Report - sep.ejournal.unri.ac.id/index.php/jsep/article/download/61/41

Report Overview

Submitted URL
sep.ejournal.unri.ac.id/index.php/jsep/article/download/61/41
IP
103.158.167.211
ASN
#56254 UNIVERSITAS RIAU
Submitted
2024-05-04 02:17:14
Access
public
Website Title
Pisangbet : Link Situs Slot Demo Gacor Online Terpercaya Resmi Dengan RTP Slot Paling Terbaru
Final URL
lindenavelit.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
use.typekit.net	494	2010-08-02	2012-07-05	2024-05-02	664 B	7.2 kB	23.33.119.67
sep.ejournal.unri.ac.id	unknown	unknown	No data	No data	515 B	311 B	103.158.167.211
assets.squarespace.com	5986	2003-03-25	2019-06-20	2024-05-03	4.0 kB	1.7 MB	151.101.0.237
static1.squarespace.com	4133	2003-03-25	2015-01-10	2024-05-02	1.5 kB	1.3 MB	151.101.64.238
i.imgur.com	5110	2009-01-09	2012-05-21	2024-05-02	433 B	221 kB	151.101.236.193
lindenavelit.com	unknown	2024-04-16	2017-04-15	2024-03-02	941 B	374 kB	104.21.52.63
res.cloudinary.com	2520	2011-05-24	2012-10-03	2024-05-02	466 B	27 kB	23.38.200.38

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	lindenavelit.com	Sinkholed
2024-05-04	medium	lindenavelit.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	lindenavelit.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	12 kB	2023-03-07	2024-05-18
Pretty URL lindenavelit.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 104.21.52.63 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-05-18 08:59:18 Times Seen44316 Hash 88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142 Loading...

HTTP Transactions (17)

URL IP Response Size

sep.ejournal.unri.ac.id/index.php/jsep/article/download/61/41

103.158.167.211

103 B

URL
sep.ejournal.unri.ac.id/index.php/jsep/article/download/61/41
IP
103.158.167.211:0
ASN
#56254 UNIVERSITAS RIAU

File type
HTML document, ASCII text
Size
103 B (103 bytes)
Hash
2b8d2e7a9b0631e186117876a92c0d07
38890804debdb2dfb7dc6f6c92c8c09a89483904
61523a707fbf713b40c1e46cc1974c20ca765b8f0fdaaa12a63be7da2f2e45b6

HTTP Headers

GET /index.php/jsep/article/download/61/41 HTTP/1.1
Host: sep.ejournal.unri.ac.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Sat, 04 May 2024 02:16:48 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 103
Connection: keep-alive
Content-Encoding: gzip
Vary: Accept-Encoding

assets.squarespace.com/universal/styles-compressed/commerce-2af06f7948db5477d8f5-min.en-US.css

151.101.0.237

200 OK

6.1 kB

URL GET HTTP/2
assets.squarespace.com/universal/styles-compressed/commerce-2af06f7948db5477d8f5-min.en-US.css
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
ASCII text, with very long lines (18185), with no line terminators
Size
6.1 kB (6056 bytes)
Hash
226becff5c38bebf04d4d4a5b23e5823
960192c617ead3f846351395c4b3b364d0bb855f
415c6aeae8d2302f020ecd557acc47738d6af2ebca3ff14387165a72729d5e8a

HTTP Headers

GET /universal/styles-compressed/commerce-2af06f7948db5477d8f5-min.en-US.css HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Fri, 07 Mar 2025 17:27:07 GMT
last-modified: Thu, 07 Mar 2024 16:03:40 GMT
etag: "f2a9832d5e60789e21b3cad5a19bfe31"
content-type: text/css
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 04 May 2024 02:16:49 GMT
age: 4956582
x-served-by: cache-iad-kiad7000047-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 29, 6712
x-timer: S1714789010.664178,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 6056
X-Firefox-Spdy: h2

static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/versioned-assets/1711043046520-YWRD968DS53U5ZK5HM7B/static.css

151.101.64.238

404 Not Found

21 B

URL GET HTTP/2
static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/versioned-assets/1711043046520-YWRD968DS53U5ZK5HM7B/static.css
IP
151.101.64.238:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
very short file (no magic)
Size
21 B (21 bytes)
Hash
7215ee9c7d9dc229d2921a40e899ec5f
b858cb282617fb0956d960215c8e84d1ccf909c6
36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

HTTP Headers

GET /static/vta/5c5a519771c10ba3470d8101/versioned-assets/1711043046520-YWRD968DS53U5ZK5HM7B/static.css HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
cache-control: no-cache, no-store, must-revalidate
content-type: application/javascript; charset=UTF-8
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: fOog4qyX/XjFW56oy
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 410
date: Sat, 04 May 2024 02:16:49 GMT
x-served-by: cache-dfw-kdfw8210041-DFW, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 26, 0
x-timer: S1714789010.701159,VS0,VE1
vary: Accept-Encoding
tracepoint: Fastly
content-length: 21
X-Firefox-Spdy: h2

i.imgur.com/GTDem8q.png

151.101.236.193

200 OK

221 kB

URL GET HTTP/2
i.imgur.com/GTDem8q.png
IP
151.101.236.193:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerSectigo Limited
Subject*.imgur.com
Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42
ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT

File type
PNG image data, 851 x 402, 8-bit/color RGBA, non-interlaced
Size
221 kB (220684 bytes)
Hash
a673fe22f9ab2996722b4595eb34421b
75a038c3c0d2ca6d5504261605523773c5f70ad5
2db19d53f5b7aec4eaaab2007fb8ce341a458ae3a349432c8ea56bb8d6b8480d

HTTP Headers

GET /GTDem8q.png HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
last-modified: Mon, 29 Apr 2024 17:52:20 GMT
etag: "a673fe22f9ab2996722b4595eb34421b"
x-amz-server-side-encryption: AES256
x-amz-cf-pop: IAD89-P1
x-amz-cf-id: KRm_mMfmP4VRGZevKOXYDGZDz24vVjfNhon5CZ1rFuxybjumYdoPFw==
cache-control: public, max-age=31536000
accept-ranges: bytes
age: 375866
date: Sat, 04 May 2024 02:16:49 GMT
x-served-by: cache-iad-kjyo7100149-IAD, cache-osl6522-OSL
x-cache: Miss from cloudfront, HIT, MISS
x-cache-hits: 31, 0
x-timer: S1714789010.615643,VS0,VE102
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 220684
X-Firefox-Spdy: h2

lindenavelit.com/

104.21.52.63

200 OK

133 kB

URL User Request GET HTTP/2
lindenavelit.com/
IP
104.21.52.63:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectlindenavelit.com
Fingerprint5D:B4:B8:77:6B:61:32:9B:3F:9B:E1:7E:CF:FD:1C:4A:D6:2B:37:4E
ValidityMon, 29 Apr 2024 16:46:11 GMT - Sun, 28 Jul 2024 16:46:10 GMT

File type
JavaScript source, ASCII text, with very long lines (23796), with CRLF, LF line terminators
Size
133 kB (133197 bytes)
Hash
9669f685a0f0521d8dfc66f62688cfb5
16fff91904ad8b4e2d3518c2a3aebd90e1eeebcd
2f50bace7898a7de8b2028c29f38ed012046bfae1a73c7666afbae89dc8bbabf

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: lindenavelit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 02:16:49 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vuRKsQb6foMCXiruhGqyR8H2aOTjRUDrjPfqkS2OOfYn2tkndbvm6SWEmKTMqvrbsJYhSukIHsZNBjTsBdUtXDk0SRXg6bDBN0nnKPYJphhBDrrTAWmuBJU7YC9TWv026kCm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e4fda83b5d56a9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.be9ca9a740ff301375d62cddf8dad16e.js

151.101.64.238

200 OK

44 kB

URL GET HTTP/2
static1.squarespace.com/static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.be9ca9a740ff301375d62cddf8dad16e.js
IP
151.101.64.238:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65467)
Size
44 kB (43831 bytes)
Hash
be9ca9a740ff301375d62cddf8dad16e
273af56567bfd4685d4194b31bf15f7738aa3301
3dd603852c94f3f4801e4f811cd90b14b7c895c0ca301983528015e24493ee54

HTTP Headers

GET /static/vta/5c5a519771c10ba3470d8101/scripts/site-bundle.be9ca9a740ff301375d62cddf8dad16e.js HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: mOB6EQUR/Nd4pv6wZ
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 938446
date: Sat, 04 May 2024 02:16:50 GMT
x-served-by: cache-dfw-kdal2120131-DFW, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 5197, 0
x-timer: S1714789010.135425,VS0,VE1
vary: Accept-Encoding
tracepoint: Fastly
content-length: 43831
X-Firefox-Spdy: h2

assets.squarespace.com/@sqs/polyfiller/1.6/modern.js

151.101.0.237

200 OK

42 kB

URL GET HTTP/2
assets.squarespace.com/@sqs/polyfiller/1.6/modern.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (43878), with NEL line terminators
Size
42 kB (42447 bytes)
Hash
93a2aea230d421d550375c528b22583e
e8d88b00db1c30510928a7c6618f0f7cffa9b4c2
54e832663426c696b1f603379026e5e15720e8c812bbbc60d63aa2ad8a479f75

HTTP Headers

GET /@sqs/polyfiller/1.6/modern.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 02 Oct 2024 02:39:38 GMT
last-modified: Mon, 31 Oct 2022 21:19:57 GMT
etag: "fe0d53a94823df972dbf107bf190771a"
content-type: text/javascript
content-encoding: gzip
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 04 May 2024 02:16:50 GMT
age: 18488233
x-served-by: cache-iad-kcgs7200042-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 79, 231538
x-timer: S1714789010.170822,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 42447
X-Firefox-Spdy: h2

assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-7a7d64db165ac9c55230-min.en-US.js

151.101.0.237

200 OK

71 kB

URL GET HTTP/2
assets.squarespace.com/universal/scripts-compressed/common-vendors-stable-7a7d64db165ac9c55230-min.en-US.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65202)
Size
71 kB (70816 bytes)
Hash
b8d952dacbf6e70ed6a2660532dd5724
addaa4f4fda1f672d370892593d19e79c07beac4
febebc50c2539b22e9ef076a00b4efbb10e71b7d03726f2d1d73b447d2755013

HTTP Headers

GET /universal/scripts-compressed/common-vendors-stable-7a7d64db165ac9c55230-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 26 Mar 2025 14:36:33 GMT
last-modified: Tue, 26 Mar 2024 12:34:06 GMT
etag: "d5a6ef2648f3c6629a97efe030164942"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 2407715
date: Sat, 04 May 2024 02:16:50 GMT
x-served-by: cache-iad-kcgs7200072-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 4733, 0
x-timer: S1714789010.182052,VS0,VE1
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 70816
X-Firefox-Spdy: h2

res.cloudinary.com/dsrgxc8aw/image/upload/v1713251050/iconx_xmhgm8.png

23.38.200.38

200 OK

26 kB

URL GET HTTP/2
res.cloudinary.com/dsrgxc8aw/image/upload/v1713251050/iconx_xmhgm8.png
IP
23.38.200.38:443
ASN
#16625 AKAMAI-AS

Requested by
https://lindenavelit.com/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.cloudinary.com
Fingerprint33:69:0E:47:5B:6E:8C:93:F5:86:06:8A:BF:8D:98:38:B3:5F:55:36
ValidityMon, 18 Dec 2023 09:10:54 GMT - Mon, 13 Jan 2025 15:35:01 GMT

File type
PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Size
26 kB (26213 bytes)
Hash
3abe958b4cdd5bc14f7ab1bbd555b2bd
83ef57907191486818aa4c05a8e65ab0bf88870c
ecd72d07107ac7257a9c5c8480813bea578e7de1da3f2a53ceb608bc78f0fd4c

HTTP Headers

GET /dsrgxc8aw/image/upload/v1713251050/iconx_xmhgm8.png HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 26213
etag: "3abe958b4cdd5bc14f7ab1bbd555b2bd"
last-modified: Tue, 16 Apr 2024 07:04:11 GMT
date: Sat, 04 May 2024 02:16:50 GMT
cache-control: public, no-transform, immutable, max-age=2592000
access-control-expose-headers: Content-Length,Content-Disposition,Content-Range,Etag,Server-Timing,Vary,X-Cld-Error,X-Content-Type-Options
access-control-allow-origin: *
accept-ranges: bytes
timing-allow-origin: *
server: Cloudinary
strict-transport-security: max-age=604800
x-content-type-options: nosniff
server-timing: cld-akam;dur=95;start=2024-05-04T02:16:50.122Z;desc=hit-near,rtt;dur=2,content-info;desc="width=500,height=500,bytes=26213,o=1,ef=(17)"
X-Firefox-Spdy: h2

lindenavelit.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js

104.21.52.63

200 OK

240 kB

URL GET HTTP/3
lindenavelit.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
104.21.52.63:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lindenavelit.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectlindenavelit.com
Fingerprint5D:B4:B8:77:6B:61:32:9B:3F:9B:E1:7E:CF:FD:1C:4A:D6:2B:37:4E
ValidityMon, 29 Apr 2024 16:46:11 GMT - Sun, 28 Jul 2024 16:46:10 GMT

File type
gzip compressed data, from Unix
Size
240 kB (239903 bytes)
Hash
261ffd920fe5862494169191df2a3bc0
055858156474bb148f103ec3f681961a1ac86214
d104e1739610df8c17d7c708edb0a8a29a1276b74d2827929140d081a93788ae

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: lindenavelit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 04 May 2024 02:16:50 GMT
content-type: application/javascript
last-modified: Tue, 30 Apr 2024 15:20:25 GMT
etag: W/"66310c39-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wPMobGvzFn%2BWl2LVeYV3ZRf28Ah1RKXGdrDgiRsiG1w6i5J1cVts2dYEHRBjbZ%2B%2FApSE3P3En7sXRwca8L0XgD2ZSVB0KYP6HmWg74aPv4xX6SjUwqdhjB2NR6VP6aiyHFBR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e4fdb10a7b56ae-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 06 May 2024 02:16:50 GMT
cache-control: max-age=172800, public
content-encoding: gzip

assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-1edcdb1d4b6b94ec8c7e-min.en-US.js

151.101.0.237

200 OK

19 kB

URL GET HTTP/2
assets.squarespace.com/universal/scripts-compressed/cldr-resource-pack-1edcdb1d4b6b94ec8c7e-min.en-US.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
19 kB (18554 bytes)
Hash
bc81297b80215d015341f594568d9d67
1a93b95d3a3edeac67e0305de061993793a0b2f9
696c5812ef99a4afdd5a4b67e1d0f4d1ec1823302d05a3b5dc3a252251c7476f

HTTP Headers

GET /universal/scripts-compressed/cldr-resource-pack-1edcdb1d4b6b94ec8c7e-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Fri, 07 Mar 2025 17:27:07 GMT
last-modified: Thu, 07 Mar 2024 16:05:28 GMT
etag: "66c47345d3257f25814b34c9b64ce722"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 2432035
date: Sat, 04 May 2024 02:16:50 GMT
x-served-by: cache-iad-kjyo7100076-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 37775, 0
x-timer: S1714789010.201481,VS0,VE1
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 18554
X-Firefox-Spdy: h2

assets.squarespace.com/universal/scripts-compressed/common-vendors-0e64a4e3069d6fd29709-min.en-US.js

151.101.0.237

200 OK

155 kB

URL GET HTTP/2
assets.squarespace.com/universal/scripts-compressed/common-vendors-0e64a4e3069d6fd29709-min.en-US.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
155 kB (155199 bytes)
Hash
95358429d2cc7d695787bb6301688c91
43756ff7389814aa3e92fbb2b9e570ca58321ca1
954157d3797aecb2c81f321d5de80ea14c5257a054fd4a6cee854cdeacf349c2

HTTP Headers

GET /universal/scripts-compressed/common-vendors-0e64a4e3069d6fd29709-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 26 Mar 2025 14:36:33 GMT
last-modified: Mon, 25 Mar 2024 21:27:05 GMT
etag: "59b164cabd9289f4704333a2f18f07bb"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 1541907
date: Sat, 04 May 2024 02:16:50 GMT
x-served-by: cache-iad-kjyo7100086-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 1408, 0
x-timer: S1714789010.177929,VS0,VE1
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 155199
X-Firefox-Spdy: h2

assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-6f117db4eb7fd4392375-min.en-US.js

151.101.0.237

200 OK

94 kB

URL GET HTTP/2
assets.squarespace.com/universal/scripts-compressed/extract-css-moment-js-vendor-6f117db4eb7fd4392375-min.en-US.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (7601)
Size
94 kB (94112 bytes)
Hash
e5175488e8bd587ddd58916b88e2666b
4885c70fda8237d3a87ea1b98c27e857b7bf2ff1
26406777f9af4ddc05d094cad0ff9015cdbbfb393b13678e676d3a4a6292c5d8

HTTP Headers

GET /universal/scripts-compressed/extract-css-moment-js-vendor-6f117db4eb7fd4392375-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Fri, 07 Mar 2025 17:27:07 GMT
last-modified: Thu, 07 Mar 2024 16:09:52 GMT
etag: "eac0b0bf558891c46b48bd4aac2ec592"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 04 May 2024 02:16:50 GMT
age: 4956582
x-served-by: cache-iad-kiad7000101-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 46, 148373
x-timer: S1714789010.206124,VS0,VE0
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 94112
X-Firefox-Spdy: h2

assets.squarespace.com/universal/scripts-compressed/common-c03e5dfa5f194a3d5b54-min.en-US.js

151.101.0.237

200 OK

385 kB

URL GET HTTP/2
assets.squarespace.com/universal/scripts-compressed/common-c03e5dfa5f194a3d5b54-min.en-US.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
385 kB (384911 bytes)
Hash
a4af212c50af52cb8ca782e832e56d57
371179385e8d842a05aae276106a5d84d2084e72
6e3e3345490e3f5fe13ff6b6edbf8587cb7f74de8bb81fb39928cc74de6c2601

HTTP Headers

GET /universal/scripts-compressed/common-c03e5dfa5f194a3d5b54-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 26 Mar 2025 22:58:34 GMT
last-modified: Tue, 26 Mar 2024 22:00:47 GMT
etag: "0f916b083e1b172a48f604f2b2e35af3"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 2294567
date: Sat, 04 May 2024 02:16:50 GMT
x-served-by: cache-iad-kjyo7100057-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 2185, 0
x-timer: S1714789010.186684,VS0,VE1
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 384911
X-Firefox-Spdy: h2

use.typekit.net/ik/v67o14Q9Jad5C5NGcrnqroSNloevFeIjkvS1U4TCBX9fe7bgfFHN4UJLFRbh52jhWDjhw2wt52juFR8qwQ8qwQSDFhwtwRjDjyGMJ6Tl-AoTdhtlSY4zJygyZeNKZPuRjWFCdhtlSY4zH6qJGQ9bMg6IJMJ7fbKSFsMMeMS6MKG4f4tuIMMj2KMfH6qJ1Q9bMg6sJMJ7fbKKbyMgeMb6MKG4fHsfIMIjgkMfH6qJGXJbMs65JMJ7fbK8byMgegI6MTMgt4e5CMj.js

23.33.119.67

200 OK

6.8 kB

URL GET HTTP/2
use.typekit.net/ik/v67o14Q9Jad5C5NGcrnqroSNloevFeIjkvS1U4TCBX9fe7bgfFHN4UJLFRbh52jhWDjhw2wt52juFR8qwQ8qwQSDFhwtwRjDjyGMJ6Tl-AoTdhtlSY4zJygyZeNKZPuRjWFCdhtlSY4zH6qJGQ9bMg6IJMJ7fbKSFsMMeMS6MKG4f4tuIMMj2KMfH6qJ1Q9bMg6sJMJ7fbKKbyMgeMb6MKG4fHsfIMIjgkMfH6qJGXJbMs65JMJ7fbK8byMgegI6MTMgt4e5CMj.js
IP
23.33.119.67:443
ASN
#20940 Akamai International B.V.

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (2461)
Size
6.8 kB (6803 bytes)
Hash
31a3575ffd5161877a649a3e585fc693
933ff872b0c968925e78c70ffc126b8661f09e84
b3a25f4da130a0bc13a1bf9ba20c9183313f4d6f886a3972aa2e10600060b5ce

HTTP Headers

GET /ik/v67o14Q9Jad5C5NGcrnqroSNloevFeIjkvS1U4TCBX9fe7bgfFHN4UJLFRbh52jhWDjhw2wt52juFR8qwQ8qwQSDFhwtwRjDjyGMJ6Tl-AoTdhtlSY4zJygyZeNKZPuRjWFCdhtlSY4zH6qJGQ9bMg6IJMJ7fbKSFsMMeMS6MKG4f4tuIMMj2KMfH6qJ1Q9bMg6sJMJ7fbKKbyMgeMb6MKG4fHsfIMIjgkMfH6qJGXJbMs65JMJ7fbK8byMgegI6MTMgt4e5CMj.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6803
date: Sat, 04 May 2024 02:16:50 GMT
X-Firefox-Spdy: h2

static1.squarespace.com/static/versioned-site-css/6603886569d19d1737c8263b/4/5c5a519771c10ba3470d8101/6603886569d19d1737c82643/1509/site.css

151.101.64.238

200 OK

1.3 MB

URL GET HTTP/2
static1.squarespace.com/static/versioned-site-css/6603886569d19d1737c8263b/4/5c5a519771c10ba3470d8101/6603886569d19d1737c82643/1509/site.css
IP
151.101.64.238:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type

Size
1.3 MB (1268541 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/versioned-site-css/6603886569d19d1737c8263b/4/5c5a519771c10ba3470d8101/6603886569d19d1737c82643/1509/site.css HTTP/1.1
Host: static1.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=94608000
content-encoding: gzip
content-type: text/css; charset=UTF-8
pragma: cache
server: Squarespace
timing-allow-origin: *
x-content-type-options: nosniff
x-contextid: opbNGjHc/Abuo5Zb4
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 853093
date: Sat, 04 May 2024 02:16:49 GMT
x-served-by: cache-dfw-kdal2120095-DFW, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 891, 0
x-timer: S1714789010.706064,VS0,VE1
vary: Accept-Encoding
tracepoint: Fastly
content-length: 117268
X-Firefox-Spdy: h2

assets.squarespace.com/universal/scripts-compressed/commerce-293a562fb5a64b858e99-min.en-US.js

151.101.0.237

200 OK

970 kB

URL GET HTTP/2
assets.squarespace.com/universal/scripts-compressed/commerce-293a562fb5a64b858e99-min.en-US.js
IP
151.101.0.237:443
ASN
#54113 FASTLY

Requested by
https://lindenavelit.com/
Certificate
IssuerDigiCert Inc
Subject*.squarespace.com
FingerprintB2:6A:CD:A0:51:C9:CB:A0:25:95:5C:33:A7:CB:3E:BB:1A:6F:7A:23
ValidityFri, 09 Feb 2024 00:00:00 GMT - Fri, 28 Feb 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
970 kB (969493 bytes)
Hash
e264c676f57f4a040b402b989c423c06
3de0c28fa8163e267c941e41431889727d0abf7a
f169b3c038b763eebd8447774f59aeefa0d22ced858a7c59e889668795f95cd9

HTTP Headers

GET /universal/scripts-compressed/commerce-293a562fb5a64b858e99-min.en-US.js HTTP/1.1
Host: assets.squarespace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lindenavelit.com
DNT: 1
Connection: keep-alive
Referer: https://lindenavelit.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Wed, 26 Mar 2025 14:36:34 GMT
last-modified: Tue, 26 Mar 2024 12:33:56 GMT
etag: "cade6c68be45ad89659898e9c9761c64"
content-type: text/javascript
content-encoding: br
server: UploadServer
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 1587222
date: Sat, 04 May 2024 02:16:50 GMT
x-served-by: cache-iad-kjyo7100174-IAD, cache-hel1410030-HEL
x-cache: HIT, HIT
x-cache-hits: 846, 0
x-timer: S1714789010.170724,VS0,VE1
vary: Accept-Encoding
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
content-length: 236017
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (17)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN