Report - amanda-nn.com/

Report Overview

Submitted URL
amanda-nn.com/
IP
89.208.104.221
ASN
#12695 LLC Digital Network
Submitted
2022-12-01 22:16:40
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
48

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
code.jquery.com	634	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	399 B	25 kB	69.16.175.42
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	53 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
amanda-nn.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	9.5 kB	5.1 MB	89.208.104.221
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
cdn.jsdelivr.net	439	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	395 B	1.6 kB	151.101.65.229
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	368 B	1.9 kB	104.18.20.226
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.149.51.98

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-01	medium	amanda-nn.com/	Malware
2022-12-01	medium	amanda-nn.com/design/files/fonts/RobotoMono-Regular.ttf	Malware
2022-12-01	medium	amanda-nn.com/design/files/fonts/RobotoMono-Bold.ttf	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed
2022-12-01	medium	amanda-nn.com	Sinkholed

JavaScript (5)

	URL	Size	First Seen	Last Seen
	amanda-nn.com/	412 B	2023-03-11	2023-03-11
Pretty URL amanda-nn.com/ IP 89.208.104.221 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:50:36 Last Seen2023-03-11 23:50:36 Times Seen1 Hash 612f96eaf49a8142b0f5c8a19e3bbce4 2a96183c44c83cde1d78bec39f1f0760f82248e6 c017546fdf451e461a2eea62d407e29e563df7333dcd2b5b707fc94065180d4d Loading...

	code.jquery.com/jquery-3.6.0.slim.min.js	72 kB	2023-03-07	2024-04-26
Pretty URL code.jquery.com/jquery-3.6.0.slim.min.js IP 69.16.175.42 ASN #20446 STACKPATH-CDN Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:02:59 Last Seen2024-04-26 15:47:22 Times Seen3946 Hash 1276065911521c5c22037a31365d179d d1c6704e94efe2d465fc161b6381e127d35acd81 bbb7b9921ca2b61948753a6edb63c78443663dc45d1621d18e102e1dcb34e512 Loading...

	cdn.jsdelivr.net/npm/js-cookie@3.0.0-rc.1/dist/js.cookie.min.js	1.7 kB	2023-03-07	2024-04-18
Pretty URL cdn.jsdelivr.net/npm/js-cookie@3.0.0-rc.1/dist/js.cookie.min.js IP 151.101.65.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:02:52 Last Seen2024-04-18 13:22:48 Times Seen151 Hash 4f4a6fe904517658e996ead3ab6f73d6 6661581652ed1e4171c3f2fc53668c914a2c219e b5c1a679368da537e7b0f6880801ab32fe84b38b900acdbc1fdbe8cd6a86c4c8 Loading...

	amanda-nn.com/	2.4 kB	2023-03-11	2023-03-11
Pretty URL amanda-nn.com/ IP 89.208.104.221 ASN #12695 LLC Digital Network Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:50:36 Last Seen2023-03-11 23:50:36 Times Seen1 Hash fc5be02daef2b826063957a0e33a1ea8 50a8110d3386dd8909ff31ff79b05757d5a0def7 4365209bcc95079e04a37181eb7e0bec160517937a8e776fb93da7906d408bce Loading...

		Size	First Seen	Last Seen
	#1 Eval - 65c90cda49a227e54fb405666b0c1494	413 B	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 23:50:36 Last Seen2023-03-11 23:50:36 Times Seen1 Hash 65c90cda49a227e54fb405666b0c1494 96333023b3f12c9b4537ce04ea0e15988396fd5a 4bd108a68bfde06a7b2a02c3d6b259589d97cff74ec21fe4b9cdac0abc4e3bd7 Loading...

