)
Hash d9d009a668be42fe364fadbcec05f97a
dae6e6cc42ff2f6b3e3fb97ebc54d3ac0fe5e950
bb187d061cb33ba7d81a9fea7569ea528929073cdea6f779b4d551c7f441a732
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /afu.php?zoneid=7922810&ymid=BD1727275167405kav2imd5q&var=1 HTTP/1.1
Host: ak.vialotadom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 26d499665f001ec430784bb1b68c7e6b
link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
vary: Accept-Encoding
x-akamai-transformed: 9 13415 0 pmb=mRUM,1
content-encoding: gzip
expires: Wed, 25 Sep 2024 14:40:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 25 Sep 2024 14:40:08 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
content-length: 14374
set-cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; expires=Thu, 25 Sep 2025 14:40:08 GMT; path=/; secure; SameSite=None
oaidts=1727275208; expires=Thu, 25 Sep 2025 14:40:08 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
captcha=player; expires=Wed, 25 Sep 2024 15:40:08 GMT; path=/; secure; SameSite=None
server-timing: cdn-cache; desc=MISS, edge; dur=27, origin; dur=8, ak_p; desc="1727275208629_1600457270_13434519_3521_1095_1_21_41";dur=1
X-Firefox-Spdy: h2
43 B URL ak.vialotadom.com/sftouch?userId=0080e2a07d9a40b1ed6d91dbfd78f749&z=7922810&p_rid=cb20d691-13c7-4d03-8ce7-30c7a46817a3&p_src=sf&branchId=2301301&rb=piyE9nmoBly2VuBtCxxoxlQEUxx7yPKyHWP82Nsegs8PI8D5nZcew9ZxSmtYKw6QwWsPt06kdC8agjErHOtoGZXdoZBDRx4W7RFAH2zl3E-2f1_9WUq0XDl993yEwx5ApzwXuwYHkpYLnC0WNvQ0jgSQhR8lbmjh-rOg678clPxQkYfm0Oux5aC-oqrchxkrc3Gghzd1sKfqGk5Ujd9UWYNwVDe5oDVpEKz-EGZ1wqxlu-Cc5VmYMpqnRpyHXSwRx8qJsUcQFl1WRiPJgNui9gkLA_x3CrQ2YMSdHXFaouY=&w_img=1
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sftouch?userId=0080e2a07d9a40b1ed6d91dbfd78f749&z=7922810&p_rid=cb20d691-13c7-4d03-8ce7-30c7a46817a3&p_src=sf&branchId=2301301&rb=piyE9nmoBly2VuBtCxxoxlQEUxx7yPKyHWP82Nsegs8PI8D5nZcew9ZxSmtYKw6QwWsPt06kdC8agjErHOtoGZXdoZBDRx4W7RFAH2zl3E-2f1_9WUq0XDl993yEwx5ApzwXuwYHkpYLnC0WNvQ0jgSQhR8lbmjh-rOg678clPxQkYfm0Oux5aC-oqrchxkrc3Gghzd1sKfqGk5Ujd9UWYNwVDe5oDVpEKz-EGZ1wqxlu-Cc5VmYMpqnRpyHXSwRx8qJsUcQFl1WRiPJgNui9gkLA_x3CrQ2YMSdHXFaouY=&w_img=1 HTTP/1.1
Host: ak.vialotadom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.vialotadom.com/afu.php?zoneid=7922810&ymid=BD1727275167405kav2imd5q&var=1
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; oaidts=1727275208; captcha=player
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/gif
content-length: 43
x-trace-id: 5757c2cd13331a8e5079bd4fa4148ddb
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Wed, 25 Sep 2024 14:40:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 25 Sep 2024 14:40:09 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
server-timing: cdn-cache; desc=MISS, edge; dur=21, origin; dur=5, ak_p; desc="1727275208740_1600457270_13434761_2632_812_-_-_-";dur=1
quic-version: 0x00000001
504 B IP
ASN #20940 Akamai International B.V.
Hash c5df97c10e9a37c02e8e12b302465464
b0d9b31bb7dd48f11b58e6f1833798e45dc5a862
350fb41eb348dc3b30943b357e089a3cd9dcc9670285c29485ba02a38ebcbc15
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "350FB41EB348DC3B30943B357E089A3CD9DCC9670285C29485BA02A38EBCBC15"
Last-Modified: Wed, 25 Sep 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7741
Expires: Wed, 25 Sep 2024 16:49:10 GMT
Date: Wed, 25 Sep 2024 14:40:09 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash cf5be9e91962e4db943ad10605bb4285
f85a71ca56e72df1e0ab33f7ad98ff88c2bf0c8e
fa8e288d5a54b976aac15a48b2a7edc68635e011e0d171f97b47822c385965cc
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FA8E288D5A54B976AAC15A48B2A7EDC68635E011E0D171F97B47822C385965CC"
Last-Modified: Tue, 24 Sep 2024 04:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7508
Expires: Wed, 25 Sep 2024 16:45:17 GMT
Date: Wed, 25 Sep 2024 14:40:09 GMT
Connection: keep-alive
43 B URL my.rtmark.net/img.gif?f=merge&userId=0080e2a07d9a40b1ed6d91dbfd78f749&z=7922810&p_rid=cb20d691-13c7-4d03-8ce7-30c7a46817a3&p_src=sf
IP
File type GIF image data, version 89a, 1 x 1
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=0080e2a07d9a40b1ed6d91dbfd78f749&z=7922810&p_rid=cb20d691-13c7-4d03-8ce7-30c7a46817a3&p_src=sf HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ak.vialotadom.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080e2a07d9a40b1ed6d91dbfd78f749; expires=Thu, 25 Sep 2025 14:40:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
12 B URL ak.vialotadom.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=cb20d691-13c7-4d03-8ce7-30c7a46817a3
IP
ASN #20940 Akamai International B.V.
