| ribhek.com/bd/spinwhel-bd2/img/1.jpg |  172.67.219.147 | 200 OK | 14 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/1.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hash377420a38f3acb5512657a9b8ed81581 4f6636a307bf203717c96045abf2abfeb8dba64f 8cb8185ad903b510842f6708c2598597584edf5536992e1c5d891fe51e4c0a62
GET /bd/spinwhel-bd2/img/1.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 13520
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "dc256e65055b8de30f32520b730ebaeb-ssl"
x-nf-request-id: 01HX4SZ6KC04N5S8JNKTPAR3JX
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t7%2BXyjkXLe3OYuQK2rUqdk3aKXxlBUT%2BFsTeEzxNyNmTDGU9zrGluVoSpRzy3i9hmF6oXwVhPhYQiBrEZaoK2jm4t290H1BPw7TkRRz3eMUZKJLfZhTGbBRe8Vox"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a308c8cb4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/6.jpg | 172.67.219.147 | 200 OK | 9.9 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/6.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hashdc7190a9f04dd0d869725e3be37acd4c 452b22d68af7a114adca85efa6c467d6c8bc3f2a 15348d8c977424fa302c12d22bcc3f9409355069d3e23130bb2e7e33928c2dfe
GET /bd/spinwhel-bd2/img/6.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 9899
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "ed592006c3d3f33213ec1e292c1c75e4-ssl"
x-nf-request-id: 01HX4SZ6M1TQQ2X9588Y2QSQT6
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QZvmj8DTmorY3tMrUMhtVT4%2ByGzZ0D6KGwq20sJq8VpeWygiYEqk3wkbg58iUQ7pEeDG97CtgGqhAPq5xQcpqfiHSTkYX5OpEmWYnddUaQHurWgjCjlEtOp7Miy4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309c95b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/7.jpg | 172.67.219.147 | 200 OK | 12 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/7.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hash0da6703b656a898d97176e223f16bd70 c5bc579eb90dc41635af25d7a859c428ed477c91 5d6fcf5fa1fd394b461ee95482c765fcf723056a44368f1586cb07344ee3c541
GET /bd/spinwhel-bd2/img/7.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 11830
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "1c78d2cb4223e85ed02e590f93455b0a-ssl"
x-nf-request-id: 01HX4SZ6KGVXAN7ESEPXQ55EWV
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H0ggFHB%2Bv1%2F632oXb8QhfMmEME03j%2BhUjsa2Cvk7GHfwknhLXT9CfArzznuogcX3bw8Bf5xh1BjQ9RAmnIfzo3Y808Wp38fAZRUBzQ%2BbVx4Q0r46mQwkGmiMKDTN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309c98b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/8.jpg | 172.67.219.147 | 200 OK | 9.3 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/8.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hashbe08af62d014c342707f1cad716c53ed b984b160fa95cc5e28100ff9f2b452f374143eae 5817c09bb8a831027ea5ec1816b2549e78870976d19b7086140098624b60957b
GET /bd/spinwhel-bd2/img/8.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 9294
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "512eeb9485893e9fa31d1b78a58c8367-ssl"
x-nf-request-id: 01HX4SZ6M4TX69KTQ9D0P8R445
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bs2uxPtuGyX58DSG6W0KnEJW8MkvMHE4l7OM%2B3JWPDHTFE%2FnGAbv6Vd0uEqplJvA37MFtNRX%2BGqN4dQsKM1xrvwGM3n1QfYIgdCYds6tZ7kyhXyG5%2Fq1JXWEizZE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309c99b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/smiley.png | 172.67.219.147 | 200 OK | 5.0 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/smiley.png IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced Hash6a1b1fb2c9a70e8bb232985a5e7c76f2 a371f8e561576cb893e897f1e156597d3abbd0be 68c86e51e47a972e3191621e48685c0d9d1e166235cd816dc74370bc439567fc
GET /bd/spinwhel-bd2/img/smiley.png HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/png
content-length: 4992
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "a770a97f2ef0e3b3edd238062c9e3313-ssl"
x-nf-request-id: 01HX4SZ6M7QPKRQJARGECWZTW1
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wNPAfwq9QEgLaDfd6tWSB3%2Bd9qws3kPtgRUKxS9JiV0JaOHhlTCvTHUGAY844LTkCOVJBM12jX6rL3Rc3ZQWcsxdveMz6%2B37vAOEOAZH29yVYH6gOM3ioALsYlkT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309ca0b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/3.jpg | 172.67.219.147 | 200 OK | 12 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/3.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hash01e98afa3b9232b5331d7d39f0314a9c 3bde2e8f7a42d928f9b20bd681539bec4de39955 eb7a970190667341cc2b293051f7bdb4dceea5cdaafd8dd2f23b3f0465ecd3f8
GET /bd/spinwhel-bd2/img/3.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 12391
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "36cc40d4cb54c88cc3307a55443a28fc-ssl"
x-nf-request-id: 01HX4SZ6M13QQC0EPYSREK8NGF
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KPWQOdMUEeXjwSlwJlQ%2FUQfVAd7PIm07nFBiprocvuSowgfEgnshxGwk1yoGYMxBp8C%2Bmh2XqL605NJmzJGJyx7tgYet2gHgmJE5GZ8f4Nh%2Bg0%2BFFqeFs5u6073G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a308c8eb4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/spin_vi.png | 172.67.219.147 | 200 OK | 50 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/spin_vi.png IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typePNG image data, 501 x 501, 8-bit colormap, non-interlaced Hash7106a74d2ce4bd14c8392f7be14a7065 d2712d9b8bad8927e75fa3e3574e7a64476f862a 9c33b8263d278ba473676b4458f3ed5d7c46d36f8fad9eef604d07a4056a2b5a
GET /bd/spinwhel-bd2/img/spin_vi.png HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/png
content-length: 49694
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "0d1bee5234f0288a950beda3d460a480-ssl"
x-nf-request-id: 01HX4SZ6M28F3Z2QXQ5DC27RJB
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mShVSButzUFvvKQM6n7OUtNzOfNQzuPw9i66VVVvBfmYQIsgPIuRvosXfxGkMVkGTj2VobAwggrYI7x1uVLRbih4ueza7AYoPU%2FO%2BS1grZRMxxUqHbSWlJ4jku4P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a308c89b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/cash.png | 172.67.219.147 | 200 OK | 55 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/cash.png IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typePNG image data, 500 x 500, 8-bit colormap, non-interlaced Hashaca5f38816fc94b4b8dae4a140a6f4b4 d865802d7f231fc3041060eacdc2959c827f0152 dabc09039c482aadd0569ab90e75e9c9c48e33e29e67bcd06f5e3a525283f0de
GET /bd/spinwhel-bd2/img/cash.png HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/png
content-length: 55334
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "c0214cae6c8ef3b8e68105c36b2eaa3d-ssl"
x-nf-request-id: 01HX4SZ6M13EZMZ8VY6NHCF6X3
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dzcDpbmy6KVsLyt8TLPa1Ke9Q%2FMnnzHiqfIQ4P%2BTZ5mSvmZrgQAsFeKbYLsp9xRDwR6UnQLnuBBUCNb29Vjm74HL%2FyiI%2FP95fame%2FezBnVJmahIdyjOO7QdS%2F8Du"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a308c8bb4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/refresh.png | 172.67.219.147 | 200 OK | 1.8 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/refresh.png IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typePNG image data, 70 x 70, 8-bit colormap, non-interlaced Hash2d0f4539e28850747bcdf03e8c9a9f10 c400935fad4c29d04714cf5b9e74fb4d4d8f1e1d c04fa254d43e1b6db555962ac2dbc6cd67d47aff3c1d7895a229cdaca87a688e
GET /bd/spinwhel-bd2/img/refresh.png HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/png
content-length: 1798
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "a8f2cf0e5f0e85d12faa27e61c1d49a3-ssl"
x-nf-request-id: 01HX4SZ6M5T07XQAFZHQE1CYPC
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yZvSDXwhUW6jf5CFMA6LXAjpb%2BCZsLegIOdF1OeMdbNc5wdatBFSPSjBUKrpcY51yrkDdesbD4m1bTv%2F%2FnrAUIOmPYHEGz9n9JoNQCo6jgtRux7VmkrI9wCKNmOr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309ca1b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/5.jpg | 172.67.219.147 | 200 OK | 13 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/5.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hash1f83e1929ec505e6e59015720aaf6c20 1ad7b527fc5b0f090d2224a8ea1f7b2e3f10c502 01725f6bed88a3119e2d04bb314c6cb94e745ccefb03f7627cddae6ce4831f41
GET /bd/spinwhel-bd2/img/5.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 12960
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "499a0f48fe728f158dfe5c6d11a79f2d-ssl"
x-nf-request-id: 01HX4SZ6M5W03G6NX11Q2RFEZZ
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t2XePMYcSjOO8DDZ6pmH29nXWe7%2Bgc%2FY6xRHjapVW4bc0CFtmP2S0v2dzteH9TFd9Sao%2FPnYe4iIiePu0u9nhZf4UFooCiaauS933T0GuZ%2BdGtojZmozpyRxhEUj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309c93b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/4.jpg | 172.67.219.147 | 200 OK | 8.0 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/4.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hash092cbd001b6ab372c0a370a7e9c034b1 a5fd2dab7df2473a5e31e7a3ebfc6ad97d060f80 0f04425034bf7a6945da530490453cde2fd1d987768c3cd4d3925a6d5916ccca
GET /bd/spinwhel-bd2/img/4.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 8026
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "44155838cb1913b2c4d4e8e0fcb5507c-ssl"
x-nf-request-id: 01HX4SZ6M2MC07EPZRX54CGAKA
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s0ThHn%2FF1TfkE3iS6ru2rhz%2BQ3XRGDyHtr%2FJRTlT0bBI6NVS%2BnTe42KNLlMNvGTpuLb5%2F5oavy1zQE9Pm%2Fc5XHR9UvbY1icen8jMRnaSrnENAQ%2FBihrParvjKY3u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a309c90b4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/img/2.jpg | 172.67.219.147 | 200 OK | 17 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/2.jpg IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x256, components 3 Hash9eb308eeb40fc89b9df51e87ef4b48b6 8588a42ff735e748a4ecf207d2dffefdf9d7eb65 162e2098e4e8ceb37728c55cb2709011bd4baceeda5362e5c727b2c017989b37
GET /bd/spinwhel-bd2/img/2.jpg HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: image/jpeg
content-length: 17077
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: "cc55d4a55e6ae53e3539037a87c51530-ssl"
x-nf-request-id: 01HX4SZ6M3GRZH7Z80KFV1RYJD
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kheEcpLQMBe%2B2JIE%2FQnXNfH8B8Pw8MuP1X1wkbIBtihHEbWCYTOrxwv3geAmVCwLO%2BQNNO3Fzn5FhFLIhgzz24OW1H3y7e83WEaPOV0PDT%2FN7aqyzlT23aujOHGJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a308c8db4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/p.js?f=sync&lr=1&partner=78c5ba6da14c996481201ddfa240d8b93591e970395d5413e95a0a3ef4b61fbc |  139.45.195.8 | 200 OK | 697 B |
URL GET HTTP/2my.rtmark.net/p.js?f=sync&lr=1&partner=78c5ba6da14c996481201ddfa240d8b93591e970395d5413e95a0a3ef4b61fbc IP139.45.195.8:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typeJavaScript source, ASCII text Hash9f449dd93aff5d19981521dc1718011e 704d0f2cef85ba5c7f36a9ba707b9116b88ff8f5 78a9e77051816292528bde89251006ecd6c3f563218f4d78217df175b2883029
GET /p.js?f=sync&lr=1&partner=78c5ba6da14c996481201ddfa240d8b93591e970395d5413e95a0a3ef4b61fbc HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:07 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ribhek.com/bd/spinwhel-bd2/img/spin.png | 172.67.219.147 | 200 OK | 2.4 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/spin.png IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typePNG image data, 142 x 173, 8-bit colormap, non-interlaced Hash79051a4f9ac575664b4d932d577a65fc ebae669a090fd6de43fb1854e5ba4868e8e8ffc0 0109faa660c321bbc20f82c8ba38eddd5490bc3b77d72c4b1de965a01a4f12b4
GET /bd/spinwhel-bd2/img/spin.png HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/css/style__base.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:08 GMT
content-type: image/png
content-length: 2444
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "8cf94e3e08876699f7d4768c58d88a1c-ssl"
x-nf-request-id: 01HX4SZ6Z92XX8ZGF8R9V87T59
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w3ghJI9GztlhP3ckGP1IjEPD6J2E7rF2Icdv28RusLMVARTAQxhvrHvan1%2BIf00m1MNjVT20BjxK2RAwp30Og6o2%2FFjn8zgURrq%2FCxXTSQ7xEYTzZ%2Bb0aeM%2FRbvi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a32ff9eb4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/js/jquery.min.js | 172.67.219.147 | 200 OK | 34 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/js/jquery.min.js IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJavaScript source, ASCII text, with very long lines (32058) Hash24f2e59beae1680f19632d9c1b89d730 b3a77b35c4809324ab79e64d40c4ee391234e008 39646863a414e0a84920b3a8639c0f3e8c94535e8dc051b42b485a068dc2902f
GET /bd/spinwhel-bd2/js/jquery.min.js HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: W/"ddbc6702bc953f6dedfe3543150cf865-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HX4SZ6M8MK4Y27VFB9E108TH
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oF0MREoC4XPvw8t1waV%2ByG2L7ov%2FL05czafKnwGP5Ms8kZIx35kdFwvo07wgPpN1ZvaIocqOFwweKQvV4Zf4qa2pMDCMPcCLYjyTU8NX1Rd9uuNAVhGbseH0YTSb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a309ca2b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bujerdaz.com/zone?&pub=0&zone_id=7071124&is_mobile=false&domain=ribhek.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=211065ee-6742-4dd4-bea4-a9d728bc0d4f&action=prerequest | 139.45.197.250 | 200 OK | 0 B |
URL POST HTTP/2bujerdaz.com/zone?&pub=0&zone_id=7071124&is_mobile=false&domain=ribhek.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=211065ee-6742-4dd4-bea4-a9d728bc0d4f&action=prerequest IP139.45.197.250:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectbujerdaz.com Fingerprint0C:8C:A0:AE:3A:F2:8E:BC:C9:F8:38:17:34:12:6E:06:46:3D:35:A3 ValidityMon, 15 Apr 2024 05:19:24 GMT - Sun, 14 Jul 2024 05:19:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=7071124&is_mobile=false&domain=ribhek.com&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=211065ee-6742-4dd4-bea4-a9d728bc0d4f&action=prerequest HTTP/1.1
Host: bujerdaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ribhek.com
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-length: 0
x-trace-id: f76b7e3bd09cd12f58d5735e8e0a3e5a
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ribhek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 326
Origin: https://ribhek.com
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 10e7c045667462886aff108ce8d892c9
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ribhek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 328
Origin: https://ribhek.com
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 99d7fc5c6e2c6ff1517efe7a633ff329
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ribhek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 329
Origin: https://ribhek.com
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f146440b1258d4a1e2713c1def91fd27
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ribhek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://ribhek.com/
Origin: https://ribhek.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://ribhek.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashcc0c8d801984be906c7859328b5d8a26 584210ae6640eb302a6fbd91210d89510a9f750c 8a87f22d43bfda88402877eb194b76861d409144252848b218982446bfd2a883
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ribhek.com/
Content-Type: application/json
Content-Length: 954
Origin: https://ribhek.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://ribhek.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/img.gif?f=sync&partner=78c5ba6da14c996481201ddfa240d8b93591e970395d5413e95a0a3ef4b61fbc&ttl=&rurl=https%3A%2F%2Fribhek.com%2Fbd%2Fspinwhel-bd2%2F%3Fuclick%3D15bzirzw%26uclickhash%3D15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235%23 | 139.45.195.8 | 200 OK | 43 B |
URL GET HTTP/2my.rtmark.net/img.gif?f=sync&partner=78c5ba6da14c996481201ddfa240d8b93591e970395d5413e95a0a3ef4b61fbc&ttl=&rurl=https%3A%2F%2Fribhek.com%2Fbd%2Fspinwhel-bd2%2F%3Fuclick%3D15bzirzw%26uclickhash%3D15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235%23 IP139.45.195.8:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=78c5ba6da14c996481201ddfa240d8b93591e970395d5413e95a0a3ef4b61fbc&ttl=&rurl=https%3A%2F%2Fribhek.com%2Fbd%2Fspinwhel-bd2%2F%3Fuclick%3D15bzirzw%26uclickhash%3D15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235%23 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=08805390953d4dabf5860e0bb0c04628; expires=Mon, 05 May 2025 16:39:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 | 172.67.219.147 | 200 OK | 18 kB |
URL User Request GET HTTP/2ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 IP172.67.219.147:443
CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: text/html; charset=UTF-8
age: 67266
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
vary: Accept-Encoding
x-nf-request-id: 01HX4SZ66RQZXM9HM96KKQZKH5
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M3UrX%2FDXRxZHoItK9ipULFQVva7tJm9Jm0Im5lCSE9wJQTWeUs7f9Girfom%2BZ33reTAWeEvq18vRhRAKEkHkdPu%2FWNirVkkSovsYo7SXN9orTqdgxcQejlhJmkEX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a2e0d921c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| backunder.com/script.js |  188.114.97.1 | 200 OK | 911 B |
IP188.114.97.1:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectbackunder.com FingerprintF0:95:C2:A7:B0:15:EB:8D:1E:CE:36:6A:FC:03:95:FA:C0:07:37:96 ValiditySat, 30 Mar 2024 17:02:34 GMT - Fri, 28 Jun 2024 17:02:33 GMT
File typeJavaScript source, ASCII text, with very long lines (920), with no line terminators Hashf60d3d95ba5d3857d3acb6730f06767d 454bf6bf84fc040a03287bf1096d2669804627c8 5c501b55106f7ffe03902742af81cad54e109fec08e9dd005b13ecaa6cbb748e
GET /script.js HTTP/1.1
Host: backunder.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=1228
etag: W/"4cc-5f2f3364b2fe4-gzip"
last-modified: Mon, 23 Jan 2023 19:14:45 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 5621
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uOTROthHg6VcJ%2BlEXAbQwsh7yskoErTUxGn%2F2amT%2F8%2FYFBReQeUyLjBqDIGyrC%2B9XuNC3bOpu%2FSiGJwqGXtKIog3EYieewqwhZexXCf38O7ujRn9QTtZ8OiHkxKPsLF5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a309a65b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ribhek.com/bd/spinwhel-bd2/img/logo.png | 172.67.219.147 | 200 OK | 2.9 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/img/logo.png IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typePNG image data, 128 x 128, 8-bit colormap, non-interlaced Hash05209921be4171eee0954c5ae54850f9 3c6e2db019b4483a6e9e4b77cc93734548f30087 2cde3636ca32586133a4a4967f43e3c0f0b64fb6d645d6c9482eff50124692d5
GET /bd/spinwhel-bd2/img/logo.png HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:08 GMT
content-type: image/png
content-length: 2852
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "9e05192c5a0bab692a490873ae8b7bd2-ssl"
x-nf-request-id: 01HX4SZ75Z6ZWKZY34ZZ9AFM6V
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ma7Unoud91fTrmk%2FQgQbYNfpXmL9WFJx85RBhtheK4%2FtoDOgztrpZ6bj3ZnOO6mkrb9D1ymC%2BWgM95Ggi8vj1uWNoN%2FXAjiL1ZbuIGY6ZKEuolh8hx%2BoIIhia8n%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a34293cb4f4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/js/en_date.js | 172.67.219.147 | 200 OK | 6.7 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/js/en_date.js IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeASCII text, with very long lines (7106), with no line terminators Hashea133004ba2ee7bebc25767e49cb99ff 50c4bbb8423fe9d364798f28c8260cf66916b677 cda4a08060ba5f9871213274ab4f043f97f74311196eb4916fef50700178cff8
GET /bd/spinwhel-bd2/js/en_date.js HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"3ffc4d8daf8a0279c657879a371a6eff-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HX4SZ6KSX20DGGFSQRMDNESJ
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dZH2AmfcnJdvL7TXTYUZO8JlMeulfo6lI2%2BWTLcF%2B025JyRrYX8RjXp762c5dsLWrpNH2wZb6JzZIvncwG5Y0u9i2w2cXdUTVfoK%2Fk7mfh4R23F3g%2B%2FQ1yc9M63H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a308c7eb4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| bujerdaz.com/pfe/current/micro.tag.min.js?z=7071124&sw=/sw-check-permissions-39799.js | 139.45.197.250 | 200 OK | 37 kB |
URL GET HTTP/2bujerdaz.com/pfe/current/micro.tag.min.js?z=7071124&sw=/sw-check-permissions-39799.js IP139.45.197.250:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerLet's Encrypt Subjectbujerdaz.com Fingerprint0C:8C:A0:AE:3A:F2:8E:BC:C9:F8:38:17:34:12:6E:06:46:3D:35:A3 ValidityMon, 15 Apr 2024 05:19:24 GMT - Sun, 14 Jul 2024 05:19:23 GMT
File typeJavaScript source, ASCII text, with very long lines (37142), with no line terminators Hash32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?z=7071124&sw=/sw-check-permissions-39799.js HTTP/1.1
Host: bujerdaz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 05 May 2024 16:39:08 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:52 GMT
etag: W/"662a3514-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ribhek.com/sw-check-permissions-39799.js?zoneId=7071124 | 172.67.219.147 | 200 OK | 566 B |
URL GET HTTP/3ribhek.com/sw-check-permissions-39799.js?zoneId=7071124 IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeASCII text, with very long lines (605), with no line terminators Hasha438a31ad30bcf0fc26f69eae78ab2f9 adba6a5873bd34085ce9b204c9be815d822e35f9 13040a957fe13225f89ccf2d8bb2d372c69cbc5727661bef2b43376d300e466a
GET /sw-check-permissions-39799.js?zoneId=7071124 HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:08 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"b66b69ce955a5c83d67e661d27432485-ssl"
x-nf-request-id: 01HWQWWSHBDCFCVH3ANW4N6C7G
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gruE3C%2Fcl%2B64xQZV1YKI%2FG1I%2F56GaQFN7XXX0DNqn2RJzlT4t8XwEyZHWnw0fDSMKw1DYDMFvp0dbOkYIEnZEO49IoYhnhTMbF3zQ6pxWiUIx%2Fx6RuEvXOge0kLu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87f22a347987b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/js/bioep.min.js | 172.67.219.147 | 200 OK | 5.3 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/js/bioep.min.js IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeJavaScript source, ASCII text, with very long lines (5456), with no line terminators Hashfe234c9b352a64fd48af6671a6460c25 4ab82b1093465cbeba45d0dfd67ed3d8cd30deb2 97043aee10fc7179a85aea1e1e96bbd6a4564d733589548209ccc1358252eb9f
GET /bd/spinwhel-bd2/js/bioep.min.js HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: W/"16322b53a3ea039d744dc303d398d1dd-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HX4SZ6M1BTKNAAM3R3PNKHNP
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wLDI%2Bi7MHPGeIaci5n1MZrScjHax2yaEZK0CqqE1DUrFJY8FJqB%2Bu%2BiRHSXn7AUJDVAzu1zJvbDp4v6iviipELJtTODwfiftEQRfZMM7U%2BSIR2eGZpNPk7u7%2BtVe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a308c88b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-bd2/css/style__base.css | 172.67.219.147 | 200 OK | 19 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/css/style__base.css IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
Hash5af9199e58d12f7d074412e74d9a3d3d 74c11cb489a368220c3144e4570ad5b34afa75c2 708ad2fb793e0817fdf6bd7b0401e172f9566033232f148439e6f42b2f3b0999
GET /bd/spinwhel-bd2/css/style__base.css HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; fwd=miss
etag: W/"48cda9d2e1e4882f881c36734d6c0dbf-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HX4SZ6KYANHFAMEMVGTXPCW2
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JDKvIktG3slZY1sSbBTzpB4qFguL735NK3RYY7EEPhuBQhjEx2ru73CJbiNOaVdOHEeJZfi%2Fq%2FEd3045KFuKCRAQxcqWn6mtExgfa2Hjq0UecxbyCXwwYO9vKwXS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a308c86b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ribhek.com/bd/spinwhel-BD2?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 | 172.67.219.147 | 301 Moved Permanently | 18 kB |
URL User Request GET HTTP/2ribhek.com/bd/spinwhel-BD2?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 IP172.67.219.147:443
CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bd/spinwhel-BD2?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 05 May 2024 16:39:07 GMT
content-type: text/html; charset=UTF-8
accept-ranges: bytes
age: 67266
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
location: /bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
x-nf-request-id: 01HX4SZ65DV0GBQ7WDNXJ8GD2D
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qgr0oAYCWmxpE7OLmbwcRZO82ZZdzzr1dTrhp7O0lS4UdsLgXhvIZ8VcEfaF7E2ECumAltYFDKj5cu7PkdFLuQF76%2FRdsJ0N%2B0EW%2FZc1R3RR7DuL8WSif%2B2POomS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a2d9d3a1c0a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ribhek.com/bd/spinwhel-bd2/css/style_a.css | 172.67.219.147 | 200 OK | 6.5 kB |
URL GET HTTP/3ribhek.com/bd/spinwhel-bd2/css/style_a.css IP172.67.219.147:443
Requested byhttps://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235 CertificateIssuerGoogle Trust Services LLC Subjectribhek.com FingerprintFB:64:06:A8:A2:A9:45:39:1D:4E:95:94:5D:B6:C9:DE:A1:4F:AD:8E ValidityFri, 26 Apr 2024 15:18:05 GMT - Thu, 25 Jul 2024 15:18:04 GMT
File typeASCII text, with very long lines (6989), with no line terminators Hasha53a207a73db213f78c49078dbdde32a 4a5813b3d9a5237141104cd9ab2ef54c8151e168 b37503aacfbae5e87ea942f2a7b5291f4a271af060f01caf7dc1a02160633f8f
GET /bd/spinwhel-bd2/css/style_a.css HTTP/1.1
Host: ribhek.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ribhek.com/bd/spinwhel-bd2/?uclick=15bzirzw&uclickhash=15bzirzw-15bzirzw-17a1-0-1716-4ka7-irx9-315235
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 05 May 2024 16:39:07 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=14400, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"1473adf58d9bbec22e785727559b8c51-ssl-df"
vary: Accept-Encoding
x-nf-request-id: 01HX4SZ6M1VDHQVH8JWNSFCPVG
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vaI1Z%2FLl%2FNU8O1aNfjbS12pYe%2B5l5vg4aoq4%2F%2F1M%2B3khBgHPLpb%2BgvQSY%2FYi3y7w69gP4JO1jHX3u5dRFfYoDmi3q%2FMKXe9SrFnOYYHBkzfLdn8ZAYvhu4zRdebm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87f22a308c87b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
104.21.17.21
0.0.0.0