HTTP Transactions (44)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9510
Expires: Fri, 02 Dec 2022 00:54:59 GMT
Date: Thu, 01 Dec 2022 22:16:29 GMT
Connection: keep-alive

amanda-nn.com/

89.208.104.221

200 OK

3.5 kB

URL HTTP/1.1
amanda-nn.com/
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2432), with CRLF line terminators
Size
3.5 kB (3535 bytes)
Hash
be1899b5258c5cf4e121228074e10abb
008e2dd47b1e31c1df8c73dd630663b09cdb9b2b
466b48ffe3bbf74c84dac224ac0c3a3c3b5b03d0b2b843293bc237feaf108d13

Detections

Analyzer	Verdict	Alert
fortinet	Malware
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 3535
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5673
Cache-Control: max-age=136156
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 22:16:29 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 12:05:45 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4383
Expires: Thu, 01 Dec 2022 23:29:32 GMT
Date: Thu, 01 Dec 2022 22:16:29 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 01 Dec 2022 21:19:49 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3400
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: d+T1by4/eISaXmWXQvB9vwWOP37AOYmP6i2wcz9f4rGuodxLUeZe6DxrmALbw1px8tdqeKEl0MWcoGz2ciIg+A==
x-amz-request-id: ZVJBRD8HN2H8F3D8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 01 Dec 2022 21:46:27 GMT
age: 1802
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 01 Dec 2022 22:16:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/js-cookie@3.0.0-rc.1/dist/js.cookie.min.js

151.101.65.229

200 OK

829 B

URL HTTP/2
cdn.jsdelivr.net/npm/js-cookie@3.0.0-rc.1/dist/js.cookie.min.js
IP
151.101.65.229:0
ASN
#54113 FASTLY

File type
ASCII text, with very long lines (1649)
Size
829 B (829 bytes)
Hash
e8360d62d88df85c756c2c3a3849d913
4c2cb17ed15ae7f8a4c5e2f8dd5da8ebf55237ff
408e6738afcffdaf1318975d5731ca1656e9e3d002c8a69f3140bfc0087c353e

HTTP Headers

GET /npm/js-cookie@3.0.0-rc.1/dist/js.cookie.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://amanda-nn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.0.0-rc.1
x-jsd-version-type: version
etag: W/"695-ZmFYFlLtHkFxw/L8U2aMkUosIZ4"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 01 Dec 2022 22:16:29 GMT
age: 5542982
x-served-by: cache-fra19178-FRA, cache-bma1625-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 829
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.6.0.slim.min.js

69.16.175.42

200 OK

25 kB

URL HTTP/2
code.jquery.com/jquery-3.6.0.slim.min.js
IP
69.16.175.42:0
ASN
#20446 STACKPATH-CDN

File type
ASCII text, with very long lines (65241)
Size
25 kB (24587 bytes)
Hash
ae3ffbb71d763d2a1ca869e4866b23ae
22723a163afd77efe96e92eaca712583612b3e73
29dda737fcaf96a8a4ea6d0dd66c6e379a4c98cf3374647388650ee6e48a462c

HTTP Headers

GET /jquery-3.6.0.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://amanda-nn.com
Connection: keep-alive
Referer: http://amanda-nn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Thu, 01 Dec 2022 22:16:29 GMT
content-encoding: gzip
content-length: 24587
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-11ab4"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1669932989.dop009.sk1.t,1669932989.cds254.sk1.hn,1669932989.cds258.sk1.c
X-Firefox-Spdy: h2

ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1

104.18.20.226

200 OK

1.5 kB

URL HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1462 bytes)
Hash
fa71e8681b5545e111ca575c45025ca4
d5428a39166a8a3eb325560dfab85d6cf57be256
54f9ee98b651513b66d928340ab9b2a6061f64d666dc225398459afad1735d23

HTTP Headers

POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "086A95B39522B9714D8276679BE83C18D0034086"
Expires: Fri, 02 Dec 2022 10:00:00 GMT
Last-Modified: Thu, 01 Dec 2022 22:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 186
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 772f2fff38fdb4fa-OSL

amanda-nn.com/ftt2/check.php?t=1669932988&check=972f6aad1c9733373d2e62871ca96333&rand=406113

89.208.104.221

200 OK

1 B

URL HTTP/1.1
amanda-nn.com/ftt2/check.php?t=1669932988&check=972f6aad1c9733373d2e62871ca96333&rand=406113
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
a87ff679a2f3e71d9181a67b7542122c
1b6453892473a467d07372d45eb05abc2031647a
4b227777d4dd1fc61c6f884f48641d02b4d121d3fd328cb08b5531fcacdabf8a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /ftt2/check.php?t=1669932988&check=972f6aad1c9733373d2e62871ca96333&rand=406113 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/jpeg
Content-Length: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
X-Robots-Tag: noindex

amanda-nn.com/design/files/play.png

89.208.104.221

200 OK

1.3 kB

URL HTTP/1.1
amanda-nn.com/design/files/play.png
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1306 bytes)
Hash
25106efaef61ae84e677fef07a3200be
3dc1e51cc98a55a1aa024f11062740ef2dd2e4d0
91741dcca428b84aaaf5c288fc0d5093b839908da5f204eaaf0da1e822ad62d6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /design/files/play.png HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/png
Content-Length: 1306
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 13:03:49 GMT
ETag: "633c2f35-51a"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

amanda-nn.com/?imn=3438c2a45acc081414c907bd5756faec&a=666657673&acs=80f020192e296556a5ea3d87970c685b

89.208.104.221

200 OK

36 kB

URL HTTP/1.1
amanda-nn.com/?imn=3438c2a45acc081414c907bd5756faec&a=666657673&acs=80f020192e296556a5ea3d87970c685b
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2020:03:31 12:38:59], baseline, precision 8, 300x400, components 3\012- data
Size
36 kB (35487 bytes)
Hash
51cce2467324e99567786072e7e563e8
723427eb576b14f248adc3f7249852f5969cc05b
4c3f9f6e8afaa713a898b6adc378d42f8bcc7420b96df59837016cca8876ae9a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=3438c2a45acc081414c907bd5756faec&a=666657673&acs=80f020192e296556a5ea3d87970c685b HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 01 Dec 2022 22:11:15 GMT
cache-control: public,max-age=3600
age: 314
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

amanda-nn.com/design/files/fonts/RobotoMono-Regular.ttf

89.208.104.221

200 OK

87 kB

URL HTTP/1.1
amanda-nn.com/design/files/fonts/RobotoMono-Regular.ttf
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
TrueType Font data, 14 tables, 1st "GSUB", 17 names, Microsoft, language 0x409, Copyright 2015 The Roboto Mono Project Authors (https://github.com/googlefonts/robotomono)Roboto\012- DOS 2.0-3.2 backed up sequence 1 of file \016\012- data
Size
87 kB (86908 bytes)
Hash
7e173cf37bb8221ac504ceab2acfb195
10459dd11ec5adb59f3775b062dc06c4abe70a3a
c3c88e6a2a6b5989b984134fcc51ce69d767fd18025872e8cf416c04c4daaf20

Detections

Analyzer	Verdict	Alert
fortinet	Malware
quad9	Sinkholed

HTTP Headers

GET /design/files/fonts/RobotoMono-Regular.ttf HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: application/octet-stream
Content-Length: 86908
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 13:03:50 GMT
ETag: "633c2f36-1537c"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

amanda-nn.com/design/files/fonts/RobotoMono-Bold.ttf

89.208.104.221

200 OK

87 kB

URL HTTP/1.1
amanda-nn.com/design/files/fonts/RobotoMono-Bold.ttf
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
TrueType Font data, 14 tables, 1st "GSUB", 17 names, Microsoft, language 0x409, Copyright 2015 The Roboto Mono Project Authors (https://github.com/googlefonts/robotomono)Roboto\012- DOS 2.0-3.2 backed up sequence 1 of file \016\012- data
Size
87 kB (87008 bytes)
Hash
0339b745f10bb01da181af1cdc33c361
0c75d7b11dacfede72053e40b71849c43c22a454
5563ce589d608ea0da7fe51f79c6e85ae488b414ed5eb7d166b86aa17c243526