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=cb20d691-13c7-4d03-8ce7-30c7a46817a3 HTTP/1.1
Host: ak.vialotadom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1456
Origin: https://ak.vialotadom.com
DNT: 1
Connection: keep-alive
Referer: https://ak.vialotadom.com/afu.php?zoneid=7922810&ymid=BD1727275167405kav2imd5q&var=1
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; oaidts=1727275208; captcha=player
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=utf-8
content-length: 12
access-control-allow-origin: https://ak.vialotadom.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
expires: Wed, 25 Sep 2024 14:40:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 25 Sep 2024 14:40:09 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
server-timing: cdn-cache; desc=MISS, edge; dur=22, origin; dur=2, ak_p; desc="1727275209321_1600457270_13434837_2378_784_-_-_-";dur=1
quic-version: 0x00000001
0 B URL ak.vialotadom.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=cb20d691-13c7-4d03-8ce7-30c7a46817a3
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=cb20d691-13c7-4d03-8ce7-30c7a46817a3 HTTP/1.1
Host: ak.vialotadom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 457
Origin: https://ak.vialotadom.com
DNT: 1
Connection: keep-alive
Referer: https://ak.vialotadom.com/afu.php?zoneid=7922810&ymid=BD1727275167405kav2imd5q&var=1
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; oaidts=1727275208; captcha=player
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 0
access-control-allow-origin: https://ak.vialotadom.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
expires: Wed, 25 Sep 2024 14:40:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 25 Sep 2024 14:40:09 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
server-timing: cdn-cache; desc=MISS, edge; dur=19, origin; dur=7, ak_p; desc="1727275209329_1600457270_13434842_2627_694_-_-_-";dur=1
quic-version: 0x00000001
POST ak.vialotadom.com/?z=7922810&syncedCookie=true&rhd=false
302 Found 0 B URL User Request POST HTTP/3 ak.vialotadom.com/?z=7922810&syncedCookie=true&rhd=false
IP
ASN #20940 Akamai International B.V.
Certificate IssuerLet's Encrypt
Subjectak.lowmiloticer.com
FingerprintD4:95:70:31:F4:4E:0B:85:0D:20:F9:79:76:BF:DD:17:5D:7C:8A:14
ValidityWed, 25 Sep 2024 08:28:58 GMT - Tue, 24 Dec 2024 08:28:57 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /?z=7922810&syncedCookie=true&rhd=false HTTP/1.1
Host: ak.vialotadom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 8954
Origin: https://ak.vialotadom.com
DNT: 1
Connection: keep-alive
Referer: https://ak.vialotadom.com/afu.php?zoneid=7922810&var=7922810&rid=BPTR34PbLD67mf1dYD5JaA%3D%3D&rhd=false&ab2r=2301301&sf=1
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; oaidts=1727275208; captcha=player
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-length: 0
x-trace-id: 4ef907a63a3ce904e9484a178cf525b9
link: <https://nenseely.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
location: https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://ak.vialotadom.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
expires: Wed, 25 Sep 2024 14:40:09 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 25 Sep 2024 14:40:09 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
set-cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; expires=Thu, 25 Sep 2025 14:40:09 GMT; path=/; secure; SameSite=None
oaidts=1727275208; expires=Thu, 25 Sep 2025 14:40:09 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 02 Oct 2024 14:40:09 GMT; path=/; secure; SameSite=None
server-timing: cdn-cache; desc=MISS, edge; dur=21, origin; dur=28, ak_p; desc="1727275209426_1600457270_13434890_4942_686_-_-_-";dur=1
quic-version: 0x00000001
504 B IP
ASN #20940 Akamai International B.V.
Hash cf5be9e91962e4db943ad10605bb4285
f85a71ca56e72df1e0ab33f7ad98ff88c2bf0c8e
fa8e288d5a54b976aac15a48b2a7edc68635e011e0d171f97b47822c385965cc
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FA8E288D5A54B976AAC15A48B2A7EDC68635E011E0D171F97B47822C385965CC"
Last-Modified: Tue, 24 Sep 2024 04:35:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7508
Expires: Wed, 25 Sep 2024 16:45:17 GMT
Date: Wed, 25 Sep 2024 14:40:09 GMT
Connection: keep-alive
GET nenseely.com/js/_each-land-config.a12b95fb.js
200 OK 22 kB URL GET HTTP/2 nenseely.com/js/_each-land-config.a12b95fb.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 6ab281e44ee56df6438a28112c975f32
e1ab37b44e6adb7cb779bc776b78c6d34ec4a710
5b18e5e5a46c30be8c22f3026e9fee5bd51b4e5f4be49bad03debab224a6d5a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_each-land-config.a12b95fb.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=75046
etag: W/"66f3fa72-12526"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2600
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UlZF3x95XQXwQ9O4bZthWvW65buN6cWQhN2nCTx35dPxtZS0tlinIJZPTR6z7gMG8gQaOdQZLRFeDpi8kVGKa430UiPeAkGzbrn5sLcCAVjMvk9mA8YY8olzsSqiexM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d5a74b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-node.js.b3f20640.js
200 OK 2.3 kB URL GET HTTP/2 nenseely.com/js/v-node.js.b3f20640.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (6251), with no line terminators
Hash 34ea0907efd338e9e0d8ea46afb66c98
c96e3471fe33e9652881932062583f3d1c1ff531
1d525de9457160ed5ea2528a1bc72f1217706cce001e85f77be6011b3ec1afc2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-node.js.b3f20640.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-186b"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C1cH5YrwiQqPxYI4%2FFzJSQIlkNPsk4XYysLD3KHvEjVDMKAHcQ2isP4Q02heA%2B5q0l7ez3bGiHWohl1d1dBguFFsuc%2Bq3e1hGie6n1L%2BELAbPG%2BxGM0IFLHotC21Whg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48ecc7fb77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-redux-toolkit.esm.js.61510496.js
200 OK 5.3 kB URL GET HTTP/2 nenseely.com/js/v-redux-toolkit.esm.js.61510496.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (11319), with no line terminators
Hash bcd7372f51c7e725335ac2b99f5669e1
2b15ed1e1a3762c3a5c99572e75fd0007ad2a8a0
40ff34e4603dfa933b0e2a1174b7a0e24c2311166bb1cf9ffc8b005f0245e1df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-redux-toolkit.esm.js.61510496.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-2c37"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FfKwq%2FI0NZeQi1Xa6xJ7GIkoTjqNGe%2Bx9qw%2F13AoTwdL2wlhHzz544wjUPHHJg%2Be2NEOhbdBrRKN3lxwUuxMEnoJWkN86St2Lk1fhowj5xHAT2ieqqvz6PVknnAxQeo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d5a70b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-html-to-dom.js.6f877ef8.js
