GET geejecawail.com/_next/static/chunks/dee32d29b1dd43b0.4f431a966e9bf4dc.js
104.21.25.97200 OK 2.0 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/dee32d29b1dd43b0.4f431a966e9bf4dc.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (5451), with no line terminators
Hash cf48a964f093b90754f7d045d3bec416
88dd2a0d29458f74a5b497d8bb0120831a8db4e1
075f809bb4bfffcf7964d7cf1e57e6ed4555fd506dad378c8d2c9f4790ec4461
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/dee32d29b1dd43b0.4f431a966e9bf4dc.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-154b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jK%2BHC7bF6eoV2UCrBO5pigXucPkG6ZS3PaCXcHoz1b%2F1zrTZRxFxUch2GwcM7j5uzlxnogM%2Foc%2F3PxX9NWQqAJj5li5cZvVbjuFrWBWUx5duXXrJRARJYxYN%2F8nHhTA49RU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df960afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2879&min_rtt=938&rtt_var=2238&sent=145&recv=39&lost=0&retrans=0&sent_bytes=126969&recv_bytes=6329&delivery_rate=3123136&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=487&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/css/0bc0cde260d08b97.css
104.21.25.97200 OK 7.3 kB URL GET HTTP/3 geejecawail.com/_next/static/css/0bc0cde260d08b97.css
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type ASCII text, with very long lines (1843), with no line terminators
Hash 64b2b4fa42c7d558d735e2cd28ecf88a
03d6da6e55b1201b51689590520da495a9233d67
2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: text/css
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-733"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYys9Tndsc4EZXG0KbyY%2FWBD%2BpwYU3bQD9MxSf%2F25nzmXCkZB7kF1SHm5u2Crvjp1utyEhjebMN6UywgMzjBnHdWhm6qXJZcyx6dHu%2BO5HjA79wYgnXoXbFO3VHK8b%2BF6PY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf7c0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5127&min_rtt=1819&rtt_var=3044&sent=37&recv=30&lost=0&retrans=0&sent_bytes=8376&recv_bytes=5923&delivery_rate=323678&cwnd=12000&unsent_bytes=0&cid=43424b6faedde54d&ts=450&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-27.677fcf17.webp
104.21.25.97200 OK 4.6 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-27.677fcf17.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 6ab5c0a26603fc83ea594157b9f77999
ddfdc7b80cadcbcba54b912c57f58ffd32df7612
a43701df7a44b77a1cde1fad8beb6c590d90f40fe65e900bba61db671ae5ad0d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-27.677fcf17.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 4610
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-1202"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9wpQAlShzq87uvauWGmvjkwd6cJOTDYqi3Y7%2Bx7b0bqelf6twnAINXlqO%2BU5mZS%2FauOiBDngTvxUCuDpE44ncPHjXBtwg%2Fpa3PxPdrdu8eIBguETWhtUcApcQ7Gq2xuJRIc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dda5c0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1582&min_rtt=938&rtt_var=232&sent=270&recv=92&lost=0&retrans=0&sent_bytes=233188&recv_bytes=16851&delivery_rate=174154&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1058&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/e349ffdbb65d6c93-660e5b7e2e3b7996.js
104.21.25.97200 OK 8.8 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/e349ffdbb65d6c93-660e5b7e2e3b7996.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (10752), with no line terminators
Hash 35fee35b460cf851bdf3beecb8b35f5a
f6af853cbdfb476165846933aada6cc3b1419022
8670480720bc1d26b090cc475660907e07d42ea2dd14cbb860ca04add28ce9cc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/e349ffdbb65d6c93-660e5b7e2e3b7996.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-2a00"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXvwKsiadKWJEmznyCPeDH0e0aLF4GlmkDwPEPV%2F2QbGPWt7oeZJiE41%2B3IxwYKyF881eP5aP3hE%2B%2F9RlmAM2aQG0mXCUp7tWH5mqjdknmpLs4UQYWx3H6qlbwofonQVlrA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419efa30afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3145&min_rtt=938&rtt_var=2274&sent=119&recv=38&lost=0&retrans=0&sent_bytes=97536&recv_bytes=6283&delivery_rate=3278880&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=472&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/ad90c1788e1488fb-9a1573d0724cb48a.js
104.21.25.97200 OK 21 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/ad90c1788e1488fb-9a1573d0724cb48a.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (57617), with no line terminators
Hash 90be771fc2048b7226c1bee8dcc99653
fbe2e1555ee253b55263139236ad4a122d43daf2
a20d92ca1aeb41f94423ce0726138ed57455647c91136e4bfe776342971164f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/ad90c1788e1488fb-9a1573d0724cb48a.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-e111"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nIy3AoliMHggwUeuIagf6Hb1B78cCJdH2srZbfReZPAlPFBNxSOPyOlBuHVDANh%2BG%2Fn3m70tyjkNke0l%2Bs9EJjB16NO4GxYddXleh49O9dusLhPpGuYjRWfWJ0HAUPfSQyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419efa80afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2458&min_rtt=938&rtt_var=1571&sent=176&recv=42&lost=0&retrans=0&sent_bytes=162840&recv_bytes=6467&delivery_rate=12723615&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=503&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/3cacc58ea516fe6f.4d666b3ce7dcd66f.js
104.21.25.97200 OK 19 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/3cacc58ea516fe6f.4d666b3ce7dcd66f.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (30035), with no line terminators
Hash 0e650c6fbdbaea01c64c59f71ecbe089
75d3aef97713ed867eb35e87cb91d4a6ad74ac3b
08800a958ef86e09d5001801f2f8645ae0a14002a8610f38a883b747e73cb544
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/3cacc58ea516fe6f.4d666b3ce7dcd66f.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-7553"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zaUmiS2VtV%2FpUrj3J9vBN1MaDmSb7TNrUVx7yfRq7j0wRqpcLkOuWfZve7NSlJyrbZ3t%2BNwzd96aYdT7wpusKYa9Nb75eJfUwHmQ3BX94JvUcsgr8hoKmLfn%2FeftMMDWPHQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf840afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5127&min_rtt=1819&rtt_var=3044&sent=45&recv=30&lost=0&retrans=0&sent_bytes=16706&recv_bytes=5923&delivery_rate=323678&cwnd=12000&unsent_bytes=0&cid=43424b6faedde54d&ts=451&x=1", cfExtPri, cfHdrFlush;dur=2
GET geejecawail.com/_next/static/chunks/aef990f9cf0a690f.f7786e5ca0ed51c4.js
104.21.25.97200 OK 12 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/aef990f9cf0a690f.f7786e5ca0ed51c4.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (15034), with no line terminators
Hash 79a7235e7cd9bf6cae0505446358af45
5f2c2a96851667e41e8bfeb3e6baf1e8a83735b9
b34eae4c4c7dfda7acb5c817f2867117069fca2924b88d6041295cf7790ce3ca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/aef990f9cf0a690f.f7786e5ca0ed51c4.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-3aba"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KmGhwD66i3fJuDbmAxfIW73VbziAO2hV4pjk4HD9%2BinNr2ouC%2BI3SfAMjT5MzOmHN%2FDzPMQ%2FGu3zp%2B7fsj%2FX6ag5V8hr%2BagDehlwcRdbt4JJEjmKXOKVSFYUewn3nYeQzxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf900afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5127&min_rtt=1819&rtt_var=3044&sent=45&recv=30&lost=0&retrans=0&sent_bytes=16706&recv_bytes=5923&delivery_rate=323678&cwnd=12000&unsent_bytes=0&cid=43424b6faedde54d&ts=452&x=1", cfExtPri, cfHdrFlush;dur=1
GET geejecawail.com/_next/static/media/person-21.fbd3da77.webp
104.21.25.97200 OK 5.6 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-21.fbd3da77.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash cb6df9f04e9fef79e955f6a2768ad17d
424ee104b694ed5004eb41199821e6dab222fb00
eea8d1ee9b4171fee1cf26ba7a999feeec8f66b50fc53d4148d851530f8638cb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-21.fbd3da77.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 5580
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-15cc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2Bn2KXLuVchG7FMtZAZtvkQFq7iY7C1YxIYX5rSVD3ScO2aDSaGQf5%2Ff8vZloOI0qlhveXM3IktFViXNYKBFbdhCWs8Sm5QPu8VG9n022wWzAUqEnk0vq5qU4LWkab3JrkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca530afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1499&min_rtt=938&rtt_var=325&sent=296&recv=96&lost=0&retrans=0&sent_bytes=262477&recv_bytes=17035&delivery_rate=2749464&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1090&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/c1810e3b023ec1d6.af02ec9ef25aabe7.js
104.21.25.97200 OK 6.1 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/c1810e3b023ec1d6.af02ec9ef25aabe7.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (477), with no line terminators
Hash fe19440e8daadc3ce753ebec601934d7
0d7ccb6bf409835ee6877112347eecb8bc5d91d8
057d2600bdd1c774b0378be65a35ddf439663b172436472c0b29c85e6410ea57
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/c1810e3b023ec1d6.af02ec9ef25aabe7.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1dd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FB5YHJ%2FwN4ffIGsc11A8FgI%2BjbkROpW8v0gEmhmtiCQpL1XT1dtDux2%2FXZLUf%2FiP48cqcD%2BTrT0lwXIlOngGFmRigTLlwJ3wCG%2FCJ3JNCv8P0neY0MLoJqEzIv4SsBHi0h8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c696a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1674&min_rtt=938&rtt_var=605&sent=235&recv=74&lost=0&retrans=0&sent_bytes=207350&recv_bytes=13734&delivery_rate=19595&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=836&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-28.8da9d8b9.webp
104.21.25.97200 OK 5.2 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-28.8da9d8b9.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 49100933e0ef29eb56638ae15f65185e
c56b5b168a20cd4ff2a7988e17ed0271edf6e9c6
1eaca904dc3a9643f8a187789922863bfbdd51be512b2add62492a90d51cce84
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-28.8da9d8b9.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 5194
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-144a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n9cJqIPW6l2ppohUMTHqDZ9spCClShWe%2F3XWgQdlnizdLYAAlQNVrXqtqCMqXiUWrnD7ZtWrAwQmDlDQP6uk9eVshah28zaZYumoEeVkH%2B27CRV2wwmCiL7F7QwoBGxp3c0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dda600afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1494&min_rtt=938&rtt_var=253&sent=308&recv=97&lost=0&retrans=0&sent_bytes=275546&recv_bytes=17081&delivery_rate=2565614&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1098&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/default_gift.c6ab5830.webp
104.21.25.97200 OK 42 kB URL GET HTTP/3 geejecawail.com/_next/static/media/default_gift.c6ab5830.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 471d3bfb3c438ff041e7453466319791
59c81b8f94a304345e56ddd6e2482fa89b1e7ffb
dbf4899f847e1f75ae108d94403a6741e17833bb4e886ee61a0eb736b2f54f93
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/default_gift.c6ab5830.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 42058
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-a44a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHHbCuQwhOWnEZsVDjg9eFx2EtdD4Zl5w%2BgMRNXH8vt8PvhIyqlXzpl3nUqzejyfNwu7NF8w0ISdzeNRb3czwBn871KcAOptnIasUdYssIwfGBYRWezz4zUMvx2dx521ZCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca4b0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1702&min_rtt=938&rtt_var=523&sent=314&recv=99&lost=0&retrans=0&sent_bytes=281600&recv_bytes=17173&delivery_rate=1740114&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1114&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/favicon.ico
104.21.25.97204 No Content 0 B URL GET HTTP/3 geejecawail.com/favicon.ico
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Tue, 17 Dec 2024 07:40:37 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=thjxGPJFkmKOLARnyDp4%2BJzwT5mf29HpIVWUoWKaCPODBnu9TBV4%2F8mvmmFpicz2u2fhiuLSkKvwypUy69zL8NEkLQL%2BI3nu4kIJAZbvPt2vdRO1eXmagnqmTtucfLX9ZwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f35441e8acf0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1732&min_rtt=938&rtt_var=452&sent=352&recv=101&lost=0&retrans=0&sent_bytes=325464&recv_bytes=17472&delivery_rate=3824318&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1205&x=1", cfExtPri, cfHdrFlush;dur=0
POST thookraughoa.com/sync-do
104.18.3.4200 OK 0 B IP 104.18.3.4:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectthookraughoa.com
Fingerprint66:3A:E7:1F:29:E3:03:6E:72:EF:D7:49:EC:4A:53:36:DC:9A:8D:05
ValidityWed, 04 Dec 2024 19:38:01 GMT - Tue, 04 Mar 2025 16:37:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /sync-do HTTP/1.1
Host: thookraughoa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://geejecawail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-length: 0
access-control-allow-origin: https://geejecawail.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8f3544202f8e712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
POST datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=de5cef40-4da8-4d98-ab5b-be799b7b0072
37.48.68.71200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=de5cef40-4da8-4d98-ab5b-be799b7b0072
IP 37.48.68.71:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
FingerprintED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72
ValidityWed, 11 Dec 2024 00:00:00 GMT - Tue, 23 Dec 2025 23:59:59 GMT
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=de5cef40-4da8-4d98-ab5b-be799b7b0072 HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1490
Origin: https://geejecawail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 17 Dec 2024 07:40:37 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://geejecawail.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
POST thookraughoa.com/sync-do
104.18.3.4200 OK 2.6 kB IP 104.18.3.4:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectthookraughoa.com
Fingerprint66:3A:E7:1F:29:E3:03:6E:72:EF:D7:49:EC:4A:53:36:DC:9A:8D:05
ValidityWed, 04 Dec 2024 19:38:01 GMT - Tue, 04 Mar 2025 16:37:53 GMT
Hash 89fe6f98bce1c5145829cb2295907650
876ac286b5063e89d74eade55b53e50ba9cb6ac7
cdd20646c6e8aed0877e5d2b93c00d5afff7db531cbb186152563b935f92a4f9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /sync-do HTTP/1.1
Host: thookraughoa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 239
Origin: https://geejecawail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-trace-id: 8431ade5c4a582e9f97c99347a870b08
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://geejecawail.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8f3544206fc8712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET geejecawail.com/_next/static/media/person-20.4e6ce91d.webp
104.21.25.97200 OK 5.8 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-20.4e6ce91d.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 3272c8a5aacfb4b789acd150bac20f17
920f06e9d94b1917cccedb0d085e14465e0e64a8
ce245c2769da994e8b0ab19cfdef9004fcde98073950a75f67ec95daa3d65cb5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-20.4e6ce91d.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 5768
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-1688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cSlOIbfqQ%2BcMh98FOI4cURlgoI04ZPWVNAZyDlWM6ksyrrjywhT5Z6i%2FVP8M0MFmVc8cui3KwkpSqGDaktWKTnI7J860ARm1PiYAlZYEgJ3HdyuJiEL9aGUvE%2F3Uorih340%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca570afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1494&min_rtt=938&rtt_var=253&sent=302&recv=97&lost=0&retrans=0&sent_bytes=268918&recv_bytes=17081&delivery_rate=2565614&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1093&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/d6be0b89fa7aeaa3.cf6cc9096c69f504.js
104.21.25.97200 OK 6.3 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/d6be0b89fa7aeaa3.cf6cc9096c69f504.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (6589), with no line terminators
Hash 4f32d468a3ed169d052e31748189f7cf
8bb0dcf67b168bd1cb3fff08c899b5b8dc3862d8
c6f868ea0380e737301ad81dc24379c217bf42314546c7d14d316b8c42ae4c07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/d6be0b89fa7aeaa3.cf6cc9096c69f504.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-18a3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMjZMd2qemj%2FjDwVFSo97JYcLbil4nx8Q4d9fUdy%2FygdCiozfpCwiWj%2Bm06GvBXVzqopzKzvNq3MMMgM%2BYz80bCFpIroSbOH8xim5bpuoSjJZRioNeRfytuiJQIoxMsUex8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c09360afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1728&min_rtt=938&rtt_var=894&sent=217&recv=56&lost=0&retrans=0&sent_bytes=203353&recv_bytes=9385&delivery_rate=86294&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=775&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/0ef29a8e66f32745.70d89a54030c92b6.js
104.21.25.97200 OK 3.5 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/0ef29a8e66f32745.70d89a54030c92b6.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (3627), with no line terminators
Hash 31580dda965dc5acb9404d6393e39a04
46ccf8960ba49899c768fbe77299839bd4db037b
00215a75da502d0a7257149b1642bc85282833ad67b5709241f97632b8f4b098
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/0ef29a8e66f32745.70d89a54030c92b6.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-dc4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YHD4rruaCJJN56ReHAfDQyLQ%2FZeSU%2BF75I8%2F04hqkJO4hgyrp7UyECwKlHnn9JdFV49sogvkkM336riANg3uAaf%2Bi5OE6l4is%2BKOiEQVsCZGkIN3yGgeTMcjqA2QR%2Bw3mjo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441ba8f80afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1822&min_rtt=938&rtt_var=939&sent=214&recv=54&lost=0&retrans=0&sent_bytes=201679&recv_bytes=8687&delivery_rate=1404842&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=752&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-23.fdbf4687.webp
104.21.25.97200 OK 4.6 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-23.fdbf4687.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 949d8c7c88e7287bd71a38f678773893
744341bafce863a7616253fc4d34a4c3b6940a06
0976a35077173b7f96a4cc8189c8455fa212de31853eebd7eac427fe7de60692
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-23.fdbf4687.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 4638
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-121e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=trjzMFe5gX64Np47g1qTbT2DJqrIRDJj2Us5jA%2BdbedpHRS8FwQYCxmplB66nsxBAzeByRebQl1g43fuq8%2BMGP0k7Ak1Zi0kJWthf7mHuCWYTKLvNQ7qdNuMvZ0BEP3q5wo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca5b0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1582&min_rtt=938&rtt_var=232&sent=280&recv=92&lost=0&retrans=0&sent_bytes=244196&recv_bytes=16851&delivery_rate=174154&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1060&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/6cae3b738c098d4c.fc2f077dd1f1e16d.js
104.21.25.97200 OK 453 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/6cae3b738c098d4c.fc2f077dd1f1e16d.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (459), with no line terminators
Hash 9e42aa3bd3aa4ca748b84dc7393c4cff
5fd3f607a7dea98bad532b8c3613311392676425
b42853d331a066f4e9971ce3c0259ca839ab3478ec01204d71e3fe61df7b07cf
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/6cae3b738c098d4c.fc2f077dd1f1e16d.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fX%2FiyyU2BMVFMZJ6eszaHq8RpGyWfKjb5zK8KFt4DvrzdpyTzuu%2BP9R3nrhYEkg%2FueO%2BhPFNyn7PVo%2Ftpg%2BH%2BaNsKb%2BzLHrHZn%2Brmy51AG6AYsdeT194bG1sO31v1%2B9iOQ8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441ca9940afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1621&min_rtt=938&rtt_var=343&sent=249&recv=79&lost=0&retrans=0&sent_bytes=222304&recv_bytes=13963&delivery_rate=296326&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=906&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-22.6e8194e1.webp
104.21.25.97200 OK 6.0 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-22.6e8194e1.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 8c8815b7780d75b031e9943eef9bee89
b0e4f025139894469d6e04b16ebb88dd6e76cb97
1e64b82bbe91ec7c24491934be7e03be065fcae0d1a2edcdb51e3d246b449412
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-22.6e8194e1.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 5996
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-176c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7SZqN0H0T4uR5S0SDVSOsJ9EhkPb6n3AIqvul68uu0gK%2FreAl6cf%2BPJJImMfIY66SQE7XaahDkLHdwr7kVAW1ecVTqDEUU%2BwdoAbgDD3YF6yAptvCyCPriQ5UgHKq%2F3%2FMkY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca430afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1624&min_rtt=938&rtt_var=198&sent=285&recv=94&lost=0&retrans=0&sent_bytes=249664&recv_bytes=16943&delivery_rate=2658394&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1081&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/aed7f9ba96945e34.86d62555bc2f6de5.js
104.21.25.97200 OK 14 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/aed7f9ba96945e34.86d62555bc2f6de5.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (14155), with no line terminators
Hash 7e085d6f91c3d5ca1f334b664f0c95d0
ce4bbc9f864d8a195bbd8565f86ae8a76ac80142
0b607adf81697cd137b5dcdf2604d0d4506329757a8f56d9524168cb00e254c1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/aed7f9ba96945e34.86d62555bc2f6de5.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-374b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XyAkLH%2BCNHHraAM%2B6vqDba3BKpffurjm6OQhqMMYnn36tDwpskZ%2FZ%2BP5iLAxFTnO2gahnyrf%2F8VTJQKBCpjtuds1lWMVpJ0zOUa9Lg1h2Q1s85GOLzQGVYwCJ%2Bj7d%2B6gaCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf8a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5127&min_rtt=1819&rtt_var=3044&sent=37&recv=30&lost=0&retrans=0&sent_bytes=8376&recv_bytes=5923&delivery_rate=323678&cwnd=12000&unsent_bytes=0&cid=43424b6faedde54d&ts=450&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/a3c92ad63d3b127a.e596195d53d7d758.js
104.21.25.97200 OK 461 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/a3c92ad63d3b127a.e596195d53d7d758.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (467), with no line terminators
Hash 7367e3b678ad00d453fbb2dd12e56c97
037bf0e02b8860008d3737745753357b035a2e73
2fba23a8e7cbe6881bc7cb21edfb6abaa0c7a2ad23c8199db370eda59f676cc7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/a3c92ad63d3b127a.e596195d53d7d758.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1cd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cs%2FUOLYt%2BYD5PTJXEqkc4SpHPd3HSAjIcuzbj3fKPmyIYM8GrN1IGaKcWQwyXsDRA4qY8jsNkL2wseq9WZSM03lIA30ZkPtbVQlmqB%2Fbxek9JbrqIgDbmsU6FbPLpLgZ1Fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c897e0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1638&min_rtt=938&rtt_var=525&sent=240&recv=75&lost=0&retrans=0&sent_bytes=212652&recv_bytes=13779&delivery_rate=908861&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=852&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-26.e697de4e.webp
104.21.25.97200 OK 5.1 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-26.e697de4e.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash e540f8f1b83f4a3a6083df8c6f3a3c07
124be3c4293b8859734b76ab36b6f2a46ca3ffd6
1d73157fa81e0ac18a8ce48d3f4acba2133ab53f0c2a2cb79d7be7bc63cad107
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-26.e697de4e.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 5118
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-13fe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NcjrB3Z0Tn9kZcieKlxJX3mCbUgAgVrexUTq4J5ws9iSqMukEnXzhTQEY9DmthQA1sSZNOaBNnSNVFHRZlLfHjbSeyZnXMxVCQitSTde0BEZK5tF%2FS7ZjBRKZV%2FQq5jHc9U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca4d0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1551&min_rtt=938&rtt_var=294&sent=291&recv=95&lost=0&retrans=0&sent_bytes=256525&recv_bytes=16989&delivery_rate=3706184&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1086&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-24.d91065b1.webp
104.21.25.97200 OK 4.7 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-24.d91065b1.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 4e18c20b6602607fda77e3b15350354c
60e9480e078d6f54dfbcd78758a6ba0a7e8e9a59
caa3c32f29ffc5da01cb59d22d5308b82dc8d1d8bc78ca45a7810ac43979222b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-24.d91065b1.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 4730
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-127a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7nfOpJA7DCe8%2BcwGJoar1JlqyOy5w4N4bbcIPBP0rUTPF72kcZyJC1X9mqxqUZ2Y%2BvDRGZX7vzhdr66B5A%2BdSc3Zew%2BtvVdy3Tk6UkKif6cRHQhg9LslvczARby2rXNIKTE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dda5e0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1582&min_rtt=938&rtt_var=232&sent=275&recv=92&lost=0&retrans=0&sent_bytes=238631&recv_bytes=16851&delivery_rate=174154&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1059&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/cce078a36fb49fc2.a4de873c342c784d.js
104.21.25.97200 OK 3.2 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/cce078a36fb49fc2.a4de873c342c784d.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (3246), with no line terminators
Hash 683176202fdbeb8424bd04d9509bbd0f
7f239bd98d1eae1ea63ff49336037e80a6e8b542
f1744878b7775462dfc1aafe3befbc2ac2221143816dec52d453d5910dd938f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/cce078a36fb49fc2.a4de873c342c784d.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-c68"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FdMm%2FNYLcdzVmLtd%2BpbKFRTb1VY1vDQ0BDx%2FJ0S0RlVCB7drhqhvUDijzyvjZSbzdKzcrA4xnPJjtb%2FoRwQxm39AoXF8GdjzbEuns7tBfxW%2B9ucotxX5WXMIJ9QhujMWN2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441b78ce0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2010&min_rtt=938&rtt_var=1088&sent=209&recv=51&lost=0&retrans=0&sent_bytes=197027&recv_bytes=8342&delivery_rate=1824952&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=715&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/dbb80ba394719d25.0157f5525bb5ad80.js
104.21.25.97200 OK 16 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/dbb80ba394719d25.0157f5525bb5ad80.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (15494), with no line terminators
Hash 246c62a01ca76c5e64b7879c01635219
faa25c8618c4adc07d9e2619aa386782d21e2c7a
e0e4a9f620af9b0283ad84377bfedc59ec8091dbed06d8f32f37a59d0cb30721
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/dbb80ba394719d25.0157f5525bb5ad80.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-3c86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iaARqxPYX1twwbn7fj20xADVsW2ndKpvdIRA2MHa%2BrXbTUl8a%2BBFr7QML0qsVXZzOPkYptjA9fd%2Bl%2BzcEALfdqswTQr8XikNsA7neV3dydAkc2%2FwP22O8a9Rw%2FajPTNH%2FQE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441b78cf0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2317&min_rtt=938&rtt_var=1459&sent=194&recv=48&lost=0&retrans=0&sent_bytes=180376&recv_bytes=8205&delivery_rate=8153613&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=685&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/8d3443188ef1fee1.437b26541c6a284a.js
104.21.25.97200 OK 7.1 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/8d3443188ef1fee1.437b26541c6a284a.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (7172), with no line terminators
Hash b3299e4ff73e6952f5458ca24a2811ca
9aebbbb56449352765a939d6fd0bb4fdff2c553f
c6f41811bbb542b89c100c4a08a2a6aade36f99380cc45218ff6387a539e2c34
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/8d3443188ef1fee1.437b26541c6a284a.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1ba5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNMMe%2Br3lMsF%2Fm7kkQps4cYr7%2FrHMqTd%2B1QvePyDpxXZqdbwDEASaGGrwPubiapwNqPyK1DrDo8t5qF3PNyTe8oWAl9HENLIl8L49dQ7tfBam6M16xSsu7wi8BZRu846LpM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf8f0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5127&min_rtt=1819&rtt_var=3044&sent=33&recv=30&lost=0&retrans=0&sent_bytes=4706&recv_bytes=5923&delivery_rate=323678&cwnd=12000&unsent_bytes=0&cid=43424b6faedde54d&ts=449&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/03718cfb9cbd6b68.ff39ecc6538b4dc5.js
104.21.25.97200 OK 453 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/03718cfb9cbd6b68.ff39ecc6538b4dc5.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (459), with no line terminators
Hash 58969aec84eb2fc13b438024185ac1b7
d3f6c83d4cc845fea74fc547053001d750081cdb
a34413c7abf7200af86f95cbde144643adc33d5d26be64e26424963b2993148a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/03718cfb9cbd6b68.ff39ecc6538b4dc5.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJw%2BH6KW7k4mWu5StJxpQkjD9uS5PNSxxLWYMnvBQBBvnmt4WhSTsVv06afPICEllxr7HEcIGpJkVJcGJBpLl6%2F9txg%2Fp7gFvF4AGjQsPA66mNO%2BilsviHQj9krpAT9LU50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c89830afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1588&min_rtt=938&rtt_var=371&sent=246&recv=78&lost=0&retrans=0&sent_bytes=219069&recv_bytes=13917&delivery_rate=271553&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=892&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/1c02c3e681ea9f6d-ebf163de3da5e125.js
104.21.25.97200 OK 27 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/1c02c3e681ea9f6d-ebf163de3da5e125.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (26671), with no line terminators
Hash 46319da25b781d320119bb919f754f17
f469c209ac6ece789afc95873888de04b0268eea
99199d4c9b8e1653af1ea901b3f856fe9537a6ff869abad68ca5c5f8d253eda5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/1c02c3e681ea9f6d-ebf163de3da5e125.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-682f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IAN5Jimw92iXGPzOb%2FJ7KJW6AfhWYXu39BggPPGO%2Fyq5VULPvfd3QNlRg3PEPGkGexJaKcLcXWw5qdFVfroRFQd6XhuI%2F01SpwlCNUmT1N8r3IIKJHftYXdOZP5GzNyoQ40%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df9a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3816&min_rtt=938&rtt_var=2801&sent=80&recv=34&lost=0&retrans=0&sent_bytes=54937&recv_bytes=6100&delivery_rate=12106555&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=459&x=1", cfExtPri, cfHdrFlush;dur=0
POST geejecawail.com/sync-metrics
104.21.25.97200 OK 17 B URL POST HTTP/3 geejecawail.com/sync-metrics
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 225f751e75610b98f8b287e79370be3a
9e29d2c966fb36f3d233dfb232be6eeeee8f1341
0b19f26f50f17771f6562e4cf8c7bead37ba5aeeeec7cbfaf2576a6647401569
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /sync-metrics HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 399
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: e38013a99bbdec682d87fa497cbd5e60
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QR5xPzxY4Uv0auB25PP5NK1pElsCjUKVQDOdcTc0sMeAoqynxnzHHI719cKpt6a4zvsiJhbt%2F%2FvbhTDnu1HTtNLKMa44IVxMQ2hDz%2F9vVjEr8fA8Lt8SLpYsjpxJJ2vwG%2B0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c49570afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1638&min_rtt=938&rtt_var=525&sent=237&recv=75&lost=0&retrans=0&sent_bytes=209512&recv_bytes=13779&delivery_rate=908861&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=839&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/c83e15ce68774ea8.1b339bf5eb620828.js
104.21.25.97200 OK 449 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/c83e15ce68774ea8.1b339bf5eb620828.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (455), with no line terminators
Hash 9b517d54b38723ec459acbe7dff18265
97c5b1a6e2d1989ccef271f52ac82607b2df5bf4
b1d98045a0a9650626a90261d1e44ab127b8b7e00c06cf3738b487215e15ae6f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/c83e15ce68774ea8.1b339bf5eb620828.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ewxQdkLG3tPIqI%2FptiAVunZXuEIKcCho7vJIJyExLvh5OtBOp2deuqaKFcR2gbz3ALVI1XHTfVLHkJmeDjbugDQvUBuVcxdaoF9PjksGZFn3jsoLJGp90vB3lAbmhNTDpng%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c897c0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1638&min_rtt=938&rtt_var=525&sent=239&recv=75&lost=0&retrans=0&sent_bytes=211590&recv_bytes=13779&delivery_rate=908861&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=849&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/becc177d3a8140be.eb1d5f4be1430f08.js
104.21.25.97200 OK 449 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/becc177d3a8140be.eb1d5f4be1430f08.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (455), with no line terminators
Hash b8fd9e304a3e2ff9b67dbc0479ad4a19
7f5ba35e0d6064a640a8e7174f0f48bd0dc6d299
8bf1f406514ede8dc96dbceffff575638cbeb95bb3ddf3ba02dcfe148f2a7be8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/becc177d3a8140be.eb1d5f4be1430f08.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szS1dyGg5RZmJzUUDNhi6IYOmLCk4jebDbFQbVoL%2Bki76Zw2PxqTh9Is3TfZoPscRNJtGmb38yx53%2BTEFz1IoRM6GzUNn7y%2Fa5YGZJo0uBvb6rtqB0nGJyHDg2x%2Fyuw0JH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c998a0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1588&min_rtt=938&rtt_var=371&sent=247&recv=78&lost=0&retrans=0&sent_bytes=220140&recv_bytes=13917&delivery_rate=271553&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=897&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdntechone.com/stattag.js
104.21.36.146200 OK 16 kB URL GET HTTP/3 cdntechone.com/stattag.js
IP 104.21.36.146:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectcdntechone.com
FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA
ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File type JavaScript source, ASCII text, with very long lines (15840)
Hash 80d7433dbc2b7708f2fa4e6a9943a116
350c6e2bb1cbd07de260856f918f4ececcd96894
54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3422
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4iqRiVP2blqNdkg9GRpBUz2XH76Y6NC4vYyPOYw0SHUW7KnUDt8DUvzexTbGFRojl8XtvgUfLwy6cOiKSTOcQiyelKstRylkELmJG1vYvKbuscemceFtYwbwc0KnW%2FIUAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f35441fad3db4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5055&min_rtt=3153&rtt_var=2216&sent=20&recv=10&lost=0&retrans=0&sent_bytes=12533&recv_bytes=1408&delivery_rate=141437&cwnd=12000&unsent_bytes=0&cid=0eca622fbbd75d45&ts=413&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/40ab15743262ea54.eaaf74440aba84a2.js
104.21.25.97200 OK 39 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/40ab15743262ea54.eaaf74440aba84a2.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (39130), with no line terminators
