| |  66.29.133.233 | 200 OK | 155 kB |
URL User Request GET HTTP/1.1IP66.29.133.233:443
CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeHTML document, ASCII text, with very long lines (25294), with CRLF, LF line terminators Size155 kB (154998 bytes) Hash750cc466604e3db96bd04039729d20c4 a1ebe15a47579ff16ade36b2c0bcca3d4fe3dd8b 5e1e3dfb2f0b75c0a29d39f383564d71c59f93f22beeae4b291512d888d828dd
GET / HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:48 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 154998
Connection: keep-alive
Vary: Accept-Encoding,Cookie
Cache-Control: max-age=3, must-revalidate
Last-Modified: Thu, 09 May 2024 02:22:38 GMT
|
|
| www.googletagmanager.com/gtag/js?id=G-TWKMJ3K9P8 | 142.250.74.168 | 200 OK | 89 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-TWKMJ3K9P8 IP142.250.74.168:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hash73834e61e74c38fcc44f98c7e417f030 1ce3ddcf892acb88800d8b3afead85316d203eb2 1f4b4fa7a58f39b45c807b00304e831f312aee3a7b7470b5dde4cdb2ae45b801
GET /gtag/js?id=G-TWKMJ3K9P8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 May 2024 02:39:48 GMT
expires: Thu, 09 May 2024 02:39:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 88847
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-Z97YLVFSF3 | 142.250.74.168 | 200 OK | 88 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-Z97YLVFSF3 IP142.250.74.168:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hash000dedc618cb968c651e91a010d2f9f8 12bfb2ceb25c47c13a8f733b06822ee8ede86232 09c190494f455e340b8d618965fbf8dae282de02cc6591704dfef9e347abb82c
GET /gtag/js?id=G-Z97YLVFSF3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 May 2024 02:39:48 GMT
expires: Thu, 09 May 2024 02:39:48 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87654
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 | 66.29.133.233 | 200 OK | 113 kB |
URL GET HTTP/1.1kenyadmission.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeASCII text, with very long lines (59701) Size113 kB (113381 bytes) Hash51a8390b47aa0582cf2d9c96c5addee2 b16a640874025d085c38119a1a02a3460f83f2de 98cecf88a23542fa047ce46eedb650b5c5128761ed4386c0977b847094ddfa20
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:48 GMT
Content-Type: text/css
Content-Length: 113381
Connection: keep-alive
Last-Modified: Wed, 03 Apr 2024 04:49:07 GMT
Accept-Ranges: bytes
|
|
| www.googletagmanager.com/gtag/js?id=G-Z97YLVFSF3&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 88 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-Z97YLVFSF3&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (5955) Hashdb357be6a134bfc10d14df745f7db8f0 1ef37b3a1c75b97799b81d38af651261c2606bf5 316391fa8b81389f1b6d6f7e9d1d5cdce0b612087e8a7f845a4f76a5779cc853
GET /gtag/js?id=G-Z97YLVFSF3&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 09 May 2024 02:39:49 GMT
expires: Thu, 09 May 2024 02:39:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87608
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.24.0 | 66.29.133.233 | 200 OK | 12 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.24.0 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (1392) Hash9593c634b81c031342cbe0fa03903d47 dd68ee9d73731b22fb7252f66be8bea5d17227c7 d7bdba02afa8c04c13f280c71a50f8c8186c883711c5dabbd13566dd738bff0a
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.24.0 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 11689
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2024 04:27:40 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.4 | 66.29.133.233 | 200 OK | 2.9 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.4 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
Hash3fd2afa98866679439097f4ab102fe0a dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.4 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/css
Content-Length: 2894
Connection: keep-alive
Last-Modified: Tue, 07 May 2024 04:48:12 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/themes/iconic-one-pro/custom.css?ver=6.5.3 | 66.29.133.233 | 200 OK | 74 B |
URL GET HTTP/1.1kenyadmission.com/wp-content/themes/iconic-one-pro/custom.css?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeASCII text, with CRLF line terminators Hashe652a3261a8288f605c84157d4b114e7 76863fe65e3b91af08d226de8752f92a577939fa e4191ce2c1660050aec1e61895d29c91c0f9ea20360086de95c34b00483aee66
GET /wp-content/themes/iconic-one-pro/custom.css?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/css
Content-Length: 74
Connection: keep-alive
Last-Modified: Tue, 19 Apr 2022 21:29:09 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 66.29.133.233 | 200 OK | 14 kB |
URL GET HTTP/1.1kenyadmission.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 13577
Connection: keep-alive
Last-Modified: Wed, 09 Aug 2023 04:27:36 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 66.29.133.233 | 200 OK | 88 kB |
URL GET HTTP/1.1kenyadmission.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 87553
Connection: keep-alive
Last-Modified: Wed, 08 Nov 2023 13:28:45 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/themes/iconic-one-pro/js/respond.min.js?ver=6.5.3 | 66.29.133.233 | 200 OK | 4.1 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/themes/iconic-one-pro/js/respond.min.js?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (3180), with CRLF line terminators Hashfada545bcf7bcca440863ab57d32494b 4656b715e3e4a9bb9706abbded24fb1ec5d2471f 80f6c847f65eab4561ee8b0e33fcc1c0d7b0bb950e515b7466c03f885317ed6b
GET /wp-content/themes/iconic-one-pro/js/respond.min.js?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 4053
Connection: keep-alive
Last-Modified: Tue, 19 Apr 2022 21:29:09 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/themes/iconic-one-pro/fonts/font-awesome.min.css?ver=6.5.3 | 66.29.133.233 | 200 OK | 29 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/themes/iconic-one-pro/fonts/font-awesome.min.css?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeASCII text, with very long lines (28900), with CRLF line terminators Hash7b3b8afb85b8791b2944d40d6caf9c18 bd7c2763e15e568bdccc85e38432d79f65f8d9a1 6f005368978df37b680de2dc8a22007a600378ba5568a573432a3fdeb8bdb674
GET /wp-content/themes/iconic-one-pro/fonts/font-awesome.min.css?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/css
Content-Length: 29065
Connection: keep-alive
Last-Modified: Tue, 19 Apr 2022 21:29:09 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.24.3 | 66.29.133.233 | 200 OK | 12 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.24.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (1392) Hash9f76e86abb234941c8b6149041c8dc56 9afc474c5043217597e2e52c18f0e8c281285de4 554ce3ea3197fb708c54dec587182e7b5af1ce730b85bf4bdced685537928abf
GET /wp-content/plugins/google-analytics-dashboard-for-wp/assets/js/frontend-gtag.min.js?ver=7.24.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 11644
Connection: keep-alive
Last-Modified: Tue, 20 Feb 2024 04:27:38 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.4 | 66.29.133.233 | 200 OK | 12 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.4 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (11513), with no line terminators Hashefc27e253fae1b7b891fb5a40e687768 ad12044651ffac0badcd0e42f32edef91678b1ff 46e36dd6ca93014e4915c723632bf180d27cc96ccfb7c26e69213e1a82129a62
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.4 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 11513
Connection: keep-alive
Last-Modified: Tue, 07 May 2024 04:48:12 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.4 | 66.29.133.233 | 200 OK | 13 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.4 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (13054), with no line terminators Hash917602d642f84a211838f0c1757c4dc1 392df3fb4b0ec96ce4ebb5616e6b2a5c55a54bf8 d702e5ed1e573918d912775ac1e88987fc177aa51efe1253a08f71ab54f96516
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.4 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 13054
Connection: keep-alive
Last-Modified: Tue, 07 May 2024 04:48:12 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/themes/iconic-one-pro/style.css?ver=6.5.3 | 66.29.133.233 | 200 OK | 46 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/themes/iconic-one-pro/style.css?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeUnicode text, UTF-8 text, with very long lines (803), with CRLF line terminators Hashee19d32087e18ae5a515874dd6a85740 5414c4101d7b1efe24231cef580dc15e2c50a528 0fce1aabff165dd669c335e8c898243dbfa2cdb56637cf16bf8b840b3542a198
GET /wp-content/themes/iconic-one-pro/style.css?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/css
Content-Length: 46312
Connection: keep-alive
Last-Modified: Tue, 19 Apr 2022 21:29:09 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 | 66.29.133.233 | 200 OK | 3.9 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text Hashdd5ae6bc707588fef1ed7e01dbdbe20f bde44294a64da36bd3382ab6646a976299156fea 756530782672d6af0bec6df0d11aaa9f36ee2ed6e2337e42620b447a718ed8ec
GET /wp-content/plugins/wp-meta-and-date-remover/assets/js/inspector.js?ver=1.1 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 3913
Connection: keep-alive
Last-Modified: Sat, 24 Feb 2024 04:47:34 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-content/themes/iconic-one-pro/js/selectnav.js?ver=6.5.3 | 66.29.133.233 | 200 OK | 4.2 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/themes/iconic-one-pro/js/selectnav.js?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with CRLF line terminators Hash9d398fa34eea4b634e81caceade85fb1 308315b285c15b0b69562a685cabd93c177bf684 fa74e2efe166bec2fe4d9a036c2de5bab6837a4d6da7c56bf41cc8697edb9d3d
GET /wp-content/themes/iconic-one-pro/js/selectnav.js?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 4195
Connection: keep-alive
Last-Modified: Tue, 19 Apr 2022 21:29:09 GMT
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 | 216.58.207.227 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 IP216.58.207.227:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34852, version 1.0 Hash0e8eefb4549a2edf26c560cb9845952e 8d0b1718aacad934fd0043c87cbc54aa091396bf 7f653b3ce9d3277457fc6da4edb246ae2f6c913f088c42dcb8cd2e96267aa21a
GET /s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:38:19 GMT
expires: Fri, 09 May 2025 02:38:19 GMT
cache-control: public, max-age=31536000
age: 90
last-modified: Wed, 27 Apr 2022 16:31:23 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 | 216.58.207.227 | 200 OK | 30 kB |
URL GET HTTP/2fonts.gstatic.com/s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 IP216.58.207.227:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 29752, version 1.0 Hashab1fc8621287e4ea9319a3136812cf80 fb4ed2e52e2a8d7ac50a7618a0c2ea5507a24ef3 7c00752ce82d6abaed0b9766d35b906b16675facdbe24115b410d1fab975effa
GET /s/ubuntu/v20/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29752
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 02:07:56 GMT
expires: Sat, 03 May 2025 02:07:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 17:05:11 GMT
content-type: font/woff2
age: 520313
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 66.29.133.233 | 200 OK | 0 B |
URL User Request GET HTTP/1.1IP66.29.133.233:443
CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD / HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: _ga_TWKMJ3K9P8=GS1.1.1715222389.1.0.1715222389.0.0.0; _ga=GA1.1.1803299926.1715222389; _ga_Z97YLVFSF3=GS1.1.1715222389.1.0.1715222389.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 154998
Connection: keep-alive
Vary: Accept-Encoding,Cookie
Cache-Control: max-age=3, must-revalidate
Last-Modified: Thu, 09 May 2024 02:22:38 GMT
|
|
| eptougry.net/tag.min.js |  139.45.197.245 | 200 OK | 28 kB |
IP139.45.197.245:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjecteptougry.net FingerprintC8:3B:C4:64:7F:01:38:96:B6:C7:22:F9:0B:B8:13:33:DD:0E:9C:E8 ValiditySun, 17 Mar 2024 05:35:52 GMT - Sat, 15 Jun 2024 05:35:51 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashe745bff74062e85880a1f13291036bd2 c857d3f4b0325b982813490f7bf4a74708e5312b c70b66edaaf364f5992e3c511df042a24ac1dac35c0b626f22cf28b79af33bf3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: eptougry.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:49 GMT
content-type: text/javascript; charset=utf-8
content-length: 28440
content-encoding: br
x-trace-id: bcd3377ed738dd7ddbba8766a2af704b
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 08 May 2024 14:07:50 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| 1.bp.blogspot.com/-3oPLXIFi66A/XQIKV8cO6KI/AAAAAAAAdzE/Ow_yzzc0edwFFdIIYr5rj5C6OiZauKWDgCLcBGAs/s1600/academia.jpg | 142.250.74.161 | 200 OK | 51 kB |
URL GET HTTP/21.bp.blogspot.com/-3oPLXIFi66A/XQIKV8cO6KI/AAAAAAAAdzE/Ow_yzzc0edwFFdIIYr5rj5C6OiZauKWDgCLcBGAs/s1600/academia.jpg IP142.250.74.161:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subjectmisc-sni.blogspot.com FingerprintC4:7D:61:88:AB:F1:15:A1:36:2A:68:39:51:62:46:00:23:6D:39:00 ValidityTue, 16 Apr 2024 03:45:20 GMT - Tue, 09 Jul 2024 03:45:19 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 728x425, components 3 Hashefd58b9bed51162028a84e39dac59f61 ebb0c3dac74662cb8356aeeafd5813451ada315a ba7654c358c0e13ca336a25d00e25a43952ad279a0723518e1952e572644281d
GET /-3oPLXIFi66A/XQIKV8cO6KI/AAAAAAAAdzE/Ow_yzzc0edwFFdIIYr5rj5C6OiZauKWDgCLcBGAs/s1600/academia.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v7732"
expires: Fri, 10 May 2024 02:39:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="academia.jpg"
x-content-type-options: nosniff
date: Thu, 09 May 2024 02:39:49 GMT
server: fife
content-length: 50724
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/wp-content/themes/iconic-one-pro/fonts/fontawesome-webfont.woff2?v=4.6.3 | 66.29.133.233 | 200 OK | 72 kB |
URL GET HTTP/1.1kenyadmission.com/wp-content/themes/iconic-one-pro/fonts/fontawesome-webfont.woff2?v=4.6.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 71896, version 4.393 Hashe6cf7c6ec7c2d6f670ae9d762604cb0b 97e438cc545714309882fbceadbf344fcaddcec5 7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /wp-content/themes/iconic-one-pro/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/wp-content/themes/iconic-one-pro/fonts/font-awesome.min.css?ver=6.5.3
Cookie: _ga_TWKMJ3K9P8=GS1.1.1715222389.1.0.1715222389.0.0.0; _ga=GA1.1.1803299926.1715222389; _ga_Z97YLVFSF3=GS1.1.1715222389.1.0.1715222389.0.0.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: font/woff2
Content-Length: 71896
Connection: keep-alive
Last-Modified: Tue, 19 Apr 2022 21:29:09 GMT
Accept-Ranges: bytes
|
|
| eptougry.net/5/6294121/?oo=1&aab=1 | 139.45.197.245 | 200 OK | 1.9 kB |
URL GET HTTP/2eptougry.net/5/6294121/?oo=1&aab=1 IP139.45.197.245:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjecteptougry.net FingerprintC8:3B:C4:64:7F:01:38:96:B6:C7:22:F9:0B:B8:13:33:DD:0E:9C:E8 ValiditySun, 17 Mar 2024 05:35:52 GMT - Sat, 15 Jun 2024 05:35:51 GMT
File typegzip compressed data, max speed, from Unix Hashdc388ada5841f7ab6f264a266c8fc134 7e2559d2a1b93a5e21ae92aaebbebf491404762c d4329f0097dacfaa61c52ade6fd905270fabaa85f248b540a9b9eeeb7c5617ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /5/6294121/?oo=1&aab=1 HTTP/1.1
Host: eptougry.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:49 GMT
content-type: application/json
x-trace-id: 67b38ef55a83880d9937e650e7ad24cb
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://kenyadmission.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=0080574f82394a8ce6a2aa7b29367483; expires=Fri, 09 May 2025 02:39:49 GMT; path=/; secure; SameSite=None
oaidts=1715222389; expires=Fri, 09 May 2025 02:39:49 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ophoacit.com/1?z=5906444 | 139.45.197.242 | 200 OK | 34 kB |
IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
File typegzip compressed data, max speed, from Unix Hash88cb90d6a32cb9e1cb7488cfc6647904 704ca569fcb62d990e3e290865a7053981ba2479 0b00b3e26b534ee5587adda5f218ab41ad8c313de8d3e44b9eb2766b29055be9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=5906444 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:48 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 1d6cbd78a108b5f283cd10aa632bbaed
access-control-expose-headers: X-Sc
x-sc: tgW1DsB1bYxKksP0r_mV4Ahf3lGSkGOcszMuMnpWhSinKAHk5L_IuWiE1yajSXdnOzGSHijuOfqf_WFtALxrB4gzhD0=
set-cookie: scm=1; expires=Fri, 09 May 2025 02:39:48 GMT; secure; SameSite=None
OAID=0400574643a34aa4ef4841a21de271de; expires=Fri, 09 May 2025 02:39:48 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:48 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js | 139.45.195.8 | 200 OK | 65 B |
IP139.45.195.8:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectrtmark.net FingerprintDB:C0:8B:64:1C:E3:2A:9C:B9:04:0D:F3:6F:5A:E0:35:F4:C7:75:CC ValiditySat, 02 Mar 2024 21:53:43 GMT - Fri, 31 May 2024 21:53:42 GMT
Hash6de4ed1d2a97a84b45ccafc5f0ceaeec 187d00e2a4781e7346b8a7c98cfac22fe376c913 f176c60cf20fbedffd5c78f6169ff1832a502c87514725c604960a5d4c58873b
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/wp-content/uploads/2022/05/University-of-Pretoria-Online-Application-Thumbnail.jpg | 66.29.133.233 | 200 OK | 1.4 MB |
URL GET HTTP/1.1kenyadmission.com/wp-content/uploads/2022/05/University-of-Pretoria-Online-Application-Thumbnail.jpg IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1440x1080, components 3 Size1.4 MB (1403378 bytes) Hash79c8a35b44e0d641b245f2754d0342f2 0717855fe05bb35612626f0a4d49ca82a9e6e2b2 a86acbb57e4689b11cc94d0f13bf61fc86b0116904151e3812377833f6d05f12
GET /wp-content/uploads/2022/05/University-of-Pretoria-Online-Application-Thumbnail.jpg HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: image/jpeg
Content-Length: 1403378
Connection: keep-alive
Last-Modified: Mon, 16 May 2022 22:49:57 GMT
Accept-Ranges: bytes
|
|
| ophoacit.com/9?z=5906444&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b | 139.45.197.242 | 204 No Content | 0 B |
URL OPTIONS HTTP/2ophoacit.com/9?z=5906444&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /9?z=5906444&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://kenyadmission.com/
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/9?z=6294231&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b | 139.45.197.242 | 200 OK | 0 B |
URL POST HTTP/2ophoacit.com/9?z=6294231&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /9?z=6294231&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://kenyadmission.com/
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/wp-content/uploads/2022/06/unisa-website-thumbnasil.png | 66.29.133.233 | 200 OK | 1.2 MB |
URL GET HTTP/1.1kenyadmission.com/wp-content/uploads/2022/06/unisa-website-thumbnasil.png IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typePNG image data, 810 x 1080, 8-bit/color RGBA, non-interlaced Size1.2 MB (1165411 bytes) Hash4464a01cd97de20b79737a8678a8c1d2 96542bed576fdcd91eac3099f3f07563ab4ec87e 7862122670b141e0847e9786b4847ba7d2b56b7fd8f33aff77ac5ceef0c6e980
GET /wp-content/uploads/2022/06/unisa-website-thumbnasil.png HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: image/png
Content-Length: 1165411
Connection: keep-alive
Last-Modified: Wed, 22 Jun 2022 19:03:19 GMT
Accept-Ranges: bytes
|
|
| ophoacit.com/9?z=5906444&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b | 139.45.197.242 | 204 No Content | 2.7 kB |
URL OPTIONS HTTP/2ophoacit.com/9?z=5906444&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashf6c5c468b2f12b202bc0fd6ec633d6cc d3965c626e5a8304cdd00b2f834ffab470cb098d f26f7b9f3a4cef82b6f3980d13ed2a7a78338fcadae085a7d8d8ae323ddab973
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /9?z=5906444&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 235
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=040057e82fd842deea582b02230b4106; oaidts=1715222388
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 04af0aaf75154f6d16f1fba5dbd3744e
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ophoacit.com/121?rnd=3055608689&z=5906444&b=15763363&c=6332999&var=&varid=0&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D812264183790841856&cln={CELL_NUMBER}&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&bag=wexiv0RNaOrsiklZn9mAP3gPO4bKkKER&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856 | 139.45.197.242 | 302 Found | 0 B |
URL GET HTTP/2ophoacit.com/121?rnd=3055608689&z=5906444&b=15763363&c=6332999&var=&varid=0&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D812264183790841856&cln={CELL_NUMBER}&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&bag=wexiv0RNaOrsiklZn9mAP3gPO4bKkKER&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856 IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /121?rnd=3055608689&z=5906444&b=15763363&c=6332999&var=&varid=0&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D812264183790841856&cln={CELL_NUMBER}&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&bag=wexiv0RNaOrsiklZn9mAP3gPO4bKkKER&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-length: 0
location: https://www.nbfcs.org/#signUp=812264183790841856
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 66dd98ae59107aa5e78a86bb419607a2
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/9?z=6294231&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b | 139.45.197.242 | 200 OK | 2.7 kB |
URL POST HTTP/2ophoacit.com/9?z=6294231&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hash7698c74c95154b997fdf581573fe946e 4749dae24f892cce9a2df6b1b5fbfbf19193c62c 71afab771104a97a1d5894fb39e21623543270bb3cf5d6cdd3e8da7ff466b493
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /9?z=6294231&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&oaid=080057f64d5b40d2e69155e23ed2723b HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 235
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=040057e82fd842deea582b02230b4106; oaidts=1715222388
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 6488e31096ed0ef783fbf7ea4de03e14
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ophoacit.com/11?rnd=4266996740&z=6294231&b=15540606&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=zPmTRlt1ds2Lj-punzf1p_FuMoqHHUZxAzT7_G-6PYN1x7c8O54NPsEdX2_1zADjND9EU47zgP4j3W2q-0fgsklt-VRr2OhxR8ZD8_9PobesFir0KP3dP8B1hioPGBCAUyAvBVN8ChO_e5ofDjg8gJYgUOq_1C9STFhN_hjo-D7bw9pEDiRga8_AWh2AphGEFFP_6XAXvPH924-CjUFKfvXgorayV0HN52KeYaF6KL-8q1vaklK6Lgm20aaJMtvqG8NpISIt2idTTvvq13ivl-_diqck9BMBo59UMQbpSgyWRkiitwgSwCS7lYG-zQARrnQqg9_FS1K0e7j8_llNoV2v9R-FWOBBxz7YVtPgImRaSKbQl1J6imNlRWKIat0O3dAs0EdPfNqOXG4cNiiGyhx_-LckGhRtUvBGH2Px_JU46k1oFOYvY-9S8Qd56ltoRDi5U0OTHiT4qKPELO_aCQMHgkMeB4LFFDru8g2fU4eCO7xCviZfrzs9SBiuy7woBWhM2MqGRfs7FVev1Ydp3CvOP2KpIyZ96rPedME4_amB47wChyuXz8SmeQ5F4NbDqesaDnI6WJgSjIchlXhWGELqNYGG0R5zp4pHj7kf0H763VOejtirm_UVr_mYBkm_zLBWNVRGML4XsnEsHRH1TqaOrdDOs3NXbjHMcHJZsVfRtzWXIW33fRG9EYu173g_81uFpxFGcC91QAEcXzjwqdh_a-KhYSqiyg9Rpxh4RjqnOqGK_gYMj4r1ndPfL2sp&ruid=10a2e144-43ef-4f65-ad80-76a177a2fb0c&subid=812264183836979200&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=286 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2ophoacit.com/11?rnd=4266996740&z=6294231&b=15540606&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=zPmTRlt1ds2Lj-punzf1p_FuMoqHHUZxAzT7_G-6PYN1x7c8O54NPsEdX2_1zADjND9EU47zgP4j3W2q-0fgsklt-VRr2OhxR8ZD8_9PobesFir0KP3dP8B1hioPGBCAUyAvBVN8ChO_e5ofDjg8gJYgUOq_1C9STFhN_hjo-D7bw9pEDiRga8_AWh2AphGEFFP_6XAXvPH924-CjUFKfvXgorayV0HN52KeYaF6KL-8q1vaklK6Lgm20aaJMtvqG8NpISIt2idTTvvq13ivl-_diqck9BMBo59UMQbpSgyWRkiitwgSwCS7lYG-zQARrnQqg9_FS1K0e7j8_llNoV2v9R-FWOBBxz7YVtPgImRaSKbQl1J6imNlRWKIat0O3dAs0EdPfNqOXG4cNiiGyhx_-LckGhRtUvBGH2Px_JU46k1oFOYvY-9S8Qd56ltoRDi5U0OTHiT4qKPELO_aCQMHgkMeB4LFFDru8g2fU4eCO7xCviZfrzs9SBiuy7woBWhM2MqGRfs7FVev1Ydp3CvOP2KpIyZ96rPedME4_amB47wChyuXz8SmeQ5F4NbDqesaDnI6WJgSjIchlXhWGELqNYGG0R5zp4pHj7kf0H763VOejtirm_UVr_mYBkm_zLBWNVRGML4XsnEsHRH1TqaOrdDOs3NXbjHMcHJZsVfRtzWXIW33fRG9EYu173g_81uFpxFGcC91QAEcXzjwqdh_a-KhYSqiyg9Rpxh4RjqnOqGK_gYMj4r1ndPfL2sp&ruid=10a2e144-43ef-4f65-ad80-76a177a2fb0c&subid=812264183836979200&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=286 IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=4266996740&z=6294231&b=15540606&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=zPmTRlt1ds2Lj-punzf1p_FuMoqHHUZxAzT7_G-6PYN1x7c8O54NPsEdX2_1zADjND9EU47zgP4j3W2q-0fgsklt-VRr2OhxR8ZD8_9PobesFir0KP3dP8B1hioPGBCAUyAvBVN8ChO_e5ofDjg8gJYgUOq_1C9STFhN_hjo-D7bw9pEDiRga8_AWh2AphGEFFP_6XAXvPH924-CjUFKfvXgorayV0HN52KeYaF6KL-8q1vaklK6Lgm20aaJMtvqG8NpISIt2idTTvvq13ivl-_diqck9BMBo59UMQbpSgyWRkiitwgSwCS7lYG-zQARrnQqg9_FS1K0e7j8_llNoV2v9R-FWOBBxz7YVtPgImRaSKbQl1J6imNlRWKIat0O3dAs0EdPfNqOXG4cNiiGyhx_-LckGhRtUvBGH2Px_JU46k1oFOYvY-9S8Qd56ltoRDi5U0OTHiT4qKPELO_aCQMHgkMeB4LFFDru8g2fU4eCO7xCviZfrzs9SBiuy7woBWhM2MqGRfs7FVev1Ydp3CvOP2KpIyZ96rPedME4_amB47wChyuXz8SmeQ5F4NbDqesaDnI6WJgSjIchlXhWGELqNYGG0R5zp4pHj7kf0H763VOejtirm_UVr_mYBkm_zLBWNVRGML4XsnEsHRH1TqaOrdDOs3NXbjHMcHJZsVfRtzWXIW33fRG9EYu173g_81uFpxFGcC91QAEcXzjwqdh_a-KhYSqiyg9Rpxh4RjqnOqGK_gYMj4r1ndPfL2sp&ruid=10a2e144-43ef-4f65-ad80-76a177a2fb0c&subid=812264183836979200&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=286 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 4d4c672428a303562af6907d552225f7
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| eptougry.net/?rb=rsCHHcBQYGEF2G7F2vFUo2AP90XsxY_Neb5GMwgmC8T30QPUGWVebiVFoqdWwB4aK8W8cCO-38SmREie43zuEFezrgXGGlnj3gC3KDzMraj4-iBwffL-jeyHQe5zQvr3H9fx2ty06UnWejv3Yt_hMkoxDcebw4CFk4Zew06cXkBjED_RCOYqkT6igKsf1bP2ajHSK4SFFX7PyMKYQSOwrq9U2Z5CO2xGQMbrhGjWICi6H9dw98kbLWAnWCXNpZ4NfYuug5Ys-BJg-rmF&request_ab2=0&zoneid=6294121&js_build=iclick-v1.791.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fkenyadmission.com%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.791.0&navlng=en-US&pnt=0&pnrc=0&bs=4e565656-104e-4d7b-a698-6f642c6eca11&wasm=1&userId=080057f64d5b40d2e69155e23ed2723b&m=link | 139.45.197.245 | 200 OK | 2.1 kB |
URL GET HTTP/2eptougry.net/?rb=rsCHHcBQYGEF2G7F2vFUo2AP90XsxY_Neb5GMwgmC8T30QPUGWVebiVFoqdWwB4aK8W8cCO-38SmREie43zuEFezrgXGGlnj3gC3KDzMraj4-iBwffL-jeyHQe5zQvr3H9fx2ty06UnWejv3Yt_hMkoxDcebw4CFk4Zew06cXkBjED_RCOYqkT6igKsf1bP2ajHSK4SFFX7PyMKYQSOwrq9U2Z5CO2xGQMbrhGjWICi6H9dw98kbLWAnWCXNpZ4NfYuug5Ys-BJg-rmF&request_ab2=0&zoneid=6294121&js_build=iclick-v1.791.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fkenyadmission.com%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.791.0&navlng=en-US&pnt=0&pnrc=0&bs=4e565656-104e-4d7b-a698-6f642c6eca11&wasm=1&userId=080057f64d5b40d2e69155e23ed2723b&m=link IP139.45.197.245:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjecteptougry.net FingerprintC8:3B:C4:64:7F:01:38:96:B6:C7:22:F9:0B:B8:13:33:DD:0E:9C:E8 ValiditySun, 17 Mar 2024 05:35:52 GMT - Sat, 15 Jun 2024 05:35:51 GMT
Hashab4d0bd1336adaab54d350f5c26ca45e 0307fd16593460c163344dd6aa9099126e498227 b689a8f963660067f69772108070a69f73f0847053ac45bf693318b792b2b71f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?rb=rsCHHcBQYGEF2G7F2vFUo2AP90XsxY_Neb5GMwgmC8T30QPUGWVebiVFoqdWwB4aK8W8cCO-38SmREie43zuEFezrgXGGlnj3gC3KDzMraj4-iBwffL-jeyHQe5zQvr3H9fx2ty06UnWejv3Yt_hMkoxDcebw4CFk4Zew06cXkBjED_RCOYqkT6igKsf1bP2ajHSK4SFFX7PyMKYQSOwrq9U2Z5CO2xGQMbrhGjWICi6H9dw98kbLWAnWCXNpZ4NfYuug5Ys-BJg-rmF&request_ab2=0&zoneid=6294121&js_build=iclick-v1.791.0&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=1024&wiw=1280&ww=1280&wh=1024&sah=1024&wx=0&wy=0&cw=1280&wfc=1&pl=https%3A%2F%2Fkenyadmission.com%2F&drf=&np=1&pt=0&nb=1&ng=0&ix=0&nw=1&tb=false&btz=UTC&bto=0&wgl=&js_build=iclick-v1.791.0&navlng=en-US&pnt=0&pnrc=0&bs=4e565656-104e-4d7b-a698-6f642c6eca11&wasm=1&userId=080057f64d5b40d2e69155e23ed2723b&m=link HTTP/1.1
Host: eptougry.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kenyadmission.com/
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Cookie: OAID=0080574f82394a8ce6a2aa7b29367483; oaidts=1715222389
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: application/json
x-trace-id: f4f7d6c8cc261f3396f92b0619cc9378
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://kenyadmission.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; path=/; secure; SameSite=None
oaidts=1715222390; expires=Fri, 09 May 2025 02:39:50 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 16 May 2024 02:39:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/favicon.ico | 66.29.133.233 | 302 Found | 0 B |
URL GET HTTP/1.1kenyadmission.com/favicon.ico IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: _ga_TWKMJ3K9P8=GS1.1.1715222389.1.0.1715222389.0.0.0; _ga=GA1.1.1803299926.1715222389; _ga_Z97YLVFSF3=GS1.1.1715222389.1.0.1715222389.0.0.0; prefetchAd_6294121=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 09 May 2024 02:39:51 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Vary: Accept-Encoding,Cookie
Link: <https://kenyadmission.com/wp-json/>; rel="https://api.w.org/"
X-Redirect-By: WordPress
Location: https://kenyadmission.com/wp-includes/images/w-logo-blue-white-bg.png
|
|
| www.nbfcs.org/ |  95.211.219.66 | | 11 B |
IP95.211.219.66:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeASCII text, with no line terminators Hash32682312d17c7cbf18e73594f5570319 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET / HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Thu, 09 May 2024 02:39:50 GMT
location: http://ww1.nbfcs.org/?subid1=68e130a7-0dad-11ef-8ce7-469b965f8805
server: Cowboy
set-cookie: sid=68e130a7-0dad-11ef-8ce7-469b965f8805; path=/; domain=.nbfcs.org; expires=Tue, 27 May 2092 05:53:58 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Ubuntu%3A400%2C700&subset=latin%2Clatin-ext | 142.250.74.42 | 200 OK | 31 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Ubuntu%3A400%2C700&subset=latin%2Clatin-ext IP142.250.74.42:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typegzip compressed data, max compression Hash0fcb21f11d0e32072d77e35b7c7c2403 71927d4d55af17d578518ad81aeaa0e39b52df24 25d875dc252efc97d1a7cb3510188a3d47d00b86bb4e4dbc62ecaee42e7ccc6d
GET /css?family=Ubuntu%3A400%2C700&subset=latin%2Clatin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 09 May 2024 02:39:48 GMT
date: Thu, 09 May 2024 02:39:48 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| admissions.co.ug/wp-content/uploads/2022/04/sample-3.png | 66.29.133.233 | 200 OK | 1.4 MB |
URL GET HTTP/1.1admissions.co.ug/wp-content/uploads/2022/04/sample-3.png IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectadmissions.co.ug Fingerprint74:0C:C1:F2:71:B9:AD:AB:C1:6E:74:74:81:50:8F:26:EE:57:6A:2B ValidityThu, 21 Mar 2024 00:53:32 GMT - Wed, 19 Jun 2024 00:53:31 GMT
File typePNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced Size1.4 MB (1438396 bytes) Hash23f3ac5a9ac0a80c82293be7b1888c64 e1cf6c4d039c6d964fc72433070a6f0193a7600d e897d9295144f965f1a7112097323b18a7d664e9d0a45fd8fca78b61d46ffe61
GET /wp-content/uploads/2022/04/sample-3.png HTTP/1.1
Host: admissions.co.ug
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:50 GMT
Content-Type: image/png
Content-Length: 1438396
Connection: keep-alive
Last-Modified: Thu, 28 Apr 2022 21:26:59 GMT
Accept-Ranges: bytes
|
|
| kenyadmission.com/wp-includes/images/w-logo-blue-white-bg.png | 66.29.133.233 | 200 OK | 4.1 kB |
URL GET HTTP/1.1kenyadmission.com/wp-includes/images/w-logo-blue-white-bg.png IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typePNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced Hash000bf649cc8f6bf27cfb04d1bcdcd3c7 d73d2f6d74ec6cdcbae07955592962e77d8ae814 6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kenyadmission.com/
DNT: 1
Connection: keep-alive
Cookie: _ga_TWKMJ3K9P8=GS1.1.1715222389.1.0.1715222389.0.0.0; _ga=GA1.1.1803299926.1715222389; _ga_Z97YLVFSF3=GS1.1.1715222389.1.0.1715222389.0.0.0; prefetchAd_6294121=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:51 GMT
Content-Type: image/png
Content-Length: 4119
Connection: keep-alive
Last-Modified: Tue, 16 Nov 2021 00:04:01 GMT
Accept-Ranges: bytes
|
|
| b6f71hwqomrafu683pz507uj2g.hop.clickbank.net/?tid=go1&clickid=812264183836979200 | 52.27.199.168 | 307 Temporary Redirect | 0 B |
URL GET HTTP/2b6f71hwqomrafu683pz507uj2g.hop.clickbank.net/?tid=go1&clickid=812264183836979200 IP52.27.199.168:443
Requested byhttps://kenyadmission.com/ CertificateIssuerAmazon Subject*.clickbank.net FingerprintF6:83:80:57:29:2F:05:CA:22:F9:4C:9D:38:00:09:58:06:FC:7F:99 ValiditySat, 27 Jan 2024 00:00:00 GMT - Mon, 24 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?tid=go1&clickid=812264183836979200 HTTP/1.1
Host: b6f71hwqomrafu683pz507uj2g.hop.clickbank.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Thu, 09 May 2024 02:39:51 GMT
content-length: 0
location: http://futmillionaire.com?hopId=f773a7fe-7e01-471f-baa7-7d0b491452a6&clickid=812264183836979200
accept-ch: Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Bitness
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
x-frame-options: DENY
x-xss-protection: 1 ; mode=block
referrer-policy: no-referrer
set-cookie: q=01.F60541C7378B192613D821AD3F5E9348FA9CD383DB8C07E7AF994088F554004AE552AEE32CA018CF04C6BCFC0751369C7743B85B; Path=/; Domain=.clickbank.net; Max-Age=31536000; Expires=Fri, 09 May 2025 02:39:51 GMT
server-timing: traceparent;desc="00-0f356b77837ad43acf04eb5ea54f86f1-83159d9a1dc80c5b-01"
access-control-expose-headers: Server-Timing
X-Firefox-Spdy: h2
|
|
| ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A1.516%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A1.516%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A1.516%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388; oaidvc=1; CNT=1_v1_o4fwAAEAAACMTQAA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 09 May 2024 02:39:51 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 10e593437d8621ba3831bde166c6e246
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:51 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:51 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.519%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.519%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A3.519%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388; oaidvc=1; CNT=1_v1_o4fwAAEAAACMTQAA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 09 May 2024 02:39:53 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: ccf624d7f07646919e77f890f30cd115
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:53 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:53 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A7.52%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A7.52%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A7.52%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388; oaidvc=1; CNT=1_v1_o4fwAAEAAACMTQAA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 09 May 2024 02:39:57 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 2983365041b1aeaabad4248b782bde84
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:57 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:57 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A15.525%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D | 139.45.197.242 | 204 No Content | 0 B |
URL GET HTTP/2ophoacit.com/15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A15.525%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /15?rnd=2928192901&z=5906444&var=&varid=0&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&uci=%7B%22path%22%3A%7B%22count%22%3A0%2C%22totalLength%22%3A0%2C%22pathHistogram%22%3A%7B%224%22%3A0%2C%228%22%3A0%2C%2216%22%3A0%2C%2232%22%3A0%2C%2264%22%3A0%2C%22128%22%3A0%2C%22256%22%3A0%2C%22512%22%3A0%2C%221024%22%3A0%7D%7D%2C%22durationOnCreate%22%3A15.525%2C%22location%22%3A%22https%3A%2F%2Fkenyadmission.com%2F%22%2C%22isSelenium%22%3Afalse%2C%22isPhantom%22%3Afalse%2C%22isTouch%22%3Afalse%2C%22pluginCount%22%3A5%2C%22wdov%22%3A0%2C%22wvr%22%3A1%2C%22wiv%22%3Atrue%2C%22isIONS%22%3Atrue%7D HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388; oaidvc=1; CNT=1_v1_o4fwAAEAAACMTQAA
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 09 May 2024 02:40:05 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: bc82fff9c62fe63524c3fa370399e862
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:40:05 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:40:05 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| kenyadmission.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 | 66.29.133.233 | 200 OK | 19 kB |
URL GET HTTP/1.1kenyadmission.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 IP66.29.133.233:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectwww.kenyadmission.howtoapply.net Fingerprint95:9E:5A:EF:93:91:10:5B:96:EE:E8:48:00:E3:3E:B5:E6:50:00:6B ValidityFri, 22 Mar 2024 00:53:19 GMT - Thu, 20 Jun 2024 00:53:18 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.3 HTTP/1.1
Host: kenyadmission.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: _ga_TWKMJ3K9P8=GS1.1.1715222389.1.0.1715222389.0.0.0; _ga=GA1.1.1803299926.1715222389; _ga_Z97YLVFSF3=GS1.1.1715222389.1.0.1715222389.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 02:39:49 GMT
Content-Type: text/javascript
Content-Length: 18726
Connection: keep-alive
Last-Modified: Wed, 03 Apr 2024 04:49:07 GMT
Accept-Ranges: bytes
|
|
| www.nbfcs.org/ | 95.211.219.66 | 302 Found | 0 B |
IP95.211.219.66:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectnbfcs.org FingerprintE3:83:6F:69:48:41:C8:15:8B:C9:60:80:00:84:9A:A7:01:18:85:36 ValidityFri, 05 Apr 2024 04:35:50 GMT - Thu, 04 Jul 2024 04:35:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Thu, 09 May 2024 02:39:50 GMT
location: http://ww1.nbfcs.org/?subid1=68e130a7-0dad-11ef-8ce7-469b965f8805
server: Cowboy
set-cookie: sid=68e130a7-0dad-11ef-8ce7-469b965f8805; path=/; domain=.nbfcs.org; expires=Tue, 27 May 2092 05:53:58 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| ophoacit.com/1?z=6294231 | 139.45.197.242 | 200 OK | 43 kB |
IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
File typeJavaScript source, ASCII text, with very long lines (42427) Hashc1401ee870fe1e56999811ed63242f29 a7e292e96b8a3882e2702bc69c7f07848ebded40 8b95ff3a18f846a1cb5f29b7b5cc097277629d13f932891e667c59707ff9cd32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1?z=6294231 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:48 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 1b08c9e5da1c4697c6381d60d90a4878
access-control-expose-headers: X-Sc
x-sc: nPHNVxDUcazFvIyr1PJxBGcDNi-8v1nmoeko09QoraQQACYUsKVjai2C8Ad_0lFoDJYGt60YLjJ6eoRv5PgiNXKOo4Y=
set-cookie: scm=1; expires=Fri, 09 May 2025 02:39:48 GMT; secure; SameSite=None
OAID=040057e82fd842deea582b02230b4106; expires=Fri, 09 May 2025 02:39:48 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:48 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ophoacit.com/121?rnd=3144661723&z=6294231&b=15540606&c=6274858&var=&varid=0&d=https%3A%2F%2Fb6f71hwqomrafu683pz507uj2g.hop.clickbank.net%2F%3Ftid%3Dgo1%26clickid%3D812264183836979200&cln={CELL_NUMBER}&btp=7&rb=zPmTRlt1ds2Lj-punzf1p_FuMoqHHUZxAzT7_G-6PYN1x7c8O54NPsEdX2_1zADjND9EU47zgP4j3W2q-0fgsklt-VRr2OhxR8ZD8_9PobesFir0KP3dP8B1hioPGBCAUyAvBVN8ChO_e5ofDjg8gJYgUOq_1C9STFhN_hjo-D7bw9pEDiRga8_AWh2AphGEFFP_6XAXvPH924-CjUFKfvXgorayV0HN52KeYaF6KL-8q1vaklK6Lgm20aaJMtvqG8NpISIt2idTTvvq13ivl-_diqck9BMBo59UMQbpSgyWRkiitwgSwCS7lYG-zQARrnQqg9_FS1K0e7j8_llNoV2v9R-FWOBBxz7YVtPgImRaSKbQl1J6imNlRWKIat0O3dAs0EdPfNqOXG4cNiiGyhx_-LckGhRtUvBGH2Px_JU46k1oFOYvY-9S8Qd56ltoRDi5U0OTHiT4qKPELO_aCQMHgkMeB4LFFDru8g2fU4eCO7xCviZfrzs9SBiuy7woBWhM2MqGRfs7FVev1Ydp3CvOP2KpIyZ96rPedME4_amB47wChyuXz8SmeQ5F4NbDqesaDnI6WJgSjIchlXhWGELqNYGG0R5zp4pHj7kf0H763VOejtirm_UVr_mYBkm_zLBWNVRGML4XsnEsHRH1TqaOrdDOs3NXbjHMcHJZsVfRtzWXIW33fRG9EYu173g_81uFpxFGcC91QAEcXzjwqdh_a-KhYSqiyg9Rpxh4RjqnOqGK_gYMj4r1ndPfL2sp&bag=dXET3OOdoy5eYXFzU6vE-uXjxzTmA7hz&ruid=10a2e144-43ef-4f65-ad80-76a177a2fb0c&subid=812264183836979200 | 139.45.197.242 | 302 Found | 0 B |
URL GET HTTP/2ophoacit.com/121?rnd=3144661723&z=6294231&b=15540606&c=6274858&var=&varid=0&d=https%3A%2F%2Fb6f71hwqomrafu683pz507uj2g.hop.clickbank.net%2F%3Ftid%3Dgo1%26clickid%3D812264183836979200&cln={CELL_NUMBER}&btp=7&rb=zPmTRlt1ds2Lj-punzf1p_FuMoqHHUZxAzT7_G-6PYN1x7c8O54NPsEdX2_1zADjND9EU47zgP4j3W2q-0fgsklt-VRr2OhxR8ZD8_9PobesFir0KP3dP8B1hioPGBCAUyAvBVN8ChO_e5ofDjg8gJYgUOq_1C9STFhN_hjo-D7bw9pEDiRga8_AWh2AphGEFFP_6XAXvPH924-CjUFKfvXgorayV0HN52KeYaF6KL-8q1vaklK6Lgm20aaJMtvqG8NpISIt2idTTvvq13ivl-_diqck9BMBo59UMQbpSgyWRkiitwgSwCS7lYG-zQARrnQqg9_FS1K0e7j8_llNoV2v9R-FWOBBxz7YVtPgImRaSKbQl1J6imNlRWKIat0O3dAs0EdPfNqOXG4cNiiGyhx_-LckGhRtUvBGH2Px_JU46k1oFOYvY-9S8Qd56ltoRDi5U0OTHiT4qKPELO_aCQMHgkMeB4LFFDru8g2fU4eCO7xCviZfrzs9SBiuy7woBWhM2MqGRfs7FVev1Ydp3CvOP2KpIyZ96rPedME4_amB47wChyuXz8SmeQ5F4NbDqesaDnI6WJgSjIchlXhWGELqNYGG0R5zp4pHj7kf0H763VOejtirm_UVr_mYBkm_zLBWNVRGML4XsnEsHRH1TqaOrdDOs3NXbjHMcHJZsVfRtzWXIW33fRG9EYu173g_81uFpxFGcC91QAEcXzjwqdh_a-KhYSqiyg9Rpxh4RjqnOqGK_gYMj4r1ndPfL2sp&bag=dXET3OOdoy5eYXFzU6vE-uXjxzTmA7hz&ruid=10a2e144-43ef-4f65-ad80-76a177a2fb0c&subid=812264183836979200 IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /121?rnd=3144661723&z=6294231&b=15540606&c=6274858&var=&varid=0&d=https%3A%2F%2Fb6f71hwqomrafu683pz507uj2g.hop.clickbank.net%2F%3Ftid%3Dgo1%26clickid%3D812264183836979200&cln={CELL_NUMBER}&btp=7&rb=zPmTRlt1ds2Lj-punzf1p_FuMoqHHUZxAzT7_G-6PYN1x7c8O54NPsEdX2_1zADjND9EU47zgP4j3W2q-0fgsklt-VRr2OhxR8ZD8_9PobesFir0KP3dP8B1hioPGBCAUyAvBVN8ChO_e5ofDjg8gJYgUOq_1C9STFhN_hjo-D7bw9pEDiRga8_AWh2AphGEFFP_6XAXvPH924-CjUFKfvXgorayV0HN52KeYaF6KL-8q1vaklK6Lgm20aaJMtvqG8NpISIt2idTTvvq13ivl-_diqck9BMBo59UMQbpSgyWRkiitwgSwCS7lYG-zQARrnQqg9_FS1K0e7j8_llNoV2v9R-FWOBBxz7YVtPgImRaSKbQl1J6imNlRWKIat0O3dAs0EdPfNqOXG4cNiiGyhx_-LckGhRtUvBGH2Px_JU46k1oFOYvY-9S8Qd56ltoRDi5U0OTHiT4qKPELO_aCQMHgkMeB4LFFDru8g2fU4eCO7xCviZfrzs9SBiuy7woBWhM2MqGRfs7FVev1Ydp3CvOP2KpIyZ96rPedME4_amB47wChyuXz8SmeQ5F4NbDqesaDnI6WJgSjIchlXhWGELqNYGG0R5zp4pHj7kf0H763VOejtirm_UVr_mYBkm_zLBWNVRGML4XsnEsHRH1TqaOrdDOs3NXbjHMcHJZsVfRtzWXIW33fRG9EYu173g_81uFpxFGcC91QAEcXzjwqdh_a-KhYSqiyg9Rpxh4RjqnOqGK_gYMj4r1ndPfL2sp&bag=dXET3OOdoy5eYXFzU6vE-uXjxzTmA7hz&ruid=10a2e144-43ef-4f65-ad80-76a177a2fb0c&subid=812264183836979200 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-length: 0
location: https://b6f71hwqomrafu683pz507uj2g.hop.clickbank.net/?tid=go1&clickid=812264183836979200
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 747d8bd346ad1aaf5e8e27897a09e4bd
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/11?rnd=365028866&z=5906444&b=15763363&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2ophoacit.com/11?rnd=365028866&z=5906444&b=15763363&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=365028866&z=5906444&b=15763363&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: b8c10863f3d5d03869a8a297863a3d9c
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
oaidvc=1; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
CNT=1_v1_o4fwAAEAAACMTQAA; expires=Thu, 09 May 2024 03:39:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ophoacit.com/11?rnd=365028866&z=5906444&b=15763363&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=157 | 139.45.197.242 | 200 OK | 0 B |
URL GET HTTP/2ophoacit.com/11?rnd=365028866&z=5906444&b=15763363&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=157 IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /11?rnd=365028866&z=5906444&b=15763363&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=13_GldIhbCko3Bgzyn6uWHpQF6IV8EkDcggOMgCN7th-klKAXI4cYvW40lacpIBX_rBrzpzuiybSHl65Wgk7c23kwIPULGXQhHOS7qsl5KkR6dFzmYvHh1hTA1y471Sxbl20gzelrGWZQLsMDiW8fyPVJ1dLGxB__ndaiOPvBHJsgNAI9Y0OQRJEq_IYOcvMIklAGxszwh_pxAnlIEnxyEV7qGzPtr8zyxMUAlO7EZYQUyWK9lROZhAAD_e7LA6Muahd1NI6s64Yo3gcFBWScZ-HI0NKTK-pnaphzN76xx64MxpRBCKALotHOgxqKJQLivUzSY_Pgo-mUQWajAgIKtMSZjrl0s54JwYKPRdskarK37tsfTVVsF3FS2mtwRRvi_AoasE0BN481XCRrTkyOCXyinZgdggBij2k0A8JC90w-uBZr1E1ZbHFl2G2WWSRPKBn0Jm0ZZexyCIgnOKaE2lnBCSny-f4cGQWviLoFiy9w7582aXAztEAQHfkdBJ49Qa2G4l6Ptc_iXDuXL6kGmUv1kMw5Fm19uhvxgx3f4rfJHPga7bW0CNHJ1TSJhZRvRwDs8XqFvr0HGPw7PciZtdJ__T4-XbeLxaW7L_wF3ztbiwN_nFG7A3maJ7suxKjvU6uT-oeFyliZZWOZ4QcaUaQQt8fb9mtFWWuH25clWg2FOmTXiWSbuCW3XRDHI4bOHplk-0RmPAnESErF9_LqZY99pKMHz3mPpZb7w==&ruid=c91acd8d-c439-4c5a-a38d-a512431468ba&subid=812264183790841856&ng=0&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fkenyadmission.com%2F&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=1&sah=1024&drf=&hil=1&ist=0&ot=157 HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://kenyadmission.com
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=080057f64d5b40d2e69155e23ed2723b; oaidts=1715222388
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:50 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://kenyadmission.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 94e65d3df98acef5abd4125fb16d9d6f
access-control-expose-headers: X-Sc
set-cookie: OAID=080057f64d5b40d2e69155e23ed2723b; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
oaidts=1715222388; expires=Fri, 09 May 2025 02:39:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| lh3.googleusercontent.com/_Er3tTCNJLqPCsfEzuxDlvIe-AkJCy6-idogFqV50V4gLrgFAFIdTP6QKRvRh31mlHEu | 142.250.74.97 | 200 OK | 31 kB |
URL GET HTTP/2lh3.googleusercontent.com/_Er3tTCNJLqPCsfEzuxDlvIe-AkJCy6-idogFqV50V4gLrgFAFIdTP6QKRvRh31mlHEu IP142.250.74.97:443
Requested byhttps://kenyadmission.com/ CertificateIssuerGoogle Trust Services LLC Subject*.googleusercontent.com Fingerprint7B:64:D0:4F:29:87:0A:A8:90:15:F1:9F:B6:8F:FB:D6:AC:D2:76:56 ValidityTue, 16 Apr 2024 04:13:47 GMT - Tue, 09 Jul 2024 04:13:46 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Hash7718758a7488b818af9340386cc272d2 2a6fab1b65ba747e1f1acfb48105056361a2a6fd 009d8e257b9b0424f485e1838143678a23504a58a2bbd759e6287c20ff5602ff
GET /_Er3tTCNJLqPCsfEzuxDlvIe-AkJCy6-idogFqV50V4gLrgFAFIdTP6QKRvRh31mlHEu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Fri, 10 May 2024 02:39:51 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Thu, 09 May 2024 02:39:51 GMT
server: fife
content-length: 30762
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ophoacit.com/27/7552beb94fc0bdff7bbb33cad3d1ab0a | 139.45.197.242 | 200 OK | 413 kB |
URL GET HTTP/2ophoacit.com/27/7552beb94fc0bdff7bbb33cad3d1ab0a IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65523) Size413 kB (413423 bytes) Hash297cc248309ba835cf13a1f82fd3f938 1e6f51ce257a0ee53e25280dd44092ed33339847 b2ba9d8b2216d22f8f31a594bc22ee21f60e2b539474a650be1e87dea87d5ed7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /27/7552beb94fc0bdff7bbb33cad3d1ab0a HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=040057e82fd842deea582b02230b4106; oaidts=1715222388
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:49 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: bf35dfcbab3e52c9a31e9cac9598a7d9
cache-control: max-age:290304000, public
last-modified: Tue, 09 Apr 2024 03:16:58 GMT
expires: Tue, 09 May 2084 03:16:58 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ophoacit.com/27/7552beb94fc0bdff7bbb33cad3d1ab0a | 139.45.197.242 | 200 OK | 413 kB |
URL GET HTTP/2ophoacit.com/27/7552beb94fc0bdff7bbb33cad3d1ab0a IP139.45.197.242:443
Requested byhttps://kenyadmission.com/ CertificateIssuerLet's Encrypt Subjectophoacit.com FingerprintD4:EF:6E:1D:4B:02:94:E8:E2:BE:63:9E:48:59:EC:F6:C5:0F:92:9D ValidityThu, 18 Apr 2024 22:05:16 GMT - Wed, 17 Jul 2024 22:05:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65523) Size413 kB (413423 bytes) Hash297cc248309ba835cf13a1f82fd3f938 1e6f51ce257a0ee53e25280dd44092ed33339847 b2ba9d8b2216d22f8f31a594bc22ee21f60e2b539474a650be1e87dea87d5ed7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /27/7552beb94fc0bdff7bbb33cad3d1ab0a HTTP/1.1
Host: ophoacit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kenyadmission.com/
Cookie: scm=1; OAID=040057e82fd842deea582b02230b4106; oaidts=1715222388
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 09 May 2024 02:39:49 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: bf35dfcbab3e52c9a31e9cac9598a7d9
cache-control: max-age:290304000, public
last-modified: Tue, 09 Apr 2024 03:16:58 GMT
expires: Tue, 09 May 2084 03:16:58 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
0.0.0.0