200 OK 842 B URL GET HTTP/2 nenseely.com/js/v-html-to-dom.js.6f877ef8.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (364), with no line terminators
Hash 2c246fbf964ef076df635e736b5a326d
5df106f4ba371db07c94e4cb77c5176e7c39a5c6
db4884db299689db4f3d465bccecf829da42dea2f7acdce9accfebd7351602df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-html-to-dom.js.6f877ef8.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-16c"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6710
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qx7aNqUSTjxTZK61xBKEEkNPsBrcLndyn0YTTadNbgP1bGKZ8vI8aTypuHCT%2BLDbkBgUL%2FbClxbqYvBl115hkUhWo0QzXHsjyxLQJpOkU67jtjLc4C1RR%2BT0GtANIXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48eecc0b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-1.webp
200 OK 862 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-1.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x52, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 384118eb5e49870ad443d90051c692cb
35a73704dcf55b3232f2e9cfc333ff2ecfdcc19f
1ae21006f04f15e16a8057644615cdf8a8a9b39db706f53ba9a925327a6a1635
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-1.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 862
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-35e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3563
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x8YZnh6KHjkVmjEo7etvL31PFXxDJ4d%2ByrwUECUmjgjf1vg0foIR1UfPL8%2F999d%2F9avjAWIXvB3Xq%2BQ7FK6oHvTey%2F67DhfXp9Gw4J6laxGkKjMhq%2BQm%2Fl7tetLlRSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f7de1b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-5.webp
200 OK 588 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-5.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 25e1107a0e365082ccd6093e0073f05c
7b0d3c741f2bbabbcac99f29bee8cf2f9eaa1841
935ec86b128c0bb7bfafc5915a46c0c3709c47b90509e26e4c994d8ef5587cf2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-5.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 588
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-24c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3566
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ai3E66JuwDCdYoV7KR1lmbty318WsCvIH5mj%2BgJnWCRTCq1JVIcDzNk3ZQ3ccPhVafY70hMWN78Ja3ga9TzOX%2FLrk7B3Vhxg5g6G5CmSqgrcV4ftVINVSiqPBpDDs2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8de8b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-9.webp
200 OK 818 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-9.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash a61b1f29004e5a54130bc57051a49c0d
7f60eef07e311b3598895343111d90282a002ea0
b3de11ad2ace70aa9786af4a9e65db774466fe25aca16e16dabdfa7ec76b0a53
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-9.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 818
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-332"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3559
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lZRlU0WiNAWsxUni0ISIcuh7ygcU%2BXWzXxTsCPmcCS%2F7Sa1zN7wc8Rhb6NzqEevXEIww3mIXVLddNWBaQKFZFvVDMra05iP0p4%2BzCbHC3uEKqat0rLaDJf8jvfyaQLQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8df3b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/js/v-constants.js.23082895.js
200 OK 1.1 kB URL GET HTTP/2 nenseely.com/js/v-constants.js.23082895.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (600), with no line terminators
Hash 38b0375b70bb96d12cc97c37f9b14eb4
95ba2b2c545e8c0a22e4e2c308a28d079e8202ad
cbf2ed7d20c68b61aa1a676ba1c3b614f82a229e9b6f22cc3589e5d468eb1a30
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-constants.js.23082895.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-258"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xifGxV0rsW2nob4BH9QZta0%2B6bek1EaWj%2B4UCenTaFK8mi5o4qwZ%2FMSRuam4LqHCRr5GEaZ0faqxlCPROFTjNwkCsTRsUsEq5nflNPf5tkkh%2FBZGcJtCN8SLx41pf9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48eecd8b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/SurveyContainer.e2953ccc.js
200 OK 16 kB URL GET HTTP/2 nenseely.com/js/SurveyContainer.e2953ccc.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (57298), with no line terminators
Hash ac89d4ead0df295f23227a401509695d
e3be2e31b83c25ac5301112274abc065d4a63e92
1a0d3353433bae380dcbd40effbb01b63b1a5593017a591bf268ff3dc953229c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/SurveyContainer.e2953ccc.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=57301
etag: W/"66f3fa72-dfd5"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2601
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p0OxaIRvHFoIswdqWSyH8YA51cUeoZCYAWM%2BygPjG3zUQJQARbHBcURIAkSVBo0Wqcx8MhLlW%2Fi8Q%2BL3aiTSXtHAk3Cx%2FQmBGevRGD7CTkV5KfEiP9t0UgtJXOKN3P8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48eece0b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-12.webp
200 OK 668 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-12.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash c57b8a772545ee6e05fedb58c143beb1
6cb5aef79f86275a725cfdd406c7038b24d80aa9
03389ef007f0fd3486a5c71848fd2b67cc05341cf449bcdd34a81a1d4048b090
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-12.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 668
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-29c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3553
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2blvplyPuuGuRz6iCEHJYBxNd0hjw3o%2BUkXP2lhmDs0I4C0uFov0YEQPsEJzW%2FQkuKqyPw0tf4Dzger3Hm1%2BdgbE8TLM9513IrwZwyCvmDlCDgonBemnwfaosDAZ0ug%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8df9b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-13.webp
200 OK 640 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-13.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 8532ec97225298a9c3ae5e393f62e462
fc26fa010830045fa91a16ac9b8c89c45bb35232
9c45568c99b7782b240341ba6729ecacc59d41a8ced9b9846ca4ac51e50c5320
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-13.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 640
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-280"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3553
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ivXyNBNu6phMn1qL3YIEQskzwJDfu1%2F%2Bxa7NeIX1bQWEqLgjSlTGEcV9gv4He1WS%2FRZLdmmUSMZNQQ2xgBGj7WeIrv%2Bv2bF79ARe9KzO3g2J%2BSTI8CieXKmbKFPmpT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8dfab77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-14.webp
200 OK 626 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-14.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 7c494127025f1ec09a96c16bf0531a36
0c2f9302c41f99da9fb5eead2c364bdbdf435156
e6443a7cdcc5ee11ece88ce10824fd79851700e4bd3dc6259d1a816182b82e5b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-14.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 626
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-272"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qOavb73bWKaw1djc4jdL7Vh1d0K4SGVIG4ErHCF%2FeMcH%2Fl1ouR3PDwjyHS2aom%2FmTPoxhLNE1DAEVLMZoqKD7Hed83O0Eu1PNo%2F8xMrysIYmK%2BFdkgUAHK0PQpTiz04%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8dfbb77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-15.webp
200 OK 576 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-15.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 6c0726564aa84c5f1161bd0051e0c5e0
6df7e7122e0d007e7ea187c3c35fbc869f8ef8e5
98ff0218f67c0bce5c834a0145c686f56d3a7ca1b948341a3181739da66883b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-15.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 576
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-240"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YYVcVYChruAKch8h47U%2F1%2BieXmS3Sru3XxnqDKmBOFu72TznILmXgh09hTq%2BboTBQQP%2BFFtPaMT0C24vO1swr0Plzra4b3ZV%2B1CFKNzigoXnagnSkMrUvPuN3UCQZCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8dfdb77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-7.webp
200 OK 610 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-7.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash eb52e160b8ea5a1e0de8b2453f46d642
4d28311b4ca822a0a74e318c9d1f54def088b509
2e9c67781abf2cfbabb240bfd08ca836658063849f3303b85027203eec1d37c5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-7.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 610
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-262"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3559
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T5HLKqZeiH%2BTPoHRxVtWNhKvtLFO7b%2Bq28b7HtuJK%2B8I1pOD75qKhZveMo1ZoX6wiVHeWuAcBug%2F9CaCyoZNmxQfSoiBL%2Bvrw%2FQq8Ys48JEWliteUPxua%2BU9aRjdiMY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8defb77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/js/v-attributes-to-props.js.5847b9cb.js
200 OK 967 B URL GET HTTP/2 nenseely.com/js/v-attributes-to-props.js.5847b9cb.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (702), with no line terminators
Hash c8f9fb2ed7bd006c3d7cc42d76c6e7ae
806b3544282c62d48a7b1265e0bdf7ec3700c8c1
b9afc8a496fb345df0e1b8976ce1cf147720effeed0eca9c1343b5749171c82e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-attributes-to-props.js.5847b9cb.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-2be"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6712
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=es8KkqoE4YbOs4FbOjLCjMCmTITlXGDE6YIh%2FTN%2F8YPjqv%2F8f2KqFzRz9f9UnFruBE0fPmgxhtxN1DR8TsWaIrua3wDYNSBeg0KXLY%2FzEG7q8ggxaA0dLiv7ifuZzoM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48eecbcb77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-6.webp
200 OK 462 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-6.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash dfb961fdb848e75591268fde9c186902
2218e96a5c5081f5bef43fda74fd8f0cbb025003
4cf92de9b24fb1484bc1d97880c20589e113b9b1f065df1963e0648f3a38474d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-6.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 462
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-1ce"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3566
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qNlMEot5LW9cTQ5nAj9b1SAHxRNDuFolbDW%2Bj9RRB%2B08OGt77xa1r7gMbrXxjO09AT%2BJpQ4JpoRzI9BPDQ4Tl%2BOagxzGu09h5iMWk8jGN73UbiNpfIiuRD%2B9M9%2Bfbuw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8debb77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/sweep/tokens10k.png
200 OK 82 kB URL GET HTTP/2 nenseely.com/img/sweep/tokens10k.png
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type PNG image data, 480 x 500, 8-bit colormap, non-interlaced
Hash 10337a4976db716ba3b8cad1f0f1f736
788015c74e561249cc5318fc178e564b68bce44d
fef211dba7465da86e75019f78dcdf59af496394963b0bc6cc78b02286effe58
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/sweep/tokens10k.png HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/png
content-length: 82163
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-140f3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3489
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sSDED2CgbmLArOpXRS7LLFp%2FYy%2B9KUiSxpTlHUK7MNumRli8AzW%2B04R4bHK8QrXBDHXKiFoSOgPAShCG2QGFPxhB8Ra0Rr1Io0kXNML0jg7svPM9bsYE6triI3C0wn8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48fae25b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-16.webp
200 OK 734 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-16.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 0e8c55db8fda61ba2565a293b72e36e1
ef9deaad0f8a71da57252bcf543ea369673d39ff
79b1a144ec7d571b7a155cd2852da72e89b2954affca1448001e3fed2227cb34
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-16.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 734
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-2de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3519
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nu30QYyvSM3W0MC1RYR%2BEuIXlRhAEikYt2bQocvidbKLJVMvKqut4MZENJaGmghzVwUtw31yLFBOVTO48iEr8hauYMCrIc7iwoKdu5FFseKIzvEdbPoGaLedZyYF41U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8dffb77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/css/sweeps-survey.c9db58bc.css
200 OK 35 kB URL GET HTTP/2 nenseely.com/css/sweeps-survey.c9db58bc.css
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2c4f8bb8329914f457070622e0b8818c
2f72f807a481bcd644fd777d8b642b96e3295b56
5bfeb36fbf4dc45489c0f3463674cf9173a8257c84b3986d6e2a32aad5f0f865
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/sweeps-survey.c9db58bc.css HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=97992
etag: W/"66f3fa72-17ec8"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LP5FmuThzEBbzZIyGkeHmFqKzO8ObdvWdDW5PBgiSbal7BMVlGvZFVhWRXWt6SPcSYnm%2FEGyH%2FcXSIlj3os3BbMbATHUs0gmVhbbHyI0hcCYm7lNCFIRjj3XkxfYizM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d6a94b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 72e01cf8ce3d2f0a48e418a724a21b8f
e23d484b65df2b50849e5867ce3af58afcdb7c4d
625548e1c1e169d946f2349f0285ab674ca58857642b25bd35410a58129ed8d8
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "625548E1C1E169D946F2349F0285AB674CA58857642B25BD35410A58129ED8D8"
Last-Modified: Mon, 23 Sep 2024 06:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9653
Expires: Wed, 25 Sep 2024 17:21:03 GMT
Date: Wed, 25 Sep 2024 14:40:10 GMT
Connection: keep-alive
POST arleavannya.com/sync-do
200 OK 0 B IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerLet's Encrypt
Subjectarleavannya.com
FingerprintC1:1C:85:01:CE:80:29:42:D7:7F:5A:F6:AB:57:E6:B1:6B:A0:B8:38
ValidityTue, 20 Aug 2024 19:49:35 GMT - Mon, 18 Nov 2024 19:49:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://nenseely.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 25 Sep 2024 14:40:10 GMT
content-length: 0
access-control-allow-origin: https://nenseely.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
POST arleavannya.com/sync-do
200 OK 171 B IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerLet's Encrypt
Subjectarleavannya.com
FingerprintC1:1C:85:01:CE:80:29:42:D7:7F:5A:F6:AB:57:E6:B1:6B:A0:B8:38
ValidityTue, 20 Aug 2024 19:49:35 GMT - Mon, 18 Nov 2024 19:49:34 GMT
Hash 84563efb06be0ca10ea3f9ac9687149b
3efb1e5ecbe8ba3aab0e8e9ab64204a8810c63ce
183355255fd65735240ee8bd9ceb82a53a4caded98ce4e82783c9f7e058c13da
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 149
Origin: https://nenseely.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/json; charset=utf-8
content-length: 171
x-trace-id: 777b133a3ffae26a7bebe3d072b8dbbf
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nenseely.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET nenseely.com/js/sweeps-survey.fd5d7dd5.js
200 OK 3.0 kB URL GET HTTP/2 nenseely.com/js/sweeps-survey.fd5d7dd5.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (5943), with no line terminators
Hash bf8c3efcb7176b3c6d5b3b99fa84af34
d103326526f2e90d1692c0652338a419fc17b558
272632111153d749781a170ba9cf41310f7e9555d7bb5e5e269402dd2fc8da79
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/sweeps-survey.fd5d7dd5.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-1737"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2600
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ehqh7qbEbJXdr1aQrTfPIxTlbx6UJYhuNGRThXf%2B4TqMT0iCEZySHNDltCH6moSVmxL%2BTGXkc8cA2CcgGsieOzg9I%2F%2BPkDMigjXheyd0ptMq9nOztnY8UqF943fQyvU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d5a79b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash c16a3fe398c09ad4d309c60911d6a6b6
dc1148076d45d128cb6d0780ac0467aeba0902e9
5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230"
Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2497
Expires: Wed, 25 Sep 2024 15:21:48 GMT
Date: Wed, 25 Sep 2024 14:40:11 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c16a3fe398c09ad4d309c60911d6a6b6
dc1148076d45d128cb6d0780ac0467aeba0902e9
5bd5f6cc031865b327cd4987c09f2266f9b994cc967eb6cf75bab5a58bcb7230
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5BD5F6CC031865B327CD4987C09F2266F9B994CC967EB6CF75BAB5A58BCB7230"
Last-Modified: Wed, 25 Sep 2024 02:39:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2529
Expires: Wed, 25 Sep 2024 15:22:20 GMT
Date: Wed, 25 Sep 2024 14:40:11 GMT
Connection: keep-alive
GET nenseely.com/js/_core-survey.5741ea7d.js
200 OK 52 kB URL GET HTTP/2 nenseely.com/js/_core-survey.5741ea7d.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash c07ce7e06d2f01eb38f722bd503eac23
5e88b85300b330ba4d2cf3588aef555af31d185b
af0ded23e64dfd98a9751e231906ecbbb5e91e87a09d09e06ea44d0d92247320
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_core-survey.5741ea7d.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=156329
etag: W/"66f3fa72-262a9"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2600
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5OwNTH1zCVe8IEugBiVJBMdKxlzdo3xqU3TfVrB%2FiHcE8nsJHhgIKua3r9lx0wpsMNxfOe4%2BIxeRsebU1OrJPVjLveEoSUjuWDPkjbmb%2FqM1dHSe6tiGs7EjSaWi%2BIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d5a78b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/css/_core-survey.d3ac2ee0.css
200 OK 18 kB URL GET HTTP/2 nenseely.com/css/_core-survey.d3ac2ee0.css
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with no line terminators
Hash 30d726a40ffe74d794b282ca1795b44c
b43155653a1b9cc8d257687df9a75e0f204db348
4916da6d6e00e0e6681cccaf9107eb45fdfc78fe2e476444623c30a64959b5e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/_core-survey.d3ac2ee0.css HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=84
etag: W/"66f3fa72-54"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3581
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6cazGKJ8uNFBzFxSMGop3v5yVUedn01%2BW3HBs0v5ODju44vrezzBYUucPpUQFhnOu5Ztwg%2Fi1xmnVhwJ1AEZ5sV8Wh6JQoaQWafGZt0og38Q8Csd0VbUg%2F%2B%2FtVrq3kQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d6a92b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
43 B URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP
File type GIF image data, version 89a, 1 x 1
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 25 Sep 2024 14:40:32 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080e2a07d9a40b1ed6d91dbfd78f749; expires=Thu, 25 Sep 2025 14:40:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET nenseely.com/js/s-checkSessionStorageAvailable.ts.080f6a89.js
200 OK 330 B URL GET HTTP/2 nenseely.com/js/s-checkSessionStorageAvailable.ts.080f6a89.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators
Hash 8da162f3faf910fd59af32a86469529f
72a9fdd9ef138c6b685377251e127ed6f379723e
64dcef87d8efc4cd1e9ec991238c62190a5578318f0e14997370003488b34ae3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-checkSessionStorageAvailable.ts.080f6a89.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-14a"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tLhGGGqxLwXjWw3rFSsxLj38F3cjdJwYnz%2Bu9OCW0Ef7PQBIrb0Ek2OhFp2YSzfn3qCzqwF3TiuOHxXAH6aEOsc8UUyPPbFsslFNSdmvDtpJBybaVu7YkNakt1RUA%2Bc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d4a68b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/s-checkLocalStorageAvailable.ts.f85cd6f6.js
200 OK 330 B URL GET HTTP/2 nenseely.com/js/s-checkLocalStorageAvailable.ts.f85cd6f6.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators
Hash 32117b84efdd7689199f1f4d52e98f0f
1d4364d78491cb51a8c8e9bd1cc8510cdc81a8db
0f021caaf643542f3e291702d8995802dbc4fe04ee7d99a84c2472d3f9afdb1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-checkLocalStorageAvailable.ts.f85cd6f6.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-14a"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SM5tHgzUy5S%2FtIuDIHswfHENn8WuEg6goPyLPu9Z09gfzl%2Bv0B%2BTw2jLqQOrRqOsVXg4xdxjl1ZpMGE%2Bx1X0zChsQOyG69cxGwIGHRNib%2F9aR37KXgJb6%2FRmVMeznzc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d4a6db77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/_rtc.18eb00dc.js
200 OK 12 kB URL GET HTTP/2 nenseely.com/js/_rtc.18eb00dc.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (12222), with no line terminators
Hash 5c5f3060cd93784f5fa50afe6afc74d6
75e3b31d4f51eb81f248f6b839b6d72d914ab135
c95a1d56c4d585ba485463a4d4061e64b1e46d17f4b9e83cab0f95302cba65fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_rtc.18eb00dc.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-2fbe"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2B3XFcCdNEXpglsEHIZPOhqFhuhjhG%2BlGJEvKut7MDa%2BvF%2BuEhc4JJWdTIN5Ww9codxRKA074%2B9gp%2FdnOkK4BIJKrOTeAGwqpj9Q9d771hin0edpEMQKRXbbbdacxso%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d4a5db77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/s-storageService.js.05cc15a0.js
200 OK 2.2 kB URL GET HTTP/2 nenseely.com/js/s-storageService.js.05cc15a0.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (2216), with no line terminators
Hash 9a7c9802374d489aa1db195f51c028ed
6332e54e537ad8ec610e40c475a16c327a942d6f
64e515da25882d407612d375e9c78b4ed7e561c805df3858f4b29c1737e16191
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-storageService.js.05cc15a0.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-87a"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2600
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6KNwELv1TMJZj1zmMP4yOtJZUAmAi0f0xIpmax0fNX%2FXgCjgINMT%2Blxk62kohRH9lpeVu4C7fHCLRtY6mqioBExsE%2FBFqoo0tl1AmHuFb1be7tihshgA8OtPJpIpFB8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d4a63b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/favicon.ico
200 OK 1.2 kB IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/x-icon
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: W/"66f3fa72-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1Krwgt5YU7XX5WiTu0fHKoy7NEzZ%2FCdmFmG6070lY%2F3M5%2BxLV%2FTSt5RvyoaKfTSQEiCTnHR46eoz%2FvcwMs01pQtMcLAJbAwlTMrxbpothmWeLqfmPaFpHP1bkW1cx8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f6dc5b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-index.mjs.50c8d69e.js
200 OK 35 kB URL GET HTTP/2 nenseely.com/js/v-index.mjs.50c8d69e.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (35286), with no line terminators
Hash 5c080e9f349f6d33d5c403bc10184fe1
60f3e3a155ea4ece476a55514b2787c1fb8d4079
77475e9048319c715ea626739ad44bd16d6372dd0ec5c3584334edd3c38aa6d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-index.mjs.50c8d69e.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-89d6"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6704
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YrUD6jTak%2FrXQYFdl%2BYBI54y470e10URn7SMgPBqxCIeEcKp7%2BPBJj0l9lArlvI8rQ1OEs2QJtkG706dekVsWTeJ6IslfMNAH5sEPIZk5mbWhaCr5GU7m%2FrqOPQ2ztg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48ecc7cb77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/css/SweepHeader.f7064bad.css
200 OK 387 B URL GET HTTP/2 nenseely.com/css/SweepHeader.f7064bad.css
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (387), with no line terminators
Hash a1502f6958ba303256c5f3c58f3d9b5c
269295c488b23e54f2ab298cccbc9bd396caa1e5
66271bae359e6d84ec3bf5aa7bb758f1e155cab91b6604bc28f224e4210e7694
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/SweepHeader.f7064bad.css HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=388
etag: W/"66f3fa72-184"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3576
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QORfl939y8SytIsZwfXEoKC20vtWjs9z6iGU3zGbsIgYBysdfwVHa080Myhqwqg0iIFB8Itjm69P%2BhhKDYpo6KTuey%2FVC6aYdlqcEhPDas0LOd4jLcLPrHT4OK7f8yw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48ecc77b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-react-dom.production.min.js.e532a3ff.js
200 OK 129 kB URL GET HTTP/2 nenseely.com/js/v-react-dom.production.min.js.e532a3ff.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129356 bytes)
Hash c2cf402b45a2670a7c49fff904dae02e
f56f5968f7aa6eff91d85d7f11e97a46790dd684
6bcbf6c0a1c5a41aba18b241fe9ea09e935110665fada43402ffbc91de3e23e0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-react-dom.production.min.js.e532a3ff.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=129359
etag: W/"66f3fa72-1f94f"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=62XAXBLNzDR%2FaQsuzPwpkVZLxy9N1Yh7yz6Ij%2BGnchBY137qmOJ9p0TlZokNk%2FXxoFqiLOW4T%2Fmq%2FjX7lEf2ZmobsWM%2B0gh7WYbuyDdE2Pe2P5FL%2BNWOn23vRWstFEg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d5a75b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-utilities.js.a456b741.js
200 OK 2.6 kB URL GET HTTP/2 nenseely.com/js/v-utilities.js.a456b741.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (2645), with no line terminators
Hash 852ea4d04438ff562ceadbbb71009dd0
9c4736483676fe729102bf471f4d766b17bd23b5
0e7a97427b44dc39e3a00f543f5847610da645860d80e1227c44c75033811f0c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-utilities.js.a456b741.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-a11"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RYW6M4QuFOFEurU2n1aKgPH5dTaZHZAQVm6rl1hVCe%2BxHbu5%2FcRpqjCNJoc5rlg6qFhb42ZKzWiuAMqwv5%2BpmZC5wBO59H4U7zUHDy2eLnlS0un57G9CWnwkvRqL7u0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48ecc85b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-3.webp
200 OK 582 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-3.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 8347ebfbfa18beba17d356a3dbacb100
f1d66a05e07953cea27fe277e72a495a8e3de2e7
318e494a7bcf7cb28173e54feebeb44ba93b4c17a423c7036d2fcac40e4db6cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-3.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 582
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-246"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3563
