| requiredswanchastise.com/p3xc63k9x3?adb=n&adb=n&dev=r&dnyumyd=87&key=abef8154b5ebb950476c75cb96a34afe&kw=[%22rarbg%22,%22rarbg%22,%22index%22,%22page%22,%22-%22,%22rarbg%22,%22to%22,%22-%22,%22rarbg%22,%22proxy%22]&psid=CF-2967-layer_0&refer=rargb.to/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=10&v=24.4.2204 |  192.243.61.225 | | 1.4 kB |
URL requiredswanchastise.com/p3xc63k9x3?adb=n&adb=n&dev=r&dnyumyd=87&key=abef8154b5ebb950476c75cb96a34afe&kw=[%22rarbg%22,%22rarbg%22,%22index%22,%22page%22,%22-%22,%22rarbg%22,%22to%22,%22-%22,%22rarbg%22,%22proxy%22]&psid=CF-2967-layer_0&refer=rargb.to/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=10&v=24.4.2204 IP192.243.61.225:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (780) Hashd09da409cf70fdaf01003614d846fd43 6f99e2f72776501300a88cd64aa2ec42079f51fe aefe003d40f2eac84c183c7756bd64c2f211cb978b9bc8cf81a8b5a03546c939
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /p3xc63k9x3?adb=n&adb=n&dev=r&dnyumyd=87&key=abef8154b5ebb950476c75cb96a34afe&kw=[%22rarbg%22,%22rarbg%22,%22index%22,%22page%22,%22-%22,%22rarbg%22,%22to%22,%22-%22,%22rarbg%22,%22proxy%22]&psid=CF-2967-layer_0&refer=rargb.to/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=10&v=24.4.2204 HTTP/1.1
Host: requiredswanchastise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 09:26:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16587840; expires=Fri, 19 Apr 2024 09:26:22 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.vGI5Oh54fSy9hM-3PiICKodydWlvQZlJrOLFedkXH7E; expires=Thu, 18 Apr 2024 09:27:22 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 57bd8fde513f9d6e036c6e4270b2afa2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| requiredswanchastise.com/api/users?token=L3AzeGM2M2s5eDM_YWRiPW4mZGV2PXImZG55dW15ZD04NyZrZXk9YWJlZjgxNTRiNWViYjk1MDQ3NmM3NWNiOTZhMzRhZmUma3c9JTVCJTIycmFyYmclMjIlMkMlMjJyYXJiZyUyMiUyQyUyMmluZGV4JTIyJTJDJTIycGFnZSUyMiUyQyUyMi0lMjIlMkMlMjJyYXJiZyUyMiUyQyUyMnRvJTIyJTJDJTIyLSUyMiUyQyUyMnJhcmJnJTIyJTJDJTIycHJveHklMjIlNUQmcHNpZD1DRi0yOTY3LWxheWVyXzAmcHN0PTE3MTM0MzI0NDImcmVmZXI9cmFyZ2IudG8lMkYmcmVzPTE0LjMxJnJtdGM9dCZzY3JIZWlnaHQ9MTA4MCZzY3JXaWR0aD0xOTIwJnNoaXA9JnNodT0zNmRhMWNjOWYxODQ5OGZhYWJmN2I2M2UzYzcyM2JhMjIzYzNiNDcxYWQzNzYxZDYwYTA5ZmE2ZGI0Y2NhNzdjNzQ4YTliNzBkNTg1ZjRiMjc1NGY3ZTNmYTRiNTYxYzhjMzYxZWZkN2JiMWFlYjg1OWI2MTcwMTQ2YjE3MjU3MjZhYzAyZjJjZTVlNTk1OGFmMjIzMDZlZTM0OWFhYjQ1NmQzNzAyYTAyMTYyNDY4ZDJlZWZmY2UwYjRkMzY3JnN1YjM9aW52b2tlX2xheWVyJnR6PTEwJnY9MjQuNC4yMjA0&uuid=&pii=&in=false | 172.240.108.84 | | 0 B |
URL requiredswanchastise.com/api/users?token=L3AzeGM2M2s5eDM_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&uuid=&pii=&in=false IP172.240.108.84:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=L3AzeGM2M2s5eDM_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&uuid=&pii=&in=false HTTP/1.1
Host: requiredswanchastise.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://requiredswanchastise.com/p3xc63k9x3?adb=n&adb=n&dev=r&dnyumyd=87&key=abef8154b5ebb950476c75cb96a34afe&kw=[%22rarbg%22,%22rarbg%22,%22index%22,%22page%22,%22-%22,%22rarbg%22,%22to%22,%22-%22,%22rarbg%22,%22proxy%22]&psid=CF-2967-layer_0&refer=rargb.to/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=10&v=24.4.2204
Cookie: u_pl=16587840; ain=eyJhbGciOiJIUzI1NiJ9.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.vGI5Oh54fSy9hM-3PiICKodydWlvQZlJrOLFedkXH7E; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 09:26:23 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://us.priestsuede.click/c9b2l0k.php?key=qomifnk0n11ew5ulr9ub&SUB_ID_SHORT=3893f08ff7ee25575a0052572365a985&COST_CPA=1.000000&PLACEMENT_ID=16587840&CAMPAIGN_ID=1005180&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2845437&COUNTRY_CODE=NO
Set-Cookie: iprc71d68831b048b07692385b5760590d8f=5102003; expires=Fri, 19 Apr 2024 09:26:23 GMT
pdhtkv=true; expires=Fri, 19 Apr 2024 09:26:23 GMT
uncs=1; expires=Fri, 19 Apr 2024 09:26:23 GMT
pdhtkv28=true; expires=Fri, 19 Apr 2024 09:26:23 GMT
uncs28=1; expires=Fri, 19 Apr 2024 09:26:23 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dd330594c166034f31ec17cac0190be8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| us.priestsuede.click/c9b2l0k.php?key=qomifnk0n11ew5ulr9ub&SUB_ID_SHORT=3893f08ff7ee25575a0052572365a985&COST_CPA=1.000000&PLACEMENT_ID=16587840&CAMPAIGN_ID=1005180&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2845437&COUNTRY_CODE=NO | 192.64.81.118 | | 0 B |
URL us.priestsuede.click/c9b2l0k.php?key=qomifnk0n11ew5ulr9ub&SUB_ID_SHORT=3893f08ff7ee25575a0052572365a985&COST_CPA=1.000000&PLACEMENT_ID=16587840&CAMPAIGN_ID=1005180&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2845437&COUNTRY_CODE=NO IP192.64.81.118:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /c9b2l0k.php?key=qomifnk0n11ew5ulr9ub&SUB_ID_SHORT=3893f08ff7ee25575a0052572365a985&COST_CPA=1.000000&PLACEMENT_ID=16587840&CAMPAIGN_ID=1005180&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2845437&COUNTRY_CODE=NO HTTP/1.1
Host: us.priestsuede.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://requiredswanchastise.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Thu, 18 Apr 2024 09:26:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=pmiba4m7bg; expires=Fri, 19-Apr-2024 09:26:23 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=pmiba4m7bg-pmiba4m7bg-ibqe-m7bg-usa96o-9rirvr-9rir0-114682; expires=Fri, 19-Apr-2024 09:26:23 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://www.profitablegatecpm.com/w5pp8fdef?key=6f574ff9ef92214c5c26522238774319
Strict-Transport-Security: max-age=31536000
|
|
| www.profitablegatecpm.com/w5pp8fdef?key=6f574ff9ef92214c5c26522238774319 | 192.243.59.20 | | 1.4 kB |
URL www.profitablegatecpm.com/w5pp8fdef?key=6f574ff9ef92214c5c26522238774319 IP192.243.59.20:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (440) Hashd1bbaff3a9f5d2987e628fe1a53882df eef8678c27835ed466ee5ab3cf3fa0fa6f0b03fd 3ca351a2591ebace4bc5494deee2a0b82d53f18d221326bf2dc2cdf479fd85c5
GET /w5pp8fdef?key=6f574ff9ef92214c5c26522238774319 HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://requiredswanchastise.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 18 Apr 2024 09:26:24 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17524773; expires=Fri, 19 Apr 2024 09:26:24 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.iRv_NJ8OtSB5FXbC8m2Kh1LPeV59lEtZIRQWRonSgmk; expires=Thu, 18 Apr 2024 09:27:24 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c4e2f0abb6ce333daab020ed9559b46b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| www.profitablegatecpm.com/api/users?token=L3c1cHA4ZmRlZj9rZXk9NmY1NzRmZjllZjkyMjE0YzVjMjY1MjIyMzg3NzQzMTkmcHN0PTE3MTM0MzI0NDQmcmVmZXI9aHR0cHMlM0ElMkYlMkZyZXF1aXJlZHN3YW5jaGFzdGlzZS5jb20lMkYmcm10Yz10JnNodT01YjU3OTdjZDRkYzljNTIxZDU3YjI5NWNhYjVlMjAxNDhiOGZlMDk4MTkxNGQ5NTIwNjFmNmFhNTExMDI2MjA5NTRlN2ZiYzA5N2I3MWFlYWIyMjk3MjAyNmNjMWIwYmFlMGE5MjJmODc3MGQ5Nzc5ZTk3ZWY0MzYwZDMxZDY5M2RjYjMwMWEyNWM3ODQ4ZTlmNGU0ZTc5YTgyZjA1YTZhZTlkYTE3&uuid=&pii=&in=false | 172.240.108.68 | 302 Found | 0 B |
URL User Request GET HTTP/1.1www.profitablegatecpm.com/api/users?token=L3c1cHA4ZmRlZj9rZXk9NmY1NzRmZjllZjkyMjE0YzVjMjY1MjIyMzg3NzQzMTkmcHN0PTE3MTM0MzI0NDQmcmVmZXI9aHR0cHMlM0ElMkYlMkZyZXF1aXJlZHN3YW5jaGFzdGlzZS5jb20lMkYmcm10Yz10JnNodT01YjU3OTdjZDRkYzljNTIxZDU3YjI5NWNhYjVlMjAxNDhiOGZlMDk4MTkxNGQ5NTIwNjFmNmFhNTExMDI2MjA5NTRlN2ZiYzA5N2I3MWFlYWIyMjk3MjAyNmNjMWIwYmFlMGE5MjJmODc3MGQ5Nzc5ZTk3ZWY0MzYwZDMxZDY5M2RjYjMwMWEyNWM3ODQ4ZTlmNGU0ZTc5YTgyZjA1YTZhZTlkYTE3&uuid=&pii=&in=false IP172.240.108.68:443
CertificateIssuerLet's Encrypt Subjectprofitablegatecpm.com Fingerprint9D:FB:8C:AD:4D:64:98:6B:85:78:33:54:E7:A3:BB:10:ED:77:63:30 ValidityFri, 05 Apr 2024 18:10:33 GMT - Thu, 04 Jul 2024 18:10:32 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /api/users?token=L3c1cHA4ZmRlZj9rZXk9NmY1NzRmZjllZjkyMjE0YzVjMjY1MjIyMzg3NzQzMTkmcHN0PTE3MTM0MzI0NDQmcmVmZXI9aHR0cHMlM0ElMkYlMkZyZXF1aXJlZHN3YW5jaGFzdGlzZS5jb20lMkYmcm10Yz10JnNodT01YjU3OTdjZDRkYzljNTIxZDU3YjI5NWNhYjVlMjAxNDhiOGZlMDk4MTkxNGQ5NTIwNjFmNmFhNTExMDI2MjA5NTRlN2ZiYzA5N2I3MWFlYWIyMjk3MjAyNmNjMWIwYmFlMGE5MjJmODc3MGQ5Nzc5ZTk3ZWY0MzYwZDMxZDY5M2RjYjMwMWEyNWM3ODQ4ZTlmNGU0ZTc5YTgyZjA1YTZhZTlkYTE3&uuid=&pii=&in=false HTTP/1.1
Host: www.profitablegatecpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.profitablegatecpm.com/api/users?token=L3c1cHA4ZmRlZj9rZXk9YTk2OWNhNWM5YWQyNjExNzYyZjExYjc5YTUyNmUyZDImc3VibWV0cmljPTE3NTI0Nzcz
Cookie: u_pl=17524773; ain=eyJhbGciOiJIUzI1NiJ9.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.iRv_NJ8OtSB5FXbC8m2Kh1LPeV59lEtZIRQWRonSgmk; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Thu, 18 Apr 2024 09:26:25 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://secureltrk.com/click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=38963f45f6e8cd48cee8edb9f34896d3&COST_CPC=0.003050&PLACEMENT_ID=17524773&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Social
Set-Cookie: iprc6e6025bc5e6bff6d2b48270cd49c66e1=4929250; expires=Fri, 19 Apr 2024 09:26:25 GMT
pdhtkv=true; expires=Fri, 19 Apr 2024 09:26:25 GMT
uncs=1; expires=Fri, 19 Apr 2024 09:26:25 GMT
pdhtkv28=true; expires=Fri, 19 Apr 2024 09:26:25 GMT
uncs28=1; expires=Fri, 19 Apr 2024 09:26:25 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: da5b90523439ebdee83dfe576bad4662
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| secureltrk.com/click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=38963f45f6e8cd48cee8edb9f34896d3&COST_CPC=0.003050&PLACEMENT_ID=17524773&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Social |  176.97.112.149 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/2secureltrk.com/click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=38963f45f6e8cd48cee8edb9f34896d3&COST_CPC=0.003050&PLACEMENT_ID=17524773&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Social IP176.97.112.149:443 ASN#43180 Virtual Systems LLC
