fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
200 OK 1.7 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 12c3be26b1d114a3fd98cf58ba7db555
34633571552ed1c3492c3710835efb2b77f8fdf2
a23fa0a736069ebc3f7aa3c378f9ec9f01283e921cf6069e39fb6b7c88748aa1
GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 03:44:57 GMT
date: Mon, 04 Dec 2023 03:44:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.page-nnwggyeb.site/lO4753/b0ec66984049bb7a0b34be76d856e46e.static.png
200 OK 364 B URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/b0ec66984049bb7a0b34be76d856e46e.static.png
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/b0ec66984049bb7a0b34be76d856e46e.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 364
last-modified: Sun, 26 Nov 2023 13:22:42 GMT
etag: "16c-60b0e1493b4a5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AMqG0oo6DL2MD5YMrh1H8PIsnx76DnCYCWonOoWjwYqf%2BgYQcg7PCiH63dCjSAZK3ZQx90YmsbIKXkBha%2FMSb7%2F%2BCcNPrrIqqLkMrrd5BXPr29svkXgpEu9YLaIv7nzHueVyccb%2Buxyo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8c83856c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/3b5475040f17103f253d6bee48f5fea2.static.png
1.4 kB URL www.page-nnwggyeb.site/lO4753/3b5475040f17103f253d6bee48f5fea2.static.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 148 x 21, 8-bit/color RGBA, non-interlaced\012- data
Hash 5bfbcd30ce3355f8de3fb0536de70715
51fd9c511bc0d2e0e3fb23955575eacd94d5b9e5
dfcc16fd49167f62d2acb07ed991fb0535f5ca863c5c15cfa20cfd76c1b1cfbe
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/3b5475040f17103f253d6bee48f5fea2.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 1443
last-modified: Sun, 26 Nov 2023 13:22:30 GMT
etag: "5a3-60b0e13ced94b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YgBfVYiMZw0tWP361tDHQeicIbWlQ9UolHT3TICse%2BcyDcZUHUomhGQOens1z6kZ4XFAa6vvHdu%2FVUR06mtq4%2FbJkbQzRwFPHhTnifiW66VAyahWy5ogVn735aExgU%2FEizHomPmcU3Cr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8c83556c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/eebda2f8da7e379b91780cddd7f53a7f.static.png
200 OK 349 B URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/eebda2f8da7e379b91780cddd7f53a7f.static.png
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/eebda2f8da7e379b91780cddd7f53a7f.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 349
last-modified: Sun, 26 Nov 2023 13:22:43 GMT
etag: "15d-60b0e14a22c1e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=egapYG56KufXdyHBXFN36aZ3vosk7FL0r4kvFA9JwTq4LYFjk8dSezXuWHXbZcrDrhGPencB22oCl7sqx5QsUx4KpZ%2FvI%2Bv52u64pNtl8hTMPyVcP8lasU96uFJV4dXmfD8Yk1aQN5T3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d83a56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/3606572a3f18fc9df88989e0af2b4d55.static.png
1.0 kB URL www.page-nnwggyeb.site/lO4753/3606572a3f18fc9df88989e0af2b4d55.static.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/3606572a3f18fc9df88989e0af2b4d55.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 1045
last-modified: Sun, 26 Nov 2023 13:22:38 GMT
etag: "415-60b0e1453ac7b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F55xoBYHdWcM40Pk4fQypUg1UjPlw0Lk%2BPLmBNGrY%2FhZO4PV75ES9oQUXHzaYMZGoA7LzTn7mBppzwiC9eE5lGzhUYYlgDRTavc2EVmEDR8MUmtshgc0J%2FgZh%2FrOnIOV%2BZFpT5seozSS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8c83656c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/6b9fb912e3ca988c1f022932faa17620.static.png
200 OK 4.9 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/6b9fb912e3ca988c1f022932faa17620.static.png
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash cc5132b56ba46b03dd998aa1fe220106
403e007a0b17d76a9945fa5ec46a9d01733b3040
598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/6b9fb912e3ca988c1f022932faa17620.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 4949
last-modified: Sun, 26 Nov 2023 13:22:26 GMT
etag: "1355-60b0e139cead8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9giwX1og6z9dZL5AHNRcbWyXDfzENkXY2rgbmDfd76IRfIP4qf%2FkmNaz2CURP2PW1Uy4XDiSL54pvslYL%2FqNG%2BvGm%2Fz1V5D%2Bc3fWU%2F7%2FaxOgmWKG%2BLn5EA2RFNUWJ%2FNSF1iV8045QbQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d83d56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/25701d21d098ff9e8c7c02aff64f6e60.static.png
1.1 kB URL www.page-nnwggyeb.site/lO4753/25701d21d098ff9e8c7c02aff64f6e60.static.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash a3555871399f1f67bfacaf437974b03a
b6337de87cd7a75a73cd804774651d14c83fe76a
2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/25701d21d098ff9e8c7c02aff64f6e60.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 1108
last-modified: Sun, 26 Nov 2023 13:22:40 GMT
etag: "454-60b0e147473e5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jS1ie%2B4%2Fm9cG9PlF1nZx0dcYX5sSWyLxC5bMGmNKCkY9XwiU0yeJMzQUG70FUdwN2TPufWaZw8RnaC5aozjcYcUKNX3QQ44fENcplCYNiezAEqLS9efsaMwJ8RdK34Zv49SVF3E83Dp1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d83c56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/7c3fadeffb547acd782e5d7898dabdce.static.png
8.4 kB URL www.page-nnwggyeb.site/lO4753/7c3fadeffb547acd782e5d7898dabdce.static.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0139bc5bdf466894ec687696e2dc65cd
5c0a326bfbd3ca27e73d36d8ea3fdfd8f8c53b1b
13ee09efef992ec899ca28dea08d00886fce5e8b3ad6c19e6c753a899bcfdaea
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/7c3fadeffb547acd782e5d7898dabdce.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 8350
last-modified: Sun, 26 Nov 2023 13:22:34 GMT
etag: "209e-60b0e14134690"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Mz0z21s%2BqDThK4gCe4qUqbEIBmyBxNJUlmR2uUUlXACG2gMEfy%2BZ6i097u9HLxc%2F0tSKWT%2BEf9ixp%2Fy9VATqzPzZ2RoqnyQJwUEha9MP3uEq9aUCWxmPGV%2B48luX48Il4Zjirj8Md7W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d83f56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/c075fb51f8347d886d7adb2f41364b5c.static.png
3.8 kB URL www.page-nnwggyeb.site/lO4753/c075fb51f8347d886d7adb2f41364b5c.static.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/c075fb51f8347d886d7adb2f41364b5c.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 3834
last-modified: Sun, 26 Nov 2023 13:22:33 GMT
etag: "efa-60b0e14066561"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WH5MpkXnUtj%2BAKmrvkAG8VqpUHJ%2FBTxB6r%2BagpWxawfKVasXkhX58%2F80JsvefA0a7LS0A0TsjlG6kWzigLrzlJonRQ70Ijs%2FIOEiqAxhGngJfEA%2Bwl2H%2FRbxdcvUs17krNgwYkrbvgd%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d83e56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/8333a883500375d7869a4fc9575ae540.static.png
200 OK 18 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/8333a883500375d7869a4fc9575ae540.static.png
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e3d6800eef9cff4b94abc025255eb2b
7d606044af2f4fb7f10cad9e88a3e0647c0f2b38
b2901f408265c7a9d8d5cfe0c8865e27289949848862945f8a3eda85898100be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/8333a883500375d7869a4fc9575ae540.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 17558
last-modified: Sun, 26 Nov 2023 13:22:39 GMT
etag: "4496-60b0e1462a0f7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MX%2BFjcMmolktjT8nyc7O3TaDXuErwVY7hhspPa4AmUUuulPy0RQAi565Md4TahL5hfbwN0g%2FvVxQI%2FqVTsb%2F4xDVhowhFxY7sNoXjkenWak5EzGg1PbAxupe%2FV66ZDQfDZABUf9zGZ5i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d84056c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/3d7258eeda496aa1e04d9f9552179445.static.png
200 OK 26 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/3d7258eeda496aa1e04d9f9552179445.static.png
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c497dfff84bd8c5af9254c9d6278ce1
667e72e7ba6f00a54629e28133317022d4b59af6
b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/3d7258eeda496aa1e04d9f9552179445.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 25871
last-modified: Sun, 26 Nov 2023 13:22:32 GMT
etag: "650f-60b0e13f2ec89"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9gyYbZBq41Xfdg7AmzAZIPk6cOPkc0juP7mylRlPlrHEMHqrCpcQo%2BWr8ltRqd7nGrA5LZ5HdZakPPLm1UgP1RawO5MGvCFE%2BBx0sgdG0vUz5dMe5aBVKOgZ9yXmWlqeBLhk68kI5%2F12"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8d83b56c6-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.page-nnwggyeb.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 341040
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.page-nnwggyeb.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 341040
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.page-nnwggyeb.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 341040
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.page-nnwggyeb.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 341040
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.page-nnwggyeb.site
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 341040
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.page-nnwggyeb.site/lO4753/b4fd536b3684302c28ad28d02f1d7192.static.jpg
200 OK 367 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/b4fd536b3684302c28ad28d02f1d7192.static.jpg
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2022:08:26 11:44:30], baseline, precision 8, 1920x1051, components 3\012- data
Size 367 kB (366853 bytes)
Hash dd6f5df6c78a7369fe8ceb7c0f70dd50
d664e27e8c2b8154f9b31e2dcda0b21e3e4935ba
40dd8a184408b9c6f376673ffd39c74611f4ef9ff0a1daa8b3760015d801883d
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/b4fd536b3684302c28ad28d02f1d7192.static.jpg HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/jpeg
content-length: 366853
last-modified: Sun, 26 Nov 2023 13:22:38 GMT
etag: "59905-60b0e144a26c1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sRhR9uM9sFcLFb%2BJT6%2FqXTQuq%2BK%2Fi1Sxx%2B5quZKQnyr%2FpYn4G5JiLOVxkMeGW7HE2SrhXiBK%2BFBrncl%2B7DGBt2cqXKp20D7caV6Ydm4qMVN8x9wYy1aUjPGZnus%2Beea2Box1ymysm54B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8c83356c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/17aeeccb311e76485a4378f554287df9.static.png
549 kB URL www.page-nnwggyeb.site/lO4753/17aeeccb311e76485a4378f554287df9.static.png
IP
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type PNG image data, 1903 x 1020, 8-bit/color RGB, non-interlaced\012- data
Size 549 kB (549442 bytes)
Hash f3e18c4da95b83ab519a72f2876019f2
209f613fed2d2202e134e00081ad3c32ec5e6a25
466835ef2d6f0f0bfddafa405154702e36a5588f69684dd3b6642f9013eb778b
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/17aeeccb311e76485a4378f554287df9.static.png HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: image/png
content-length: 549442
last-modified: Sun, 26 Nov 2023 13:22:49 GMT
etag: "86242-60b0e14f176e5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5i%2FVt3IFna6PztFOiVb330777khuRYIM%2F%2B1%2Bv8RTkOiGNQ1lJo%2FYME4AZ4gX%2F9DK9Bi%2BGyE7mN37kjl8I5BIXYcQjcs6VQVgMJeETOzGG0aEmo3wDEWR4nNsvfChpJA3jqgnkkNCjxGI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dc8c83156c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/alertmicrosoft.mp3
404 Not Found 315 B URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/alertmicrosoft.mp3
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/alertmicrosoft.mp3 HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 03:44:59 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1QjsLBkHxIxqu7tYBnxoaffwG27YgGrhzpWvxKqzjCv5GZRu7xNtVQTVekKfpm28VYxGLMe2ugd9SrjnRnBPhYGlaLcx32mrtH1iLhWEP9f8a7%2BPhHgIHKhuTNckhPy9UNddim51boEl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dd02ac656c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/03978e09032efb49f1114ceef72ec864.static.js
200 OK 84 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/03978e09032efb49f1114ceef72ec864.static.js
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type ASCII text, with very long lines (65299)
Hash f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/03978e09032efb49f1114ceef72ec864.static.js HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 13:22:45 GMT
etag: W/"1499a-60b0e14be210a-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vnW%2FF%2B9SE1zly0LnKCUG8oIqJs%2B3afqj%2Fb3r8hU%2B2IbYDY4s7UOrPHnUuKpSsCVoz%2Fe5i8lR6gPnW3ufaH21I4qWJmQ%2BC2Ffolhz0U0vf3aM1PilelIVuqnbKRmY36%2FuT%2FmNGPf%2FO2gS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8d84256c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/2fd60a3611305b14f8de29765608a778.static.css
200 OK 8.5 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/2fd60a3611305b14f8de29765608a778.static.css
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type ASCII text, with very long lines (8923), with no line terminators
Hash 52995fe85418c7ddb85ea645dd8c17dd
27a97aa47580f4cfbc6c67e046974337f95852af
d0d9c39568aab1b1374292874d96aa6e5ccc7917c49518572345852cd5277db4
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/2fd60a3611305b14f8de29765608a778.static.css HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2023 13:22:25 GMT
etag: W/"214c-60b0e13901949-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iabku8Aaa4w6SCwID40dMDkCNTfekCjBtwQm44dtSn72YdNxOhVh7fnQUEa8j1saJlrNHGod3o1FQBkntzwo9DirkXJQfSxJO9x50LzR0yFvCC1V6HHNcenjq%2Fvy7KRGH3nC8Njfutk7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8c82f56c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/favicon.ico
404 Not Found 315 B URL GET HTTP/3 www.page-nnwggyeb.site/favicon.ico
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /favicon.ico HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 03:44:59 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fpe1SiiupfE1sTlTJYe7bO8QOFGT%2B08KXdGS2GhvEHv3pp4E3jVIlLPBM%2FA4xt5Ri3pAa7MM%2BJNSdwCKQn14WX2r5Uw0LqAWXpvaJ3eFeVN5ttTYw2%2BZvwybf%2BL4F%2FQKZIgw6IPJ%2FaC6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dd2cb9056c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/fonts/fontawesome-webfont.woff2?v=4.5.0
404 Not Found 315 B URL GET HTTP/3 www.page-nnwggyeb.site/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/0fc9255b87fb4ad62cb4f2689a69fb49.static.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=id7y6qNjWl6dQgfLoU%2FaR7i7%2FaIVQJcbLnl9B8X15fM8pC%2FoIAcJ0hQyE4AXTIqaPTp9nam3tGd9nT4Hjdz7h%2BVsrPLCJ%2FRDeLVt69Fc5Fc%2BWYWzik0BPDbaYZ%2FgPdan6d1%2BZaJ9tvL6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dce1a1e56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/fonts/fontawesome-webfont.woff?v=4.5.0
404 Not Found 315 B URL GET HTTP/3 www.page-nnwggyeb.site/fonts/fontawesome-webfont.woff?v=4.5.0
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /fonts/fontawesome-webfont.woff?v=4.5.0 HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/0fc9255b87fb4ad62cb4f2689a69fb49.static.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 03:44:59 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KdVQG41qc8FO5tqaG6haA0Xwh594Wb1sJhgT29lzQAGIVGviZj7aQ9aHjAmczDvY9QmSWXnD%2BbXLgHp%2F9U6k7nFdbBNNEsZKNSImJ%2FTUTA8MWTBNVfiLzGl1m09JVgKqoYIqRsncnXq%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dd03acc56c6-OSL
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/cedeb70cb80eb88a09a1af6e874093b1.static.css
200 OK 199 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/cedeb70cb80eb88a09a1af6e874093b1.static.css
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type ASCII text, with very long lines (629)
Size 199 kB (199371 bytes)
Hash fcdf75883425d0a223b82196bc9b8f08
3f0315aeb20bcf09b13ecde8c13690e9e03ea6a7
fa61f318f1857df9a04afe026589336dfaa05bcbe2c5d473a82a46610a384eb8
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/cedeb70cb80eb88a09a1af6e874093b1.static.css HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: text/css
last-modified: Sun, 26 Nov 2023 13:22:40 GMT
etag: W/"30acb-60b0e1474f0e8-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G8Al47wtQ7bhlLIawXK6I%2FZv1giENx9ojNzzCzuyEAkLYH%2BP83DmdTbjq7W5sZVRL80hlVmd04UMgv5EBvjZJin4B79pc%2BSs%2BRUDRttRdSuqbuiwb9fVPRnIBkscOSWh9rmNKzPhddai"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8b82956c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/20c8c7fe6f006fc0d2c7ce7467772161.static.js
200 OK 11 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/20c8c7fe6f006fc0d2c7ce7467772161.static.js
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type HTML document, ASCII text, with very long lines (11084), with no line terminators
Hash 65f1d21d5fcc9d21da758adababd0c3c
e0661d07d64c00008bc9d013d16eec0a0f156dc7
d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/20c8c7fe6f006fc0d2c7ce7467772161.static.js HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 13:22:44 GMT
etag: W/"2b4c-60b0e14af4bcf-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jVypcHL0fDfzB%2B6kT7qxXWpPUJc2Z4IccfyUcrOwazGnO0LV5LeMw%2FnQ%2B%2BE7bQ5rwpcrmeX0VGSkLUwOB9Wzt9l45XXeI%2FDLdxNq3ExywYXEgAHkoGXBU%2BO83UbB4eqI1Hw7gKGBvvou"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8d84156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/41360fddc51bc467a4625dd0996bd68d.static.js
200 OK 237 B URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/41360fddc51bc467a4625dd0996bd68d.static.js
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type ASCII text, with no line terminators
Hash 3097a7d20659d4edb64c98614df599f7
71b24f5bfb2c9ef9a57e6eaa6368732d766b1e84
425e589c851d2ae43e521a77a351ce690dd1dc255e6f1577372a6ccc699c35a2
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/41360fddc51bc467a4625dd0996bd68d.static.js HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 13:22:41 GMT
etag: W/"ed-60b0e1484feab-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jCvJzNl2N4CJag0KI%2Bue84zyemmWuNa6EjW%2FtMWaolevXz0h9dWI20ndqzT7G4LGRuYHjI%2B6g4tRlIryBZGm7y41q2P9qkr6F%2BWQrlyUz0iigKUl5ixDWEi4bHIsp73Zcuf4DIk4E92T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8d84356c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/01e5b1c29824bd5beb5209d713a6075a.static.js
200 OK 360 B URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/01e5b1c29824bd5beb5209d713a6075a.static.js
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type ASCII text, with very long lines (368), with no line terminators
Hash 9c2b57a68a0766a03ba119ce1b472af9
b9b42ea2c4bb071d7bf893df1b82f0fdc1c8fbca
418e20285e134744f60a5342f16d4e8a7162a738bd25d76f894877f416cef0a8
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/01e5b1c29824bd5beb5209d713a6075a.static.js HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 13:22:30 GMT
etag: W/"168-60b0e13cef88c-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FmBe2reMo%2BjsYZuy0eo%2FbrC4gNYs6hYMqFl4QgWK5c30kgkVYz0vT5fqEv0biZqz4SwVAs%2FKWiiXM6DW9zHtWu%2FAcOau3R3esNv4nDTKZVyd7lljpcOicpJQpucKtkcafUEOuT7ghwRD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8d84556c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/lO4753/0ba4617d42ccfd400ebdd5211823c76a.static.js
200 OK 1.5 kB URL GET HTTP/3 www.page-nnwggyeb.site/lO4753/0ba4617d42ccfd400ebdd5211823c76a.static.js
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type ASCII text, with very long lines (1639), with no line terminators
Hash 20b1fb87b0373c552fdb6718d840da96
247e31dc316b761c469d2ee672856086d3578d11
467482f1d7bb82eb0c1ea11c955d6830c1c0aba731aa8efafcd7af88db87f427
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /lO4753/0ba4617d42ccfd400ebdd5211823c76a.static.js HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 04 Dec 2023 03:44:58 GMT
content-type: application/javascript
last-modified: Sun, 26 Nov 2023 13:22:32 GMT
etag: W/"5ff-60b0e13f9c2b3-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KSHfWmqB5NjY4El%2F4pvJXdUQW0%2FcNsKtUGXiEQuiG%2B8E9u%2B9HoTGabrJLsTcJEkmSLS7%2BzlcxCspVjhw8TbRoI2s4b2J2WTnS4TKQvIenu1cHSR%2BGkMzs0l5ZQ33fcjEonsJ0oXS23WU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83010dc8e84656c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.page-nnwggyeb.site/fonts/fontawesome-webfont.ttf?v=4.5.0
404 Not Found 315 B URL GET HTTP/3 www.page-nnwggyeb.site/fonts/fontawesome-webfont.ttf?v=4.5.0
IP
Requested by https://www.page-nnwggyeb.site/lO4753/index.php?ip={ip}&device_brand={brand}&device_model={model}&browser_name={browser}&os_name={os}&os_version={osversion}&lang={language}&domain={trackingdomain}&clickid={clickid}&country={country}
Certificate IssuerGoogle Trust Services LLC
Subjectpage-nnwggyeb.site
Fingerprint12:31:BB:BC:30:EA:B2:8A:EF:FC:49:89:80:53:BB:4F:2D:EE:A6:FE
ValiditySun, 03 Dec 2023 19:35:24 GMT - Sat, 02 Mar 2024 19:35:23 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (326), with no line terminators
Hash 97ef40509b73c101d6815511c3adf98d
a4242322497ea630ea72e26ba297a95a2bbe5ccd
322c1f60d9d454c801f7cff3173ef16b61cf9963a64e09a4d9e21d36218b56be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /fonts/fontawesome-webfont.ttf?v=4.5.0 HTTP/1.1
Host: www.page-nnwggyeb.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.page-nnwggyeb.site/lO4753/0fc9255b87fb4ad62cb4f2689a69fb49.static.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 04 Dec 2023 03:44:59 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4zZesr1GTbHAPl%2BgkOZ8fzkbfdHmZb%2F%2FNgn6FuXdNhWb0CRLyxY4kQE5MaRIfpWbNbiOnB4AFc1oLQFjBeyuLIuCAHmq3qrA%2FanDXjhgSH5ZIxhVgxVIjtty%2BzjF3QTipNlfASXQtBOo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83010dd2cb9156c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1
142.250.74.106
0.0.0.0