| www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk | 142.250.74.131 | 302 Found | 315 B |
URL www.google.im/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk IP142.250.74.131:0
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash2f0b69c6d63e7a3c4a9dda8bf936a411 0bbda443372a0f99f7f5c7a1e9931b651d8cdd2a 21bfe9692f64a8658132d4a999cb0b5d226fe8532f0e1feadefd9df0cfbd69a1
GET /url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk HTTP/1.1
Host: www.google.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://www.google.im/amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk
cache-control: private
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-6cOz5jF2VXSVM38HKWDN9A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Thu, 31 Oct 2024 02:18:21 GMT
server: gws
content-length: 315
x-xss-protection: 0
set-cookie: __Secure-ENID=23.SE=SzRbvQEKW8MOEv_Ogh8fZYWPdN5F-uZzXuMVDvm2ra_tsAGYmQcurB09j-W5TRiBTo_M9MHhBofnOf8YXIlv2mTfVPDcexNkEkHd4tpjEtUwsBgtllyjPKAxhjw6tkCj9L-dV-M_98hVOvTSut1YqNytfOn9jPJhmYI6bl5CF1nT0wXpNmRWiaKhClt_bOG2GgkB697kGImA-uJsTLTbKSVrihQzFJFmnEBD2kw; expires=Sun, 30-Nov-2025 18:36:39 GMT; path=/; domain=.google.im; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.im/amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk | 142.250.74.131 | 302 Found | 285 B |
URL www.google.im/amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk IP142.250.74.131:0
File typeHTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators Hash851e5aa9e215095f7141b56bc36f8286 38c3a0b80d32c6086a14a79a69fd60631520cda5 607752f97798ecc201e12150ab8ad2ff89601e471ac82410b2799ff768a1049b
GET /amp/s/safrareal.%E2%80%8Bco%C2%ADm.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk HTTP/1.1
Host: www.google.im
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Secure-ENID=23.SE=SzRbvQEKW8MOEv_Ogh8fZYWPdN5F-uZzXuMVDvm2ra_tsAGYmQcurB09j-W5TRiBTo_M9MHhBofnOf8YXIlv2mTfVPDcexNkEkHd4tpjEtUwsBgtllyjPKAxhjw6tkCj9L-dV-M_98hVOvTSut1YqNytfOn9jPJhmYI6bl5CF1nT0wXpNmRWiaKhClt_bOG2GgkB697kGImA-uJsTLTbKSVrihQzFJFmnEBD2kw
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
location: https://safrareal.com.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk
cache-control: private
x-robots-tag: noindex
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-qwelxQei39UA4TobBNWvsw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Thu, 31 Oct 2024 02:18:21 GMT
server: gws
content-length: 285
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| safrareal.com.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk | 191.252.128.160 | 200 OK | 0 B |
URL safrareal.com.br/yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk IP191.252.128.160:0 ASN#27715 Locaweb Servicos de Internet SA
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /yaya/MxhGCzwebPkb15xLTsRfKMwF/WW92aWUuUHJpYWRpQGVtaXRzLmlk HTTP/1.1
Host: safrareal.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 31 Oct 2024 02:18:23 GMT
Server: Apache
refresh: 0;url=https://microsft-0utlook-microsft.vilvosports.com/?no=Yovie.Priadi@emits.id
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| microsft-0utlook-microsft.vilvosports.com/?no=Yovie.Priadi@emits.id | 142.93.160.91 | 302 Found | 0 B |
URL User Request GET HTTP/2microsft-0utlook-microsft.vilvosports.com/?no=Yovie.Priadi@emits.id IP142.93.160.91:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectvilvosports.com FingerprintE5:36:CC:5B:8C:7D:8F:F8:0B:3A:4F:21:2E:D1:A8:FE:46:C8:4B:51 ValidityTue, 29 Oct 2024 10:54:16 GMT - Mon, 27 Jan 2025 10:54:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?no=Yovie.Priadi@emits.id HTTP/1.1
Host: microsft-0utlook-microsft.vilvosports.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 31 Oct 2024 02:18:24 GMT
content-type: text/html; charset=utf-8
location: https://en.wik77ipedia.org/
referrer-policy: no-referrer
X-Firefox-Spdy: h2
|
|
| | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: en.wik77ipedia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|