CertificateIssuerLet's Encrypt Subjectsecureltrk.com Fingerprint91:A8:57:2C:3B:9E:B5:B7:A7:E4:55:0C:08:59:E7:45:9D:A9:4C:9D ValidityFri, 22 Mar 2024 12:23:21 GMT - Thu, 20 Jun 2024 12:23:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?key=738d3b0a8b38ffeea519&SUB_ID_SHORT=38963f45f6e8cd48cee8edb9f34896d3&COST_CPC=0.003050&PLACEMENT_ID=17524773&CAMPAIGN_ID=958413&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Linux&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&REMOTE_LANGUAGE=11&BANNER_ID=2747786&CATEGORY_ALIAS=Social HTTP/1.1
Host: secureltrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Thu, 18 Apr 2024 09:26:25 GMT
location: https://ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=cogeegda6vts739vo1b0
server: Caddy
set-cookie: uclick=numCkVdYO9810eenbWCYtGHQ7qCn+NGmYhEgpUWrobxZqf3+PlwatHUkP4qB2CX28wNKHQ==; Max-Age=31536000; SameSite=Lax
bcid=cogeegda6vts739vo1b0; Max-Age=31536000; SameSite=Lax
cid=cogeegda6vts739vo1b0; Max-Age=31536000; SameSite=Lax
x-request-id: 1e86ff24-1dbb-4f8b-a4e4-db1c0ad9d109
content-length: 0
X-Firefox-Spdy: h2
|
|
| ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=cogeegda6vts739vo1b0 |  176.97.72.227 | 302 Found | 20 B |
URL User Request GET HTTP/1.1ifdtrcking.com/click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=cogeegda6vts739vo1b0 IP176.97.72.227:443
CertificateIssuerLet's Encrypt Subjectifdtrcking.com Fingerprint78:E6:1D:72:73:71:26:50:EF:D2:22:7F:42:8D:E8:84:EE:9E:0D:76 ValiditySun, 03 Mar 2024 02:03:36 GMT - Sat, 01 Jun 2024 02:03:35 GMT
File typegzip compressed data, from Unix Hash7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /click.php?project_id=ju&affiliate_id=79b2b9ace4&lp=a09f2e725a&custom2=cogeegda6vts739vo1b0 HTTP/1.1
Host: ifdtrcking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 18 Apr 2024 09:26:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; expires=Thu, 25-Apr-2024 09:26:26 GMT; Max-Age=604800; path=/; samesite=None; secure
leadID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; expires=Thu, 25-Apr-2024 09:26:26 GMT; Max-Age=604800; path=/; samesite=None; secure
Location: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: armagedon
PX-X-Request-Id: b1e73bf8e1ec07ec3dcabfabed62bb12
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd |  193.34.166.179 | 200 OK | 2.3 kB |
URL User Request GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd IP193.34.166.179:443
CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeHTML document, ASCII text, with very long lines (6076) Hashf5c292a769c03631631bfbef07d192df 81a9669c35bda1440930a576dd22818698bed791 d5ec66c30e3143f5d4daeda84f6f720193f0d80e851be96d199d498c92f073b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.profitablegatecpm.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:26 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:16 GMT
ETag: W/"659e5a0c-2d61"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: ebae5b0bfe398c35cf04d192e8a29f6f
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
|
|
| intelligent-money-offers.net/px-mapping/location.js | 193.34.166.179 | 200 OK | 333 B |
URL GET HTTP/1.1intelligent-money-offers.net/px-mapping/location.js IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hashdb75ab7ca0e91970618d692b16f2005a 114d92c1640331d8d38189d94a5c0caa79bedf8a 2f1be024142b29d05600f9a0cd82010e11c5daebf9d6643e0c75bb9b5d4d5238
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /px-mapping/location.js HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jan 2024 14:46:33 GMT
ETag: W/"65b122c9-29f"
X-Upstream: evlampi-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c5b7094021eef425818cba65c6b4415e
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/runtime.4ea2ebef178f62a8.js | 193.34.166.179 | 200 OK | 562 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/runtime.4ea2ebef178f62a8.js IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJavaScript source, ASCII text, with very long lines (922), with no line terminators Hash39ddde7bbe1c7d81ee0dfa7ec932ba22 5acdcf57ccd796f1ce621d8db685199ceebdd5e9 32c133b29414c3f3567b49762345d9c14cf4b432b0dcb56f90c324483fec2a2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/runtime.4ea2ebef178f62a8.js HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-39a"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/runtime.4ea2ebef178f62a8.js
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 24ce1fae11c35533e6046ae9c8131301
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/polyfills.22e567859223a852.js | 193.34.166.179 | 200 OK | 12 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/polyfills.22e567859223a852.js IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJavaScript source, ASCII text, with very long lines (35223), with no line terminators Hash8a165c8961a0d603b0ee46d4dd223e27 a8b97e01b34dbb2cd82ff9003960eabf344f896e 8570484a108578fc1680984edc4d564d242b1e9442148a766440e196c5f1cc48
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/polyfills.22e567859223a852.js HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-8997"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/polyfills.22e567859223a852.js
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c8c9e1cc27c4e416ae88b6762ae057ab
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd | 193.34.166.179 | 200 OK | 0 B |
URL User Request GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd IP193.34.166.179:443
CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
HEAD /the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: text/html
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:16 GMT
ETag: W/"659e5a0c-2d61"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 058dcd2b7ac5ab9dcfa130c525c731d5
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/main.d93cd8d256621749.js | 193.34.166.179 | 200 OK | 139 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/main.d93cd8d256621749.js IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size139 kB (139002 bytes) Hashab79fa03c8e2ccfe2930235cba084386 8f4e6749c2794390c5ad815c83014501cd4d42fd f5ca014c0c99ccde9efc682d054b8010b5aa8f5c444fdd0be9facd4ed2c6a6f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/main.d93cd8d256621749.js HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-77d9f"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/main.d93cd8d256621749.js
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: d943a43a08de3c0d5a52da758ceb2e88
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,700;1,700&display=swap | 142.250.74.106 | 200 OK | 85 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,700;1,700&display=swap IP142.250.74.106:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typeASCII text, with very long lines (56167) Hashe0e18e45f237bb785884e2e2371d648d 931ff1eea7c3facb224d8cb8f5cd213bec7af166 73af4e8fedf93522ad6f3dcd854ea123259c8d6ecb927cde1b28cb13bde9889c
GET /css2?family=Roboto:ital,wght@0,300;0,400;0,700;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 18 Apr 2024 09:26:27 GMT
date: Thu, 18 Apr 2024 09:26:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:37:01 GMT
expires: Fri, 18 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 24566
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.js?v=202431893 | 193.34.166.179 | 200 OK | 50 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.js?v=202431893 IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJavaScript source, ASCII text Hashb74a78a8e492a9b171dab179eeab69fb 6e7fe630cf763a0a45fd77c922d728ad2b386cae 6298f0a9a101a54afa0ed7e7ccd9bb8f6583638f84082c69f5e0e5a2c9961f2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/integration/sdk.js?v=202431893 HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 18 Apr 2024 08:44:57 GMT
Vary: Accept-Encoding
ETag: W/"6620dd89-7a2f9"
Expires: Fri, 18 Apr 2025 09:26:27 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 3688457ce692e67f06e21f8de526492a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
PX-Cache-Status: MISS
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/favicon.ico | 193.34.166.179 | 200 OK | 948 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/favicon.ico IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 28 x 30, 8-bit/color RGBA, non-interlaced Hash1fbdf735a0dd3e8321c5e0828a45a4d5 22f6a4a3bcaafafb0254e0f2fa4ceb89e505e8b2 2d0a4f5a77c788b084919b1b8cad5713d9dfc3388ef29969c4cb66c28092e683
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/favicon.ico HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/x-icon
Content-Length: 948
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-3b4"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /immediateconnect/favicon.ico
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: fb153e9d920db3300513d62a915ee3c7
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.css?v=2.66.5 | 193.34.166.179 | 200 OK | 8.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.css?v=2.66.5 IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash11551ef44c6dccf85a6287f4bfe11182 d9b25491d60633670c86cf7cd76e0abf858bc360 617a4b507a3a45bc358f56b14d884283ab84e61e8ed5956d4d1684d5130e6b47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/integration/sdk.css?v=2.66.5 HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 02 Feb 2024 09:51:23 GMT
Vary: Accept-Encoding
ETag: W/"65bcbb1b-14923"
Expires: Sat, 01 Feb 2025 13:28:26 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 15889a7e5f7fff9092d3281b58437a25
