Report - gazeta-pl.store/

Report Overview

Submitted URL
gazeta-pl.store/
IP
104.21.4.6
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 20:28:09
Access
public
Website Title
ArtDesignio
Final URL
gazeta-pl.store/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
60

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-18	921 B	9.3 kB	151.101.1.229
gazeta-pl.store	unknown	2023-08-02	2021-07-29	2024-02-08	14 kB	8.8 MB	104.21.4.6
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	1.6 kB	138 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-18	527 B	44 kB	142.250.74.74

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed
2024-04-18	medium	gazeta-pl.store	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	gazeta-pl.store/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-01
Pretty URL gazeta-pl.store/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.4.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-01 19:00:50 Times Seen55595 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	gazeta-pl.store/assets/bootstrap/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-04-25
Pretty URL gazeta-pl.store/assets/bootstrap/js/bootstrap.bundle.min.js IP 104.21.4.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:28 Last Seen2024-04-25 07:42:33 Times Seen299 Hash e2307f14f0542ab4d4c9e8449229ea22 c2cce1d089e8bb32daf1fb56dd2792fc699f237a 200677bd63ea5e6b08b0cc23a9f615ae71ae2957037ede57f128b8ecfe45d7cf Loading...

	gazeta-pl.store/assets/smoothscroll/smooth-scroll.js	7.5 kB	2023-03-07	2024-04-26
Pretty URL gazeta-pl.store/assets/smoothscroll/smooth-scroll.js IP 104.21.4.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:28 Last Seen2024-04-26 07:09:27 Times Seen276 Hash 23a0a7b791595ef13b030c4a0632c723 5b0ef559619ae76e226059afbd65803f9fb619a2 ed87d4dcc8364407804ffe0cfd3656782060cbe49aea04a83f3e5eb709ee4e5f Loading...

	gazeta-pl.store/assets/ytplayer/index.js	28 kB	2024-04-18	2024-04-25
Pretty URL gazeta-pl.store/assets/ytplayer/index.js IP 104.21.4.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 22:28:09 Last Seen2024-04-25 07:42:33 Times Seen4 Hash 7fc0d02a91add0430b29951e6276478a ac96582e86cd022bb201560fa7aa99cb5e351828 fa440c3f6c83c552658c6760c30ff3ef91876afa1fe9f01ad2639ada90d41f81 Loading...

	gazeta-pl.store/assets/theme/js/script.js	40 kB	2024-04-18	2024-04-25
Pretty URL gazeta-pl.store/assets/theme/js/script.js IP 104.21.4.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-18 22:28:09 Last Seen2024-04-25 07:42:33 Times Seen4 Hash 013ab943ddbbad8b4937aac3a13a1b82 ed2f52e9a025ac5b2f6e139b6874ed9a2efabee9 1604b45593441da0e33b6c6e6c07f35cb3700929740fa849375c380a8ddeb565 Loading...

	unknown	38 B	2023-04-10	2024-05-01
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 16:02:06 Last Seen2024-05-01 18:57:03 Times Seen14080 Hash 43e28c5553d54ed2964bd5147521769b 0a2b8c3db330a47aa7b9195e6dfdf944adb9240d d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23 Loading...

	cdn.jsdelivr.net/gh/manucaralmo/GlowCookies@3.1.8/src/glowCookies.min.js	19 kB	2024-01-25	2024-04-25
Pretty URL cdn.jsdelivr.net/gh/manucaralmo/GlowCookies@3.1.8/src/glowCookies.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-25 15:00:23 Last Seen2024-04-25 07:42:33 Times Seen6 Hash 4b56cfdb0e6ff21e4dc4df2553bf8bbd b2690b1aec090f557210c27d6316f8a45a879602 4198d9bf7420604b4b71903d2ba892cf47715a21f33d61fdad858c7e10c4463f Loading...

	gazeta-pl.store/	245 B	2024-04-18	2024-04-25
Pretty URL gazeta-pl.store/ IP 104.21.4.6 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-18 22:28:10 Last Seen2024-04-25 07:42:33 Times Seen2 Hash 06c21f1d8d71466dc40b2ceb090fcfc7 a489692c86a8107e71cbd3215f3e6c810463ec04 3fa11cfd175641d3db4f065ee50734506c9e9be63839653ae1e8f2cd690d4b17 Loading...

HTTP Transactions (36)

URL IP Response Size

cdn.jsdelivr.net/gh/manucaralmo/GlowCookies@3.1.8/src/glowCookies.min.js

151.101.1.229

200 OK

6.6 kB

URL GET HTTP/2
cdn.jsdelivr.net/gh/manucaralmo/GlowCookies@3.1.8/src/glowCookies.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://gazeta-pl.store/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (17406)
Size
6.6 kB (6570 bytes)
Hash
4b56cfdb0e6ff21e4dc4df2553bf8bbd
b2690b1aec090f557210c27d6316f8a45a879602
4198d9bf7420604b4b71903d2ba892cf47715a21f33d61fdad858c7e10c4463f

HTTP Headers

GET /gh/manucaralmo/GlowCookies@3.1.8/src/glowCookies.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.1.8
x-jsd-version-type: version
etag: W/"49f6-smkLGuwJD1VyEMJ9Yxb4pFqHlgI"
content-encoding: br
accept-ranges: bytes
age: 1155736
date: Thu, 18 Apr 2024 20:27:39 GMT
x-served-by: cache-fra-eddf8230098-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6570
X-Firefox-Spdy: h2

gazeta-pl.store/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

104.21.4.6

200 OK

1.1 kB

URL GET HTTP/3
gazeta-pl.store/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
gzip compressed data, from Unix
Size
1.1 kB (1127 bytes)
Hash
9fc4f9f1c7331ac978e9488fb88f7e37
c627fbcf425619d5d3f8fd3f2a134c11a476f5bf
12803a1d94dfb456f0fa4094e57f5f7d635c9014d162bd1609fcde97fb017c76

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:39 GMT
content-type: application/javascript
last-modified: Tue, 16 Apr 2024 15:45:04 GMT
etag: W/"661e9d00-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JQVJft5iSrFwsbP4ABJIrQ%2Fv8mfGLCSOiDO2NaiMYcYfdJxt0IK%2BZgiVYXVcYo4Cv3kaDJs0Tb3KioLdcaftsHOsMKamzskP6n3YCtvM1pqr9uJ%2Fh0AJcwR%2B4IAndyznJrs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963f020afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 20 Apr 2024 20:27:39 GMT
cache-control: max-age=172800, public
content-encoding: gzip

gazeta-pl.store/

104.21.4.6

200 OK

12 kB

URL User Request GET HTTP/2
gazeta-pl.store/
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (442)
Size
12 kB (11560 bytes)
Hash
2b23e6f46b9613146a14ee6c86a64f83
b93469e5a6ac43083d09da83f4382b053c6e28ff
d17b7e5bc6eb81ee9656937778008dce1e367ff18d4e9ddebc14177959ceda6b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 20:27:39 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JSV4%2FSAXzIia9hcoOd135XWsGeGRKRUyRvqt1zxl%2BknXhMBZu3cVPlNRJbTrhrZk4NwqTKf8g6SHMohmTIk0n%2B8LTMBY8Io51c14PEcOB5AUje%2FHT4uypf8WU6ZkzHTi5b4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765920a9eb511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

gazeta-pl.store/assets/images/9MVWyxIp81.jpg

104.21.4.6

200 OK

84 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/9MVWyxIp81.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 736x736, components 3
Size
84 kB (83480 bytes)
Hash
ca6ffa736f0947903c23aabae7ddfa28
4ab1479130e8ae475c0b3d934c7590de22d40647
14bb412b8bc19d84909e5a4ba24744dffb2084b1f7d412548c5e23c6314821d0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/9MVWyxIp81.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: image/jpeg
content-length: 83480
last-modified: Thu, 18 Apr 2024 03:56:39 GMT
etag: "14618-61656f55a3f7e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w80zsKhHl5HPWj7ZCA9nM7lcM6fp%2BGy%2Fpp4rdMp6HkzgfiSAM%2F%2FEqvL9lfcSJkZ5Fd5APdgd3pqywrVnECV%2FWr9bKZ2TogjUape9vHSIobmwDlrzsdZIcBx%2BzXUOehlPVl4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765962ef10afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/DFNEBf6Tls.jpg

104.21.4.6

200 OK

63 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/DFNEBf6Tls.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 577x866, components 3
Size
63 kB (62574 bytes)
Hash
1c3805115b25a1abdd7fedfb6983ae33
4bcb1b970ca72d042ea964f562c0752d1e08d219
a827e10cecc3f3120b1ffafdd07a588e1f527f4947ee782f3cb4503a0c8d71ba

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/DFNEBf6Tls.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: image/jpeg
content-length: 62574
last-modified: Thu, 18 Apr 2024 03:56:46 GMT
etag: "f46e-61656f5c86ac9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HqMogeiNZDoa0siaDf2D%2BdoOtQl5p3%2F6S%2Fc2ckrJI3rNKd%2BLVTP0k27%2BHWaNAymx0tk3%2FryoiIjUpO2d4a3Xn7IQKRd%2FshvaZW0fHupoljin0Ihv37dJFSIDttEIRr5cnkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765962ee60afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/d0_dxn218d.jpg

104.21.4.6

200 OK

91 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/d0_dxn218d.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x1104, components 3
Size
91 kB (90648 bytes)
Hash
597d1c2b3f81925acda2a6ae4ffc332d
8474e813229449f7898daffed8e49d8df1467af8
61f591ec7925eba577b1ad0a7c0deae148a795bd5829673b6264ac825d181587

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/d0_dxn218d.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: image/jpeg
content-length: 90648
last-modified: Thu, 18 Apr 2024 03:56:39 GMT
etag: "16218-61656f55d1ddf"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AZGKVldb7aX9xmbCzAa75m8fhxiZl5dcV8IlOwKgFh3EFggWL2jun07T3UwhDyARAQO%2B9u1%2FATM4qRtBhzlnF%2F1KTG6FJu2uUvIMy1T6U5ayF0U9Y1VDNFDCxcGRPChZtXA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765961ee20afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/UOrmwrakEw.jpg

104.21.4.6

200 OK

47 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/UOrmwrakEw.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x1671, components 3
Size
47 kB (46602 bytes)
Hash
dae39782076f74b150d1e34de49184cc
9da7fe382955978a29c89edad008b56d0b898033
24f7ba8b4634308bb57c37937c97669cd3db5204620e25229b8b26b0ffd89500

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/UOrmwrakEw.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: image/jpeg
content-length: 46602
last-modified: Thu, 18 Apr 2024 03:56:42 GMT
etag: "b60a-61656f585c42f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B9VgUQojK1AM4OIFTOBL7GPh4LT7BKdAs1Q9fUNV2v3sVUXbyJSEX%2FOOnz7JlCvi1HpFf2yuiZVoU%2BtaHxwonUlaxd5gldjGhOOiuBX3UFS6oQflbSDA%2F0mTv4zVykI6zR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765962ee80afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/SXk80vRmvR.jpg

104.21.4.6

200 OK

1.2 MB

URL GET HTTP/3
gazeta-pl.store/assets/images/SXk80vRmvR.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 4032x3024, components 3
Size
1.2 MB (1200265 bytes)
Hash
947ca1022d53d8c6b49dab1efb30fc08
66bbe3e70d50ccc7f68ca5172fbddf7059bb9e21
4962c8383e5b6ddfd11e9a56a0a37fa592a844b28e08ed41b8338fb608c980c5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/SXk80vRmvR.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: image/jpeg
content-length: 1200265
last-modified: Thu, 18 Apr 2024 03:56:46 GMT
etag: "125089-61656f5c117c6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2BSwOPKXqHztBC0dCFQ16P0YwbftywijAIm6ew1P8L77%2BbEQ%2BPWdl0hTiHx9AEZK5nRY%2BD8Ij9zFLZWKRuED6JEbeLM1EU6gH%2B17gKZerwA66Se72KeIDR4SCdC8rKXkOfo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765961ee40afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/-wespirO9Zbd.jpg

104.21.4.6

200 OK

6.7 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/-wespirO9Zbd.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 100x100, components 3
Size
6.7 kB (6703 bytes)
Hash
2c33b3b5aec301c208e508cf12d03fa2
77709d247e28f7c0ec5f393c02913ff699dd8d0a
cda85ca19b3b524c09044a8b89c73a12038abbf94057c7caf67465ec5d2c0fc9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/-wespirO9Zbd.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: image/jpeg
content-length: 6703
last-modified: Thu, 18 Apr 2024 03:56:46 GMT
etag: "1a2f-61656f5ca4f29"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pzoagFSl4WzK5%2BT5NifP4P2RQuqqvxLlwJEumWDwldIxo2H%2Fv4BzIP7p%2F3dfBjKo%2F%2FpSJACyCNyfsH4jzen4XwSLUgTAC0tejUCcAOv1nbyBrC4Iso6Eftwg4iCvAScamP4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963ef70afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/bootstrap/js/bootstrap.bundle.min.js

104.21.4.6

200 OK

33 kB

URL GET HTTP/3
gazeta-pl.store/assets/bootstrap/js/bootstrap.bundle.min.js
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
33 kB (32585 bytes)
Hash
e2307f14f0542ab4d4c9e8449229ea22
c2cce1d089e8bb32daf1fb56dd2792fc699f237a
200677bd63ea5e6b08b0cc23a9f615ae71ae2957037ede57f128b8ecfe45d7cf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:41 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 03:56:57 GMT
etag: W/"1336b-61656f66e8e4a-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JtpSK6w0F1x3MuPpYTWFqhoJmtPfGudDsiRGMlTcf2DZddHmuKDBRp3kmnzpdACfqtQHfFNKG1eG8SGiUxRRXB%2BkMQwpKAvmbSt7sgdNLzMjLS381CI5Gx76oO5jzCTrddw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765964f030afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/eqX9J9u6JayS.jpg

104.21.4.6

200 OK

5.9 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/eqX9J9u6JayS.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 100x100, components 3
Size
5.9 kB (5934 bytes)
Hash
cdbdd8c89166bab38298a853ec993bb9
a23b0a5e724d2fa9d02ba757f42f1c5087a0c154
9a01ebfa9ff77d3294d536c8987b4241dd0d9c1f90c0295d4c2837f2381c4816

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/eqX9J9u6JayS.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:42 GMT
content-type: image/jpeg
content-length: 5934
last-modified: Thu, 18 Apr 2024 03:56:40 GMT
etag: "172e-61656f5663602"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=co35Wc%2BLFOQi5ROYM3aKlKwKdmUaECUoYX3Tgo6ES5VvJ62RM7XjEnDyrpp1ezFSGH3ZrD5ZyNDTtS1Jy9jBaQesaGILgS%2FyDVyKt%2BotiyZSCPveiZP8QsmpTgJ6MW4uQkI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963ef90afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/GKoO9armluol.jpg

104.21.4.6

200 OK

226 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/GKoO9armluol.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1024x1024, components 3
Size
226 kB (225892 bytes)
Hash
03008431260a787e64f9319f4b8d70a8
180c831ab065e70294c5b418517a3f65aab339c9
a9cdee4cccaa737e153ada41e94382dd419ced41a3c2df0ac6e2df488ee871c5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/GKoO9armluol.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:42 GMT
content-type: image/jpeg
content-length: 225892
last-modified: Thu, 18 Apr 2024 03:56:39 GMT
etag: "37264-61656f553b79b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8mT3Jy%2Biq%2BcLoocFJKGzJvfgiTjTvBeqF5c2XfnZR4ZTEo2QhQqoY6C2yZzdLI92%2FBTN268tbiEVlSp4QklgDMxFCOfIHo8nt7Iw66qIMq4mPEhfFUb71e78f6R2MykDfig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963f010afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/HWk722P94IaC.jpg

104.21.4.6

200 OK

227 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/HWk722P94IaC.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1024x1024, components 3
Size
227 kB (227184 bytes)
Hash
c4de903ee5f5832ab7cdc322a8e708ab
5e78920a144dce339446f4b4dc11d4d5a067a3c0
d068e17ce624550f1823a649edbd4099747d449840a06a01420f0473bc0f30b7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/HWk722P94IaC.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:42 GMT
content-type: image/jpeg
content-length: 227184
last-modified: Thu, 18 Apr 2024 03:56:45 GMT
etag: "37770-61656f5ad31fe"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xB%2FgE9ouRKGqLp56%2Fd6uFp8j7eKgAkrNffDUklTk4TMyVN%2Bbtki8iT%2FXeVWAp7eZUpBDSPu7jng%2F98mT0CEiYArfCsdefVyAi5T6p45R09gEjya8hMylIDudnTbUIBmURJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963efc0afe-OSL
alt-svc: h3=":443"; ma=86400

fonts.gstatic.com/s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2

216.58.207.227

200 OK

45 kB

URL GET HTTP/2
fonts.gstatic.com/s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://gazeta-pl.store/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 45072, version 1.0
Size
45 kB (45072 bytes)
Hash
989fe0a65c6db0bc250e553a362bbd7e
873ba77ca6d6a421895bb3f7c429cb539e8a1311
ca34455f82a5c81d8111c6a641771c011e95767e64efc8a52f82299896028c57

HTTP Headers

GET /s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gazeta-pl.store
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 10:51:11 GMT
expires: Thu, 17 Apr 2025 10:51:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:57:44 GMT
content-type: font/woff2
age: 120991
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2

216.58.207.227

200 OK

45 kB

URL GET HTTP/2
fonts.gstatic.com/s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://gazeta-pl.store/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 45072, version 1.0
Size
45 kB (45072 bytes)
Hash
989fe0a65c6db0bc250e553a362bbd7e
873ba77ca6d6a421895bb3f7c429cb539e8a1311
ca34455f82a5c81d8111c6a641771c011e95767e64efc8a52f82299896028c57

HTTP Headers

GET /s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gazeta-pl.store
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 10:51:11 GMT
expires: Thu, 17 Apr 2025 10:51:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:57:44 GMT
content-type: font/woff2
age: 120991
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2

216.58.207.227

200 OK

45 kB

URL GET HTTP/2
fonts.gstatic.com/s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://gazeta-pl.store/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 45072, version 1.0
Size
45 kB (45072 bytes)
Hash
989fe0a65c6db0bc250e553a362bbd7e
873ba77ca6d6a421895bb3f7c429cb539e8a1311
ca34455f82a5c81d8111c6a641771c011e95767e64efc8a52f82299896028c57

HTTP Headers

GET /s/intertight/v7/NGSwv5HMAFg6IuGlBNMjxLsH8ag.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://gazeta-pl.store
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 45072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 17 Apr 2024 10:51:11 GMT
expires: Thu, 17 Apr 2025 10:51:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 24 Aug 2023 20:57:44 GMT
content-type: font/woff2
age: 120991
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gazeta-pl.store/assets/images/TtaD4Z1EwWtJ.jpg

104.21.4.6

200 OK

6.1 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/TtaD4Z1EwWtJ.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 100x100, components 3
Size
6.1 kB (6074 bytes)
Hash
0cda6ac1a0f910a80bb8fc5b51f1e61e
4d06463c32352b007b151060b6799b5a0ee019b8
82d85edbd3c8ad2a9f1a066e1791c122b6e74c56287ec68bff9c15dc09668e02

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/TtaD4Z1EwWtJ.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 6074
last-modified: Thu, 18 Apr 2024 03:56:44 GMT
etag: "17ba-61656f5a3ac7a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QmVape4x3JbiMvLbNmg7PWisWzjONQJeqniHSspzQ%2FSUjZA1j75ftJdvIG7gA8mDV9te0oy43wrs0%2BDnh1rv7Kqji641ALRK7lMFWX5F6s2tJ0HYDQ3vKXNffeWgo%2FGKAck%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963ef80afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/WokxqYiHNJhK.jpg

104.21.4.6

200 OK

198 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/WokxqYiHNJhK.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1024x1024, components 3
Size
198 kB (197581 bytes)
Hash
7775e811ef95cbb7b6eb6d46e84674ec
1190e0e8a92f085f15f325b173e2d964b9895dee
7b70e763e879a15411c8447c903c0fa044258ed31615b31442d1195d65ebc1cc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/WokxqYiHNJhK.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 197581
last-modified: Thu, 18 Apr 2024 03:56:46 GMT
etag: "303cd-61656f5bf23c5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHq0a8H58PUJdA8Qf76z9WOgl8%2FSCtiz2fXokCxGYPgWt4UYMDWQJqzg39UHMlkfK2RSysxggeCiDk0ejDA01UXe0GDtDsEZWClWXN15Yn22b3jB3m%2B7ByDyxp3tghD99sA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963efb0afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/sWToVfxRFe_c.jpg

104.21.4.6

200 OK

204 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/sWToVfxRFe_c.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1024x1024, components 3
Size
204 kB (204470 bytes)
Hash
0419b701c1c27dcc32d1550b64f3ddee
f6eb982f5eba773ef916ea562ebf985e7f64f057
4606c88eeee3ac5e05fb8f0300d9cd0dd1265ec19ab5f8bc7534c08f786bc909

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/sWToVfxRFe_c.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 204470
last-modified: Thu, 18 Apr 2024 03:56:32 GMT
etag: "31eb6-61656f4ebc612"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MKT7iowKmEtXm3QP%2B4hD6SiCCn64zXLH9oLqVgarvviN0ljdJPQYW9X5eZj5r%2FnhglsfKmpV4U6gVpGinDPv0FwS7%2BSYLRRKmv7fQ4KmfWt%2BqNiwi3kDYzkbTpev%2FJFnPnY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963efd0afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/N6ulaXT9T8.jpg

104.21.4.6

200 OK

4.0 MB

URL GET HTTP/3
gazeta-pl.store/assets/images/N6ulaXT9T8.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6720x4480, components 3
Size
4.0 MB (4045197 bytes)
Hash
4a72c841fc832feac4c7796193251bf1
bae818d40bff9bfa6905b51cceec30007da0f172
eb28eab194ea9133fe275d4bf899b04c6148de127f895113147452b0fb33a673

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/N6ulaXT9T8.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 4045197
last-modified: Thu, 18 Apr 2024 03:56:38 GMT
etag: "3db98d-61656f5483e16"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mcB4dgzvqp7ZtTp31kmf2xH3tmQ0AA2s1WzWMNUxZBlDKXPMmRZtJU93C2sFVz1QVsNAMc0Ns44Kcxnodcto4C7Yf6mKfjXjfXC%2FIErDkWmgfAX0W5ggie9BU5uUXdndnYs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765962ef50afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/g61psKWlsAkE.jpg

104.21.4.6

200 OK

222 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/g61psKWlsAkE.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1024x1024, components 3
Size
222 kB (222286 bytes)
Hash
8cd5f58c58f51b19123dadf50ec3acec
5260b43cd0e2cf87a151a8adf2e40c446d41a471
f92f8df0ceef52ad40f73975e401f5f999884168123a239ec94cb018465b15fb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/g61psKWlsAkE.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 222286
last-modified: Thu, 18 Apr 2024 03:56:41 GMT
etag: "3644e-61656f571bf27"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0FDttFQEInQshQo2xkK7WI1MVC8JmBr7oqatMeL2sgHZxGEvQGs%2BIRUXjZJKp3vBPSL%2BpP8PT7ZGelmLQ1f%2B06eCMFYxK9EllRHNVYt8JVnh7JKgjPY7dTsUxnRNuZ7gD0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963efa0afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/9fE258kZksBq.jpg

104.21.4.6

200 OK

231 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/9fE258kZksBq.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 90", baseline, precision 8, 1024x1024, components 3
Size
231 kB (231050 bytes)
Hash
3669e95db6f1ac049057f87b0171f82d
47c7bca2d69f9b871560db5173e2bdf497ab78eb
099ce21561a917f3601b46af7bc61ff075f7686238c2fa13e53b6c5168464987

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/9fE258kZksBq.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 231050
last-modified: Thu, 18 Apr 2024 03:56:43 GMT
etag: "3868a-61656f5912e13"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AYNq5Wf3cRoYH7y3xWkAgw4baHYg5Ya1Tk8xpg1xyvdBUp%2FIbnIB9TwpeCEaaNeIfHXeepZYwecJ3gFX5E%2F7t2AvE6QXVSii3Wdj961q18zhv7VNiJkmDhfVZHESfhIxQbI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765963f000afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/4J9DF01ygK.jpg

104.21.4.6

200 OK

1.5 MB

URL GET HTTP/3
gazeta-pl.store/assets/images/4J9DF01ygK.jpg
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 4000x2660, components 3
Size
1.5 MB (1483073 bytes)
Hash
8d49cc5789054b57339201628467c536
9d449e5fa67c7230cb5e6c3e2b3f0a5d41edf4a2
84b49f7f1f347ebf92023d8a61453f81716aae69bec41b14668b8addf4a7c858

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/4J9DF01ygK.jpg HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: image/jpeg
content-length: 1483073
last-modified: Thu, 18 Apr 2024 03:56:48 GMT
etag: "16a141-61656f5ddd731"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VRMP4bGRKgahzna4y1AiaRihuZe7%2BF7VIl3iCnriAa9amNByj0jXL71%2FW9cUf1aSXjsT4wQV57KmhMdKeL76H6q6%2Bq%2FtD4xC5fFbsCgWl12NCVjKEFqYSKiSX%2BYsdVHFCxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765a61af50afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/favicon.png

104.21.4.6

200 OK

1.2 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/favicon.png
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1160 bytes)
Hash
86690d77b922163bd83b65bee64b1f02
70b189206c3a4fc52bd3e78dc9781f8d5656ed6e
4d90f45cdeb9ad6942f36be36793539ae208a1ed8a41fa0d9f6a78825e5a782d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/favicon.png HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:44 GMT
content-type: image/png
content-length: 1160
last-modified: Thu, 18 Apr 2024 03:56:43 GMT
etag: "488-61656f58e8e32"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KYdHlWdcmp7FjPRKPDVG6D2dpwJ3B3OXdyexuHZegeZshd09nbDSOs6QNsuX0ShxCh8zKB7x4tkzaL43Y6T%2FRS9zTl%2B3V3vvlQ1BHKu8nbp%2BS%2Bq38o9BkCPnpQQucGkp%2BhE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765b50da10afe-OSL
alt-svc: h3=":443"; ma=86400

cdn.jsdelivr.net/gh/manucaralmo/GlowCookies@3.1.3/src/glowCookies.min.css

151.101.1.229

200 OK

1.2 kB

URL GET HTTP/3
cdn.jsdelivr.net/gh/manucaralmo/GlowCookies@3.1.3/src/glowCookies.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://gazeta-pl.store/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (4113)
Size
1.2 kB (1178 bytes)
Hash
15709efb341f16babe09fc46593e1a84
b0db96e77899464f759097b4ce430cd1c90dbed5
72eeca45dd2880c7f746e7af6d641e72dad60104543467b7ac1cf59821539f64

HTTP Headers

GET /gh/manucaralmo/GlowCookies@3.1.3/src/glowCookies.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1178
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.1.3
x-jsd-version-type: version
etag: W/"1171-sNuW53iZRk91kJe0zkMM0ckNvtU"
content-encoding: br
accept-ranges: bytes
date: Thu, 18 Apr 2024 20:27:44 GMT
age: 1092018
x-served-by: cache-fra-eddf8230040-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

gazeta-pl.store/assets/theme/js/script.js

104.21.4.6

200 OK

21 kB

URL GET HTTP/3
gazeta-pl.store/assets/theme/js/script.js
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JavaScript source, ASCII text, with very long lines (5231)
Size
21 kB (20705 bytes)
Hash
013ab943ddbbad8b4937aac3a13a1b82
ed2f52e9a025ac5b2f6e139b6874ed9a2efabee9
1604b45593441da0e33b6c6e6c07f35cb3700929740fa849375c380a8ddeb565

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/theme/js/script.js HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 03:57:02 GMT
etag: W/"9a4f-61656f6b54bc5-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xatSpfvToDYc%2BVN7rap5WTSp3PbqcijGvVakGGw5TAGXOjtnmYmDrpeYYtQ2tq9wfLobQSpyLO7PW5lHaHIR62YUDfmtDbLYByTKdlCocD8OXtPuENzDipk%2Fvfy%2FzqqgzkM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765965f0f0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Inter+Tight:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i&display=swap

