| code.jquery.com/jquery-latest.js | 151.101.130.137 | 200 OK | 84 kB |
URL GET HTTP/2code.jquery.com/jquery-latest.js IP 151.101.130.137:443
Requested byhttps://careful-saimuseiri.com/mt/info.maniak/login.php/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5 ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hash3d93b072d14f2bd1ede58f4847f537fd 73e5d044bd153dd912930e8be433059454ce19cd 3029834a820c79c154c377f52e2719fc3ff2a27600a07ae089ea7fde9087f6bc
GET /jquery-latest.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://careful-saimuseiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-4508e"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 19 Oct 2024 16:49:29 GMT
age: 3761249
x-served-by: cache-lga21958-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 14380, 257836
x-timer: S1729356569.191145,VS0,VE0
vary: Accept-Encoding
content-length: 83875
X-Firefox-Spdy: h2
|
|
| www.pagespeed-mod.com/v1/taas?id=cs&ak=55c85bbdd6e4d21e7278fbbbb89a9502&si=fb4741a02e044f61940836e20590e7f6&tag=1005&rand=916bde30dbf13276e77f2278b366e12c&ord=7792532756164718 | 18.202.86.139 | 200 OK | 21 B |
URL GET HTTP/2www.pagespeed-mod.com/v1/taas?id=cs&ak=55c85bbdd6e4d21e7278fbbbb89a9502&si=fb4741a02e044f61940836e20590e7f6&tag=1005&rand=916bde30dbf13276e77f2278b366e12c&ord=7792532756164718 IP 18.202.86.139:443
Requested byhttps://careful-saimuseiri.com/mt/info.maniak/login.php/ CertificateIssuerLet's Encrypt Subjectwww.pagespeed-mod.com Fingerprint46:C4:94:F3:D3:72:9F:25:E4:8C:FD:F3:A4:95:6F:21:51:34:EE:65 ValidityTue, 10 Sep 2024 03:27:05 GMT - Mon, 09 Dec 2024 03:27:04 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /v1/taas?id=cs&ak=55c85bbdd6e4d21e7278fbbbb89a9502&si=fb4741a02e044f61940836e20590e7f6&tag=1005&rand=916bde30dbf13276e77f2278b366e12c&ord=7792532756164718 HTTP/1.1
Host: www.pagespeed-mod.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://careful-saimuseiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Oct 2024 16:49:29 GMT
content-type: application/javascript;charset=UTF-8
content-length: 21
last-modified: Sat, 19 Oct 2024 16:40:43 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
|
|
| careful-saimuseiri.com/mt/info.maniak/login.php/ | 210.158.230.154 | 200 OK | 78 kB |
URL User Request GET HTTP/1.1careful-saimuseiri.com/mt/info.maniak/login.php/ IP 210.158.230.154:443
ASN#10010 TOKAI Communications Corporation
CertificateIssuerLet's Encrypt Subjectwebmail.careful-saimuseiri.com FingerprintC1:5D:4A:5A:67:5F:C3:89:CF:86:55:3A:09:CA:B5:76:4D:41:82:4F ValiditySun, 25 Aug 2024 14:01:29 GMT - Sat, 23 Nov 2024 14:01:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21805) Hash3c9367a7291a95a91ac326d00b89ab93 8ed7832baeebaf43e2028de36be49a657dc6fefd ad03ce92aa5a9e4ddd2990fd62ac8a15c8098ca1b106ae8d38c152d56566f867
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /mt/info.maniak/login.php/ HTTP/1.1
Host: careful-saimuseiri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Oct 2024 16:49:28 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=01b6bfb6c1a0542f72681641f7a7ebce; path=/
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| careful-saimuseiri.com/mt/info.maniak/login.php/partials/js/jquery.js | 210.158.230.154 | 200 OK | 78 kB |
URL GET HTTP/1.1careful-saimuseiri.com/mt/info.maniak/login.php/partials/js/jquery.js IP 210.158.230.154:443
ASN#10010 TOKAI Communications Corporation
Requested byhttps://careful-saimuseiri.com/mt/info.maniak/login.php/ CertificateIssuerLet's Encrypt Subjectwebmail.careful-saimuseiri.com FingerprintC1:5D:4A:5A:67:5F:C3:89:CF:86:55:3A:09:CA:B5:76:4D:41:82:4F ValiditySun, 25 Aug 2024 14:01:29 GMT - Sat, 23 Nov 2024 14:01:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21805) Hash3c9367a7291a95a91ac326d00b89ab93 8ed7832baeebaf43e2028de36be49a657dc6fefd ad03ce92aa5a9e4ddd2990fd62ac8a15c8098ca1b106ae8d38c152d56566f867
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /mt/info.maniak/login.php/partials/js/jquery.js HTTP/1.1
Host: careful-saimuseiri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://careful-saimuseiri.com/mt/info.maniak/login.php/
Cookie: PHPSESSID=01b6bfb6c1a0542f72681641f7a7ebce
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Oct 2024 16:49:29 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| careful-saimuseiri.com/mt/info.maniak/login.php/library/login.css | 210.158.230.154 | 200 OK | 78 kB |
URL GET HTTP/1.1careful-saimuseiri.com/mt/info.maniak/login.php/library/login.css IP 210.158.230.154:443
ASN#10010 TOKAI Communications Corporation
Requested byhttps://careful-saimuseiri.com/mt/info.maniak/login.php/ CertificateIssuerLet's Encrypt Subjectwebmail.careful-saimuseiri.com FingerprintC1:5D:4A:5A:67:5F:C3:89:CF:86:55:3A:09:CA:B5:76:4D:41:82:4F ValiditySun, 25 Aug 2024 14:01:29 GMT - Sat, 23 Nov 2024 14:01:28 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21805) Hash3c9367a7291a95a91ac326d00b89ab93 8ed7832baeebaf43e2028de36be49a657dc6fefd ad03ce92aa5a9e4ddd2990fd62ac8a15c8098ca1b106ae8d38c152d56566f867
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /mt/info.maniak/login.php/library/login.css HTTP/1.1
Host: careful-saimuseiri.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://careful-saimuseiri.com/mt/info.maniak/login.php/
Cookie: PHPSESSID=01b6bfb6c1a0542f72681641f7a7ebce
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 19 Oct 2024 16:49:29 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| 3001.scriptcdn.net/code/static/1 | 104.21.234.108 | 200 OK | 4.8 kB |
URL GET HTTP/23001.scriptcdn.net/code/static/1 IP 104.21.234.108:443
Requested byhttps://careful-saimuseiri.com/mt/info.maniak/login.php/ CertificateIssuerLet's Encrypt Subjectscriptcdn.net FingerprintD4:E7:9A:54:44:04:34:C3:AB:F5:38:24:25:3D:04:62:02:DE:BA:4A ValidityMon, 26 Aug 2024 21:45:53 GMT - Sun, 24 Nov 2024 21:45:52 GMT
File typeJavaScript source, ASCII text, with very long lines (4794), with no line terminators Hash9a07f2922e20a1ccd78b6aee4fd7007c 3fb9948fb206e8e6784bc48ecae1b9389e654d72 362b874805c1a9dba520fba5a411ae9db49361ac10ac2302d64b74abe594b33c
GET /code/static/1 HTTP/1.1
Host: 3001.scriptcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://careful-saimuseiri.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 19 Oct 2024 16:49:29 GMT
content-type: application/javascript; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
x-dns-prefetch-control: off
expect-ct: max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
access-control-allow-origin: *
cache-control: max-age=1800
etag: W/"12b1-MLchSkiOjS3+GxyFJDrnYEfpHyU"
set-cookie: session=eyJzZXNzSWQiOiJhODQ0MzNhNy01NTQ1LTQ2ZmItOTM2ZC03MDE1MmY1YjQzYjIiLCJzdGFydCI6MTcyOTM1NjU2OTIxM30=; path=/; expires=Sun, 19 Oct 2025 16:49:29 GMT; samesite=none; secure; httponly
session.sig=UwjmZ4US_TKg7iAsQ71fJB99-vg; path=/; expires=Sun, 19 Oct 2025 16:49:29 GMT; samesite=none; secure; httponly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2x486Vp%2FAK5YA%2F6iBrvHLH4G886F%2BJYeY20iq87HEkkQxlPbjxCcf7Mw0YskHY8Aw6q06MoolIjEK9JvqiMQWNkUPw4nMCIAr5Pnvl4abxwK57IsRw18K%2F%2BgksL1Ud%2FBbuyAueU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8d5242fd5e15633d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=20285&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2779&recv_bytes=1066&delivery_rate=142716&cwnd=70&unsent_bytes=0&cid=6102c25000285089&ts=85&x=0"
X-Firefox-Spdy: h2
|
|