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
PX-Cache-Status: HIT
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ie-logo-nav-desktop-1step.png | 193.34.166.179 | 200 OK | 2.4 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ie-logo-nav-desktop-1step.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 309 x 52, 8-bit colormap, non-interlaced Hash0459b7e26a6ca31cce9a64ebb3487e1c f396c9d1d79707ad7fcb914ff9ebc5de9f969f7e 201e3f4394c2e234d7a5f94c78bbfc23ff56f269288ebf49560657fc1f1aaf07
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/ie-logo-nav-desktop-1step.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-96f"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/ie-logo-nav-desktop-1step.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 312db47a2a357df770ee3edd3b3fce5c
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ie-logo-nav-mobile.png | 193.34.166.179 | 200 OK | 2.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ie-logo-nav-mobile.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 56 x 56, 8-bit colormap, non-interlaced Hash2e5d0fa57b9f3adeade0e421da06a56f 816baaf0c582cf86407640306d199e76c47465a1 3468f8886d887602b10bc1b998d9ea028c75b39c73b9a41350ef6d2747f42c66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/ie-logo-nav-mobile.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-a38"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/ie-logo-nav-mobile.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 3fcebd969c8fa47f398cf6cc9bd0f5a9
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ice-logo.svg | 193.34.166.179 | 200 OK | 1.9 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ice-logo.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash71240d2742866919642df08f8d0c312b d489b8c48e274499a91704ef7873fa34648dcc4d 61a453734473e2989b6479eb160a65fe6e938570e995239eaf1fcab13dc145f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/ice-logo.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 1948
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-79c"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/ice-logo.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: de88651e43d46cc7eed1af5f436c2e7b
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/symantec.png | 193.34.166.179 | 200 OK | 7.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/symantec.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 654 x 174, 8-bit colormap, non-interlaced Hash40548510f3d6f7abeb3f38b28788a4bc 857f0cf462e24a492be1bf9eb195b42756feb51c 487abf0f6e6b4ac3bd7ab1a24da4c55ee983f0b50eb9aeb2602d86c879cbc2fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/symantec.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1c3d"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/symantec.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 0174049a3aa48b3b52f148712327c356
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/mcafee.png | 193.34.166.179 | 200 OK | 10 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/mcafee.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 654 x 174, 8-bit colormap, non-interlaced Hash24ed5520be3d9917a455ec3dfd633eab 2e3e3a7c6f25af5851baedea7108139e42b61a5d 27c690a67d13f7c17fdd637895b59b433c60ab64a09bd15ff6c9d7d42bb7feb1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/mcafee.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-2850"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/mcafee.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 848452daf6a1fe3fe4d073fa6251122f
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verisign.png | 193.34.166.179 | 200 OK | 5.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verisign.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 654 x 174, 8-bit colormap, non-interlaced Hash6801e3d07e74d1a33ba8874ae026593a e39818034c35a253f3b0152849efc510cafb4153 b4dead132464e01505ebc95917e44660dfacf176934fb36ac30d7611269977b0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/verisign.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1681"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/verisign.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 8f25c7df2bf69ab027504c9f5a4db122
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ssl.png | 193.34.166.179 | 200 OK | 6.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/ssl.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 654 x 174, 8-bit colormap, non-interlaced Hash5c412d96fe0eb382a493850dd19137e3 5d16a1561185950814e4b65aed8c07185621e4f3 f684a91b0416cd83b97d8e07209fc43d94b811c300ee882120f1379f5b54a932
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/ssl.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-19bf"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/ssl.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 2445884f1582b5b64e5536fbefca5bfa
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/geotrust.png | 193.34.166.179 | 200 OK | 5.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/geotrust.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 654 x 174, 8-bit colormap, non-interlaced Hashe0dd2dcc9a87aaccc17a0fb2267ea21b 510124dc3ae224e6bd10971694d6baed8351e099 9a018896a61eedb4db0242bd79447cc43d6c04198b7de9ae3a4bc72662fea821
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/geotrust.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-161d"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/geotrust.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: e02a7d2eaa8cbec79e8f6848d385701a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/img-pic-3.png | 193.34.166.179 | 200 OK | 39 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/img-pic-3.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 330 x 330, 8-bit colormap, non-interlaced Hash90c5cdcbb48c0b7b8dd7f8c239cd58fb 65ae2133c63942ac245b3caa50d4a73108527de0 b0de93647fee265ea2c4f647c725885d2691d0aa35afbe9345122af900d67a30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/img-pic-3.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-98e0"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/img-pic-3.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: f1310250a061b439f053046821a4c6fa
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verified-1.svg | 193.34.166.179 | 200 OK | 8.4 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verified-1.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash92d19e68f617639a728eb827aaab340a db44c23ca17239c6998670a48b7148baf851c4dc 66ccb9bc44b65f07fab4d1f05e467272bda8685a31830ef05247ab3051054975
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/verified-1.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 8370
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-20b2"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/verified-1.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 27d192efb56eb0968f86feef0ddbfea0
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verified-2.svg | 193.34.166.179 | 200 OK | 5.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verified-2.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash0da60a5c90003c6f911425d84d551f4f b3923a72581761e336aaf9a2f1f5b9613972b277 63bd1d211265e52cb93edab6cad4f65bf1ba0bde4d27a6e9911cbd82bf607658
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/verified-2.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 5306
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-14ba"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/verified-2.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: ef6e2e5127bcdd43a6df57e082138a71
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verified-3.svg | 193.34.166.179 | 200 OK | 3.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/verified-3.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash8af4c607c65bb329c9130764cc178687 141d7f57839513929e9bf19eeb4726fe38af5c2b f936d77442be2c6207c645cda944212a32a1f503df4486729210bb8cb1f0273f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/verified-3.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 3299
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-ce3"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/verified-3.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 1491ba4fe923a497d9801d09b23f6041
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/winkle.png | 193.34.166.179 | 200 OK | 37 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/winkle.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 330 x 330, 8-bit colormap, non-interlaced Hash86d347ceb23446481bcd798db9bc8705 4d8064a25a40fc505f4adf5c64a362e8c68a38a2 ae6ef56d6ca864c4e8ddb849d2a261b3c1e0bed29c66a24e3a7d427c2ceb1945
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/winkle.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-91f2"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/winkle.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c9435a03015607d282fa112b764104b1
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/coins.svg | 193.34.166.179 | 200 OK | 17 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/coins.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash789521547679a35efb666ef40126c05d 7baafbd2d2b502e13deb06bc784dfebf3a15a85d 033ff9d3580bc9fd7ee177b4d8fc9e73f0a5b108d2e844ada9ffaeddc441b8ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/coins.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 17096
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-42c8"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/coins.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 4614fc168d354e56b6b2e69baf9d3ec8
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/secure.svg | 193.34.166.179 | 200 OK | 5.4 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/secure.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hasha436bdc813017b73bfcb26504a02225b 435ef1e3498f312cf85674412b31b2e4ad7b2178 7ff3f73adf0d771ff7b0f300a6199bc7c67e1d60bc1393034489749b5c4df532
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/secure.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 5379
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-1503"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/secure.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 69a41e657c2042afe21526664600d271
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/i18n/default.json | 193.34.166.179 | 200 OK | 8.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/i18n/default.json IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hashab43c887944f5d64669e5ba956dce1b3 22e35b05b2bb931d2809fbb18c180d812b96c55f c28cbdd8f2ef45f6d713e6c6e793773fd1fad5d32ed5f0855a0338e9fbde856b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/i18n/default.json HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: application/json
Content-Length: 8102
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-1fa6"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/i18n/default.json
Accept-Ranges: bytes
X-Server: karen
PX-X-Request-Id: 2768b94b06c02214e86e1fe5d21dbb11
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/facebook.png | 193.34.166.179 | 200 OK | 9.2 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/facebook.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 618 x 126, 8-bit colormap, non-interlaced Hash09ff458d1d25aa6931491304c7c0c9b7 c040576ca8c172672aa22a2a9603e01acd5645af 0d9c57941452873a53ff7d81fe50caa50ca89ead1904eb53935f83c870cab6c1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/facebook.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-23ed"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/facebook.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 51e99688438da154681e32d8b8d185a2
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/four-stars.png | 193.34.166.179 | 200 OK | 4.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/four-stars.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 401 x 95, 8-bit colormap, non-interlaced Hash2082d5d6390e872ba5da59a91aba3a57 68f0b016ae9056b17109297b407f8bcc181f0121 626b338e2c7f8e953215dbdb45d6dd8f466c82a48f39e9febfd5e26eec8de1ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/four-stars.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-109b"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/four-stars.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 53bf1ac9180ff9110b4b5d6942297d9d
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/payout-icon2.svg | 193.34.166.179 | 200 OK | 919 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/payout-icon2.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash6d4ba68b09ae688a7cb078120d2d67ba 71ab531503aaad9b80b279871173be7db75fd2db 94ec31a79ded1e95c6fc949cfd9b7c980ba05990b8509221c5e1568b695aa55e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/payout-icon2.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 919
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-397"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/payout-icon2.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: dc5249d80bc841a1d6c503e990b73639
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/five-stars.png | 193.34.166.179 | 200 OK | 5.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/five-stars.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 500 x 95, 8-bit colormap, non-interlaced Hashe7286c47b3b5f9c3a1923a015040641a cf39a16c1c86f73685334520505145142dfc9fd2 f021fe8757aa16e7b7be4bf722a4e8ca0a20fc9b00e997c1e62c3ac76019a943
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/five-stars.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1535"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/five-stars.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 9a7733a875718dcc66c9a6c29551e06b
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/plus-blue.svg | 193.34.166.179 | 200 OK | 1.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/plus-blue.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hashd12fc83d41d2779d317f7d2d43286c79 9004f3d264f8db721ce044e137f4f88f4ef3a7d0 47742d80c62698823c75b8abb55ffe045fb3f4b80e5ad9e0f07b1d037d36e407
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/plus-blue.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 1451
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-5ab"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/plus-blue.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 1d156864f9fecc8fccc83a5983da1967
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/plus-green.svg | 193.34.166.179 | 200 OK | 1.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/plus-green.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash3c34e64de49e6dec6df4f94b3bf85fe5 377fbbbd8a95ae2b3499ca612e6c8f282bc354e3 183a9657082d1764b9e43a43a854153d672db0ac9cd8845387a205668c71b83b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/plus-green.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 1464
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-5b8"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/plus-green.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 4b082bb8e1688db4283c6cc7df0bac72
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/icon-blue.svg | 193.34.166.179 | 200 OK | 3.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/icon-blue.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash02ab5dafbcef9af2e3a82a47abfda205 52b0aadba99bf1c047aeb9a15a19fc99f462ac18 5f1372626e4f0ad44e710dccbfc89d9f04faa66eeaf1d0f97414acd39f08f293
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/icon-blue.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/svg+xml
Content-Length: 3108
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-c24"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/icon-blue.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 83973b7a8f6ad8cf085ab5bea4c0af1c
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/oval.e07d671fa4c0fabc.png | 193.34.166.179 | 200 OK | 432 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/oval.e07d671fa4c0fabc.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 70 x 70, 8-bit colormap, non-interlaced Hashb6af3e352ca17ba354597b8dc952bad2 db43dfa2484d0536eb497e90fb1394e998a1df19 2183b8ceeb933af3a62303d83e623861341c7e9badce4c3614dd76a1c95747dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/oval.e07d671fa4c0fabc.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-1ce"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/oval.e07d671fa4c0fabc.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 08ba1f4b7889416b1325d667f3770ae4
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/ic-arrw-r-lrg.721996b360bd9c65.png | 193.34.166.179 | 200 OK | 883 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/ic-arrw-r-lrg.721996b360bd9c65.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 50 x 50, 8-bit colormap, non-interlaced Hash49d18e6b493ff260538f36f3f12c068c 5db0a75129d2fb5d217084976f4dbf0dba4ce0f5 038fdc7dcc3a0bc27430ff04535d33166e65ff44e8b46bd4192535e7a69f2b15
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/ic-arrw-r-lrg.721996b360bd9c65.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-3a2"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/ic-arrw-r-lrg.721996b360bd9c65.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 4c390a7bda5f362184cbb6529f7b5fca
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.163:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 10:46:32 GMT
expires: Wed, 16 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 167996
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/exchanges.png | 193.34.166.179 | 200 OK | 138 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/exchanges.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 450 x 450, 8-bit colormap, non-interlaced Size138 kB (138495 bytes) Hash478f18318e39b0b1e94c35b3d0034837 f9fc40703c8d14a875f009a67e15c4494eee04c5 70a9380f754ad55314606f9fd1d58d2d9b612cf7ff54b167e8e720b550094b3a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/exchanges.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-21cc0"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/exchanges.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 418f2d64e0a9c1ff22632e84a39abeb3
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP142.250.74.163:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15740, version 1.0 Hashb9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:45:33 GMT
expires: Fri, 18 Apr 2025 02:45:33 GMT
cache-control: public, max-age=31536000
age: 24055
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/icon-blue.3f406497bc234cd0.svg | 193.34.166.179 | 200 OK | 3.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/icon-blue.3f406497bc234cd0.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash02ab5dafbcef9af2e3a82a47abfda205 52b0aadba99bf1c047aeb9a15a19fc99f462ac18 5f1372626e4f0ad44e710dccbfc89d9f04faa66eeaf1d0f97414acd39f08f293
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/icon-blue.3f406497bc234cd0.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/svg+xml
Content-Length: 3108
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: "659e5a09-c24"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/icon-blue.3f406497bc234cd0.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 11fb80bd66e11ecce75974c5dc025fd0
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 | 142.250.74.163 | 200 OK | 17 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 IP142.250.74.163:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 17032, version 1.0 Hash05a47f9e469d408c629f931cd33ff8b2 823f21f7b1d456db889c3afea393f0d2b9581c38 6be97ca17228a69c406231d89c003194c3dfba7401eaa9fe9e9ed0ef1c18dc38
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 Apr 2024 23:02:14 GMT
expires: Tue, 15 Apr 2025 23:02:14 GMT
cache-control: public, max-age=31536000
age: 210254
last-modified: Wed, 11 May 2022 19:24:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/ic-arrw-l-lrg.1c4a83457afefca7.png | 193.34.166.179 | 200 OK | 872 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/ic-arrw-l-lrg.1c4a83457afefca7.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 50 x 50, 8-bit colormap, non-interlaced Hasha8ef51f3028a3a9251bf1cfdd3844426 1c50cd39aa7c85cfe8b77b440cf9c0435afe6c7c a7340622c6ba463a729c01eebe2459f927ff63352db547fc37779555c495cef7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/ic-arrw-l-lrg.1c4a83457afefca7.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-397"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/ic-arrw-l-lrg.1c4a83457afefca7.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c462f0eef9a365e8a01dfa5a50306338
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/img-xl-1.57f335a93371b2e2.png | 193.34.166.179 | 200 OK | 260 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/img-xl-1.57f335a93371b2e2.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 1920 x 910, 8-bit colormap, non-interlaced Size260 kB (259870 bytes) Hasha85aeba78558de37eb84bfefd0cd0b49 9b1f950e26b0ccca671ded213cde7062e7af3d28 2d629a5028c0dac0c91d8da536edeeb5a6845fb210e70013f472369656a00ad6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/img-xl-1.57f335a93371b2e2.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-40668"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/img-xl-1.57f335a93371b2e2.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 0fa81dbf4669ef766ea71ccc5ce98a19
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/img-xl-2.d08549fc70bd02fa.png | 193.34.166.179 | 200 OK | 180 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/img-xl-2.d08549fc70bd02fa.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 1920 x 550, 8-bit colormap, non-interlaced Size180 kB (179811 bytes) Hash59cbad209290ed27812352bf7c7b6180 f829d53b6da8752b2c70c62d73b1f30d172519c8 603dc3ed7897d83c3d6132ed8b6c3d477000907cc12015bf1a62b9ed8b82b0fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/img-xl-2.d08549fc70bd02fa.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-2beda"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/img-xl-2.d08549fc70bd02fa.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 79b230943dd8afb67259b4bee47814e3
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/stop.png | 193.34.166.179 | 200 OK | 5.0 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/stop.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced Hashdc00ec155d13ead977b78ed4a15dff43 8849b2d3ce65aaf398f093f90f4a2d5af371b66b 5e4b7d13b0771dc1ef3266ff906022c74b05a7baf949646cfea3b462009302ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/stop.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-13cc"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/stop.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c4a46cbf1584f910c25f9c6f73bd0030
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/quotes-api-wrapper/ | 193.34.166.179 | 200 OK | 5.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/quotes-api-wrapper/ IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash03884c09def7f7c660f1603bf0ebfc37 f0ea6f8188d78dd6a660be93103f88f19d929fdf 3fde3e98a1a2cb7c97032bacee7f3342e3d041b843daf9aac6bc68e83acec0ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /quotes-api-wrapper/ HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: OPTIONS,GET,POST,PUT,DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With
X-Upstream: evlampi-***ko
X-Server: karen
PX-X-Request-Id: 40c987256b7100d2c148c52f8b95c1d6
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi1.png | 193.34.166.179 | 200 OK | 52 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi1.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 328 x 327, 8-bit colormap, non-interlaced Hash09c2664d24e95652df66165cc6e211d3 1ba6fcaaced1d3dd518018be909039b6a2464380 fec6c16dcae3ff5fce21d5e3437eea87d882885ef9a12ae0e3c6ce5adce0d886
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/testi1.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-ccc7"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/testi1.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c7d34dba4d2c810dcde7084ff0451e1e
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi2.png | 193.34.166.179 | 200 OK | 47 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi2.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 327 x 328, 8-bit colormap, non-interlaced Hash856a9dd056004ce56b9b0585dab64084 a03d2c17c9e4bba8909d510893a1a4d7127ea71f fa192da21d32713a7d21b556348122fb5d02bf755fe83391e39f508f29d02c28
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/testi2.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-b5f4"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/testi2.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: e71a5c799e50ef816daced630422d0b0
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi3.png | 193.34.166.179 | 200 OK | 42 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi3.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 327 x 328, 8-bit colormap, non-interlaced Hashb69af598997b5dbba19eda0c09a6e3ea f12421633a2c0712d6cc6bb786b31e3e975050f1 5b90c8c9c42358893e3e4e85d6ded65052dcc95818be6ef2a2735c2d0bd1860f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/testi3.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-a419"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/testi3.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 4420a9eebaa23f50d98583f8e304a178
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/device.10dd5c3c367bf1a2.png | 193.34.166.179 | 200 OK | 156 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/device.10dd5c3c367bf1a2.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 1920 x 934, 8-bit colormap, non-interlaced Size156 kB (156156 bytes) Hash800f41e830cde76a8d7d818e14248558 862d2128ddc2e093bf3ec9189f11f642c119abac 5f2b94bcba24f3ebd649cefb91a227680b9649ca171f7383dccc339e45aa72ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/device.10dd5c3c367bf1a2.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-262ff"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/device.10dd5c3c367bf1a2.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 13dada8d019810cba8545ee27a19a11f
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi6.png | 193.34.166.179 | 200 OK | 108 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi6.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 328 x 327, 8-bit/color RGB, non-interlaced Size108 kB (107703 bytes) Hash16aaf7243ec71906ce1077a2ea6f6e63 40c46905e9960a6733d84f64a63a226dd845d907 9c8fed4839aecc826d77dcdf60279252fd7877e291ec340a817ae3ed22faa812
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/testi6.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1a714"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/testi6.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: fb316ff1b2db92668cd36556f76703ed
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi5.png | 193.34.166.179 | 200 OK | 162 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi5.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 328 x 327, 8-bit/color RGB, non-interlaced Size162 kB (162352 bytes) Hashb47855df34228416fb2377110fde2cc9 b56c43ff788921f5f3cee508f898189b28969c9c 9d2a2dbc11bc80daa20312c293bbe21376cfaa099a67163e7afbdf4615a14ea6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/testi5.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-27c84"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/testi5.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: fde491cea163d442354466710b2f80e2
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user-1.jpg | 193.34.166.179 | 200 OK | 3.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user-1.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 128x128, components 3 Hashf1ea71af0ca2ac433bcdf2f855ae7d64 e0887886da1a4551266e66af8d4e27ad8965628e 14041ae6a43aa7248486a5207765c67f4b970b67db24031b3bed2f52163aabf5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/fb-user-1.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-e08"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/fb-user-1.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: e020dfdcf8834b8acd10aeff7806956f
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user.jpg | 193.34.166.179 | 200 OK | 2.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hasha7744050118401d7afc0d05e78cddeb2 7d6cc54f6b53349482391c71553741cd261495e6 3fff7c77ac4d967f819d6c3754aaace800f8d519b581eafcbdca01ec8b3a6ebb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/fb-user.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-b01"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/fb-user.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: d8f28252c41457bcdc1a4f2764fc77a7
