nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
188.114.97.1200 OK 0 B URL User Request GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /qedeq7777/qed1qe51d1qed1/ HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Wed, 22 Nov 2023 13:09:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 22 Nov 2023 14:09:02 GMT
Location: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nwGzEdTGBTzydwLuQbskTSBof8IjL0nVXFA8CSgvnbOrE7A1zGYgUowxo7v6Lf9pNH0u%2BjVs%2FESHY7MuvJle9JHc2zqExlObvD4frUP2Fj4RCpI7D8zeV12CMQKsbbD%2FJK0TvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 82a16791de981c16-OSL
alt-svc: h2=":443"; ma=60
www.googletagmanager.com/gtag/js?id=G-WEFZTEQC7H
142.250.74.168200 OK 77 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-WEFZTEQC7H
IP 142.250.74.168:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash ae3c91daeac7d45718202a7439664d26
f2c25b06939b14d7bf30f6fde65377545501d79d
1f2bbaebd45d07ec489b01639026571c8ea3ce3b683eb0a3d2c01066a3f4468b
GET /gtag/js?id=G-WEFZTEQC7H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 22 Nov 2023 13:09:03 GMT
expires: Wed, 22 Nov 2023 13:09:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77023
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/rx8fsr82.png
188.114.97.1 1.4 kB URL nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/rx8fsr82.png
IP 188.114.97.1:0
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 148 x 21, 8-bit/color RGBA, non-interlaced\012- data
Hash 5bfbcd30ce3355f8de3fb0536de70715
51fd9c511bc0d2e0e3fb23955575eacd94d5b9e5
dfcc16fd49167f62d2acb07ed991fb0535f5ca863c5c15cfa20cfd76c1b1cfbe
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/rx8fsr82.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 1443
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: "655cd5f6-5a3"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EP30eLjFePSZIfZtQ8nZCLw5%2F4S5ks74CJKthSibR7EVbGWMbS4ony7vg%2Bs3yLZRK3WPw4Mi7OPjDn%2FtWo4jeRNddzKoM%2B4w9Ej4C35zGAu0PkGJErSAQhvdndTKeNc3ObDb%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999efb50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/62_z_2pj.png
188.114.97.1200 OK 364 B URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/62_z_2pj.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/62_z_2pj.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 364
last-modified: Tue, 21 Nov 2023 16:08:18 GMT
etag: "655cd5f2-16c"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7NkNuHKq%2FwAHMzHvgqJhINGnzSLVqS1uWJ0U91auVhwbEj30XPxc70NduK9orE96jjfLwqFw2DUgXXkLkRKSf%2Bmk23Ss%2BckyIky5WlMeGc5pqhj2APkO7yKQFTe3qV%2Bbjq9oyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999f2b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/c8bv4au6.png
188.114.97.1200 OK 3.8 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/c8bv4au6.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/c8bv4au6.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 3834
last-modified: Tue, 21 Nov 2023 16:08:20 GMT
etag: "655cd5f4-efa"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3xn%2BPHuHoVXFALyFKvBhmZYX51Y6oYAd8qpsxxw2brTfH8llIB41Y7ecD7wyX9ZZo6qGPW35dv3fKYBOjpHrhIOPrradk40cfLVZQih%2FMzc1pGAYFWcaftz1vD8bnck20DgC4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799aa09b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/qu1107xm.png
188.114.97.1200 OK 1.0 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/qu1107xm.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/qu1107xm.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 1045
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: "655cd5f6-415"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4HIxTsM%2BzxyZDWIBPYnooua5GX8rb1wi%2B4S8dcflk1hnn%2FaXKvJK3HuQXuhOlwV5g4H7%2BInnLLXYf1T1B0pxZeWiH38eacHS3SXe3bsDhAPsZP0MrD4ZFM2cib%2Bcc4PxQ3CBkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999f0b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/g91s5y-p.png
188.114.97.1 4.9 kB URL nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/g91s5y-p.png
IP 188.114.97.1:0
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash cc5132b56ba46b03dd998aa1fe220106
403e007a0b17d76a9945fa5ec46a9d01733b3040
598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/g91s5y-p.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 4949
last-modified: Tue, 21 Nov 2023 16:08:20 GMT
etag: "655cd5f4-1355"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=17XViAP6cCZ%2FwMF1Wjxt0cG7rQ%2FsXOPOACr8HaMSvQgS8qgro9QVJyOK0VVNYmkJNVgjv2sJ32FKqAl3ZsRi%2FLt%2Bds07TPrEFPF6g5qgVx8BGRWU9zwh4egK9xj203avy%2B79UQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799a9f8b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/s9oesq-6.png
188.114.97.1200 OK 349 B URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/s9oesq-6.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/s9oesq-6.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 349
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: "655cd5f6-15d"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QrRP9P9y0zQJBY9Sjj6589BpUtZbirpldWi3PIzOsI54yhEk3cABDuOqKA1YTQQX0vw%2BlHb1wIEXEfb88RskpfulnvqCDwtWJWzFk9SLsUFPij95WGUfUaJybf9koIp0rqh6jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999f4b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/02cewpxj.png
188.114.97.1200 OK 1.1 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/02cewpxj.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash a3555871399f1f67bfacaf437974b03a
b6337de87cd7a75a73cd804774651d14c83fe76a
2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/02cewpxj.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 1108
last-modified: Tue, 21 Nov 2023 16:08:18 GMT
etag: "655cd5f2-454"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QSnRRUsggiVeJpBmk7J8z%2FuPjsiUgN%2FcDYnPCPed9q%2FBGutX6i4YALRlK4SNhbRpkqFO0vwAMyVZymN0ugWndGiQGrMR6yHnE4YHtcEUOReJNobMewVvcnzc3cfMc%2FqXNEw8WA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999f7b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/y2m-mxu0.png
188.114.97.1200 OK 8.4 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/y2m-mxu0.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 0139bc5bdf466894ec687696e2dc65cd
5c0a326bfbd3ca27e73d36d8ea3fdfd8f8c53b1b
13ee09efef992ec899ca28dea08d00886fce5e8b3ad6c19e6c753a899bcfdaea
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/y2m-mxu0.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 8350
last-modified: Tue, 21 Nov 2023 16:08:23 GMT
etag: "655cd5f7-209e"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VErJCyPdHGIVp%2Fh5HZyUBWm4L749I62IKGCk2E7X4dp6b3VljjCQIbfYkueAAttzDjlHabl3bLWOtDxS7fEMa75z5WYGxYD%2F%2B5ICV84RA0mSCf9kpl38j0UtfHWNdQD4EyBtxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799aa0ab50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/ti48_su6.png
188.114.97.1200 OK 18 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/ti48_su6.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 6e3d6800eef9cff4b94abc025255eb2b
7d606044af2f4fb7f10cad9e88a3e0647c0f2b38
b2901f408265c7a9d8d5cfe0c8865e27289949848862945f8a3eda85898100be
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/ti48_su6.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 17558
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: "655cd5f6-4496"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F3h%2Fqs%2FFqAuL8RGwAFCnbnj7iBEDcI2A8qVXb8cvJCQbRbJaiWkgBOOduJrBXfigxM3xqSzQEwE6Lj0Rnrij5kWCLZabsettIyYiRGnJXsG%2BJw9vK2eKU6ro7HgC3OvYv7oKDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799aa0bb50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/olkgvcpi.js?site-id=5cde80a6
188.114.97.1200 OK 5.0 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/olkgvcpi.js?site-id=5cde80a6
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (12269), with no line terminators
Hash b39e8110d2ed809947add30c6119aee3
7f6a7afd50961127d26cf6d287af0ff5a0db5976
33db97809bc63a2e2c8163155ad1ee0657d50c00584d5e3d50f8683212ec95c8
GET /qedeq7777/qed1qe51d1qed1/olkgvcpi.js?site-id=5cde80a6 HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: W/"655cd5f6-2fed"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8W1UYfNA8B0e7glr4IJD56jGuIsbq%2FWSe0%2BXHh0V%2FRMAm4L%2BfhFyjCAtLr%2BSFQ3wV8qqRWCg4vijE%2Fl%2FItXm4eVLrSsnyKmbQLW%2BhMaUeoYCRatg98y53WAlUcWumlUjrX79cA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679989b1b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/-npprqde.png
188.114.97.1200 OK 26 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/-npprqde.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash 2c497dfff84bd8c5af9254c9d6278ce1
667e72e7ba6f00a54629e28133317022d4b59af6
b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/-npprqde.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: image/png
content-length: 25871
last-modified: Tue, 21 Nov 2023 16:08:18 GMT
etag: "655cd5f2-650f"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=54pVQLtQ2CYsKM%2B9h9haR9oXPP1kVopL7Q23R1I153E5K46eDbQRYAfGaTqMPc0fUAD%2BJt3VRIh20xrtHHMoBMe4X1qPLwuRGFWdKm%2FO7uF7ovDH314oz%2B6Hw31%2Bzef6y64dJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999f6b50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/dutjlylb.css
188.114.97.1200 OK 55 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/dutjlylb.css
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (27591)
Hash 835820949e29e350f15768fda86f3df2
aceea7abce057d3e585f57be47bf23d1e1ca7222
c1782a8e7e3ff0043f0b4312520e07f8477299e2ac89a11ec473f847c1bc3dc3
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/dutjlylb.css HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 16:08:20 GMT
etag: W/"655cd5f4-6c6a"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mbAqaTm%2F1f8c8keirHQwfK%2BwvstgnuQzu4NuRdMFYJ%2Br9pG2TscZVjB8s%2BdPa%2FiH4OiMLt05LEwBnmJfi1HkVsu1EnvX9Ni6WwLAcQmS6BaIiEsjBHir4iT1%2BZe09ISfM%2FLEFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999d6b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 48 kB URL GET HTTP/3 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nathanefowler.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:47:53 GMT
expires: Fri, 15 Nov 2024 04:47:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 548471
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-WEFZTEQC7H>m=45je3b81v897725683&_p=1700658545822&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=400056601.1700658546&ul=en-us&sr=1280x1024&_s=1&dt=&sid=1700658546&sct=1&seg=0&dl=https%3A%2F%2Fnathanefowler.xyz%2Fqedeq7777%2Fqed1qe51d1qed1%2F&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2078
216.239.32.36204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-WEFZTEQC7H>m=45je3b81v897725683&_p=1700658545822&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=400056601.1700658546&ul=en-us&sr=1280x1024&_s=1&dt=&sid=1700658546&sct=1&seg=0&dl=https%3A%2F%2Fnathanefowler.xyz%2Fqedeq7777%2Fqed1qe51d1qed1%2F&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2078
IP 216.239.32.36:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-WEFZTEQC7H>m=45je3b81v897725683&_p=1700658545822&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=400056601.1700658546&ul=en-us&sr=1280x1024&_s=1&dt=&sid=1700658546&sct=1&seg=0&dl=https%3A%2F%2Fnathanefowler.xyz%2Fqedeq7777%2Fqed1qe51d1qed1%2F&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2078 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nathanefowler.xyz
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://nathanefowler.xyz
date: Wed, 22 Nov 2023 13:09:04 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/9udgasdw.jpg
188.114.97.1200 OK 367 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/9udgasdw.jpg
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2022:08:26 11:44:30], baseline, precision 8, 1920x1051, components 3\012- data
Size 367 kB (366853 bytes)
Hash dd6f5df6c78a7369fe8ceb7c0f70dd50
d664e27e8c2b8154f9b31e2dcda0b21e3e4935ba
40dd8a184408b9c6f376673ffd39c74611f4ef9ff0a1daa8b3760015d801883d
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/9udgasdw.jpg HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:04 GMT
content-type: image/jpeg
content-length: 366853
last-modified: Tue, 21 Nov 2023 16:08:27 GMT
etag: "655cd5fb-59905"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mLMOB%2FBir5Bg%2B1IiF726h1QH17irX8ZG5OeNaR85%2B60fNHfGIcIEhrYEnUEEHOZC%2BM327KPmSUYwIz1TuNvoNuBKgCK%2FZ7MDs1cve2r1DYZPC22Or4IRguaxZODQE7gjf640mw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999edb50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/jfb23n5t.png
188.114.97.1200 OK 549 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/jfb23n5t.png
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type PNG image data, 1903 x 1020, 8-bit/color RGB, non-interlaced\012- data
Size 549 kB (549442 bytes)
Hash f3e18c4da95b83ab519a72f2876019f2
209f613fed2d2202e134e00081ad3c32ec5e6a25
466835ef2d6f0f0bfddafa405154702e36a5588f69684dd3b6642f9013eb778b
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/jfb23n5t.png HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:04 GMT
content-type: image/png
content-length: 549442
last-modified: Tue, 21 Nov 2023 16:08:30 GMT
etag: "655cd5fe-86242"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AQD0gMg3jC2CpgAcjY1MWZoqYS4sfhaVvW7YySH2E5HmptpTZip20R0QGTwApxo%2FSOsQlTOsUnikAhkFgccvlDqS7%2FUxuo%2Ba6lmoGY29LN8Glc5Ydr3gVyfmHrenS%2FJOF7l4gA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999ebb50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/7zpn6vqu.mp3
188.114.97.1206 Partial Content 8.7 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/7zpn6vqu.mp3
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo\012- data
Hash 591a90571498a046b979043a88a574b8
220b4a0f8a226ae4edb4b927f1da1e7e503c5621
e5cf7987f8eda377da9ce7bb1aed3144eccc244cac88c225d3c3d2f7a1226494
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/7zpn6vqu.mp3 HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558; _ga_WEFZTEQC7H=GS1.1.1700658546.1.0.1700658546.60.0.0; _ga=GA1.1.400056601.1700658546
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Wed, 22 Nov 2023 13:09:05 GMT
content-type: audio/mpeg
content-length: 8650
last-modified: Tue, 21 Nov 2023 16:08:18 GMT
etag: "655cd5f2-21ca"
cache-control: max-age=14400
cf-cache-status: HIT
content-range: bytes 0-8649/8650
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gGZ%2BrUTwk7l9m1CPlhKHOXkk9aOF6usFJf4CwJkLgHhxohRIM5nSBYi4ZeqtqYFkMPKrF%2FB4Uq%2BtnKhmVE34i4nf39AwuyIkQ5TZk%2BDRZ4UqoPcgkNTivdtl1uPb0%2BmCgBaIWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a167a2af98b50c-OSL
alt-svc: h3=":443"; ma=86400
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-WEFZTEQC7H&cid=400056601.1700658546>m=45je3b81v897725683&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1293818833
142.250.74.163200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-WEFZTEQC7H&cid=400056601.1700658546>m=45je3b81v897725683&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1293818833
IP 142.250.74.163:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-WEFZTEQC7H&cid=400056601.1700658546>m=45je3b81v897725683&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=1293818833 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 22 Nov 2023 13:09:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 48 kB URL GET HTTP/3 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nathanefowler.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:47:53 GMT
expires: Fri, 15 Nov 2024 04:47:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 548473
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/rt65zkgj.css
188.114.97.1200 OK 79 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/rt65zkgj.css
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (629), with CRLF line terminators
Hash 37dbae0d17208c34f7a96af284f52018
d5a76a529c3c53297a5a394541fa49d504b69d50
10a99594267aa4bd3ea83586bbc93bea00f127ac756526763bdf856b437e413c
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/rt65zkgj.css HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:04 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 16:08:26 GMT
etag: W/"655cd5fa-33301"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CGAJbuf4o5RDaa8pfi6YM2gLnYTxJ6MW4l4xYqhDf%2BxfjHd5zEnpJzeSeumA5pzH6qxcLP4Y342sB6JJYDdgg5kUp73Vb3FjltQebi07tcQBS6WtlOc2IyW2p4%2FPNfSrZIrozw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679989beb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/-3ly_so3.js
188.114.97.1200 OK 67 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/-3ly_so3.js
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with CRLF line terminators
Hash 87c2dc3aeb373ca8445f7410ef387689
688f4be3cfb8688b4441f382724495a7b82b3f62
31681779c6f394370dad146169896e9ec2b8f7c716c4b1db78c459033e48bf95
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/-3ly_so3.js HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:18 GMT
etag: W/"655cd5f2-16e"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=axcPWfcCijimStU2pXq%2BEf6v27YhRNx0vdf61NzF2mXJ5qKxhCe4Sa%2F7v54N%2BesCJznD%2Bi5z8%2BdF9LYX09Kx8jN3D%2FaVS2H02iJnvfZkBOqtwXddlO8fnrn3uoAmK%2FlpdUpofg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799ba30b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 48 kB URL GET HTTP/3 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nathanefowler.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Nov 2023 04:47:53 GMT
expires: Fri, 15 Nov 2024 04:47:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
age: 548475
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/vmknafoi.css
188.114.97.1200 OK 21 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/vmknafoi.css
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with CRLF line terminators
Hash 09ea9cb54d611b19aef49fa3282bcfb3
0cec547f3e3018186ce722d51789156597115c68
fe7622e5cee2bcdd0d9e6dcd28d0199d4962db0dbfec9c5917a8e1194d819ffd
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/vmknafoi.css HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:04 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: W/"655cd5f6-51bb"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KvPpPvrHXc%2BT7hT8e8%2BkdC2NRp8INbrcodJWTVp2AT2moRZD0nryi4k%2FC2hnlENNzk2JgVr8RKFR2vb%2FZsgHDpxDzAYVZLkr0hP8oeDWlb%2FprtgbQIzksW0xX2JTrISXoUNsPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999d5b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/9uoaoo-0.mp3
188.114.97.1206 Partial Content 63 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/9uoaoo-0.mp3
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, layer III, v2, 48 kbps, 22.05 kHz, Monaural\012- data
Hash a08cb1764730b1c6cf68584cbe5d6fd5
c440f904753036559f977936baa65a9c2fc6e6c2
163e5533e42cc594ee450bf6e96bdf63bb95d3e7f5f8eedc273ab12760027949
GET /qedeq7777/qed1qe51d1qed1/9uoaoo-0.mp3 HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558; _ga_WEFZTEQC7H=GS1.1.1700658546.1.0.1700658546.60.0.0; _ga=GA1.1.400056601.1700658546
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Wed, 22 Nov 2023 13:09:05 GMT
content-type: audio/mpeg
content-length: 231542
last-modified: Tue, 21 Nov 2023 16:08:25 GMT
etag: "655cd5f9-38876"
cache-control: max-age=14400
cf-cache-status: HIT
content-range: bytes 0-231541/231542
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X0yUGK8uyy0Cs6UhFqMNPoEmHhDaFErluIZSl4oWAxtBIoGM1WYc%2BMaCixz0JDMrpohxucUUcO0NeOV1P0suB0dfnfY3uKWNR2heAQ0yA50NfiGE0Uv8qbTS5Epx3pcbvDJaBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a167a2af9fb50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/q_y_iy8-.css
188.114.97.1200 OK 8.9 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/q_y_iy8-.css
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (9729), with no line terminators
Hash 3b9d7035884fc202433ec7f815df74f2
5255fdb6d1395e51dbdc073e1d2aa40f0f3f3e6d
4b1cd6756aa5fb37892336bb7110192bcaf2e206cc49dd51193001a7a8c8538c
GET /qedeq7777/qed1qe51d1qed1/q_y_iy8-.css HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: text/css
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: W/"655cd5f6-22e3"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wzB9JYpVsF4Q7gR2z%2FlrKm2Dt5ZrBeYSY0D3Ju9Ps1auVGIg%2BS01nz0%2Bz3aWC%2B9EqbOFJftZ9ocM%2F15Nrx57HRBx%2Bpey6SnVYVK9%2FPm6Ak1QFTXQRdKcI0pMQ%2FHWHdjZSoDjAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999e8b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/kkb5ycx0.js
188.114.97.1200 OK 1.6 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/kkb5ycx0.js
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (1805), with no line terminators
Hash c1d28d38e0566c27f9ba9d79adfcf980
58e8a05d6aede45d774e7b61eb220103f62115ab
2ff22faa58e18edd9a06ac769ddcfdc43ff2cd6231ae17b965e9e40d6bd2bcc0
GET /qedeq7777/qed1qe51d1qed1/kkb5ycx0.js HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:21 GMT
etag: W/"655cd5f5-64f"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gIms1ZX6cYzgQ1H0awE3WlIuMO8BZk6Q%2FeQrewVkDXoz15OSb9WNf36%2FHrfSrNrJ9u9fEfoBSquRnWtXccB2%2BiqkdZnwZNutk%2B5oHlFKLpUNhavK5RW0lWTpkSFdxSwyob1QxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799ba35b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/spqv6t_o.js
188.114.97.1200 OK 245 B URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/spqv6t_o.js
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with no line terminators
Hash e70e5bc6acccc111d1016ccb1de66c20
b75154dabdb11f3c546fe085efdd740a8b88ea90
c8988f92f8e1a825f5f34ed45ca542b25eab1b845c5a0f459dff5045a4ee486e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/spqv6t_o.js HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:22 GMT
etag: W/"655cd5f6-f5"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XG7QEbffqq731OKsW%2FpkeF93aVjJkkYOziYlXn1Ox4%2Fqwpd5bd6fFpMtosyFpqM2mHJhAWarl4hOdn6QFCkXdOY3%2F1870kFL19g1CH5tsxnYgnetM0g8T0X6Z9uUvPbeVFMUtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799aa15b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/favicon.ico
188.114.97.1404 Not Found 162 B URL GET HTTP/3 nathanefowler.xyz/favicon.ico
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 2b838659c6ea3bbc1241837a1b44840b
296c38b80b7304bd14e5b6c934fca1c32d687917
a9ac287e62f49a385bf05052b658eea54ad6811b368db66f58b581a61435c9ff
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /favicon.ico HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558; _ga_WEFZTEQC7H=GS1.1.1700658546.1.0.1700658546.60.0.0; _ga=GA1.1.400056601.1700658546
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Wed, 22 Nov 2023 13:09:06 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n0NZl6fo8XMdJ10FG4N1j%2BRSQwltjMk7vKSsSqMfOMnMYxSB8CEHC95m4OoqMMbGOuM4Y8kCP6ueK7xZyco8aDilu0v7S1GkPKrfkAMeh4%2B1DopEOqPky%2Beb8osPwQFHFkZxTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a167a4aaa3b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
104.18.11.207200 OK 67 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0
IP 104.18.11.207:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nathanefowler.xyz
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 22 Nov 2023 13:09:07 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:48:08
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 8e3c448043c1f24496d88bbc3f1d36b9
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82a167b28bf75691-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/z82igglb.js
188.114.97.1200 OK 11 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/z82igglb.js
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type HTML document, ASCII text, with very long lines (11084), with no line terminators
Hash 65f1d21d5fcc9d21da758adababd0c3c
e0661d07d64c00008bc9d013d16eec0a0f156dc7
d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/z82igglb.js HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:04 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:23 GMT
etag: W/"655cd5f7-2b4c"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OUtXti42S3%2BSrCxW1nDVazP%2B5C3wePzZ8mWOPLm1KamLNXVuQsR4zBk74fX2BwpUIKjuJsJq0AKl0e0kKNu%2FRQLLvvEaph4p4wFEv3qFAw7m2Qw8NSmp5mAyYePhpKVDffA2JA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799aa0eb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/e79r5vcy.html
188.114.97.1200 OK 2.5 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/e79r5vcy.html
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2574), with no line terminators
Hash 8db2febb25004d4b1814ede56abdf103
11e5a4b18676eba27b8aaf7aff059be010682b13
9d1ed5e2ecc952bc54eab3d37733bcc85ef9f501c352813a052bcc6104cf16f1
GET /qedeq7777/qed1qe51d1qed1/e79r5vcy.html HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558; _ga_WEFZTEQC7H=GS1.1.1700658546.1.0.1700658546.60.0.0; _ga=GA1.1.400056601.1700658546
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:05 GMT
content-type: text/html
last-modified: Tue, 21 Nov 2023 16:08:20 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rVtRVRL9BdlSx3ryPH4i7y5Cc7tDEEbLZaA2DfdSWfqLLt%2B4y8hMkXypy71pMSz2EUn4lBMr8VJMGCBtKzp3yH3gWPSw%2BLrS2%2FcZXbcR6q73fNryP5lbq2ArxJqgq7jQpOu1Jg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82a1679f7adfb50c-OSL
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/wvmr0mhj.js
188.114.97.1200 OK 84 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/wvmr0mhj.js
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (65299)
Hash f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/wvmr0mhj.js HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:04 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:24 GMT
etag: W/"655cd5f8-1499a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RXijbKxmqxtqaLR%2BfiAjATIfI8%2FOGxxTZGAMx5zLmqwTHiMM%2FUQcrdobq31bf0PbfSXH24QFAaaBwVe6ORFsTG5h4OE14McnNzR4%2B6FJYHAcBFKPttLFw8aAH7pM643ZoTf3TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a16799aa11b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/iztc-yx_.js
188.114.97.1200 OK 86 kB URL GET HTTP/3 nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/iztc-yx_.js
IP 188.114.97.1:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectnathanefowler.xyz
Fingerprint6D:19:A9:4D:9F:63:45:C3:44:1F:80:EF:7A:61:AE:34:5C:2C:0C:3E
ValidityTue, 21 Nov 2023 17:01:39 GMT - Mon, 19 Feb 2024 17:01:38 GMT
File type ASCII text, with very long lines (32065)
Hash 2f6b11a7e914718e0290410e85366fe9
69bb69e25ca7d5ef0935317584e6153f3fd9a88c
05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /qedeq7777/qed1qe51d1qed1/iztc-yx_.js HTTP/1.1
Host: nathanefowler.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Cookie: PHPSESSID=1qcgm71qtiuus80go34qqeb558
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 22 Nov 2023 13:09:03 GMT
content-type: application/javascript
last-modified: Tue, 21 Nov 2023 16:08:24 GMT
etag: W/"655cd5f8-14e4a"
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jA6nRQvKs8krPgaX%2BVtUL7jWT3rwgfj4b90%2FZkTK0auD3A%2FY217nmtZFdUoo2m%2F%2BD1FPTkHsZdYcN67P%2BbpXfengAMO9UMz7%2B%2B1gaCNYg4nRAFmBZkRoEI3QT9IpPnK3YK0Oow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82a1679999cdb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
142.250.74.106200 OK 35 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap
IP 142.250.74.106:443
Requested by https://nathanefowler.xyz/qedeq7777/qed1qe51d1qed1/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 19602f1f4d84cdb858d234032329d0c2
adce58e161aacccaa48b83bfbefed021f60dd8b3
fad08488ab9bdf68897a3a6eeb699584c94d259cf814b1f81a330964852f0274
GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nathanefowler.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 22 Nov 2023 13:09:03 GMT
date: Wed, 22 Nov 2023 13:09:03 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2