| cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js |  104.17.25.14 | 200 OK | 4.0 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js IP104.17.25.14:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (11084), with no line terminators Hash65f1d21d5fcc9d21da758adababd0c3c e0661d07d64c00008bc9d013d16eec0a0f156dc7 d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe
GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 13:36:00 GMT
content-type: application/javascript; charset=utf-8
content-length: 3980
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-2b4c"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1990222
expires: Tue, 19 Nov 2024 13:36:00 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dYjs1%2FieMgoyAkgVgtRspvLxdcC6fg3WJuWFuDr8inEHWOkuayLTS0bXZR04UdHKRaqiybaI7e1VOUzqtqFQgJoZOhawj9V%2FUvU1uDljF9fHjGyAmBn%2FadUpcoZ4GxLL8p0LBCKS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82e37a152c5856a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js |  151.101.129.229 | 200 OK | 23 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js IP151.101.129.229:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (65299) Hashf81d0a1705048649befc8b595e455a94 aec551e4d573463088fca7d14fb644eb389f1839 b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aweer.oiuuuaevxx.com
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: br
accept-ranges: bytes
date: Thu, 30 Nov 2023 13:36:00 GMT
age: 22466177
x-served-by: cache-fra-eddf8230133-FRA, cache-bma1639-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23377
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513 | 216.58.207.232 | 200 OK | 89 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513 IP216.58.207.232:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (5955) Hash7a025c60974440da1f0264b644656199 527f6210435fec1c9d00e11b7a481e0b0d014b81 eed710eece27807f2fa688be6a0c410d4c7f7ccebc3d50cd56481e4b402d648d
GET /gtag/js?id=G-GZ2WHBX513 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 13:36:01 GMT
expires: Thu, 30 Nov 2023 13:36:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89062
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ |  188.114.96.1 | 200 OK | 15 kB |
URL User Request GET HTTP/2aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeHTML document, ASCII text, with very long lines (31078), with no line terminators Hash665d73ba835d3d5b1ab3d45486088658 8dc359a945a848714e864b1fc331d7be246bac29 23800e67d2c34e3807dfaa1578afa46c5ebccb5066aa20056bae6f2dea6021fc
GET /asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 13:36:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MiGmc9ncgXNipj0o3qj8rilrv6oTA6uuxbcTRocswHnW9cEQMExHJdT%2BtDW4%2BTCRBVNTXhK0BsvUNL0e1vmSC5epJ%2BtxO4IquYD6d72S5Xy58%2BcdMzWs1399J2VgHpdQnMI9r%2FvseA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a10a9ab56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/minimize.jpg | 188.114.96.1 | 200 OK | 2.2 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/minimize.jpg IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 148x21, components 3\012- data Hash084e7f6f44c56dd59088e4b1b8fca3b0 26529ea629480669431b4f2057f57894ced0191c 4dcdfb1463a27880132120a75454a5c4bf88c2a8ed8c072e24f368db2f1a57ec
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/minimize.jpg HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/jpeg
content-length: 2244
last-modified: Wed, 29 Nov 2023 18:32:13 GMT
etag: "656783ad-8c4"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tUKowp6ufUtyfGRj8GLc67Zgo%2B2qhh0pkA3NGbHu6uEkciWHDUjepUYf3GEpWTHXOYf0HAz2N%2FZTID71%2Ffpqi85pte5PdRI7jH95b%2F6YNnFQDpz4Bq%2F4EMOWv8%2FS%2BVs%2BqXCThC8f2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df1f56c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/setting.png | 188.114.96.1 | 200 OK | 364 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/setting.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data Hashe144c3378090087c8ce129a30cb6cb4e 59da5466551de941d0215e45c54aa2ceaf436be1 b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/setting.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 364
last-modified: Wed, 29 Nov 2023 18:32:33 GMT
etag: "656783c1-16c"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kegHqEzPlcYwjPoOq5aNATpmwRrpbGNxm9T0MX2BqaxbdcMAozuFKjNpuUccUajc4gEpq8cJyikE0q2%2Bc%2By7bQhmrkQsgwZ7Z7NsrX9PGmsur5oBcaoJeCpGSHN6YM%2FLXvKNKGeJ%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df2156c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/que.png | 188.114.96.1 | 200 OK | 349 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/que.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data Hash7454c652e0733d92de6c920c2d646ae0 34a5bd8c7401f95e346895b0e5ccffbf0e9ad638 44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/que.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 349
last-modified: Wed, 29 Nov 2023 18:32:11 GMT
etag: "656783ab-15d"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGPexyq%2FRp7jxuiy9cbSrqpYInkUvXqkoqcI%2FMtS0T6OWhO%2B6heYVnqemhN4Jfpu0ka1ddhv%2FFMCq9AkIDW%2F8ViZNMbAdWn6WMHwCPiRZ3netafZPSQRC5%2Ft0cAbUsJeSOlV4ksl%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df2256c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/logo.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/logo.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data Hash9afe7ddf143e8af82e282a9bdf359225 42339679139eaa7c9ac5fde21283120f4cfad7f7 f882e23687fd5d904c8d51294d5f56a91179129ed62952e266e6539d06c359ea
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/logo.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 1548
last-modified: Wed, 29 Nov 2023 18:32:24 GMT
etag: "656783b8-60c"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XlGy23cnvo96SermQ3%2FWfHNBugs7zN8CQt88guB2%2Fy660keQn4V2t%2FKSqw5pWDDXm2eaNjsFXpCISAUA58G41z01ikJYBgs437Bu3mo4F0nbwElcZ5qlBVWgPtlE%2FXVgkUdQw1xEWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14cf1a56c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/microsoft.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/microsoft.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data Hash9afe7ddf143e8af82e282a9bdf359225 42339679139eaa7c9ac5fde21283120f4cfad7f7 f882e23687fd5d904c8d51294d5f56a91179129ed62952e266e6539d06c359ea
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/microsoft.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 1548
last-modified: Wed, 29 Nov 2023 18:32:22 GMT
etag: "656783b6-60c"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5oF06RkQEEeMZIuXg%2Bvc8diGDRcNiA5PQuxphHicM84hmOnYBoC4AqM6c5lHegzSqQDU7ZppyqVhtYFgmwGCEwR7qIdT3TJeY4UrmjmKG9SuF5zi9RbVEP34xkgxwxol7amoct0SnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df2056c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/cross.png | 188.114.96.1 | 200 OK | 8.4 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/cross.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hash0139bc5bdf466894ec687696e2dc65cd 5c0a326bfbd3ca27e73d36d8ea3fdfd8f8c53b1b 13ee09efef992ec899ca28dea08d00886fce5e8b3ad6c19e6c753a899bcfdaea
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/cross.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 8350
last-modified: Wed, 29 Nov 2023 18:32:26 GMT
etag: "656783ba-209e"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ks2g2H0rOTOBIw7NJ7T2%2F%2FYyLMT4Hf2LOdPQrISy14BscgJHt4TYPqjqkiAa9HHwpNbEsMcZwnSdxiQnrn9lOUiVhAjwsAfPE%2FB%2B0ANsWogds0sNvnskOCt%2F2T7fx%2FtLFYGoaKYN%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14ef3656c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/virus-images.jpg | 188.114.96.1 | 200 OK | 8.2 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/virus-images.jpg IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 254x71, components 3\012- data Hash5fc559a242f0ea0a023f10830887d2af 9d744c2f3a6bf5b715496350c8de7124cdd7ddc8 3b531d403dc8ce7cbb0efb1a0c307cfb2bbaaf21feaff9f3546f13bebda71887
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/virus-images.jpg HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/jpeg
content-length: 8196
last-modified: Wed, 29 Nov 2023 18:32:11 GMT
etag: "656783ab-2004"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wwBYITXzyJPEuDaU%2BandPw3fGPuiMIbGHM8r5pMQngm8jSzsAeH9qsHko%2FFIIzRu8RPaRDXz83OIHEYAChM5X%2BRHknKd%2Bt%2FsvUA3SLOycfLz9Ozlm%2BLVCfFTyKyNJQKdNUs8dNmgYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14ef3956c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/bell.png | 188.114.96.1 | 200 OK | 1.1 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/bell.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data Hasha3555871399f1f67bfacaf437974b03a b6337de87cd7a75a73cd804774651d14c83fe76a 2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/bell.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 1108
last-modified: Wed, 29 Nov 2023 18:32:12 GMT
etag: "656783ac-454"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2BtlC6PGArV%2BwIy1TMF6s8Jo0R5E70YOgJ165f9UjlGQ6yZwXSdKn58kMWLZ%2Brew7Ua%2BV7KORFWt0XkteGL%2FBJoAA4FD8FVhdhJKSIbLd6I3U8PnviRy%2BU%2FuBF9BrG0NTxCnbmA4jA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df2956c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/def.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/def.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data Hash9afe7ddf143e8af82e282a9bdf359225 42339679139eaa7c9ac5fde21283120f4cfad7f7 f882e23687fd5d904c8d51294d5f56a91179129ed62952e266e6539d06c359ea
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/def.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 1548
last-modified: Wed, 29 Nov 2023 18:32:17 GMT
etag: "656783b1-60c"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5NWlow0ZUXMf7eSKytvjzRBE0XRoPGhdvnC8sZOgQy3xvZRHyaw2MbGEXvnInFmRv40SgA48nvAmIgIPvIT21LjKFCCFHpct2EkpgMW2BSyXNWgvriYXYpYVr8tKotMbLcwBEHoesQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df3356c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/virus-scan.png | 188.114.96.1 | 200 OK | 26 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/virus-scan.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hash2c497dfff84bd8c5af9254c9d6278ce1 667e72e7ba6f00a54629e28133317022d4b59af6 b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/virus-scan.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 25871
last-modified: Wed, 29 Nov 2023 18:32:24 GMT
etag: "656783b8-650f"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WeRfPTDacrCKyIqZlnZWU7k%2BAvZvK9sYf1vUJQ1KhChWUTeL7XG7K%2FO%2BiC8D7sA%2FD1ah4BCzfLXlGr3uk%2FD8E7iQnHp7I2O%2BORwYuN3Bd9mPhwLKeENDOyvjwh%2B2KBm7lAuH7HkAkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df2756c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/main.js | 188.114.96.1 | 200 OK | 916 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/main.js IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with CRLF line terminators Hash8137175b552e24ed502a365009b9e066 506797812a568a0beec412af40350196e2221f2d 087dd758db2e2015ee1e5d3682771b34e84225e9104082ecc9d13496507d6944
GET /asadasdasjdnasjnanas/mos/main.js HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 18:32:23 GMT
vary: Accept-Encoding
etag: W/"656783b7-676"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CJeUc2BVCNp9QeWdZhjzhQSDnziUPavAiFIZHrNKIKU6YnDYqseAd1x9bQPO9qvkW0aUKc1t4I68CHiS4qbyYicATfYzqcS8Ee%2F6oiv8mtjwQXRZBXF1wgPQfY%2BhqkpbRyLK00AUXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a150f5f56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://aweer.oiuuuaevxx.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 31107
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513 | 216.58.207.232 | 200 OK | 89 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513 IP216.58.207.232:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (5955) Hashc263acc03a7927910285c9fe775c9b77 679a530a2263603ea6254a70b24376fb6dfe4253 3e4c289e75b790a4764e455ab9f38c26826a37e2792f07f3d5bf2c9211adbb94
GET /gtag/js?id=G-GZ2WHBX513 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 30 Nov 2023 13:36:01 GMT
expires: Thu, 30 Nov 2023 13:36:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89061
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://aweer.oiuuuaevxx.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 58925
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/new-scan-white.jpg | 188.114.96.1 | 200 OK | 815 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/new-scan-white.jpg IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1304x1756, components 3 DIY-Thermocam raw data\012- (Lepton 3.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset -0.000012, slope 310499.531250\012- data Size815 kB (814643 bytes) Hashdce8b68274cebc1ac95ccaa2f161fc95 916099e6b34e0252577119d0d3ac8a80e9c1e7cd 7f58a0c53976500766eecc08621e7127759e39a0b045cd22b622ef0888df7e9f
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/new-scan-white.jpg HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/jpeg
content-length: 814643
last-modified: Wed, 29 Nov 2023 18:32:20 GMT
etag: "656783b4-c6e33"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QZYe5KwEvepxGqaXxcMFVvjrBzBdo969sfCA4a%2BheZPlBgAgaecV4DS14Y4Pd8sgPiHsjT5gLS11UzKM85U9LRWCrRSApPpqq8cTXPPWTQIBINH0kY2SgfXVJbPFBeYWW2BiLmQCkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14ef4456c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/bg2.jpg | 188.114.96.1 | 200 OK | 1.2 MB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/bg2.jpg IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 1920 x 1126, 8-bit/color RGB, non-interlaced\012- data Size1.2 MB (1152195 bytes) Hash58686afbe370791cfa6a34a4896dee44 522707a47c43585870c8d20a052e47b2aeaba282 ce13c62a9d60974c0b53ca8f2c9e6db70f8fa922ce6b8e8dca96086690123ff6
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/bg2.jpg HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/jpeg
content-length: 1152195
last-modified: Wed, 29 Nov 2023 18:32:29 GMT
etag: "656783bd-1194c3"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O60JTSKayYuWnxWCrJ34sxP%2FZXF3vo5m%2Bf56X10g3yRp716L%2Bl3HoRyMKNYRd3TCn3WgIEm2VPRBkzbhCgCXM8rk%2FIuxrjH6Y3%2BXafVg5ufwIbvhzS3Bp7o2oXjLsYLcNjzswYF4gg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14cf1956c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/bg1.jpg | 188.114.96.1 | 200 OK | 1.2 MB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/bg1.jpg IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 1920 x 1126, 8-bit/color RGB, non-interlaced\012- data Size1.2 MB (1152195 bytes) Hash58686afbe370791cfa6a34a4896dee44 522707a47c43585870c8d20a052e47b2aeaba282 ce13c62a9d60974c0b53ca8f2c9e6db70f8fa922ce6b8e8dca96086690123ff6
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/bg1.jpg HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/jpeg
content-length: 1152195
last-modified: Wed, 29 Nov 2023 18:32:27 GMT
etag: "656783bb-1194c3"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9PD9gFPJ%2BWWcFdGJ0KHgvfx0xRusDxnuzd8veNJy4Nx3mPG0yYfVJ%2FUrKtKbb039FsnDFD8akDG6PZYJToaOfP3SJka%2F29lwQ99ZawXfzpQa6nG48HpxrobxN6wtUlhfMO0xYsRV3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14cf1556c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/light.js | 188.114.96.1 | 200 OK | 503 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/light.js IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with very long lines (545), with no line terminators Hashd64718a85daf432be5f8d3c9fe3a45bd d1b2721f29e5a1a6e6344a53162f32c53eb98e1e de0997f0917e44e1840ce9d82cc86fd7f6cae542f906c62d78ae71c6af0ee303
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/light.js HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 18:32:20 GMT
vary: Accept-Encoding
etag: W/"656783b4-1f7"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wbZuJLiHQGEQD9jj4ztrMqBXGUqPJQCYABRaP5maaunAjTyl0BRvdRUA1pWu2zaaC83BK%2F%2Bodkl0hjgBObfkzUefHynXqY0BvNVnJIG9%2FvF%2B%2Fu6HY7DAybRwT6D4j6qaZbsqcpEqKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a150f6056c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/chat2.css | 188.114.96.1 | 200 OK | 8.9 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/chat2.css IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with very long lines (9725), with no line terminators Hash7bca496e806a705768b7684cff5b50a3 7f1acd34045cb10bb38ac52fd97af0f35ba21d24 66283dbc9e841b6beb83e10b96ace332707d6322d58d5dc4a30328216c197c69
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/chat2.css HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 18:32:17 GMT
vary: Accept-Encoding
etag: W/"656783b1-22df"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AGmlChe6dOTts2eatL55IOE2pbYCn6PMPI1Sna6C0L%2BWveh%2FBk6FCD89dOd%2FstvYuDiNlkxaKkxfUt7A3ood0ir3DwswPpCGjnKd0dm71AXMjNzWMTbGlXd7nY5Yd%2Fb0IrgLnSYt3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a14cf0c56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/before.js | 188.114.96.1 | 200 OK | 366 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/before.js IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with very long lines (380), with no line terminators Hash30ab0fccfb4c857f608e51c255c26796 5923f53a21825d79b436e2c98e6ab53068370ad3 92e7f01957ef9660eb84aa2d821d4fff017b66659f7a74b900fad60053a1c88c
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/before.js HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 18:32:16 GMT
vary: Accept-Encoding
etag: W/"656783b0-16e"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aHxxPWT%2Fp%2FjlDjgQxVGPWapRwLicU3V%2BlbC3BiZxQrJuvnVwTyDjao4NRe9iu1ePxyfH0gAmq83ZMTE%2Fv4L6MMzLODJrLEfXlUlw5A6wHY%2Fn0B2%2FFxOZvYei1IcxV%2FdPbUbLk8eSIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a14ff5656c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/pc.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/pc.png IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typePNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data Hashcc5132b56ba46b03dd998aa1fe220106 403e007a0b17d76a9945fa5ec46a9d01733b3040 598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/pc.png HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: image/png
content-length: 4949
last-modified: Wed, 29 Nov 2023 18:32:25 GMT
etag: "656783b9-1355"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MWOSkqV3R1%2F3GrfWqeQHdQjWaUbdNn961rIDgt8ay6o%2Fh%2FuJAa6Bo3tuEyuDBoChu1x5CJ0SIE2aKRWHDyqdNV4WYbMfauIUxLBPuqDZfujCdiAPOOOoRoO1BedUbsatp9IQp8jVLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82e37a14df3256c1-OSL
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/style.css | 188.114.96.1 | 200 OK | 210 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/style.css IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with very long lines (629), with CRLF line terminators Size210 kB (209665 bytes) Hash37dbae0d17208c34f7a96af284f52018 d5a76a529c3c53297a5a394541fa49d504b69d50 10a99594267aa4bd3ea83586bbc93bea00f127ac756526763bdf856b437e413c
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/style.css HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 18:32:27 GMT
vary: Accept-Encoding
etag: W/"656783bb-33301"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3NHEVo0LK%2BpGgFVrp6JrUvRta2fLm22oPIfu9aAnkNk%2FN5nhvCno1JWPCcZsEG7%2ByERI9ErVShtOqDFkXvE4xxi3jd0HJAPnH8o5W1mvOnTABIsbz%2FaobC4EA4tE1bckMiY1tl24SA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a14bf0056c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/main.css | 188.114.96.1 | 200 OK | 18 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/main.css IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with CRLF line terminators Hash0beb8d733906c3f96638a202170d2d16 b24ee81c5d2cf04703f0ce66148c918148ea717c f35de3044374ec0213e5648e1406955a2ddeca7a017fc22c16246b76f2110254
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/main.css HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: text/css
last-modified: Wed, 29 Nov 2023 18:32:23 GMT
vary: Accept-Encoding
etag: W/"656783b7-460a"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tAhObnOTm4ipgHgb6hcFfYVzpHOxqM%2BXExPGWLvseH7LfCXpnSy%2F8FHzhGB4Vqq1IGIs6mu3dNU3vteXESxI%2FaYW8S%2FI77Y60UJpyimCJX3dTZ%2FlJqBXS%2FvD5dwqmbTpEMdzJcoDPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a14cf0956c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/style.js | 188.114.96.1 | 200 OK | 84 kB |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/style.js IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with very long lines (32180) Hash7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/style.js HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 18:32:21 GMT
vary: Accept-Encoding
etag: W/"656783b5-14983"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7yGUIWRf1MEfbtfqaLi%2BWXYPpSGBFTG%2FiHiGI0q%2Fb9BZ2plyVugXlh%2Fm1gFPr9awwUGqDBXUWwUr7AL0KTXw%2FDHpZMLLmRHlhlNgzLekHC3RY%2FM4eAIGF7oo%2BUg%2FtfLWwuOpY%2FrtEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a14cf0756c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/fullscreen.js | 188.114.96.1 | 200 OK | 245 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/fullscreen.js IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeASCII text, with no line terminators Hashe70e5bc6acccc111d1016ccb1de66c20 b75154dabdb11f3c546fe085efdd740a8b88ea90 c8988f92f8e1a825f5f34ed45ca542b25eab1b845c5a0f459dff5045a4ee486e
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /asadasdasjdnasjnanas/mos/fullscreen.js HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 30 Nov 2023 13:36:01 GMT
content-type: application/javascript
last-modified: Wed, 29 Nov 2023 18:32:34 GMT
vary: Accept-Encoding
etag: W/"656783c2-f5"
expires: Sat, 30 Dec 2023 13:36:01 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LuH03ZF3vMP49hyfqr46AKekpTWEpE%2B0k5OHAMRZg871tas3TgLoDyOGRBUsGe1Z4wQjWtatjRCm7OyHuksJnvalrmwl7X5y9KtSy%2FPkDtSZX0QdGbxuZHeoVdQSBgAfWfcSGX9XPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a14ff5356c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aweer.oiuuuaevxx.com/favicon.ico | 188.114.96.1 | 404 Not Found | 146 B |
URL GET HTTP/3aweer.oiuuuaevxx.com/favicon.ico IP188.114.96.1:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectoiuuuaevxx.com Fingerprint2E:0A:66:37:99:76:9A:2C:95:A2:EC:D5:38:C1:AC:1C:AA:AE:19:0E ValidityWed, 29 Nov 2023 12:29:15 GMT - Tue, 27 Feb 2024 12:29:14 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /favicon.ico HTTP/1.1
Host: aweer.oiuuuaevxx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/
Cookie: _ga_GZ2WHBX513=GS1.1.1701351365.1.1.1701351366.0.0.0; _ga=GA1.1.173063661.1701351366
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 30 Nov 2023 13:36:03 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bTyrUDwa4h1%2FLAKV4PtrNVmolSHDvFrF%2BEU51mQgjw93WXnfENUpbXrxWLDeLIDbFCBt5rTzHz%2FYY9RxLL5ghD973NNYDX1T6ebq0hDfaK3736%2BiZSyk%2BUN62%2BrbaUtNudyDMquFNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82e37a20786056c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap | 142.250.74.106 | 200 OK | 28 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap IP142.250.74.106:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash2eeac174b6d409aebf79ff2223f3b380 d079b34ae6e2a4d46e6b09cee33dd4da4a895e9b 5ff9e1789aa671352c261693750b28f50cda54b2c1a2e50372434c26d9589e55
GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 30 Nov 2023 13:36:01 GMT
date: Thu, 30 Nov 2023 13:36:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css | 104.18.11.207 | 200 OK | 28 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css IP104.18.11.207:443
Requested byhttps://aweer.oiuuuaevxx.com/asadasdasjdnasjnanas/mos/?t=(0101)-50555-94769&/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04 ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File typeASCII text, with very long lines (27303) Hash4fbd15cb6047af93373f4f895639c8bf 12d6861075de8e293265ff6ff03b1f3adcb44c76 ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aweer.oiuuuaevxx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Nov 2023 13:36:00 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 455005
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82e37a151a695690-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|