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LrnNuSRN6gjD98RlZ17h49qJZHXhNQrD2nG%2FbTN6jcdHny71tj1Xmb%2Bic2dP0uhacyFQwlmM%2F4OF2s%2BXcSCfNLZP7%2FUBxIx6oKgY15mlus0s4h15EiPM5tKUXxU56Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f7de4b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/js/config/dict/cookie-consent-1.json?v=10
200 OK 6.8 kB URL GET HTTP/2 nenseely.com/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/json
last-modified: Wed, 25 Sep 2024 11:56:35 GMT
vary: Accept-Encoding
etag: W/"66f3fa73-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QemJOxW6Cpt5lJ1hadCsv%2BedlkdUXMX%2BkFENC9fk4DJ2VRoSBUZhWMAZQxKXt9AN7aOOvDh7jPwvcHdwXwy8wgv%2F06tsyNeOpTAo6XyBbRtchIuz4Z7CaR7uafs%2BMWM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48e5bbab77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-possibleStandardNamesOptimized.js.11ece07d.js
200 OK 7.6 kB URL GET HTTP/2 nenseely.com/js/v-possibleStandardNamesOptimized.js.11ece07d.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (7923), with no line terminators
Hash 40afcf9799eb216713f97fda40691fcb
638ab978d2f32ca129e5ac06eb541c71dd0f2a14
9724a018a83d7c934a763fa996f41e73586767e4cf9e1400f2fc5b5d56738b38
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-possibleStandardNamesOptimized.js.11ece07d.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-1d99"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cxldm%2BEdi0raOITcO7aw%2BN4dRV555k%2BF8bhMPB9XrFhK%2FpAE4pk%2BtGEq9aibtio%2B7VLPWehiEcDb0PgXH0n%2Fpb9nmtM63Ut9kTtGHzABsmrlsMgsoeQSLyhBuwydGuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48ecc83b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-dom-to-react.js.0eca2a35.js
200 OK 1.1 kB URL GET HTTP/2 nenseely.com/js/v-dom-to-react.js.0eca2a35.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (1101), with no line terminators
Hash d2987ee9af14ae718fd0c3094302dc2f
a2aae78e8167d9865380565f8162a5b993ea584f
1babafb7f6edb43624d1badc3cce24493cfff775f9d3e2cd1e2ecf15e0fb3ba7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-dom-to-react.js.0eca2a35.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-43d"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A9Fm55adUKeBGEM4wy0LDtMf9BYhueLi%2FBOvSf5ZBvOkk9HPTVXRlJ8EMDNNnkqUAgbHvuVhyVFbq50XOqjdSJNGZno0o%2FYXBF1Ya6%2B8qdW5QlaQAIPyiVQteb99DEw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48edc93b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-index.js.5b2ca3be.js
200 OK 41 kB URL GET HTTP/2 nenseely.com/js/v-index.js.5b2ca3be.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (40985), with no line terminators
Hash 215cd3b327ba30435f9c0ff3ca47b922
6a04322915142458451f3ad8cd2d4f21a2b857c8
35d59eabc6466988a49bf79a938c60970d56358d939def8d16e6c930af0b2a72
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-index.js.5b2ca3be.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=40988
etag: W/"66f3fa72-a01c"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6725
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9BWmTtu0iKC1nhhaD4vxRPLXQ1A3k8g2aRgQ%2FPdvS2vQmhTdLqYXy1vpZStsYqtf4B5%2FKeTyngpd7FkJdWjLuknZYUPoD7NsamB%2ByM4w0%2B%2B%2Bm0YJahZ7Fwy85kd1bgA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48d4a60b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/config/sd/sd-99275599-en.js?v=10
200 OK 5.2 kB URL GET HTTP/2 nenseely.com/js/config/sd/sd-99275599-en.js?v=10
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (5380), with no line terminators
Hash 5f743ae44ecf79f46e1283242703efe9
b94976f36efc92d69bc7dca22c022fae0fe9f97a
9ffb0e0f086d5d9ca36db4cf2c10823ad6dd1442ef80902672ab7dd26620114f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/sd/sd-99275599-en.js?v=10 HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-1428"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7081
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=02%2BBs%2B3Iktn9OdQQgvUmFoiohqnXFSZFvGOtRrcNgDOZ6d59Y8XPeAV%2BCMCMT%2FgOQrZFVHJxpi9tGzSzO97v2yz1mkP3g6UU%2FZD8bKFdzcap%2FmEbfFdXvpvgNFrxTA8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48e2b5db77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-8.webp
200 OK 696 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-8.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 6a6742fef0cd1bd74f6da94e9fb833e1
ccaae2ff48574bbb04072b2efc5864b9177017a5
96bf5ed5aa8149269a215cf19a17889c762b8cddb2fe36229849c8379c2d4aa6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-8.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 696
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-2b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3559
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EwctxotyQlpO9QEJb%2B%2BnfyPD%2BaqbxJWAJl0A87etOXl21uhS7pN29A0EiiQ5h7Jl13TwneZDimSyAieHCK4FE90q7bnrMq8LPDNaCT9m3gHnjVi8jquH9WmkMHgyI8g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8df0b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-10.webp
200 OK 572 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-10.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 206819c13484a7a818f1e4499be3704e
ada2f34308d6eaa0d004ed0c732e5a3aa7fda1db
f4eed862cbcf8f9ce2bde63cf3e13e73ed3e58ac93ec4bb14301b248c4d58e1f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-10.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 572
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-23c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3553
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FkrGdPMxgRI642JW4vdw455rEDMvl7ddTRisHNKhzKc%2FnFPSYBbh5ekarEIgZR3WK%2FlvRMnRkKBrPlZ76BS1ToGrKkdioWaxanpZ8aDkH2ekZ9WpW8I3%2FgkffDembzg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8df6b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/js/config/comments/en-sweep.json
200 OK 4.9 kB URL GET HTTP/2 nenseely.com/js/config/comments/en-sweep.json
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (5602), with no line terminators
Hash e365b2a50ff785aa57118984ebc86b5d
0cf187164eaa42ff7e244ba653bbde659feaa5bc
3094a84e8e909474fae4e0db6685d9b407d4493efd9389efe35caf326c95a6f0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/comments/en-sweep.json HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/json
last-modified: Wed, 25 Sep 2024 11:56:35 GMT
vary: Accept-Encoding
etag: W/"66f3fa73-12f9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2typ8%2FOsiQnzGveOvc%2BX9FzDjFUDZvnW6y16NgTow8y%2FgcU8Sxjp2nRzF6nDcO5rqn8L6%2B27EvTgNa%2B7GpJmeWRyydtDVEdCt%2BAJIE%2BmlK4iJ4aLyOsed4uUq3H71CA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48eac43b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-4.webp
200 OK 800 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-4.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash b1c95558f71bd6614c52433c225b6a28
7c903c12b48199ac1e1b3c8846baf12693b97a28
8e5987af9fd886b03617f6e4980035a877697b9ccdeb9f002c41baa1d6ee8912
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-4.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 800
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-320"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3563
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rum2S2DK9Z%2F6tIQKNqfSJ23v6HGm5915SC%2FobdPNDLDJiJSyZL6AnOMZLrC%2FE1F%2BpsxuOToVlt%2FPpzncL5HKflkbAWZzUtkBiz5g3qFfF06wXlt9ZMpRPGpzOVwo57o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8de6b77c-AMS
X-Firefox-Spdy: h2
GET nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
200 OK 8.2 kB URL User Request GET HTTP/2 nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
IP
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type HTML document, ASCII text, with very long lines (8487), with no line terminators
Hash 262b9a678ce0ecf9c7e51556da496e34
3a48d040ffa1a8b54b6b4bf30cc5eedcd8fbce10
7c7f56d9e0be6daa88b4fece5db7acf6a525186c23778411ced17505e98ff471
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:09 GMT
content-type: text/html
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X4%2FKOeuM5AwgxC7gaBcMv4zUlxB6tKFS6JMRMBLg6ztt7HU8ZHDje1IArNLuLcWLT3fFEZjuha12EUNeTB1SaENmKOsPb17oSk8h%2BjEmwkK4vp2dvquN%2FhWRsHofbSo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c8bc48c492eb77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-2.webp
200 OK 538 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-2.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash e4d97f0d392aca4fa78b0928438d0168
55f713d8826a9a65e11fddf4c5fa4ea5939953b2
7058be64334990621fbc8cc06782aac5116c6e8a6d7700d892cb8b36f06c5866
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-2.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 538
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-21a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3553
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c1ledAM%2B9MzH1KZqKw1TQq0edzvYJJXynD8CQZ3ajHnMftH71bfN6DhGMGHHcbi%2FGcKx%2FwOelawq89TQM3HJsGderQQ%2BTGgormYdiQQumLPtXPYjM%2BrAToefGC4ePqI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f7de3b77c-AMS
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js?userId=0080e2a07d9a40b1ed6d91dbfd78f749
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=0080e2a07d9a40b1ed6d91dbfd78f749
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint59:49:A1:C9:C3:99:98:FC:2D:E7:4A:9E:86:83:A6:DE:2E:C3:8A:B6
ValidityFri, 30 Aug 2024 01:00:45 GMT - Thu, 28 Nov 2024 01:00:44 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash b3c6821d346256a440dbce0e35be8cfa
b21e0b66297b8d12785edfb902948b68d42ddd26
116af9316d0c8de81e886b42b9e54352ccb476eae22453ea6e51be8e642de72f
GET /gid.js?userId=0080e2a07d9a40b1ed6d91dbfd78f749 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nenseely.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://nenseely.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080e2a07d9a40b1ed6d91dbfd78f749; expires=Thu, 25 Sep 2025 14:40:10 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET nenseely.com/js/SweepHeader.d70c07bc.js
200 OK 1.1 kB URL GET HTTP/2 nenseely.com/js/SweepHeader.d70c07bc.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (1097), with no line terminators
Hash 385266b7b912d6fb021867ab8ec452e7
53943436d6efffe4fbee348b6600aa2924c9cfa6
88172ca6ae46cea52ae752f0b6d771f7ebc790ea91fd4d9f08248cc1e965396c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/SweepHeader.d70c07bc.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa73-429"
last-modified: Wed, 25 Sep 2024 11:56:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6712
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Hg5OG6mQoutoLaJgyCJYuaTA1CgXvjX0h0XavSNxvTJoE%2B%2BEe2Tu%2BwTIMERjPMalT4PfbF4JdN9ypzQkDCwJc1MrDld9Zl8bCHzXT3gS5uIl0X4UBD9dzK6LDT4J68%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48ecc79b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/js/v-domparser.js.2f998fb8.js
200 OK 1.7 kB URL GET HTTP/2 nenseely.com/js/v-domparser.js.2f998fb8.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (1772), with no line terminators
Hash e7278d313b603c054d58a439e2643bdf
dc8adabde9d40abddd4ec27fe810a8eab85759c8
607e37df89cbe8c9774ce558f7f981a05cbb29386f2c6dd42ed6cedd54af6de6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-domparser.js.2f998fb8.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f3fa72-6b8"
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6700
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Cqy%2B0jP8FCocDR%2BBjjtG27l0Oxsz905pOz%2BYSqRD%2B3jBOKVb3lr%2BBHV5uiRsMn1635sOOQjX3Bu50XB8S5y2StJJDtN7VZtbuAQ9342ZONJf0pfw8N6XUz6WLk6hFc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48edc90b77c-AMS
content-encoding: br
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-11.webp
200 OK 502 B URL GET HTTP/2 nenseely.com/img/comments/person-sweep-11.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e2a07d9a40b1ed6d91dbfd78f749&s=862817366709637326&z=7922810&b=21546778&var=1&campaignid=14083&utm_campaign=1&utm_medium=7922810&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 7ec874233fc75e1ec8df712b7ebbd7d2
cc219fb2b7e6057a8303283023dd1aa09a082455
9bb6b14a5a503d3c52bc6fc2e7c236a90e7971ceb41cb99e5245fcfc39ef328b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-11.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e2a07d9a40b1ed6d91dbfd78f749; syncedCookie=true; oaidts=1727275210; ID=0080e2a07d9a40b1ed6d91dbfd78f749
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 25 Sep 2024 14:40:10 GMT
content-type: image/webp
content-length: 502
last-modified: Wed, 25 Sep 2024 11:56:34 GMT
vary: Accept-Encoding
etag: "66f3fa72-1f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3553
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xzw7tyfduqDypMOvobWX7w5jHq1aYWv4ZF6aOC3%2Beo3jaq7zYVqO7tFs58t5p9RWRtrCvF5aeVXVenTgi02SbomZ4II5q7rorJhK%2F6OASNQQL6ZXhd%2BpC4IK7OpMKG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c8bc48f8df7b77c-AMS
X-Firefox-Spdy: h2
95.101.10.58
139.45.195.8
188.114.97.1