Hash a703ab68ee6001c79eb2e1f75a516bde
4da9cd4dfe7174ee962e337428fda7f853ee5644
13f6f5189d9df680be60617333534b58babd3e06b06231c58ae9c3f17ffb537e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/40ab15743262ea54.eaaf74440aba84a2.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-98da"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FdPtHYEsi9fhJGA7rbyWgxhYNWDQ2t25IkOEa%2FNux%2FENMUWoutrFf3NcB0j16IsK9I7d6INld%2FXoBkwyWq5qX97gcuC8tNaDmbCKbQlU6VPEtgMh78GyfgUlkZlCcIb2HSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df940afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4580&min_rtt=1819&rtt_var=2670&sent=69&recv=32&lost=0&retrans=0&sent_bytes=42576&recv_bytes=6011&delivery_rate=9026380&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=456&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/946b720792ec3642.5fb83dbc00ce11a5.js
104.21.25.97200 OK 6.3 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/946b720792ec3642.5fb83dbc00ce11a5.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (6389), with no line terminators
Hash 1fe3331add9cdf5d17396ecb811774da
c2832aa44023ab1449979922f5590c7b82344f90
a1d2d4b0fc16693f02f69cce52ad5e88371cf270af9321528bbeaa91384a7e5a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/946b720792ec3642.5fb83dbc00ce11a5.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1891"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U1AedsLd9sa4fv%2FimCxnpSTC8ZW%2FE%2BX8FQ86HlXy1CYctM%2FyFGck%2BH4%2FOv%2B79qxwtisfbfqNQvkp8jKAP0Sh8bclmidlmiP5e8O5AF9tUFDD6sAbpOkInpO8o59Y9SkcbWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441b78d00afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2010&min_rtt=938&rtt_var=1088&sent=206&recv=51&lost=0&retrans=0&sent_bytes=193708&recv_bytes=8342&delivery_rate=1824952&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=715&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/SYt-GLksBT-6rRZZTtZC5/_buildManifest.js
104.21.25.97200 OK 1.1 kB URL GET HTTP/3 geejecawail.com/_next/static/SYt-GLksBT-6rRZZTtZC5/_buildManifest.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type ASCII text, with very long lines (1151), with no line terminators
Hash 5d4af6044973665c7882a8c44ff327a5
9f3978f837f9cd8a4c6ea0e06acf8f6c25999f74
dea3ef82d7d486db4b9ebec2632a578b410afd2d5a3da59645a439bd088470a8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/SYt-GLksBT-6rRZZTtZC5/_buildManifest.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-43d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CeK5e6qMezWSC0Fog%2BAeY2m6hlDbfGNwaGon48sNbxJ3%2BRoj%2BcAgJAomsZVnoC5R%2FFKj5L8qyIT2AIDXefje35wlgZUwb09asqJIcapd6vdMXSB3VzokekFaWKSwY7O7re0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419efab0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3226&min_rtt=938&rtt_var=2617&sent=116&recv=36&lost=0&retrans=0&sent_bytes=95447&recv_bytes=6191&delivery_rate=10535454&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=468&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/media/person-25.d4f163b0.webp
104.21.25.97200 OK 6.5 kB URL GET HTTP/3 geejecawail.com/_next/static/media/person-25.d4f163b0.webp
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type RIFF (little-endian) data, Web/P image
Hash 6efe222c98f1356602ab7ebe169c88dc
47a5b1bf36418ec48d137802956b43a94fe72fae
7eb2e3bd7b1d301e216b634398dcf03567840b1a7db3d76ecea9c2caac259169
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/media/person-25.d4f163b0.webp HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: image/webp
content-length: 6544
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: "676045d0-1990"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Hv535sCc038lgq6iLp4hTBs9EiLEPwe5%2B2YFZ1EH5UkZAMBmbOIT7KgKJQDOqayUxk2eRRalSPIf5MXAHawTVrviNyEnKUPr%2B3TML%2Bbf3PbMIteeWOBFmu2E5lfhkDlbFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441dca480afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1613&min_rtt=938&rtt_var=227&sent=262&recv=91&lost=0&retrans=0&sent_bytes=225731&recv_bytes=16805&delivery_rate=683409&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=1051&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/ba73c91b4e24d76c-f42b5bc6a0810624.js
104.21.25.97200 OK 44 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/ba73c91b4e24d76c-f42b5bc6a0810624.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (43462), with no line terminators
Hash 1ac0c3a84827ae15654c31f2559da6d1
d0a407e7e9987e3e9f26c41f1805473358c866b5
5c4089673266665c5a798ab609975c00064c3c5aef84dbc06ba1669274696102
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/ba73c91b4e24d76c-f42b5bc6a0810624.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-a9c6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1ygoIix8VLpn0PG9B10eN0ntTipt1efgW%2BUqs9AP92wBPZji0dw8wnYwiXOLxTTQn1S151xiio8IU61hF7%2Fe9Liz6WpRoKZQf6ycgHtb4QBOfFEHCl%2BE5cvgj1B1LFCy%2BI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df9f0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3226&min_rtt=938&rtt_var=2617&sent=103&recv=36&lost=0&retrans=0&sent_bytes=80428&recv_bytes=6191&delivery_rate=10535454&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=464&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/c0f33cbc562ce972.08a0e3a1be2d0395.js
104.21.25.97200 OK 461 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/c0f33cbc562ce972.08a0e3a1be2d0395.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (467), with no line terminators
Hash 2e0401820c3fbe6993017ec089e38953
bde1894d06e487dc86c9a0824d878c589a5c9f9f
0dbf361aefb6c0e326a513c86c1e7d3b4ed5b3bbea9ac5a2f4dc25f230b5e243
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/c0f33cbc562ce972.08a0e3a1be2d0395.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1cd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SOuxZ4xuPNyCLuA96%2BtXNq0vaAxo8NjpsuyKED9HAYI74tzmQVtzmGcVGv29IjoTohTbXD0uyBbq9V4smOW5zhR%2BXoNIPC1cIv2Vmu2goJ8tmiapyXIwEIUs30W%2FrcXZeMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c79760afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1612&min_rtt=938&rtt_var=431&sent=244&recv=77&lost=0&retrans=0&sent_bytes=216932&recv_bytes=13871&delivery_rate=753324&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=876&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/ec979846cacf6605-4c6f4dbfbeccd429.js
104.21.25.97200 OK 28 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/ec979846cacf6605-4c6f4dbfbeccd429.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (28544), with no line terminators
Hash c711de7b6adb06a0096fe014982f32d2
f42ccf6a3f4a4ae3b8acb77a27cb4fddae058383
185faf0947e6c0b4424af5307b6575a4156731df959754eb7668b990e65f27b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/ec979846cacf6605-4c6f4dbfbeccd429.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-6f80"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I3CqgVpGCMe9JqKmLXGkSVhKsw6lkPXsq7EEpCfHaz3CCmlFDutoOFrsSqofaUo6Q1s1vjkVByU%2Bq9O9WEfug075znpWtg%2FpuAq45%2Fbf2737OVRQuqeMNuCwfPDiGLoSvDw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df990afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3538&min_rtt=938&rtt_var=2658&sent=90&recv=35&lost=0&retrans=0&sent_bytes=65951&recv_bytes=6146&delivery_rate=6278875&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=461&x=1", cfExtPri, cfHdrFlush;dur=0
GET my.rtmark.net/gid.js?userId=52xm8vj7r745sde00bwyf59q9pefx6j
188.114.96.1200 OK 64 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=52xm8vj7r745sde00bwyf59q9pefx6j
IP 188.114.96.1:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint8A:B7:CD:87:FA:39:07:A8:88:41:1C:9E:2D:0E:97:51:61:75:C1:34
ValidityWed, 06 Nov 2024 10:31:42 GMT - Tue, 04 Feb 2025 10:31:41 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash b251c350405eb5f13883abcc3c20b7e5
b064aa1ed94976180902035f22572c3143dc8254
04cbea95a7b9f4803a362bf42381c02da05919d12b6c5ed8628bbfbfccdfcdfc
GET /gid.js?userId=52xm8vj7r745sde00bwyf59q9pefx6j HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://geejecawail.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://geejecawail.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=52xm8vj7r745sde00bwyf59q9pefx6j; expires=Wed, 17 Dec 2025 07:40:37 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkgRJPia7ulcyxZWQ3zpuqdfZ%2Bbjyy5p0DmjWO%2BdImBdNmAbOxCex0qK7nJS5nVCigisQAzXAhynK%2BqKAfvIOs2zsikxLYTYXKpQXQPRCwmyT%2B%2BloWEyArmjF1sE4y9U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c69c556bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=512&min_rtt=470&rtt_var=145&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3278&recv_bytes=1213&delivery_rate=8242884&cwnd=253&unsent_bytes=0&cid=d6716d09ea2e4774&ts=56&x=0"
X-Firefox-Spdy: h2
GET geejecawail.com/_next/static/chunks/624f56eeee3114bf.26e21342eb44f646.js
104.21.25.97200 OK 654 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/624f56eeee3114bf.26e21342eb44f646.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (681), with no line terminators
Hash 0d5d89266b8ecdf6ae599c7039c0afae
771b53f584040ae6aed3ce105915024990db3fd8
78dfe025bb7e494cfe67ab43354579ba1f6cda33342dff5e85928a9307288899
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/624f56eeee3114bf.26e21342eb44f646.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-28e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZCQZqWk0ICe5YIL0Inn1xWwntn4JDk%2F3EdO9X%2BCiWFGge3rsggWIOJZ0ZXnZgGO0ayHlpFshkIa9J8In8%2Fmmpheq9VDLfHAX7vV4vMEXqS%2F%2Fb1IhOddxeTbwPZJoLN5ociQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c495f0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1638&min_rtt=938&rtt_var=525&sent=238&recv=75&lost=0&retrans=0&sent_bytes=210520&recv_bytes=13779&delivery_rate=908861&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=848&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/4c1fb8ac463c4f02.00506273f1121222.js
104.21.25.97200 OK 90 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/4c1fb8ac463c4f02.00506273f1121222.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash b6e58b5f964c029243e27c932df93efc
7dc6975307d8ec78a38cef73ae1c5246ddeb8344
3b31aef1e741578d898cfe826815215bdfba101b44ebe65b866cf140f3ea6dde
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/4c1fb8ac463c4f02.00506273f1121222.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-160b2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0T0X4c%2FDoS%2Fs8IUaIH2GkJm3GHLFofTy63acaCDP3OWbpPyAvT4heJiJpCL%2FZH0QZLshYOig6jPHwuD%2FS3exgN2WGPbNItG0lCjS2KGCNnNlk5dTU%2B9uObtIPjIeM%2FFklcE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf910afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2879&min_rtt=938&rtt_var=2238&sent=124&recv=39&lost=0&retrans=0&sent_bytes=102380&recv_bytes=6329&delivery_rate=3123136&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=484&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/ac5595402e335eea.3cfdc57f0372e5e9.js
104.21.25.97200 OK 7.0 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/ac5595402e335eea.3cfdc57f0372e5e9.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (7133), with no line terminators
Hash 309061ab74ca638f460078aad0676d38
469e0bfe32600b6b32af0def65a0c2c0d7ec7fc3
95b40ce23cb442d3ed6f0ec23e0a460e294e130a98be2dc84a20a8220dbd97be
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/ac5595402e335eea.3cfdc57f0372e5e9.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1b79"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbwOhwOZgV9BugC%2FN9hy9hUckxHJdgl4ChreZcxb8yCN0SGfkKyBnJOkuMGmTJF3gDdrT5vpCJpF8uciGfjLiPxw1uH6UVQUxh14SZWvuCxhR%2FBlxt95IGpzfQACBvAeslA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441b68c60afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2146&min_rtt=938&rtt_var=1089&sent=203&recv=50&lost=0&retrans=0&sent_bytes=190234&recv_bytes=8296&delivery_rate=182071&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=703&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/afaf01a363fbc094.ef403bc9f5956d1e.js
104.21.25.97200 OK 453 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/afaf01a363fbc094.ef403bc9f5956d1e.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (459), with no line terminators
Hash 27211e0b952bb3f250bf5f21064cd7a9
523afc44609cde2d0a65e82b2a25668efe64a84f
21f79103a585e1818b625bcbebe88e943e15ae845c6a4c04d912ce9500f2e540
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/afaf01a363fbc094.ef403bc9f5956d1e.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3xFjDabJoBITy2gh3S3Ilh96mUrUqgTnMizo%2Fl%2Bnq%2BkCGTg%2FGsGgmu5QJ7KtYc%2FhSrE0wBNlBCKgkWEGXIOSVfN3rcN4EzSGfDLWFBdyySHfYm7K%2FzUDtgjXDeYsgSE7W6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c69690afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1662&min_rtt=938&rtt_var=442&sent=242&recv=76&lost=0&retrans=0&sent_bytes=214778&recv_bytes=13825&delivery_rate=313242&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=867&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/fb2cd5e7bb23440e.4c68132e26d8652c.js
104.21.25.97200 OK 445 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/fb2cd5e7bb23440e.4c68132e26d8652c.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (451), with no line terminators
Hash c6855f6d6eb813855cbf00c93b1e04d7
e4d65a76018446d093e950b48e29321927324660
93981a0b1c5ab4aa03692f19cde3e9f84ea1ec2cb0507a0cdd9fc9b0621746c9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/fb2cd5e7bb23440e.4c68132e26d8652c.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1bd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqAqbrBSf0dOxOXE2TLxC297eHX8lfz8FMbavEP6s2IyjjbCt%2FNlw0f8WFZ4t0obPbG7Mi9htcyl%2Fa6nkMIG6YPm%2BxsIS%2B%2FBH3ujxxL1i56Q1yYXQ0eDpRzZXlkv0wSZbrE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441ca9950afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1626&min_rtt=938&rtt_var=268&sent=250&recv=80&lost=0&retrans=0&sent_bytes=223379&recv_bytes=14009&delivery_rate=151423&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=909&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/821020bbe78a5b1f.5bd06e7fde89a3cc.js
104.21.25.97200 OK 24 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/821020bbe78a5b1f.5bd06e7fde89a3cc.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (24235), with no line terminators
Hash 7dcdcc2ade268162dd52603e1b350bbc
1ec5a8fb0a8d25803cd8823232b0687bcf70bf83
fa633589c29ae4bf65d398ebd99ff5a225aef3264f5fb7c1257cdc98a3ea15d8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/821020bbe78a5b1f.5bd06e7fde89a3cc.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-5eab"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5i7m70FqlfwMFu%2B0%2BNvapQ3ieyPDeVFmx2yrgkDEY0bEXMIt%2FqIWshImajmhswPAT3ynPjUQSQdWdJe66T1v%2B%2F%2BHN66wn1lzbXasrpODC7bRIqSd8eqp%2Btll1QVBu7Jt%2Ba4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419cf8d0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5127&min_rtt=1819&rtt_var=3044&sent=39&recv=30&lost=0&retrans=0&sent_bytes=9828&recv_bytes=5923&delivery_rate=323678&cwnd=12000&unsent_bytes=0&cid=43424b6faedde54d&ts=450&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/265d60a91fd3d6b8.748820502fe4525b.js
104.21.25.97200 OK 3.8 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/265d60a91fd3d6b8.748820502fe4525b.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (3857), with no line terminators
Hash 2179efc23a5f8de650f79461e68df75c
2e0131b91732b8510779d23f24d3a83b13b9819a
9fd8e9a18c6109daa8fee036cdfb3cb5fd780ddd17f50731e16be11412b4a816
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/265d60a91fd3d6b8.748820502fe4525b.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-ec3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a4uY7043%2FP8dw4EoSdsso7%2BThVSp0LeosYojQBPcoRY1%2BgCw4ojZmsD6HyTRo9qZkhxL6bhfno6pdFKWJ%2FExR9%2BBJsKSnAegvSGGlSILR2W6ATjH2jvebNBpWcGcsyJ0q%2B0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441b78d10afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1914&min_rtt=938&rtt_var=1008&sent=211&recv=52&lost=0&retrans=0&sent_bytes=199275&recv_bytes=8388&delivery_rate=2493118&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=719&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/39e8aab77b3201c4.ace864c7dd1d393c.js
104.21.25.97200 OK 457 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/39e8aab77b3201c4.ace864c7dd1d393c.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (463), with no line terminators
Hash 09a25a3021635cc6a532f273b0c4df86
ec8f7b8fd35232d55a1ecf6a399de6134823e763
88900bffa90d476e693464490ffdcbe6bcb0addbaf836a3ed814ffd8bcb9e833
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/39e8aab77b3201c4.ace864c7dd1d393c.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FxlLj27zh%2FsOGlHRPIfivkXu0o9rAwTIzRYN4ckoiMXInTtK2dMuOeFRyeCzNDn25P3SljErBuvDhNdAySQZAt3MsJNsfuui0oysSnjHywXDnGumWikZBczq9esPe3Yb3Es%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c59650afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1718&min_rtt=938&rtt_var=690&sent=233&recv=71&lost=0&retrans=0&sent_bytes=206258&recv_bytes=12967&delivery_rate=501356&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=832&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/cbd9951183a7531b.bc3929b70e784856.js
104.21.25.97200 OK 457 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/cbd9951183a7531b.bc3929b70e784856.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (463), with no line terminators
Hash 16710cff3172b28295dc0bd326321e3e
0fd15f045910d6dca5a9b39fe8d95310463abca7
9db2fbeee8f458fac0f2141627b87fae9b446f6883c2b534c34afa7ca7e0a1ca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/cbd9951183a7531b.bc3929b70e784856.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rxq26J4XKKhp5ERR7imgG1fLFU8xsWeLDxFB%2FskB79RrdDFI9B684MD8X%2FrkGrHfhttUxppxAirNNFgaY8wmKN9BHB9F6CC9Uzrhd1cNqx5%2FlP%2BA2cej0XX5zcW%2BB4LtGAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c897b0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1612&min_rtt=938&rtt_var=431&sent=245&recv=77&lost=0&retrans=0&sent_bytes=217999&recv_bytes=13871&delivery_rate=753324&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=883&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/a5c515763c3d6f5f.ddbe814051efc9cf.js
104.21.25.97200 OK 385 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/a5c515763c3d6f5f.ddbe814051efc9cf.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (391), with no line terminators
Hash 4bf39d8377f7e83b1658c2b0b40ef32d
ac5dec50f1068ff1c05394024e25cd1eeb8b1b09
2a9e8ef050b57303004622f251d76d769a44711f41c9e4a42a22d8e32ccea23e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/a5c515763c3d6f5f.ddbe814051efc9cf.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-181"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kn97y5kWB4iVeoh5wwwhiSbd%2Fkn465ZX6LvScfygbSvm8LF8WB32PrRKOPhl0bOy5Z2m0KKz4wGfkvOLbMTjFZbLWAwK3TVpimLCU23QTUgdHg3klfmFBNsXHoi0J3dqrMY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441ca9960afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1626&min_rtt=938&rtt_var=268&sent=251&recv=80&lost=0&retrans=0&sent_bytes=224446&recv_bytes=14009&delivery_rate=151423&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=911&x=1", cfExtPri, cfHdrFlush;dur=0
GET cdntechone.com/stattag.js
104.21.36.146200 OK 16 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 104.21.36.146:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectcdntechone.com
FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA
ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File type JavaScript source, ASCII text, with very long lines (15840)
Hash 80d7433dbc2b7708f2fa4e6a9943a116
350c6e2bb1cbd07de260856f918f4ececcd96894
54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3422
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6demzHOga73JGWIkY0dlzWS6WWoaGB7XOdZt5UOnmERQGDrwSvx5KVBM87HRB6EToSImmP%2FXT6xhfNuq3ODuW3axYjbVAf1lj0HyRgLHCz8XsL0J3gY%2FucPoPMyTYjj42w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f35441cd8a256b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=779&min_rtt=447&rtt_var=690&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3207&recv_bytes=1037&delivery_rate=6050139&cwnd=253&unsent_bytes=0&cid=b507d76adb86e4e3&ts=39&x=0"
X-Firefox-Spdy: h2
GET cdntechone.com/stattag.js
104.21.36.146200 OK 16 kB URL GET HTTP/3 cdntechone.com/stattag.js
IP 104.21.36.146:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectcdntechone.com
FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA
ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File type JavaScript source, ASCII text, with very long lines (15840)
Hash 80d7433dbc2b7708f2fa4e6a9943a116
350c6e2bb1cbd07de260856f918f4ececcd96894
54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3422
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V5J1zfyQNCAwZ5BwhpZIdKqzTquHuig%2F9EF8gToSPGul4IopiLXKoUnJokOIoqOqRvaV1uDP%2BG3b4d%2BYbIcsYfi8MaLEmwW0q9WHShnM2hmdSrjwjUOGrX3NikbXEf9gTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f35441d8a49b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5177&min_rtt=3153&rtt_var=2628&sent=12&recv=8&lost=0&retrans=0&sent_bytes=4108&recv_bytes=1147&delivery_rate=188387&cwnd=12000&unsent_bytes=0&cid=0eca622fbbd75d45&ts=72&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/rotate?var=8224474&ymid=%7Bsource_id%7D&b=22247330&campaignid=8716875&click_id=870380641215324354&rhd=1&var_3=8716875&oaid=52xm8vj7r745sde00bwyf59q9pefx6j&btz=UTC&bto=0&zz=7503637%3B7503635%3B7503620%3B7503631%3B7503629%3B7503632%3B7503633&uid=52xm8vj7r745sde00bwyf59q9pefx6j
104.21.25.97200 OK 3.6 kB URL GET HTTP/3 geejecawail.com/rotate?var=8224474&ymid=%7Bsource_id%7D&b=22247330&campaignid=8716875&click_id=870380641215324354&rhd=1&var_3=8716875&oaid=52xm8vj7r745sde00bwyf59q9pefx6j&btz=UTC&bto=0&zz=7503637%3B7503635%3B7503620%3B7503631%3B7503629%3B7503632%3B7503633&uid=52xm8vj7r745sde00bwyf59q9pefx6j
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3599), with no line terminators
Hash a421ebb0a858bbc280d13986bd031e68
237e45a83f03d2d26bdcd41bf840f21dd5f25c34
e9797f98bb8605eb3e0e46b79643ab7e5c98625f784c1f9ef282ac83dbf08017
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?var=8224474&ymid=%7Bsource_id%7D&b=22247330&campaignid=8716875&click_id=870380641215324354&rhd=1&var_3=8716875&oaid=52xm8vj7r745sde00bwyf59q9pefx6j&btz=UTC&bto=0&zz=7503637%3B7503635%3B7503620%3B7503631%3B7503629%3B7503632%3B7503633&uid=52xm8vj7r745sde00bwyf59q9pefx6j HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=52xm8vj7r745sde00bwyf59q9pefx6j; syncedCookie=true; oaidts=1734421237
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:38 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-trace-id: c3ef96ef038ed8e90fadb455392f1fa4
timing-allow-origin: *
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
access-control-allow-origin: https://geejecawail.com/
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=52xm8vj7r745sde00bwyf59q9pefx6j; expires=Wed, 17 Dec 2025 07:40:38 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TyctUFeLkgfTv2dt%2F050i1vN0HxXPGOL4T8lZQr%2FhCyYqn9fBhOJ8bQiBNcigNq9AfL6weo9rutnXYycPspv7JzwUdg91TKFBNGhaP33UzY7pP5tDx9Zbx%2B3DJhyh27G8gs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441fab9d0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1697&min_rtt=938&rtt_var=409&sent=354&recv=103&lost=0&retrans=0&sent_bytes=326155&recv_bytes=18003&delivery_rate=7226&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=2067&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/SYt-GLksBT-6rRZZTtZC5/_ssgManifest.js
104.21.25.97200 OK 160 B URL GET HTTP/3 geejecawail.com/_next/static/SYt-GLksBT-6rRZZTtZC5/_ssgManifest.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type ASCII text, with no line terminators
Hash ec987e535717d417e4c20c3f19741a95
36c65d6370d55851e91e9f1ff1a76751a1140fed
409d2de41a27a5c819fc065c000aa9bdcbb56a5f69595a04fb0db8da10802d2c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/SYt-GLksBT-6rRZZTtZC5/_ssgManifest.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-a0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2BEhvEpAIMt9uZdKVS3oEEdKtBNKgKYHZBX%2BA6B7a6sUU9YEH5b5cy8IFXTCxrOI9ikiQTeHuxpV6gf1zLed4DfP%2BOJnWkUIOMMJ4%2B9AaZiSuxrm3NmJt0PX7VMhjgF1JqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419efae0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3226&min_rtt=938&rtt_var=2617&sent=118&recv=36&lost=0&retrans=0&sent_bytes=96717&recv_bytes=6191&delivery_rate=10535454&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=469&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/a027c3d553cd8e01.2b24a064fcde1a69.js
104.21.25.97200 OK 5.9 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/a027c3d553cd8e01.2b24a064fcde1a69.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (6023), with no line terminators
Hash 7ec99fafae82142eea6533a4148a6ebe
5e593194cf4123a05507ff4f1c43d53e89d905f7
fe63fdb16f4ec43de1dce74f39d9115ee43afa1392b0d7150588df1155547b26
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/a027c3d553cd8e01.2b24a064fcde1a69.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1722"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TeB4%2FIM6HWO9OE327hecJNbGJoIya2YZmrZDNXVDNMCBgWwwCaOZMQOE%2Fuu0Z4s%2BsQFrFRnR8nYzO9uIo7i3LBAptVAJpvfU0EG4lLWAcAuF7Y2wxkF3xKifbV3eBfVbJTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441b78cd0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2317&min_rtt=938&rtt_var=1459&sent=200&recv=48&lost=0&retrans=0&sent_bytes=187264&recv_bytes=8205&delivery_rate=8153613&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=685&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/4d859cac5ba89327-7c9f685438bac6d8.js
104.21.25.97200 OK 110 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/4d859cac5ba89327-7c9f685438bac6d8.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (109702 bytes)
Hash fa92e582b2c89be329fbc8ac7170c6ac
bf03008752166780239d14094615f3d6f01d52ac
fadd974a6921e24c69b0f37ad3cdc0f67424923522f2102b988fe11ec99a763f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/4d859cac5ba89327-7c9f685438bac6d8.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1ac86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d5ctBfMBm2IRbom%2BemC2E8EYlFmHJubi96LpE7lLPX%2BFLHU3BTJDcY394dSsdKYAP4QPhoVB2V0FP2g5kacouJguh8%2ByAHg8Ok5gPpQOOyfw5CMtkTNTYxDXxsz%2FRrXpZiI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df9c0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2567&min_rtt=938&rtt_var=1803&sent=147&recv=41&lost=0&retrans=0&sent_bytes=128780&recv_bytes=6421&delivery_rate=1215938&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=496&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/c33f7ef03ce33a70.13d932cd5130219f.js
104.21.25.97200 OK 465 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/c33f7ef03ce33a70.13d932cd5130219f.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (471), with no line terminators
Hash 0eabe04db72e93aa2a478f8fb8503d63
508482c25d8d0a505dd2473e0e3be3c909bd370c
4d9a1b828117100ef19efc2b3afc0fa3cbda10d57901966486790292628e65b1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/c33f7ef03ce33a70.13d932cd5130219f.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1d1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48qOkteEsAFfLZ2JpOOFd%2F20H3cVW5bD4%2F56wm8tp1jnYI1R5Y3WBILbxp0J3VX%2BaRYo57%2FrbpFL5mgXGO%2B53%2Fkc1Nh7ycpz8aAOjsEUCZ8QifN59%2BMtRuqzABJlfMUi6U0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c696b0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1662&min_rtt=938&rtt_var=442&sent=243&recv=76&lost=0&retrans=0&sent_bytes=215852&recv_bytes=13825&delivery_rate=313242&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=868&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/b4b3e8bd1435df61.f50eef8235638950.js
104.21.25.97200 OK 465 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/b4b3e8bd1435df61.f50eef8235638950.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (471), with no line terminators
Hash 8495a108189771e4b996366e00489449
677e365b88c4740ecf84f41f384828b941c500d3
7fcbd310dcf1595b5cd81232d20f65fd0b469ac5f3f3b5648ea97ab44aed6df5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/b4b3e8bd1435df61.f50eef8235638950.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1d1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=11l0OV5322AK60cGkkSPEUEjb%2FqMwBCxW7YhgViXWuAOC1FoFDLfQpOZOEWqJTtMhZ0RLFqpPZlNnAchBwZ8O4s6SzAfQpD4hphxVjcSxIV%2BoEXIP31IePrZ2ldiloO8L0k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c696d0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1674&min_rtt=938&rtt_var=605&sent=236&recv=74&lost=0&retrans=0&sent_bytes=208438&recv_bytes=13734&delivery_rate=19595&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=837&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
104.21.25.97200 OK 110 kB URL User Request GET HTTP/2 geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
IP 104.21.25.97:443
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
Size 110 kB (110458 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875 HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: text/html
last-modified: Mon, 16 Dec 2024 15:23:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B0UsacPn%2BOV6fPKCYPgk1derb15QOtmwSsYPB7gGl5ysQknB6uldrhDUNMKf6vnWB4nJ37fxJHhEUqfyFG7U4dGCnqw%2BR0vMnzmIArUlVQqh0fFRtUzoqq%2B8q2Ji8fe4D1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f3544166d1e0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6065&min_rtt=477&rtt_var=11183&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3283&recv_bytes=1344&delivery_rate=7156507&cwnd=254&unsent_bytes=0&cid=2d80a8b6e24e85fb&ts=104&x=0"
X-Firefox-Spdy: h2
GET geejecawail.com/_next/static/chunks/2b5ea3fc9aa2afc3.3152b39232aa44c6.js
104.21.25.97200 OK 4.8 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/2b5ea3fc9aa2afc3.3152b39232aa44c6.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (5046), with no line terminators
Hash 6a7e724c43f0f850ee780675de0961aa
45bc33988d869e0a1aa4ad79ec021fff1b35e54b
98950b6f8a8f5673bb40c81c8a03f3199219ff5ad6a1f7dbdea4d874df30a95b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/2b5ea3fc9aa2afc3.3152b39232aa44c6.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-12de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Mi%2Fog8nM558wXIIBKJXGrYGJAmT1bdjkeKwto%2Ft5Tsgxf%2BT7Xj7XsMO8dxsiX6LKdEG%2B9B52T%2FBLRqfGQu4cxd%2BsK9%2BXjVLQ6C5jZ75SxxKFHyQpPQdkdfap1ZfN2yWQZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df930afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3816&min_rtt=938&rtt_var=2801&sent=77&recv=34&lost=0&retrans=0&sent_bytes=52070&recv_bytes=6100&delivery_rate=12106555&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=458&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/3693d47346edcca4.5895bcb4214b8b71.js
104.21.25.97200 OK 485 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/3693d47346edcca4.5895bcb4214b8b71.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (491), with no line terminators
Hash b613979d69eb1166dd8a48ebaff685c4
016be4825603e26b0d24f071b63a262a6f448ac2
92a1765d7ccd715d72c5b1d49e460e46510af8b1e51ddccd0eca3356ecf63c0d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/3693d47346edcca4.5895bcb4214b8b71.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1e5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rnGYQBbjVglDPHfIp85EKa%2BcoD0FSwlTkXPkte3GdOzZb%2BN1UNFggZCgU1jjq4eJvxwdrVCKmx8tTvOvn6Oh5ZFjJBPmXvKUcBT4kXVLFRz3v61QfBrJ%2Buj1MbPlgE9eD5Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c998f0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1588&min_rtt=938&rtt_var=371&sent=248&recv=78&lost=0&retrans=0&sent_bytes=221208&recv_bytes=13917&delivery_rate=271553&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=899&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/85e17f2acb2669e5.eda98e96b1aebee4.js
104.21.25.97200 OK 449 B URL GET HTTP/3 geejecawail.com/_next/static/chunks/85e17f2acb2669e5.eda98e96b1aebee4.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type troff or preprocessor input, ASCII text, with very long lines (455), with no line terminators
Hash 365e31413829402188a2196e62ad7add
3aea5ef58ab22187341c931a7eb505386bd351e5
736c4b57b49004ede99ad8d007f010a2c59c072d99ebf674a1bf255ad77db0f5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/85e17f2acb2669e5.eda98e96b1aebee4.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:37 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36Vtw0XKLzgpR8bYViqpiWbED4IXLixlU3sNLHoyz8xCEHvlMbGSQ7Scy7wuh%2BtOjcqB5g8uyK7%2FTCwQmxSbVuPTa0CVYiP4CFSUXdcXPuaHRi8cWl6RdiVZeim9R7Z1cfI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f35441c897d0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1638&min_rtt=938&rtt_var=525&sent=241&recv=75&lost=0&retrans=0&sent_bytes=213717&recv_bytes=13779&delivery_rate=908861&cwnd=48000&unsent_bytes=0&cid=43424b6faedde54d&ts=853&x=1", cfExtPri, cfHdrFlush;dur=0
GET geejecawail.com/_next/static/chunks/621e8925e817e462.fe6846fd6e13d76b.js
104.21.25.97200 OK 29 kB URL GET HTTP/3 geejecawail.com/_next/static/chunks/621e8925e817e462.fe6846fd6e13d76b.js
IP 104.21.25.97:443
Requested by https://geejecawail.com/sweeps-survey/171?s=870380641215324354&z=8224474&var={source_id}&campaignid=8716875&b=22247330&ymid=870380641215324354&var_3=8716875
Certificate IssuerGoogle Trust Services
Subjectgeejecawail.com
Fingerprint22:74:29:98:3B:E9:FB:1A:60:9C:9D:0D:D8:D7:FA:54:21:AA:30:9D
ValidityFri, 13 Dec 2024 10:36:46 GMT - Thu, 13 Mar 2025 11:35:01 GMT
File type JavaScript source, ASCII text, with very long lines (28786), with no line terminators
Hash ccaec829469360a11c663ab570bc8c31
4f4c6617e5aeff41540e05e3574d31c1554e4f42
964299685c7ec0ef90a70b7a2be12e479140c62f70e47d32fb713e6dea37532d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_next/static/chunks/621e8925e817e462.fe6846fd6e13d76b.js HTTP/1.1
Host: geejecawail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Dec 2024 07:40:36 GMT
content-type: application/javascript
last-modified: Mon, 16 Dec 2024 15:22:56 GMT
vary: Accept-Encoding
etag: W/"676045d0-7072"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hYIvEaRSU%2BO9P3XV4z5l%2BT4YkLIIYDbOhK2VulQlmXFiknwbfBD9Ikwg0J2riVnA8J62kxSywY4heJnxEelDPXvlQCIeEJUn2GVcnOB4zZpTn%2Bzs9PRUnp4MW45dHgXQD7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8f354419df920afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4855&min_rtt=1819&rtt_var=2828&sent=64&recv=31&lost=0&retrans=0&sent_bytes=37791&recv_bytes=5967&delivery_rate=29255&cwnd=24000&unsent_bytes=0&cid=43424b6faedde54d&ts=453&x=1", cfExtPri, cfHdrFlush;dur=0