Detections

Analyzer	Verdict	Alert
fortinet	Malware
quad9	Sinkholed

HTTP Headers

GET /design/files/fonts/RobotoMono-Bold.ttf HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: application/octet-stream
Content-Length: 87008
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 13:03:50 GMT
ETag: "633c2f36-153e0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

amanda-nn.com/?imn=f39a04af12e9d966fc409fa94b1f6e46&a=666657673&acs=3c2b06478c37dd468b49a47e43cf7a66

89.208.104.221

200 OK

90 kB

URL HTTP/1.1
amanda-nn.com/?imn=f39a04af12e9d966fc409fa94b1f6e46&a=666657673&acs=3c2b06478c37dd468b49a47e43cf7a66
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2020:03:31 12:40:27], baseline, precision 8, 604x400, components 3\012- data
Size
90 kB (90403 bytes)
Hash
d572073da9747ac02213de2aa09fb50d
7e6004958bb3cbecda14256d607bd4c225d01ac1
9e813259cd94db40d2d8971e8568444965da72083a9ed8fff2617aeefd116fe6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=f39a04af12e9d966fc409fa94b1f6e46&a=666657673&acs=3c2b06478c37dd468b49a47e43cf7a66 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=a05abbe66f344f971e045d1217ea8b14&a=666657673&acs=f701cb047b0a9f67eaf30c5d453d4331

89.208.104.221

200 OK

91 kB

URL HTTP/1.1
amanda-nn.com/?imn=a05abbe66f344f971e045d1217ea8b14&a=666657673&acs=f701cb047b0a9f67eaf30c5d453d4331
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 460x690, components 3\012- data
Size
91 kB (90977 bytes)
Hash
b2c0e94bea0c581f92ca3f53dfcca01d
0853c6cb8d4ce23016eca1bb4f83f0c1f2165024
ba9396ee39c8a79d6341acaca11acb2af9661463353f697b120d26fd8adb47d4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=a05abbe66f344f971e045d1217ea8b14&a=666657673&acs=f701cb047b0a9f67eaf30c5d453d4331 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=6190009add17c4275296896aae057e80&a=666657673&acs=3c822642ea64bf4ab180c98afe3044e1

89.208.104.221

200 OK

75 kB

URL HTTP/1.1
amanda-nn.com/?imn=6190009add17c4275296896aae057e80&a=666657673&acs=3c822642ea64bf4ab180c98afe3044e1
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2020:03:27 11:40:11], progressive, precision 8, 515x400, components 3\012- data
Size
75 kB (75279 bytes)
Hash
ff9e3469f8a00c183e330a46f561146a
8f08d1639d1284a06b34ba58d65c72cbf1437cb4
33a9cebc383ed6a7da235fa00e9eb452528032440572cf961bc73c9ea26cfd02

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=6190009add17c4275296896aae057e80&a=666657673&acs=3c822642ea64bf4ab180c98afe3044e1 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5665
Cache-Control: max-age=131085
Content-Type: application/ocsp-response
Date: Thu, 01 Dec 2022 22:16:29 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 10:41:14 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

amanda-nn.com/?imn=3045dd99ed61a4ccc6201ab7459569a8&a=666657673&acs=56cb5ad6fcd11b260ac3bc3875fa2078

89.208.104.221

200 OK

34 kB

URL HTTP/1.1
amanda-nn.com/?imn=3045dd99ed61a4ccc6201ab7459569a8&a=666657673&acs=56cb5ad6fcd11b260ac3bc3875fa2078
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=ACDSee Pro 8, datetime=2017:12:23 18:53:26], comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 86", baseline, precision 8, 320x240, components 3\012- data
Size
34 kB (33588 bytes)
Hash
f14bc240e942ff1b5308f19a8d5027d2
7dac2b8a6d2b6f140c977f37c42195ac062d77a5
482b66f2f47a3f11706082bbb01b702511ad7bc3e9ee99023589ec95d92e104a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=3045dd99ed61a4ccc6201ab7459569a8&a=666657673&acs=56cb5ad6fcd11b260ac3bc3875fa2078 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=d8f3b5e4039022a422a66af96ccb1185&a=666657673&acs=4d9515faf04bf88f176d078a6a325ec1

89.208.104.221

200 OK

47 kB

URL HTTP/1.1
amanda-nn.com/?imn=d8f3b5e4039022a422a66af96ccb1185&a=666657673&acs=4d9515faf04bf88f176d078a6a325ec1
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2020:03:29 19:38:27], baseline, precision 8, 350x467, components 3\012- data
Size
47 kB (47334 bytes)
Hash
e7c21a04ac32801193674020f1ca1566
91f6c98cdd55bb1b6e89fb567c9c66177a40a4f7
b58a908654e8758042d5f7e32b54621b97c4b34527f0e576f4e1ffe332370f00

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=d8f3b5e4039022a422a66af96ccb1185&a=666657673&acs=4d9515faf04bf88f176d078a6a325ec1 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=d60465ed0704db493f249c52d253d411&a=666657673&acs=d46045bd47c6ede8ce6f4f7c7198a090

89.208.104.221

200 OK

36 kB

URL HTTP/1.1
amanda-nn.com/?imn=d60465ed0704db493f249c52d253d411&a=666657673&acs=d46045bd47c6ede8ce6f4f7c7198a090
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2020:03:29 19:37:50], baseline, precision 8, 350x467, components 3\012- data
Size
36 kB (35659 bytes)
Hash
722d9863166c1cf4d3d95ea50bbbc9e4
623528006080d36a1a55f870b096c7ec6a003d49
7cc3329810c1231335be5db7509c6438adc416bcea1359b9e6b6c4ec4b2c5b00

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=d60465ed0704db493f249c52d253d411&a=666657673&acs=d46045bd47c6ede8ce6f4f7c7198a090 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=001a8a1998efb7e3846c6aec65fa7645&a=666657673&acs=a8f13c7cf2ead4012cfaa60fcb88a957

89.208.104.221

200 OK

40 kB

URL HTTP/1.1
amanda-nn.com/?imn=001a8a1998efb7e3846c6aec65fa7645&a=666657673&acs=a8f13c7cf2ead4012cfaa60fcb88a957
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x534, components 3\012- data
Size
40 kB (39539 bytes)
Hash
bd0e9b4aaeb9639ea2cc2a9e538b23b9
c90eef56157cbf99bba0d236c6cc4153bea5c6fa
f325f3fbf6402b39d64fb3e57913ea4986651e497d750cd179dfa7735a751e78

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=001a8a1998efb7e3846c6aec65fa7645&a=666657673&acs=a8f13c7cf2ead4012cfaa60fcb88a957 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=77a330d72659ac65b9163d8115b53a95&a=666657673&acs=664750c1b66efb8d89934c64bd7ad916

89.208.104.221

200 OK

7.2 kB

URL HTTP/1.1
amanda-nn.com/?imn=77a330d72659ac65b9163d8115b53a95&a=666657673&acs=664750c1b66efb8d89934c64bd7ad916
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 176x240, components 3\012- data
Size
7.2 kB (7227 bytes)
Hash
0ba4e7c6fd27a12296248975b74eb25a
a2cbeaabe8bee8edf510e8003469598e616dc4ac
229b722ccd3c8c5250ba8f6e5fabe091c655ea246dce3c767f9957543f02c3b9

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=77a330d72659ac65b9163d8115b53a95&a=666657673&acs=664750c1b66efb8d89934c64bd7ad916 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: image/gif
Content-Length: 7227
Connection: keep-alive

amanda-nn.com/?imn=d6d5b34c8534503121785ae190023001&a=666657673&acs=e309da3c69be29d925ba4df720ed74f2

89.208.104.221

200 OK

9.5 kB

URL HTTP/1.1
amanda-nn.com/?imn=d6d5b34c8534503121785ae190023001&a=666657673&acs=e309da3c69be29d925ba4df720ed74f2
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality", baseline, precision 8, 240x180, components 3\012- data
Size
9.5 kB (9510 bytes)
Hash
f77696c35e914adb06291bbcd2e940ce
45b321ad303a9a7e5c397c1706f13c61a1a4cb35
cf96ae550884fbc4e6f9d060d82a521147e592d9489fd337d1d80513c76294ff

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=d6d5b34c8534503121785ae190023001&a=666657673&acs=e309da3c69be29d925ba4df720ed74f2 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

push.services.mozilla.com/

54.149.51.98

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.149.51.98:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: LRMIW2TojcpkebA/aq5IgA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WYwGpc6XpT/7VFnY6Zq8OECm//g=

amanda-nn.com/?imn=cc2c35ccdbb92a1bd8ef5e056d9b0f1d&a=666657673&acs=edbca1d38f24564c39eb3b8dec4ef039

89.208.104.221

200 OK

74 kB

URL HTTP/1.1
amanda-nn.com/?imn=cc2c35ccdbb92a1bd8ef5e056d9b0f1d&a=666657673&acs=edbca1d38f24564c39eb3b8dec4ef039
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Optimized by JPEGmini 3.14.7.71094560 0x1124c7d7", comment: "Optimized by JPEGmini 3.14.7.71094560 0x94d0b184", baseline, precision 8, 1280x720, components 3\012- data
Size
74 kB (74029 bytes)
Hash
b27b5708befe0a7393c4f41f762f6876
d8e3b95fad15df43a4a96fad0425dbce3787bc2b
ab666e32f61b204a85682360114d5b32d3d1566964ecb946354b23087ca23ef4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=cc2c35ccdbb92a1bd8ef5e056d9b0f1d&a=666657673&acs=edbca1d38f24564c39eb3b8dec4ef039 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=6f5df9ef628e381c2cd7ddcffe431241&a=666657673&acs=c46b0fd40c7cef8933eb4243d77cd4d5

89.208.104.221

200 OK

334 kB

URL HTTP/1.1
amanda-nn.com/?imn=6f5df9ef628e381c2cd7ddcffe431241&a=666657673&acs=c46b0fd40c7cef8933eb4243d77cd4d5
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1528x3216, components 3\012- data
Size
334 kB (334316 bytes)
Hash
0828027ec532606d3f53d665f292798e
0397c4ebbffa11d749c3a5e8e9a60d01b3135f7f
87cd5d554c377451381ec5b6d8376dd070d9993b31670343cc927ec0f0ab2cda

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=6f5df9ef628e381c2cd7ddcffe431241&a=666657673&acs=c46b0fd40c7cef8933eb4243d77cd4d5 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:29 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=a63be73e4ab353768a038f0694fd7cec&a=666657673&acs=877c8e28b66acf606000bcf0fb605a12

89.208.104.221

200 OK

207 kB

URL HTTP/1.1
amanda-nn.com/?imn=a63be73e4ab353768a038f0694fd7cec&a=666657673&acs=877c8e28b66acf606000bcf0fb605a12
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size
207 kB (206882 bytes)
Hash
a9ea17b886a61600e7aec510b303005f
ef00f090fd039319e756a93d7d7e0643aef83633
af9193902b0d78ecedddc28383c5359eecd95a07edf0e453b9a2f89d850d38f9

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=a63be73e4ab353768a038f0694fd7cec&a=666657673&acs=877c8e28b66acf606000bcf0fb605a12 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/?imn=6eda8bcd5764cb8a9dd4b34633d3a7ea&a=666657673&acs=a9dc8aa2452179ff4033c7a4115f72ba

89.208.104.221

200 OK

212 kB

URL HTTP/1.1
amanda-nn.com/?imn=6eda8bcd5764cb8a9dd4b34633d3a7ea&a=666657673&acs=a9dc8aa2452179ff4033c7a4115f72ba
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3\012- data
Size
212 kB (211754 bytes)
Hash
ba06ee5aa8ea830826d2fc2497eba8fb
77127a00ebb0764a277213ad4f4ac0392fae1ae7
6a9441865aa01ac60fcf1b2f87ae66295bb08acb39b4ca9f09efe1cfa47b2e51

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=6eda8bcd5764cb8a9dd4b34633d3a7ea&a=666657673&acs=a9dc8aa2452179ff4033c7a4115f72ba HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

amanda-nn.com/favicon.ico

89.208.104.221

404 Not Found

732 B

URL HTTP/1.1
amanda-nn.com/favicon.ico
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
732 B (732 bytes)
Hash
f31bb511c2c67bc466eafcd71be46512
e8ab5acd30a785f9d2e362550d824f1bf4c73699
e5dd2ba63f8d779fa29398c6446246de03ec17315881a5d61c9cacbb950ce5d4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Tue, 08 Nov 2022 13:34:28 GMT
ETag: W/"586-5ecf5996ab873"
Content-Encoding: gzip

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11998
Expires: Fri, 02 Dec 2022 01:36:29 GMT
Date: Thu, 01 Dec 2022 22:16:31 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11998
Expires: Fri, 02 Dec 2022 01:36:29 GMT
Date: Thu, 01 Dec 2022 22:16:31 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11998
Expires: Fri, 02 Dec 2022 01:36:29 GMT
Date: Thu, 01 Dec 2022 22:16:31 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11998
Expires: Fri, 02 Dec 2022 01:36:29 GMT
Date: Thu, 01 Dec 2022 22:16:31 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6564 bytes)
Hash
58a28fc1cbcacdb07b3ca175281982b5
9bc47ee49fc070d0997e49a719bd9758685ad583
d3bfcf749c4652cb29f7c82a5d7ba940bd607f9060e49c1c40a112eb3e625bd9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F40b76495-d9ea-430e-9b62-92b639b122e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6564
x-amzn-requestid: e2875cf3-3915-43a5-a724-4de2ca03de56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepHOiIAMFTFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-5f7e2a3f609d54a609a12670;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mwGAEu-gPXY5Opwd972VbBA6l33dNk7bPFSyZmciaplQKj2ZuTkQSg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 2504
etag: "9bc47ee49fc070d0997e49a719bd9758685ad583"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7732 bytes)
Hash
379a4a1b95d3aa3c5a4f8e7f9abb030f
d45dceb3dc58a07197aa5077582b5b1cd2ff791a
1b92dec5bf90beffbcd9060052b8788f08645dd4ba34219f7ddb2d40bbd2d151

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F864be807-d5f6-42e3-bd58-f7641a256b9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7732
x-amzn-requestid: 3781c2b7-082a-468a-a186-f7483494e749
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoEq3IAMFnKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-679fe9f905e07abf4e6a812c;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FhCtGsjgnq83-zRNBH-y9BHUh2IRaN0ahO-BCUw7bTWU8jAanBqdlA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:35 GMT
age: 1376
etag: "d45dceb3dc58a07197aa5077582b5b1cd2ff791a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.7 kB (7722 bytes)
Hash
cd78aa69439c995167f32b8a41a1f4f6
d07d6145182f312f3ed86ecf96b4ffa175416fa0
3b08cf3fad31ee0cf3ee25abc2484fb4283543865a42dfc568b14f9856fd3bb5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7722
x-amzn-requestid: 8d7c4800-6c06-43ed-afa1-94840d42f591
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGy2Gr1IAMFWeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e78-429ae3135d47e3b020c4c7a1;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z8thSamrCRejcAcQEGAp4WpSMzMEvstuZtVpKAjiCH4dyJyf1yihBA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:11 GMT
age: 1580
etag: "d07d6145182f312f3ed86ecf96b4ffa175416fa0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0842726-801f-4648-a54d-c0cb2cf5348a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5675 bytes)
Hash
89502a302863c914b4de5e8c6a7f6846
898d50ac6e372609656fccee27de3d036bc0281c
9bc1f83d570d70b7e17e5de7a1546885851431ea989d915852ae7130387c422f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0842726-801f-4648-a54d-c0cb2cf5348a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5675
x-amzn-requestid: a47e049a-6f76-4af4-8064-fd7722bcfb17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGepGYEIAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-09e13afe27c4dc5b44e828be;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: U_3ah2pFrsQl9IVVqm9EVI99FnF79b9zOUFVBGX966JAjkDg6UF--A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:47:56 GMT
age: 1715
etag: "898d50ac6e372609656fccee27de3d036bc0281c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10270 bytes)
Hash
4c7113338bc3310b13d23ca415c177e2
2cb4edc6b161c6d2d5b47aa498ae54e677966466
3a83adce869dd7eb064c583bf7ff93c57fabd7ea2da872f7d1f7d868b8a492e9

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F449f29d0-f60b-4dec-8b5b-0a1971bab406.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10270
x-amzn-requestid: ac2d2825-2ec4-435e-9921-3ea6524df1dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfG1nEvYoAMFliA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e8a-4419423112b5723e3dba46ea;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2ihxuuXiECC4oX11t_vswhnLF0UpqDuboPLkrhpWwp-vfCR5pxGGxw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:53:50 GMT
age: 1361
etag: "2cb4edc6b161c6d2d5b47aa498ae54e677966466"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

2.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
2.9 kB (2942 bytes)
Hash
b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:49:56 GMT
age: 1595
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

amanda-nn.com/?imn=a62535e1dba226af0efd2e73c607ea95&a=666657673&acs=c35b60a8f4f1ac8b46a717c84b8c7e53

89.208.104.221

200 OK

3.7 MB

URL HTTP/1.1
amanda-nn.com/?imn=a62535e1dba226af0efd2e73c607ea95&a=666657673&acs=c35b60a8f4f1ac8b46a717c84b8c7e53
IP
89.208.104.221:0
ASN
#12695 LLC Digital Network

File type
GIF image data, version 89a, 450 x 298\012- data
Size
3.7 MB (3667143 bytes)
Hash
44d8cb1993c24c4512734ec5cd461b18
f36b1246502ae8165ff2601d52bb69ae19331f5d
a2bf6d04e0bd1a2126cbc11263c96e840131a3b9b9a10dda92e2167d665c27b6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?imn=a62535e1dba226af0efd2e73c607ea95&a=666657673&acs=c35b60a8f4f1ac8b46a717c84b8c7e53 HTTP/1.1
Host: amanda-nn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://amanda-nn.com/
Cookie: ftt2=eyJpcCI6MTUzMjYzNTgwMiwiZiI6MCwicyI6Im5vcmVmIiwidiI6W10sImNjIjowLCJpbiI6MX0=

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 01 Dec 2022 22:16:30 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive

34.120.237.76

200 OK

4.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb543a0f6-0efe-4518-9420-4eff88edf8e6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.8 kB (4840 bytes)
Hash
60ccdde4ce64b4a3fe6fc2a059b3bde1
5ce119089f4a4cd139b523889b6cd84cd79191f4
2089225a6dc13845ab8e031416920d16952ae1461ca10d72c408ad001ed8f27b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb543a0f6-0efe-4518-9420-4eff88edf8e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 4840
x-amzn-requestid: 6bc8fa91-5696-4bc6-b1e7-3c36b2c01801
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGxTFxyoAMFRzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e6e-3e85b78905aaa73726eef85a;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UraCGe--VISONXzaUBpA7vuLuD5l7zihtQIph7LVn1QsS8MjLBbvKw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:51 GMT
age: 1667
etag: "5ce119089f4a4cd139b523889b6cd84cd79191f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (44)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP