ocsp.pki.goog/gts1c3
472 B IP
Hash 4bf15cd8d31fbaedf625ae513ef7e42e
9b45a5f3fe1832ed14b2e9032db6d5b5f773e34a
1441a36db6172a6cce922fba645f719c91baa0187f04f6503a23f4fe2f293cf4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d-dot-vipcaptchanow.ew.r.appspot.com/tl
3.7 kB URL d-dot-vipcaptchanow.ew.r.appspot.com/tl
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (470)
Hash c0a83d6ed6f739642d08eede58c1e18f
14e2da0ebbb662524f0b650edb328a8623f69b86
3e0be35c3ea267be4446ecfb2bb977a59d83f82ba79d7d4962d5ba293adb3bbe
GET /tl HTTP/1.1
Host: d-dot-vipcaptchanow.ew.r.appspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-cloud-trace-context: 4f2e0d8ff06df0c07135c3b7d92a9afe
content-encoding: gzip
server: Google Frontend
date: Sat, 09 Sep 2023 07:25:15 GMT
expires: Sat, 09 Sep 2023 07:35:15 GMT
cache-control: public, max-age=600
etag: "xiaRNA"
content-type: text/html
content-length: 3683
age: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 4bf15cd8d31fbaedf625ae513ef7e42e
9b45a5f3fe1832ed14b2e9032db6d5b5f773e34a
1441a36db6172a6cce922fba645f719c91baa0187f04f6503a23f4fe2f293cf4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
code.jquery.com/jquery-2.1.4.min.js
30 kB URL code.jquery.com/jquery-2.1.4.min.js
IP
File type ASCII text, with very long lines (32025)
Hash f9c7afd05729f10f55b689f36bb20172
43dc554608df885a59ddeece1598c6ace434d747
f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c
GET /jquery-2.1.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d-dot-vipcaptchanow.ew.r.appspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 07:25:19 GMT
content-encoding: gzip
content-length: 29519
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-14979"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1694244319.dop203.sk1.t,1694244319.cds020.sk1.hn,1694244319.cds217.sk1.c
X-Firefox-Spdy: h2
ocsp.sectigo.com/
472 B IP
Hash 473dd6bef334a33c2bbcd2704e042e81
1cba5745478d5e9a171382688fcd733d1aadf394
fbc342720c74a1383b87c221fe05b219a11af8d2acbc841ff5d802616c967273
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Sep 2023 07:25:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 08 Sep 2023 14:30:49 GMT
Expires: Fri, 15 Sep 2023 14:30:48 GMT
Etag: "1cba5745478d5e9a171382688fcd733d1aadf394"
Cache-Control: max-age=544658,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 803db2576daeb521-OSL
ocsp.sectigo.com/
472 B IP
Hash 473dd6bef334a33c2bbcd2704e042e81
1cba5745478d5e9a171382688fcd733d1aadf394
fbc342720c74a1383b87c221fe05b219a11af8d2acbc841ff5d802616c967273
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Sep 2023 07:25:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 08 Sep 2023 14:30:49 GMT
Expires: Fri, 15 Sep 2023 14:30:48 GMT
Etag: "1cba5745478d5e9a171382688fcd733d1aadf394"
Cache-Control: max-age=543506,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 803db2577d88b512-OSL
psh-static.b-cdn.net/corner.png
300 B URL psh-static.b-cdn.net/corner.png
IP
ASN #34989 ServeTheWorld AS
File type PNG image data, 44 x 44, 8-bit colormap, non-interlaced\012- data
Hash f66c38fa2cd7c50bd1989d41da28fb80
e1de333eca72647f3c1831083fe678cfa8fe9eab
3059be4046e0315ad1c0d1cb163d9daaf759bdf16e906e908842fac07e5608a2
GET /corner.png HTTP/1.1
Host: psh-static.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d-dot-vipcaptchanow.ew.r.appspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sat, 09 Sep 2023 07:25:19 GMT
content-type: image/png
content-length: 300
server: BunnyCDN-NO1-830
cdn-pullzone: 1328726
cdn-uid: 22fe961b-dbb1-4712-9a2e-907a4e9a1638
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Mon, 10 Apr 2023 12:45:03 GMT
cdn-storagebalancer: SE-344
cdn-storageserver: DE-587
cdn-fileserver: 588
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 206
cdn-cachedat: 08/17/2023 12:33:22
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 6d531cb49d337b9dca148476bf2bfc5a
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
472 B IP
Hash 473dd6bef334a33c2bbcd2704e042e81
1cba5745478d5e9a171382688fcd733d1aadf394
fbc342720c74a1383b87c221fe05b219a11af8d2acbc841ff5d802616c967273
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Sep 2023 07:25:20 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 08 Sep 2023 14:30:49 GMT
Expires: Fri, 15 Sep 2023 14:30:48 GMT
Etag: "1cba5745478d5e9a171382688fcd733d1aadf394"
Cache-Control: max-age=545060,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 803db2577f4f069b-OSL
ocsp.sectigo.com/
472 B IP
Hash 473dd6bef334a33c2bbcd2704e042e81
1cba5745478d5e9a171382688fcd733d1aadf394
fbc342720c74a1383b87c221fe05b219a11af8d2acbc841ff5d802616c967273
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 09 Sep 2023 07:25:20 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 08 Sep 2023 14:30:49 GMT
Expires: Fri, 15 Sep 2023 14:30:48 GMT
Etag: "1cba5745478d5e9a171382688fcd733d1aadf394"
Cache-Control: max-age=545060,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 803db2577a2ab50f-OSL
ocsp.pki.goog/gts1c3
472 B IP
Hash d16e6a04473828a5eb518bac650a29c5
940abcc82c06c90baf6d4014c9d80e18bfaaf0c3
38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
16 kB URL fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://d-dot-vipcaptchanow.ew.r.appspot.com
DNT: 1
Connection: keep-alive
Referer: https://psh-static.b-cdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Sep 2023 05:45:56 GMT
expires: Wed, 04 Sep 2024 05:45:56 GMT
cache-control: public, max-age=31536000
age: 351564
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash d16e6a04473828a5eb518bac650a29c5
940abcc82c06c90baf6d4014c9d80e18bfaaf0c3
38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my-get-bigbonus-here.life/?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl
200 OK 90 kB URL User Request GET HTTP/1.1 my-get-bigbonus-here.life/?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectmy-get-bigbonus-here.life
Fingerprint19:A7:80:73:AE:82:6B:54:7F:F8:0E:F7:91:C0:CD:E0:BE:69:48:A3
ValiditySun, 20 Aug 2023 23:12:21 GMT - Sat, 18 Nov 2023 23:12:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (62472), with CRLF line terminators
Hash 8d860281e63f3e76f9d91aa50fa80d12
d25f199c1f7a8f1d2066bbdf914b3ecf1e1c3d85
1fad82cd0753f7d7b24e38c33799d4bd3582a6a71e5750c5d3cac6f3b56744db
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl HTTP/1.1
Host: my-get-bigbonus-here.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d-dot-vipcaptchanow.ew.r.appspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 07:25:20 GMT
Content-Type: text/html
Content-Length: 89492
Connection: keep-alive
set-cookie: sid=t4~v1gs5xppnwinhugjyz4q5ncq; path=/
sid=t4~v1gs5xppnwinhugjyz4q5ncq; path=/
p1=https://saltpairwoo.live/ubscgeai/; path=/
s1=t38ve7b0kx4ek20v; path=/
cache-control: private, no-transform
my-get-bigbonus-here.life/media/mainstream/cloud.html
39 B URL my-get-bigbonus-here.life/media/mainstream/cloud.html
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectmy-get-bigbonus-here.life
Fingerprint19:A7:80:73:AE:82:6B:54:7F:F8:0E:F7:91:C0:CD:E0:BE:69:48:A3
ValiditySun, 20 Aug 2023 23:12:21 GMT - Sat, 18 Nov 2023 23:12:20 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 086707e4369f60afedcafb16050a7618
8216b0cc6876cbd44f01c158e7dff3833ceccd41
a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/cloud.html HTTP/1.1
Host: my-get-bigbonus-here.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my-get-bigbonus-here.life/?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl
Cookie: sid=t4~v1gs5xppnwinhugjyz4q5ncq; p1=https://saltpairwoo.live/ubscgeai/; s1=t38ve7b0kx4ek20v
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 07:25:20 GMT
Content-Type: text/html
Content-Length: 39
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "086707e4369f60afedcafb16050a7618"
Last-Modified: Sun, 13 Aug 2023 20:44:50 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178328DBB7BAE95B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1691959490#8576945/gid:0/gname:root/mode:33188/mtime:1691959490#8576945/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-08-13T20:44:50.035Z
Expires: Sun, 08 Sep 2024 07:25:20 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
my-get-bigbonus-here.life/favicon.ico
0 B URL my-get-bigbonus-here.life/favicon.ico
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectmy-get-bigbonus-here.life
Fingerprint19:A7:80:73:AE:82:6B:54:7F:F8:0E:F7:91:C0:CD:E0:BE:69:48:A3
ValiditySun, 20 Aug 2023 23:12:21 GMT - Sat, 18 Nov 2023 23:12:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: my-get-bigbonus-here.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my-get-bigbonus-here.life/?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl
Cookie: sid=t4~v1gs5xppnwinhugjyz4q5ncq; p1=https://saltpairwoo.live/ubscgeai/; s1=t38ve7b0kx4ek20v
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 09 Sep 2023 07:25:21 GMT
Connection: keep-alive
Cache-Control: no-transform
mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-js_empty_pl
302 Found 503 B URL User Request GET HTTP/2 mbtrk1.com/click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-js_empty_pl
IP
Certificate IssuerLet's Encrypt
Subjectmbtrk1.com
FingerprintEF:33:F9:F1:66:FD:62:0E:7F:30:68:01:7C:EC:B4:B7:B0:3E:2D:C4
ValidityWed, 30 Aug 2023 03:58:48 GMT - Tue, 28 Nov 2023 03:58:47 GMT
Hash 25654e55a9881bad113844a7c6ae8100
8ed5bd9cc7ff3b9f4e405d77b159d4b00d78995e
6f572be8692c625ff8ed2b53391dd8af997515770665a11581c50a0f9fb66e58
GET /click.php?key=7ef1qd1lvftdju4n985s&tracker=pushlink-placeholder-js_empty_pl HTTP/1.1
Host: mbtrk1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d-dot-vipcaptchanow.ew.r.appspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx/1.22.0
date: Sat, 09 Sep 2023 07:25:20 GMT
content-type: text/html; charset=UTF-8
location: https://my-get-bigbonus-here.life/?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl
set-cookie: uclick=tla0zwa2; expires=Sun, 10-Sep-2023 07:25:20 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=tla0zwa2-tla0zwa2-2tfnfe-0-ojp26o-g6scvr-g6sci4-99a50c; expires=Sun, 10-Sep-2023 07:25:20 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
200 OK 21 kB URL User Request GET HTTP/1.1 925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
IP
ASN #6898 SERVER.swiss Sagl
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (841), with CRLF line terminators
Hash c74f575767a9870d71cf05fb03115269
75699c0d42209c6d09aacf705870b79d949ddbf1
6e4df0e6c96f38c29c425559090e6f394b12dae55b334a54234d1ec5d87bcf6f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my-get-bigbonus-here.life/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: text/html
Content-Length: 21361
Connection: keep-alive
cache-control: private
925.saltpairwoo.live/media/mainstream/all/ab/2008_2.css
200 OK 8.0 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/2008_2.css
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type assembler source, ASCII text
Hash 3a3692009050605115ce92e15cdc4f8a
80f2be7713fc6b704492a24646632ac5b86d610d
24af2f8d21f9612e2b3012382c362743db495fa91370d0f87d22b077caf484af
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/2008_2.css HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: text/css
Content-Length: 7969
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "3a3692009050605115ce92e15cdc4f8a"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C583BD17E0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676822037#507095857/gid:0/gname:root/mode:33188/mtime:1661094568#999105000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T15:09:28.999105Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/2008_3.js
200 OK 7.5 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/2008_3.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
Hash f235f98748487db96795fd73ed48a46d
4cf6f3d733184af759d2f6d2251321df778accdd
5ee7e3f6c675569417eabed4df39057a60e056b0a5eb5abbecf0c1979780d684
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/2008_3.js HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: application/javascript
Content-Length: 7481
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f235f98748487db96795fd73ed48a46d"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C594179B49
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676810017#673891798/gid:0/gname:root/mode:33188/mtime:1661082623#6152000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T11:50:23.006152Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash b20e8badc1e24ac1860707180170cc64
fcc6a4f070f5171fdfc138909494c65fcebbcfd6
3317dad70023be07761487f567c097933c0ed148f281a191b4d2db9b6fec02e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
925.saltpairwoo.live/media/mainstream/all/ab/2008_1.js
200 OK 15 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/2008_1.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type ASCII text, with very long lines (927), with CRLF line terminators
Hash 70a301508a891eb3c9f0e7d43cbd2072
37b7e329763c1285514bac3d77808a1a3389b6da
e86620b8e47101a2701a71369c8f40d6ac250beeea5a86b69fd407035b57b549
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/2008_1.js HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: application/javascript
Content-Length: 14759
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "70a301508a891eb3c9f0e7d43cbd2072"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5941666E2
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676810017#673891798/gid:0/gname:root/mode:33188/mtime:1661082594#618119000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T11:49:54.618119Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/icon.js
200 OK 6.6 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/icon.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type ASCII text, with very long lines (6570), with no line terminators
Hash a8e36248f01478844f0c4db185e945a0
d822225c2e21cd5fd7910f825da1e646b21dc078
9195437b3d4ffd3d3652df03d4de4ff03c454386ec19a1777da588a2f83827c2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/icon.js HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: application/javascript
Content-Length: 6570
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a8e36248f01478844f0c4db185e945a0"
Last-Modified: Mon, 20 Feb 2023 09:34:12 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C594201D9C
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843338#351669788/gid:0/gname:root/mode:33279/mtime:1655387452#842583333/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:52.842583333Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/sound.js
200 OK 5.0 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/sound.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type ASCII text, with very long lines (5014), with no line terminators
Hash 1f1fed792da20aa1e75213d3f1839a0d
b5744653854dc322effae7e83ba3b99f8818dffc
32cde492155502743e1b7c5ec41ba974216be8c331db01e5cd933726443241df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/sound.js HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: application/javascript
Content-Length: 5014
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "1f1fed792da20aa1e75213d3f1839a0d"
Last-Modified: Mon, 20 Feb 2023 09:35:22 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5950F6046
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843338#355669793/gid:0/gname:root/mode:33279/mtime:1655387452#846583343/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:52.846583343Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/no/2.js
200 OK 416 B URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/no/2.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 9075531370b86e49402928b23fc26c0e
b88fc53cd5ef41285a5c1be4b1aecc1a54a7ce0e
31e764b82e550f1e27b814ac8047f8832da32e4a3d7045043f8de1e312112ca3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/no/2.js HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: application/javascript
Content-Length: 416
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "9075531370b86e49402928b23fc26c0e"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17832A3BADA07621
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#839577311/gid:0/gname:root/mode:33279/mtime:1653412332#133070000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:12.13307Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
js.pushssp.top/ps/pl.js?edg=true&sw=sw-c15a2aed16134d26903323ad36ee3584
32 kB URL js.pushssp.top/ps/pl.js?edg=true&sw=sw-c15a2aed16134d26903323ad36ee3584
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (62567)
Hash ebb03b5f5b23a75c9d903188185eb0c7
ae986533f5b57d020e9f74dbc63ca91957e9755c
b615286fb4559fa29cf7a99116c92856ee1303b4f776d1416d369e81a063fea1
GET /ps/pl.js?edg=true&sw=sw-c15a2aed16134d26903323ad36ee3584 HTTP/1.1
Host: js.pushssp.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d-dot-vipcaptchanow.ew.r.appspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 09 Sep 2023 07:25:20 GMT
content-type: application/javascript
vary: Accept-Encoding
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
X-Firefox-Spdy: h2
925.saltpairwoo.live/media/mainstream/flag-icon/css/flag-icon.css
200 OK 40 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/flag-icon/css/flag-icon.css
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type ASCII text, with CRLF line terminators
Hash b7a46a018dcd21a4828bae0b04ddcc6c
1d8418d6cc45e5c29e1aab008c18ea633e7730c4
299595fd56aa6a2fcfac34fcf780d33b61785ad96f19485e65a33ead8fd69cbc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/flag-icon/css/flag-icon.css HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: text/css
Content-Length: 39806
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "b7a46a018dcd21a4828bae0b04ddcc6c"
Last-Modified: Mon, 20 Feb 2023 09:33:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C591993C96
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843396#99757504/gid:0/gname:root/mode:33279/mtime:1655387459#318598233/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:59.318598233Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/2008.css
200 OK 22 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/2008.css
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type ASCII text, with CRLF line terminators
Hash a008e2dbe07922242a5f012ccd7da015
1b0718855d0c5ca6e25d4553e312c8652df334a7
903a8f67a7fa0613988fa1ab30073aac45e856b60c7b1eace94a95b70db41e42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/2008.css HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: text/css
Content-Length: 21546
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a008e2dbe07922242a5f012ccd7da015"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C59154B676
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676812398#709180904/gid:0/gname:root/mode:33188/mtime:1661084880#124572000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-08-21T12:28:00.124572Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/u.js
200 OK 25 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/u.js
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type ASCII text, with very long lines (25177), with no line terminators
Hash e44aa4ca20702394c8ca04144c3e9e74
b3734a4cde021bb14d2d296c0ae5dfa8112376f6
e075018e9a06d85a147b1f0d79e8e777da51019b4f306076f8fbba751d42d566
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/u.js HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: application/javascript
Content-Length: 25177
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "e44aa4ca20702394c8ca04144c3e9e74"
Last-Modified: Mon, 20 Feb 2023 09:35:32 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C59E1C49C1
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676848788#311374889/gid:0/gname:root/mode:33188/mtime:1657924117#384361000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-07-15T22:28:37.384361Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr4.jpg
200 OK 4.3 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr4.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash f96150cbbb80ac607b3f264141a7faef
9ed21cb4e5c552f29bc23db55684c945e7582071
f013c5f2d9aedd8072d4bf01749c7dfcbacb80a43d06aa579403adfd8fd21fd3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr4.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 4307
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f96150cbbb80ac607b3f264141a7faef"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE68F290FF
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#641054000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.641054Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr3.jpg
200 OK 3.6 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr3.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash c74a5befd416e24626972e88ed65526d
4e8c25553248600cf23c3d6bcec488d986a129f8
53bb570f4465306a78670ecbea911ba0362251d2dc825d9ea0cb5d1c70f413ac
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr3.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 3601
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "c74a5befd416e24626972e88ed65526d"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE613E6673
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#581053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.581053Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr6.jpg
200 OK 2.8 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr6.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash f17d127dfcaa6f94929eedd080276df0
ec801473523b8eb44e123b5634081d2b57715ba6
0108e4d428f408f819f174ae8a5923b4010e80a14fc9872b018c12781e114403
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr6.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 2814
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "f17d127dfcaa6f94929eedd080276df0"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE708AF976
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#765054000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.765054Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr5.jpg
200 OK 3.0 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr5.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 7f103bc91a8084cd154189b5ebb2cf86
375e58c42a8c409bbf111847a1f6798ba6c0d5f5
346139aaec984853288672896d297ded47ac7ee1cb77ca43b63e130952cdd946
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr5.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 3043
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "7f103bc91a8084cd154189b5ebb2cf86"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE69ED6BE0
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#705054000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.705054Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr2.jpg
200 OK 2.8 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr2.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 9b63ccbd631923743813e838190cecbf
5c6dd930c81346616e9c641ff41b6f18344c7e76
4ca9130a03f6874bab37d2d52fd4546e3de34ccccbd83aa5b9cb6ed0f923d8b3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr2.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 2815
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "9b63ccbd631923743813e838190cecbf"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE603A50B2
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#505053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.505053Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/muti_iphone13pro.png
200 OK 27 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/muti_iphone13pro.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 400 x 390, 8-bit colormap, non-interlaced\012- data
Hash 9b02c17409d10d95dd2373b5e0562c86
8247fa5bd8d4681cd60eb06e6133179db6eee7bf
363a42ea35a21b3f5d9e69dd1bea1626a1a288e9d42d01a5dfaff71f7fba1fe6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/muti_iphone13pro.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 26596
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "9b02c17409d10d95dd2373b5e0562c86"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17832A38305B595A
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#851577331/gid:0/gname:root/mode:33279/mtime:1653412331#141068000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:11.141068Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash b20e8badc1e24ac1860707180170cc64
fcc6a4f070f5171fdfc138909494c65fcebbcfd6
3317dad70023be07761487f567c097933c0ed148f281a191b4d2db9b6fec02e1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
925.saltpairwoo.live/media/mainstream/all/ab/l.png
200 OK 9.2 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/l.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 768 x 293, 8-bit colormap, non-interlaced\012- data
Hash a0560779cf67aeb9a0c19f68f3582024
ff8d079fbbbad6b70be4d83c760a4a61bc51ff33
b585ee5fc0af431c584664f82e390e5a65bbbc6f201fe495d7c289ea618f5d5e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/l.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 9224
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a0560779cf67aeb9a0c19f68f3582024"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5AB737FAB
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676811655#456180030/gid:0/gname:root/mode:33188/mtime:1675688264#107993000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2023-02-06T12:57:44.107993Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/box-iphone13pro.png
200 OK 3.5 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/box-iphone13pro.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash 9284c782a78501c6eaa17af46fb9e7d5
f1f7ae029b51cec7fe32a5e4868f191eea9f84fa
0a214e007bab57ba651b32d9a8711f484856e166cbb9720be813157802e49fac
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/box-iphone13pro.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 3477
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "9284c782a78501c6eaa17af46fb9e7d5"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17832A385BFB8504
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412322#701049000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:02.701049Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr11.jpg
200 OK 3.2 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr11.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 752f51c4c387c0ca7f4337acdeec15d6
7f9777f95aececfce6fa930181269cce30a4a059
227cec10c842ba3865d12ed22363f87ca5135b3ac2c72e5ab1a3169c4a2d569c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr11.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 3157
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "752f51c4c387c0ca7f4337acdeec15d6"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE718698B6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#445053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.445053Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/x1.png
200 OK 593 B URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/x1.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Hash ee850988ed56cd6f2498cae7993a8753
965f9091ca3e7f21f5b8115347227aedc93c586e
0303153a716bc5000d737521c0f6eb517700a1856b8e22ba8c088ec8f06ed8ba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/x1.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "ee850988ed56cd6f2498cae7993a8753"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5B60ECEFE
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#855577336/gid:0/gname:root/mode:33279/mtime:1653412336#881081000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:16.881081Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/top_red.png
200 OK 4.6 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/top_red.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Hash a660370feb6a1543c3c872a52f7bcfa7
b9478ed6228e8fb34a393013d474cde8dc400848
9d1eed749548dad4b80b2d7ce32052143bd38773685029d7b60cee82a31840b7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/top_red.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 4560
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "a660370feb6a1543c3c872a52f7bcfa7"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5B4BF8883
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#855577336/gid:0/gname:root/mode:33279/mtime:1653412335#773078000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:15.773078Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/iphone13pro.png
200 OK 29 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/iphone13pro.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 400 x 440, 8-bit colormap, non-interlaced\012- data
Hash 158df589f4b3810904cf7452928327c4
a5f1b1a9e28b0bc8de84dffea5b2ff519967001d
2d2cf6cd24f8d429837b8119ef2829e6e209e985f2288d80ba248585468650cb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/iphone13pro.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 29184
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "158df589f4b3810904cf7452928327c4"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17832A384B46C1DA
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412328#41061000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:08.041061Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/fr1.jpg
200 OK 2.9 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/fr1.jpg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 4c88ebf87b0cc26121497de03db7f64a
a1256a5cfcd62223172eb3633659caddff6cf005
28db5edb0fe5e61f42eb8a0d10250a317f3ac840e074ffa761cb953c330f2cf6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/fr1.jpg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/jpeg
Content-Length: 2939
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "4c88ebf87b0cc26121497de03db7f64a"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329FE5890710B
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412324#385053000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:04.385053Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/box_open.png
200 OK 2.7 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/box_open.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 258 x 185, 8-bit colormap, non-interlaced\012- data
Hash 99264bee31a1abde5d0035468e53bbfb
d1f25383b68c3769eb3bdb36783e85c112078054
8da9180789c861b8d0d67d2bca168dfcc6de98f6999ab47400c38397d122157f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/box_open.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 2685
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "99264bee31a1abde5d0035468e53bbfb"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5C1A08F92
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412322#933050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:02.93305Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/like.png
200 OK 357 B URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/like.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 15 x 14, 8-bit colormap, non-interlaced\012- data
Hash 17586a0aeb3f7b2aa7fb15a9251fbcd4
6adffad1183c93bc0dc114c89c77365734ec0dd6
8bf8dc3a4b6f7e4fa2a6fa74495c212f37a301311980cbc758050993ed9c07e1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/like.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 357
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "17586a0aeb3f7b2aa7fb15a9251fbcd4"
Last-Modified: Mon, 20 Feb 2023 09:33:02 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5C58446D8
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412329#505064000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:09.505064Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
925.saltpairwoo.live/media/mainstream/all/ab/box_closed.png
200 OK 5.8 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/all/ab/box_closed.png
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type PNG image data, 258 x 184, 8-bit colormap, non-interlaced\012- data
Hash 890d869db1b3d28af588be81685214f2
5375bd0c2c75a6e40168f5561eb4eca993d14505
ea2521add13deb769fb7abee364670a567e7a3dc7b3b4474b5f80510dc593212
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/all/ab/box_closed.png HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:21 GMT
Content-Type: image/png
Content-Length: 5836
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "890d869db1b3d28af588be81685214f2"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5C1B2AB68
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843277#847577324/gid:0/gname:root/mode:33279/mtime:1653412322#873050000/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-05-24T17:12:02.87305Z
Expires: Sun, 08 Sep 2024 07:25:21 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash d16e6a04473828a5eb518bac650a29c5
940abcc82c06c90baf6d4014c9d80e18bfaaf0c3
38606c1318a5cafd37bd0cf3bd966f1548150b78616a201f07ae7b38ff7c4156
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 09 Sep 2023 07:25:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
200 OK 9.1 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2
IP
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type Web Open Font Format (Version 2), TrueType, length 9132, version 1.0\012- data
Hash 358d3070946a90b4960cd111154fdc12
a0ba0bf47a7f905f9aa1a3ce15a39cdac62466ee
54c64f3c66372027154f01fc9f24b4e25fdfe405b70d1994c79abbc2576ff775
GET /s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://925.saltpairwoo.live
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9132
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Sep 2023 07:27:45 GMT
expires: Thu, 05 Sep 2024 07:27:45 GMT
cache-control: public, max-age=31536000
age: 259057
last-modified: Tue, 23 Jul 2019 19:30:49 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
925.saltpairwoo.live/media/mainstream/alert.mp3
200 OK 8.8 kB URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/alert.mp3
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/alert.mp3 HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Cookie: cookie1=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:22 GMT
Content-Type: audio/mpeg
Content-Length: 8802
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "6d2d3da2ea28ace816fa4a138829dc18"
Last-Modified: Mon, 20 Feb 2023 09:33:01 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 178329C5DDBD6196
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843338#351669788/gid:0/gname:root/mode:33279/mtime:1655387452#802583242/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:50:52.802583242Z
Expires: Sun, 08 Sep 2024 07:25:22 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
jsontdsexit2.com/ExtService.svc/getextparams
200 OK 535 B URL GET HTTP/1.1 jsontdsexit2.com/ExtService.svc/getextparams
IP
ASN #24940 Hetzner Online GmbH
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectjsontdsexit2.com
Fingerprint96:1D:13:6D:D2:D1:72:53:23:AE:0A:37:FA:35:31:6C:59:41:38:EF
ValidityTue, 15 Aug 2023 12:23:38 GMT - Mon, 13 Nov 2023 12:23:37 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (492), with no line terminators
Hash 4f303e972d6958ae4238c79d87fdc9cf
b869b3f97d046c145166af1aaea6f33d7c91e2df
0c7a4c08514bf3744154b3a091287839faeeb25a69d7653c2384a6f97a94cfa5
GET /ExtService.svc/getextparams HTTP/1.1
Host: jsontdsexit2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://925.saltpairwoo.live
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 09 Sep 2023 07:25:22 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 535
Connection: keep-alive
Access-Control-Allow-Origin: *
925.saltpairwoo.live/favicon.ico
204 No Content 0 B URL GET HTTP/1.1 925.saltpairwoo.live/favicon.ico
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Cookie: cookie1=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Server: openresty
Date: Sat, 09 Sep 2023 07:25:22 GMT
Connection: keep-alive
925.saltpairwoo.live/media/mainstream/flag-icon/flags/1x1/no.svg
200 OK 331 B URL GET HTTP/1.1 925.saltpairwoo.live/media/mainstream/flag-icon/flags/1x1/no.svg
IP
ASN #6898 SERVER.swiss Sagl
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerLet's Encrypt
Subjectsaltpairwoo.live
Fingerprint3F:C2:59:B6:00:D1:89:A1:56:62:EE:CC:88:42:2C:C6:DF:59:C9:A8
ValidityThu, 07 Sep 2023 05:33:21 GMT - Wed, 06 Dec 2023 05:33:20 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash d748f0d9f64c0ca1a40a0f6ec6bbb746
a76adb95e9ea9a737c72e4640b8d49b9e28cbb38
bdfbd626e4e76d0dc506e10be7dd429e4c4da684986cbd45e5398f1e9e1f28cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /media/mainstream/flag-icon/flags/1x1/no.svg HTTP/1.1
Host: 925.saltpairwoo.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/media/mainstream/flag-icon/css/flag-icon.css
Cookie: cookie1=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Sat, 09 Sep 2023 07:25:22 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "d748f0d9f64c0ca1a40a0f6ec6bbb746"
Last-Modified: Mon, 20 Feb 2023 09:33:58 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 17832A3BCC5974E9
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
x-amz-meta-mc-attrs: atime:1676843396#111757523/gid:0/gname:root/mode:33279/mtime:1655387477#774640726/uid:0/uname:root
x-amz-meta-mm-source-mtime: 2022-06-16T13:51:17.774640726Z
Expires: Sun, 08 Sep 2024 07:25:22 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes
ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 90 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38
ValidityMon, 14 Aug 2023 08:22:09 GMT - Mon, 06 Nov 2023 08:22:08 GMT
File type ASCII text, with very long lines (65451)
Hash dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Sep 2023 21:24:09 GMT
expires: Wed, 04 Sep 2024 21:24:09 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 295272
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
200 OK 79 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
IP
Requested by https://925.saltpairwoo.live/ubscgeai/article925.doc?u=0wrk60t&o=1nvbzmt&t=pushlink-placeholder-js_empty_pl&f=1&sid=t4~v1gs5xppnwinhugjyz4q5ncq&fp=MMM%2BCGmkGUIAggp0XhMf1HkGsX1Vjnfe7Lgvklqr%2FcWMAlC3vL7B%2FpSFs15dQdi7A%2FyL1uWtd7KO%2BuX%2BZ1AGkZwOhkCkzR1YXFkmXidZf4nAT0qLAuJFI0yA16MPqqgnigI4LDumpq5Eh7SEjH06Lp4Nsp0COHcKSE7GwtkT6CfgmWiKdZIT0vNG9v%2FMv9aB7RkvMGrB96RW5LESd039d74GO14BXby%2Bs%2FWRvrciKGukwyBs%2FwyZW6Xhb3ythv6u%2Fet0HWOfQo9kF8gEtHwXAho7iGqJFd%2FHUVTT%2FWb%2Bzobbr%2Fhbn5vp9iqtggD3KdiB1AbdThwETvgve1V%2BiHIP7S9l189NQAOMOva9U2ElWqAxbTiG6YYfE0RenZBiZzjGcsWAMzNQm5HYkVbjLgAp1C4E6oG1PBSUNfVR3WhI3uWh4txglymHsfZ4tJa2SdUKE0JzEfG%2FILfH1Kxcc6R6Ce%2BhkUQNrDk3GT7%2F1z6xWt0PqOMXlULtSwoaQcYYbVpOUaXiFajdUztTPJ2iAPMmE%2FRIdSKRpe2Ho7wKXaXGe9%2BLaAyD63kQd2psJDz5sAHyFyzV5zNX8X2nCguYh0gsTuiYZAPumiJ7foFfYqZBiNbPMO42mlbWrqVFJfpO65B0DqhCxnKhvm98nLRJ%2Fb7ygrwN1o6M135kxwK%2BGzYyI1HQy7R1Dsb2jaoSFjM9PUwUFKnBNwZV26ZYL2HwWujm1r%2BudzqsEGwrVu7ZMTzuBZ6COGIfZhVkYwhZcrMFUJoyqgZScGoHx2YPjya7kcQa3VsPp%2FmrHeIkQNmY69HotggqLaZhSGw2QcVhlpSw43qXIza4xeITZU7zIcCkXHxNJjxJmDpReo6bjyQNROsgc8QBK5fWMgNLW%2FBW116RusV2pOKP2K1H731EDF0tNx%2FasI3%2FUafKVyKDC%2ByVa2TvfIzhTAHDBLzKmlaYddI5CHt5khEVVQZSBGvyi%2Bn9ZfnPZ2hpcymNUzR1vEljIrAwEt4PcfaaHVJB1SFMNaUVXztaLxhApUuHmGetO4qV6941dnarpoVU9IgsRVe9Ml6NzZ%2B8d50NFEoETi%2F1y8AT91W0e1Ta5zz7tuQjf7P2mjUU09aI2jdLFx1A3aC1JBaPLnUyiuPABJo5RuQEvfzGiRFlLRBz5tJmz8C6pCeihZz7uk6l%2FoxJSMlxVhpFsgP782Bf65ywrAU1X5O%2BKMhzYHHmno0KZJ9bpgQsMU4U5F1owzOEx1OI7Puo6%2FQPHocjjXdZjCqanHXAYLoJ7UpSyce72EEX%2Bn%2FokzZGDRDsSjf6ikbxCarWCWC0CZrLwU5J2Nd9md0yupvt%2Bj2hkg38IpWJn%2BLdMFrCkOPTlzvZ0%2BGO1aDb%2Fy%2BccciocBoEGQOQm2%2F41KVYsYXXUIYsvY3T3RwOBZWlLGa65Yie2rBmehecLqj3MXpcPWm%2B8fj9p%2Fs1GNeIQJn2F260jT07%2FXHrAsHCtyBdN9EMlLhJ8uELICacuIslBEj874PiHEBVR5gAbgQULy76mCJyoiDBvcp7KGU%2F58AE9j3HIl%2BVcgq4tsmG%2BruDgA3vWwgI1r2ymebveoS5f7vYFJNfkXTwfFSpwb5OxKjGTx33xpPEXG4iFnI7KPzDbVLauJ5Q7kVtxRFasNPzj4zLVGbG9xKkCvRmSHIGpTp7Ynq4YfiMGY6A3Qft8R4AgGeFb5xW1B626Vc%2FvvQJlhZ9v0W36jKfwSOsFZ%2BaIuejyQ%2Fn45CslJan%2BOJH1oOsn0sRe7t4%2By5NKAcBW2x%2B7ZueAhDmdR3ipCPMJx9AucHK1zbOCJ0%2FVFP2gAklD%2BXxp6aJkaVhcoyAgsGpAtsQ%2F88stUrrF4A0GdLDBRtVix785%2FIdDf%2FNVbvQVzQ601pNRXEaQW9JYYDI8noVPxBwsPim6uIbnxojjJf0HgEEDmfNzxEqyBrgFhGeVSEynil%2Bx%2BB40bOiVKZvwxdvBjo%3D
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDD:2E:D1:50:F1:3B:79:16:36:22:E7:0A:FD:E6:E7:35:C7:1A:42:6E
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (65297)
Hash a454220fc07088bf1fdd19313b6bfd50
265a733cb7fbc481fd2510a659a85ad55c93c895
7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c
GET /npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://925.saltpairwoo.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 09 Sep 2023 07:25:21 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.3.1
x-jsd-version-type: version
etag: W/"1332b-JlpzPLf7xIH9JRCmWaha1VyTyJU"
x-served-by: cache-fra-eddf8230062-FRA, cache-jnb7026-JNB
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 748846
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IIMwBG%2BAJF5m7zuy5Saf4GQ5dLPIc18XypQC92m%2FBJ5VTlbSS0gLHeijKWYpJn%2FcLu%2FX2edlX4rtW%2FsZJUt7U7lmUL%2BI%2Brc3eJKe7auTr4oa06N6tnv%2F9UpPX0WHWw8NnHQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 803db2622e110b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
172.217.21.180
185.155.184.152
104.16.87.20
145.239.195.107
5.75.133.219
65.108.244.197
194.242.11.186