142.250.74.74

200 OK

44 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Inter+Tight:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://gazeta-pl.store/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text
Size
44 kB (43713 bytes)
Hash
a7c1609789645bbf30eaec04ec0cd4a9
6ef43f60581cef88f234ebba3e2f8811d8c81968
25d42113bc9e937358973b94485c036e0edb7c52c9c9d8cfced45da1e70195b0

HTTP Headers

GET /css?family=Inter+Tight:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 20:27:40 GMT
date: Thu, 18 Apr 2024 20:27:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

gazeta-pl.store/assets/bootstrap/css/bootstrap-reboot.min.css

104.21.4.6

200 OK

4.6 kB

URL GET HTTP/3
gazeta-pl.store/assets/bootstrap/css/bootstrap-reboot.min.css
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
ASCII text, with very long lines (4643), with no line terminators
Size
4.6 kB (4617 bytes)
Hash
1d6a21b90f4ad958374afb3c3c89ccda
8f1afefd92cf02593e7943aa662f1159f3877707
50a863a24af20f9f2f9638e6a6813cc55e2bf20d1b6284c324ab53fa287d5ddd

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/bootstrap/css/bootstrap-reboot.min.css HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:39 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 03:56:55 GMT
etag: W/"1209-61656f64c40fc-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uE16A%2BJHdK%2Fj6%2FlpVGH1Vfb4nqlgNpxRCsg3MeGEtnNihUhzgv9HdO80chjVpnsyhW9B22MjNIHV6S9RiUW%2BLZUxzJT0oRih4MPmIhcpFwgCw%2FQKirBlBjvFmsvwugFjxvI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765960ecd0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/bootstrap/css/bootstrap.min.css

104.21.4.6

200 OK

156 kB

URL GET HTTP/3
gazeta-pl.store/assets/bootstrap/css/bootstrap.min.css
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type

Size
156 kB (155585 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:40 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 03:56:54 GMT
etag: W/"25fc1-61656f6431939-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eus7CF3Ha1lwZkKyqqElmskQZUqGZyxXGSX8RVtGt7x2VowtVU4o%2FDRI9fAyihdQIXrC8OstTIzJiGYNuuxNr1InR51PWScU6J%2FPVj0qU%2FyzTM5fj7MpjuUpy9GiFSb%2FbHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765960ec80afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/theme/css/style.css

104.21.4.6

200 OK

15 kB

URL GET HTTP/3
gazeta-pl.store/assets/theme/css/style.css
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type

Size
15 kB (15013 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/theme/css/style.css HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:39 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 03:57:01 GMT
etag: W/"3aa5-61656f6ac2402-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KqwLFcBOk67VgL89ByGCnac78l5ls9eI8A70FTx3anvJLumAwG1m6L26w1K0se2%2Bg%2FWaZgW4ZyhpGeZpngfStRoG8Kw0fuhz6mV%2BX1fYavg6FdUOF7W0kJpPuc4NxvpQweU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765961ed20afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/smoothscroll/smooth-scroll.js

104.21.4.6

200 OK

7.5 kB

URL GET HTTP/3
gazeta-pl.store/assets/smoothscroll/smooth-scroll.js
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JavaScript source, ASCII text, with very long lines (7676), with no line terminators
Size
7.5 kB (7548 bytes)
Hash
d361270bde8f87698f55e341730978f3
be0ca5ada63eeab2096f827f1ac8928dde29479b
65588a495483b6c0bc7022bf65bbdb7ee6f5f21d783f01f7863e98e966a1b702

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/smoothscroll/smooth-scroll.js HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 03:56:29 GMT
etag: W/"1d7c-61656f4c3eae3-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gupLYU6IYMh8MaKLw0VZIxN8klg6prMTZsQwORMLGGVdgnPQEzymzl1xg7jwpABaNWSEJns%2BdYSIrdjqDPMaetnA7mDKjPwdIXxyn8j6M93xI8v4AtH9L74M9InZV%2Bhq9XI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765965f0d0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/bootstrap/css/bootstrap-grid.min.css

104.21.4.6

200 OK

52 kB

URL GET HTTP/3
gazeta-pl.store/assets/bootstrap/css/bootstrap-grid.min.css
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
ASCII text, with very long lines (51237)
Size
52 kB (51452 bytes)
Hash
e1b9ee0c34dab98a647193619182adae
4058bba3490a3bf94661cdf40ab944485f96d359
f75d0fed0cd4380843d322f38aa2cb0cee3d128f28d5dc4c354623f6b0ac18a3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/bootstrap/css/bootstrap-grid.min.css HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:41 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 03:56:54 GMT
etag: W/"c8fc-61656f6430999-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f6%2F6Sx25Ggt%2BXICnu1XKpDY9DKwqKTfoOElITvU21IOz4VbuxMdOT7As2ltMiXSz%2FuQ9a32vzxSNjMwkXBaoceIzv4kh44Oo538jkeMLm7qD8gsEgYwxzpNEMCHUlamniC4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765960ec90afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/images/logo.png

104.21.4.6

200 OK

7.0 kB

URL GET HTTP/3
gazeta-pl.store/assets/images/logo.png
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced
Size
7.0 kB (6962 bytes)
Hash
5ba73f12215187f4f4be3f1e6e03e14b
9ef4ec0461b474eadf2d436d8fb1966c029553cd
b38714d1bd809d8fa1c90760c9ae42767612743e17573cba210a00284a579048

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/images/logo.png HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:39 GMT
content-type: image/png
content-length: 6962
last-modified: Thu, 18 Apr 2024 03:56:44 GMT
etag: "1b32-61656f5a254ba"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y8qNYsFfzyN%2B7gL0IawO6tSDq3eiEMb1krgRYS0DIK8kGIU3s0VZzUpDXqLhUjnCC4YaPBRDHA5URxOgEstxcbUUkyF7TYzCMAIS2ScCViQaa7DPPsWQDOnfGY2GOmeg9Ds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876765961edf0afe-OSL
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/ytplayer/index.js

104.21.4.6

200 OK

28 kB

URL GET HTTP/3
gazeta-pl.store/assets/ytplayer/index.js
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
JavaScript source, ASCII text, with very long lines (545)
Size
28 kB (27732 bytes)
Hash
7fc0d02a91add0430b29951e6276478a
ac96582e86cd022bb201560fa7aa99cb5e351828
fa440c3f6c83c552658c6760c30ff3ef91876afa1fe9f01ad2639ada90d41f81

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/ytplayer/index.js HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:43 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 03:56:51 GMT
etag: W/"6c54-61656f6092d02-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=13MJiN9Q%2FpiHkP9BhAYiffhPmPr08ijo2vHpdaHpmedtRHw%2BPWhd0QVgyQaThi6KiYJK2r6%2FirliPwtYepzAryOVfcBSh123PvILlDibB4QOaenGnponuh50UzfvGx7yxkU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765965f0e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/animatecss/animate.css

104.21.4.6

200 OK

95 kB

URL GET HTTP/3
gazeta-pl.store/assets/animatecss/animate.css
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
ASCII text
Size
95 kB (95363 bytes)
Hash
7e3aee23f9eb7741ce01e5a7e5420225
952f6fc8ca3a45aaea435e4e71d57f71aafbfc63
975aa9f242444f29cffd11753a6745be2b5f94e009a21af4fbd27dbe5bcc9403

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/animatecss/animate.css HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:39 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 03:56:50 GMT
etag: W/"17483-61656f6053560-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1fLp52KdZIieeloJygEV5CAjSL6KXGRW9tshCbraLHhRSuMSS5%2BvFLbg8BthQ%2FqDm6Hh9y9zsez1V6%2FQIkkYzdAMWXNgRndtNYFXzKU2G%2Byj%2FAslDdNRDAieHmaQWjRGUMo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765960ecf0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

gazeta-pl.store/assets/webcreator/css/mbr-additional.css?v=bDKPVd

104.21.4.6

200 OK

52 kB

URL GET HTTP/3
gazeta-pl.store/assets/webcreator/css/mbr-additional.css?v=bDKPVd
IP
104.21.4.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://gazeta-pl.store/
Certificate
IssuerLet's Encrypt
Subjectgazeta-pl.store
Fingerprint07:8F:BC:B6:1B:34:A5:E9:29:46:3F:22:B7:B8:E3:09:8D:AD:EF:B9
ValidityMon, 25 Mar 2024 23:34:46 GMT - Sun, 23 Jun 2024 23:34:45 GMT

File type
ASCII text, with very long lines (522)
Size
52 kB (52235 bytes)
Hash
7f003f884fae2c38f19fc532c854ec0a
d85868f272e8a49787fdd7ad9d200de845d69eda
34049379d0be79a0cd495e35c13202d1aa195f368c33e59219e975b6d10eacf3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/webcreator/css/mbr-additional.css?v=bDKPVd HTTP/1.1
Host: gazeta-pl.store
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gazeta-pl.store/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 18 Apr 2024 20:27:42 GMT
content-type: text/css
last-modified: Thu, 18 Apr 2024 03:56:59 GMT
etag: W/"cc0b-61656f689e654-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LDF5DCzclAodx9ID1Wtp1Kgp8%2BrI3eNajl6JQgD6o2Ind58b7hCGCK69GjNs36C5pLj60kqSiD4pkWIAsMcQFVLD9F9iVfQF9%2B4Snentu6tZ9wjVarPBgyUCfHTatONJRTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876765961edc0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (36)