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/58.jpg | 193.34.166.179 | 200 OK | 3.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/58.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hasha5c40b5ecd0a3fd38a97bcfa2117bc81 0f2d01ceeb5791c242513cd7a483c9a1616eb179 ae826b091273e6ec9a7508d7f8a22567a240c4481a53763d654f12ac411464ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/58.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1033"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/58.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: bc1ab19ffccff3bc776972fc57f7e036
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi4.png | 193.34.166.179 | 200 OK | 163 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/testi4.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 328 x 327, 8-bit/color RGB, non-interlaced Size163 kB (162899 bytes) Hash4e5f8e0d00d58f47434831e829203a90 7ea43cd6c527cbbddb690380bf2eaeb183afd7e8 7dd6dca15fae183d2e2498fe87ca0c49dd0d945d2313c84b92940190144f908b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/testi4.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-27e87"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/testi4.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 2e9ebc53ffc52b773f8087a1ad1e4553
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/80.jpg | 193.34.166.179 | 200 OK | 4.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/80.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash5a2aefa4590203ec3d78c97cb0d2da83 80d1ed05cd342cee1777d769b33f4642bb7e8c45 43afb23ac31ecd105f2cb1d72f18aea9def12050c10d70fa02f07814dde008cc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/80.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-12d1"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/80.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: bea19bd3d78eba9c4c2da1e6fd738a7e
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| use.fontawesome.com/releases/v5.9.0/webfonts/fa-solid-900.woff2 | 172.67.142.245 | 200 OK | 75 kB |
URL GET HTTP/2use.fontawesome.com/releases/v5.9.0/webfonts/fa-solid-900.woff2 IP172.67.142.245:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerCloudflare, Inc. Subjectuse.fontawesome.com FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 75440, version 329.-1049 Hashb5cf8ae26748570d8fb95a47f46b69e1 07bed153d47f9129a944ee54dd72952deed074c8 cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0
GET /releases/v5.9.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 18 Apr 2024 09:26:28 GMT
content-type: font/woff2
content-length: 75440
access-control-allow-origin: *
cache-control: max-age=31556926
etag: "b5cf8ae26748570d8fb95a47f46b69e1"
last-modified: Fri, 22 Sep 2023 01:46:05 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 169604
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJLXLzNE%2FdiHTfc7LnPTPc6u2wuZqWSWvIVg%2FCRJyb0qz1sp%2Fyws09%2BF9rrkhOyEVUUo7jOFKhsXRQWr6%2BoOc72XCuWHkf2zfdejjys8LNAmNPT1Z3xTrkKIrT2aKGtBGC4bsZNd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87639d0c7c2e56b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/7.jpg | 193.34.166.179 | 200 OK | 4.7 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/7.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash605af7fa51e2abb4df27027909bf7c4a d08645e62b586a65649504745645178b41525999 f25b1b7a6a351c0f748d81bf4fcaf8c5a2f8ed036563c2693d4c1ca3718d9d5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/7.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-137c"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/7.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 6af64da5a2a89105eb21834c2dda5e2e
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/54.jpg | 193.34.166.179 | 200 OK | 5.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/54.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hashba3a7a02107e8655d89eb6ed3fbf2398 fb8858080a6e7510da4538f237f27dfd9812c6d4 d4885b6c62fec6a9ddc0450843dbf6e81ee9d8b412c1b8f74b8edae87c3304cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/54.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1713"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/54.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 13aad46a919087ca69746b6947050e55
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/80.jpg | 193.34.166.179 | 200 OK | 3.7 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/80.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash18c2bc7fcf2f432829d42981a8e18ad5 420ffaee6161ffda7cc1a8e46985dfc7d06e34af 29eebfa854e576bf7a03854062fca29586a3feb8795a9239fb40232c7988df9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/80.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-e76"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/80.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: b71dc3ef3e5b46ceda7efa70281449f6
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/69.jpg | 193.34.166.179 | 200 OK | 4.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/69.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash1c4fba8570c0f73d3e1ce297ffce0ddb a517bd5f169eefe4681908aedcc941af79ebfa39 ecda74904047c8da6fda1df1167b908c46041459436f6b80eaf5cd70a0658337
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/69.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-13d8"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/69.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 90f5370e8c13ae1a768efef89219d357
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/75.jpg | 193.34.166.179 | 200 OK | 5.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/75.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash7004fabbdb67e146f09a72497c6a75cb 5f2a8a7379c2b598d8f5ed4fdf9f3d31b612649f c7e8aa07f59ba44ea6a7fc86d84f35eb97e54d4154f2dc63143952ea26a72104
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/75.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-16cc"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/75.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 3112094a443a4956bdc321b525246732
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/77.jpg | 193.34.166.179 | 200 OK | 4.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/77.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash2f04cabbfb0db0491ce65cbfe2610a93 59891fc758cb90f438350729fdaf4a60878d8ff3 2b60a52f98219bd878af04c6c7a7cbbd291bae76598bbdf3c1148ce294256869
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/77.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-ff2"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/77.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 93ad30d071a1c234c2c45c203082fa19
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/56.jpg | 193.34.166.179 | 200 OK | 4.9 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/56.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hashaa74824e8dcbdfa396d34fcba51ec424 ef6aa223f2d83bbca0d8dca253752ed0d00f9bb0 1468690451b81be74fdf90ee11d190bb1d226560f532cf4a883b50fc5dfaebcc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/56.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1428"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/56.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: e469fa73cbb9991aaf1ace1b6e6141ec
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/ | 193.34.166.179 | 206 Partial Content | 12 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/ IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeHTML document, ASCII text, with very long lines (6076) Hashf5c292a769c03631631bfbef07d192df 81a9669c35bda1440930a576dd22818698bed791 d5ec66c30e3143f5d4daeda84f6f720193f0d80e851be96d199d498c92f073b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/ HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: text/html
Content-Length: 11617
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:16 GMT
ETag: "659e5a0c-2d61"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/
Content-Range: bytes 0-11616/11617
X-Server: karen
PX-X-Request-Id: e8a3261956349d23c5da9707d1fcf2ab
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/36.jpg | 193.34.166.179 | 200 OK | 4.4 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/36.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash98a89f410bf09c54acc1e100ab25d03e 409639a555689a5d9f4f7a39d0234cbfca02c21b a9401e55315197e2e17043ce3219e23178f718cee2fab13579b4f3fc5906eb5b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/36.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1287"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/36.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: b6762ca710c2c7c7e9eef4203a9449c5
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/31.jpg | 193.34.166.179 | 200 OK | 6.4 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/31.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash36236f25631fb18a4931836b4446d686 5469f02932d8e06ea11bc3898032699476c6550f ab391f0ae1611fc32c31fbe5663bde5bba7a80efa851ceeec4b58eeab6931f4a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/31.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-18ec"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/31.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: ceb970c7fcbc405de409fb5d18ec8e90
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/33.jpg | 193.34.166.179 | 200 OK | 4.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/33.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash1121ddf517575b4a1249721ede9db926 a8deb0806ecb230ed941d771dd185bcb77ae8017 ae1d49872fdd6f8d9aa933f6ca8bce8cb1ba7e87dfb9d2926661184cb7bfe26d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/33.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-13f5"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/33.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 7cddca8f37e2be27d586f1d4b86fc632
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/19.jpg | 193.34.166.179 | 200 OK | 6.9 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/19.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 100x100, segment length 16, baseline, precision 8, 128x128, components 3 Hash885eb8b494ed32c5d00911aaf8752db3 603ba8730a70028bb9a8232da309a154c36ca91e c493b0a6d9a42ed0a102bcd31360d00491e23ac5cb4f7cbf8ae9c61f577ccccc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/19.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1b23"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/19.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: e8bf5e26398efd398b64c47cf9adafd0
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/41.jpg | 193.34.166.179 | 200 OK | 4.0 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/41.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash0f4246ee8b6dd185af6607d249a29efe db09f7cd338607cb3c5e680a0efc410a2af1ed0f 8c7df7267d485c5d3e33644f059c1a25940056d6c4eef9e89d7091eaf250fa2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/41.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-109e"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/41.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c4c41d88bf0cd9736bae761fa406dc1d
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/76.jpg | 193.34.166.179 | 200 OK | 6.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/76.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash72d2e8c2cfb589a8791ff2bb3625cf34 082ce6ef5a6fe7f464d6ffb5ed4d0feb99bb21db 2a0f9df9f842b1b4aea854a1cd77be199011a6a71d228df03335b527b2c91f66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/76.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1894"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/76.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 1b50213bee7af1b5251f88e03d885b99
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/88.jpg | 193.34.166.179 | 200 OK | 3.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/88.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash5e91b89e1853920bb0069e48726f4f7d 39a6f4541da5019196560567be1b1f809ad4320f 1b3bb15506d4e4378f8c31f163859bba7155263c02d06221e3b376285498764e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/88.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-f04"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/88.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c73613b316262f34447506101e3d231a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/48.jpg | 193.34.166.179 | 200 OK | 3.7 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/48.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hasha7a84d5e4d090723fe7ab59e45d387cd 7dbfe519d334d518b6f8c8e3afcafec5e758112e ac4b943b43fea60f3a33c1069444b3e287daac2a9d435b2b58206a805b6ceb4a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/48.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-eb7"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/48.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 36ea7586c0047fb611537938c143dbcf
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/28.jpg | 193.34.166.179 | 200 OK | 4.7 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/28.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hashfcbe852df16aa4673ee3774c52e8a4d6 e18d7a00782c70aeae6496dbb11e569069082a2c 421ebb300c84634c3d9d7ba92a2780264a4e333b0cc4c1da8d8b98f9830fc420
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/28.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-13a0"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/28.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: ab4f27fc7c67bbd38c12785fdcb06eed
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/85.jpg | 193.34.166.179 | 200 OK | 5.2 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/85.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash333b7d239936731c61f71e46dbf9d56d 63b1844c73cfb06c4541d968f3b06852995bb7d4 e55f3cdab57eb4084f7006cfe9f7f047e638e1b257a53498aaed14b83087152a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/85.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1570"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/85.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 783f589e0d7d88b94d3b993bd05e5482
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/94.jpg | 193.34.166.179 | 200 OK | 5.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/94.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash24195ba1d62626c4289f21237387811c be2a79acb8d5e4a70ac2e4b58be0dfd6f5c34ebf ccb8bb5abc7700fec0145db49ddf0cca3724ffbab0ea349dd70a4c7b0ef71e3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/94.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1709"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/94.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 4849ec2117f77f2abaeef63b2c2f4a51
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/10.jpg | 193.34.166.179 | 200 OK | 3.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/10.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash183bbe6f05cddf589a7b0afac3886683 45ccc077657e5d4afe3eaef0e3aec84d361b3642 54ebea0e1cad66565de28318ff2f512398bf5732f6f3f3fecea8ad4338b78778
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/10.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-f5f"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/10.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c3dec8d40be24d90e9165dc4494a5fa7
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/intgrtn/api/v1/projects/details.php?&clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&custom2=cogeegda6vts739vo1b0&locale=en-US&language=no | 193.34.166.179 | 200 OK | 11 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/projects/details.php?&clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&custom2=cogeegda6vts739vo1b0&locale=en-US&language=no IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash488bf9e8e455a67e5ff183d53d4bd9e0 6916d2690ded6579c43188fa6139288131db9250 7e1506a99aa8dc9f2b1f92ab8c49d556185facb6ada3de6fbf025da81076e65a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/projects/details.php?&clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&custom2=cogeegda6vts739vo1b0&locale=en-US&language=no HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: karen
PX-X-Request-Id: d35932353e993d5d271e18248f5f166a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/38.jpg | 193.34.166.179 | 200 OK | 4.5 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/men/38.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hashbb8309a5630a80a152cff9806ba2f9b0 78b5dfedaa966194a16b79479ee9e09e92ccbcb2 de6b3a986b674221f52f37cf8941d2aad5e0c4100f18378bc132bc4d00356140
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/men/38.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-12a2"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/men/38.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: dffd34aeebbc5d81d4edbc0beee999a7
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/3.jpg | 193.34.166.179 | 200 OK | 6.0 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/portraits/women/3.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 128x128, components 3 Hash1d63b743a132ff642ee847bdbaaf6898 6c9541e39119d72b2a5707076f90f7f3eab3ea32 7ae9db9990bb424cc1cf68b6af248e7b88e7add27109a6d951eb5b4f881eda98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/portraits/women/3.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-18b2"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/portraits/women/3.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 41bf664703d6bf1f09087de1fde0dd93
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user-3.jpg | 193.34.166.179 | 200 OK | 5.2 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user-3.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash8718c9a5a5684c00f7bb875d77196856 ce7217096c7e0a53c7f0899a09df8ec94c121467 35a0b259ed4f25999478cf047eddb8453afa34afa7b1d11fa2fafe44c78e3385
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/fb-user-3.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1486"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/fb-user-3.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: c30974c8e3322a80fcec9725a80ed0a5
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user-4.jpg | 193.34.166.179 | 200 OK | 4.4 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/fb-user-4.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 128x128, components 3 Hash996bcb2a310bfdecbc87ea15a3d1920e eba25840edd2318b7f20ce9406df11d0132f3028 911a38ecaac53bad168ca8e0086405365c2f4424979e32f0974246f8aecdb958
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/fb-user-4.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-1152"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/fb-user-4.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: bd6d477653b699a5a5b88485aebb1082
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/flags/special/no.png | 193.34.166.179 | 200 OK | 191 B |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/flags/special/no.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 550 x 400, 2-bit colormap, non-interlaced Hash9f077e747533059d00c35952bc10c16e 48de0e4b21d23536986e504f61c654497f14380f e4af81ba6f48264046e86f2951e292786a47828da3e6199937711949d053b973
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/flags/special/no.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-157"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/flags/special/no.png
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: da58cc8ca38f7fbcdf88f5c7675f45e4
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/videothumbnail-no.jpg | 193.34.166.179 | 200 OK | 155 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/img/videothumbnail-no.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3 Size155 kB (155430 bytes) Hashd5459aa3b2bed77b4c1edcfe21cd53d2 ef674a9c6bb2b9356d3bf2bdedd0949e06fef08f ca33559901e487bccf7bc2366e6291ecefc1a8b28bdf9ac332c06da6af329330
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/img/videothumbnail-no.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: W/"659e5a0a-261f4"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/img/videothumbnail-no.jpg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 6737954aa94f05ffcd22293625af3745
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/uinames/api/?amount=50&ext®ion=Norway | 193.34.166.179 | 200 OK | 21 kB |
URL GET HTTP/1.1intelligent-money-offers.net/uinames/api/?amount=50&ext®ion=Norway IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash0c24657619b0e685cb37daf5cadc9725 ff4c60b3bcaafce5ea222a8787bd3f189dcd8892 de34896b01efd81a39012bdd57ef3bfc44fc31b3e56c37c3279d6e653485d01e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uinames/api/?amount=50&ext®ion=Norway HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
X-Upstream: evlampi-***ko
X-Server: karen
PX-X-Request-Id: 39794ef7c82f9c866ef3d420bb44b89a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/uinames/api/?amount=50&ext®ion=Norway | 193.34.166.179 | 200 OK | 21 kB |
URL GET HTTP/1.1intelligent-money-offers.net/uinames/api/?amount=50&ext®ion=Norway IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash450ab9b385c77ef85682c53a2451e732 c9228cdd3d3a0dc02cd3a765be262e547f517e4a 603a7b3c0a2a695168c3807ea8375fc400c558b26c25c963c993c24d95ea5862
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uinames/api/?amount=50&ext®ion=Norway HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
X-Upstream: evlampi-***ko
X-Server: karen
PX-X-Request-Id: 8e5a1696e2e1959aa0e7dae46068466b
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/exit-popup-im/ | 193.34.166.179 | 200 OK | 2.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/exit-popup-im/ IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeHTML document, Unicode text, UTF-8 text Hash631fb091b4aeacea55d7bbf9bf3d251b 296e403a4ec6dc722e7f72ce1adad6b8074e3ac4 6307e2742067e78ecf7f38d904ffdbe41ef0a3a4d6ec7a9fad7198f7055b3c0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /exit-popup-im/ HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Upstream: evlampi-***ko
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 15c9f0b2d34612456830497ebfbe9346
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/assets/i18n/no.json | 193.34.166.179 | 200 OK | 8.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/assets/i18n/no.json IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash568892ab8a9b5fe20568d01e7f2403ac c3a6440e3f651033dcd7c5d90bf3e99a2efc6776 05d340198973672901e8a584db624cb8ebdbffec8fc3aeb232b1465bc75d12c2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/assets/i18n/no.json HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:28 GMT
Content-Type: application/json
Content-Length: 8107
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:14 GMT
ETag: "659e5a0a-1fab"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/assets/i18n/no.json
Accept-Ranges: bytes
X-Server: karen
PX-X-Request-Id: 60937b10aeae4b7c649cb5cf5f23c6fb
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
|
|
| intelligent-money-offers.net/intgrtn/uploads/project_banners/1b2a9bef3a77079ff49408406be31b90.png | 193.34.166.179 | 200 OK | 7.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/uploads/project_banners/1b2a9bef3a77079ff49408406be31b90.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 380 x 52, 8-bit/color RGBA, non-interlaced Hash1b2a9bef3a77079ff49408406be31b90 8cfb1ae0c25426ab3150f84b4f21abfde419d322 08dedbe39f63b6f4ed6f208855d2c6232a88a26ebb3ebc8a3767878c1fb4b34c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/uploads/project_banners/1b2a9bef3a77079ff49408406be31b90.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 22:58:56 GMT
Vary: Accept-Encoding
ETag: W/"620598b0-1e70"
Expires: Sat, 01 Feb 2025 13:38:40 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 1cb735b6fd48004b0395227d40022078
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
PX-Cache-Status: HIT
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 | 142.250.74.163 | 200 OK | 11 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 IP142.250.74.163:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11072, version 1.0 Hashe7df3d0942815909add8f9d0c40d00d9 cf5032eea3399a58870e8a05e629b006a8c7c3c7 bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11072
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:53:34 GMT
expires: Fri, 11 Apr 2025 17:53:34 GMT
cache-control: public, max-age=31536000
age: 574375
last-modified: Wed, 11 May 2022 19:24:53 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| intelligent-money-offers.net/intgrtn/api/v1/integration/assets/img/flags32.png | 193.34.166.179 | 200 OK | 45 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/integration/assets/img/flags32.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 32 x 8352, 8-bit colormap, non-interlaced Hashd9783e9c947c7184442c2111424ec896 b6ba479c15af54364e09af6230239c9746a5deae 681c58beadf3030753d8d5bb7c85c5f631704a515a9da8fd7a3744be46e12419
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/integration/assets/img/flags32.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.css?v=2.66.5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 02 Feb 2024 09:49:12 GMT
Vary: Accept-Encoding
ETag: W/"65bcba98-afed"
Expires: Sat, 01 Feb 2025 13:28:28 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 4b814819442674e8428bc91256b36b49
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
PX-Cache-Status: HIT
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/claim-btn-arrow-right.d4d044128590a38e.svg | 193.34.166.179 | 200 OK | 2.0 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/claim-btn-arrow-right.d4d044128590a38e.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hash9d1f2c869eb3ac5943975fef0eb233e0 e9cf70481f0e58faf1ad2021bb5dfbf990114f31 f1838e03d439b71fb67ee3aa361776593497d13b439f63af8847ef70b0c6df57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/claim-btn-arrow-right.d4d044128590a38e.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: image/svg+xml
Content-Length: 1994
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: "659e5a09-7ca"
X-Upstream: evlampi-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/claim-btn-arrow-right.d4d044128590a38e.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 9b2a058223bf7ba9e3ca20f6dcbcdbda
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/claim-btn-arrow-left.5b36f7b4a0b7dfd6.svg | 193.34.166.179 | 200 OK | 2.0 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/claim-btn-arrow-left.5b36f7b4a0b7dfd6.svg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeSVG Scalable Vector Graphics image Hashb9a188462a5b84d97aba7320035c016b 2bc66de756dbcc2708b432150e531d27eedb7d7a 2f4c006a1fe12832c3ff190fdf180ec7e60aba3a92b789682fe4e9df3a31a57a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/claim-btn-arrow-left.5b36f7b4a0b7dfd6.svg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: image/svg+xml
Content-Length: 2008
Connection: keep-alive
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: "659e5a09-7d8"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/claim-btn-arrow-left.5b36f7b4a0b7dfd6.svg
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 9573d13660cc26ab8a907e1abfa1f355
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Accept-Ranges: bytes
|
|
| intelligent-money-offers.net/intgrtn/api/v1/projects/agreements.php?type=4&clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&locale=en-US | 193.34.166.179 | 200 OK | 1.8 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/projects/agreements.php?type=4&clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&locale=en-US IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash9f152d58964e2577d7ef6d75d6950035 aa0bfbd3d3916c36187639d1fe1cd4a7ed400ed6 e2d6b7f4befd8dba5707906134c1c3b59ae030a695251363203bd4c2b8217745
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/projects/agreements.php?type=4&clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&locale=en-US HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: karen
PX-X-Request-Id: 271db679499ae193ab1103988cd98f08
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| intelligent-money-offers.net/intgrtn/api/v1/events/add.php | 193.34.166.179 | 200 OK | 162 B |
URL POST HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/events/add.php IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash6eb28fb020ebbfc6f8fd592d04b4e9d4 b701b52cd4acf4ef1226d6934ff18a23e302687b 1f7bbeda40e7c1e0f34930c2330f0da1b31b188cf891ab2f9361c9ff7294f271
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /intgrtn/api/v1/events/add.php HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Content-Length: 92
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://intelligent-money-offers.net
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: karen
PX-X-Request-Id: 15c4297a809a9560e0a58705010fa042
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
|
|
| fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2 | 142.250.74.163 | 200 OK | 10 kB |
URL GET HTTP/3fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2 IP142.250.74.163:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10076, version 1.0 Hashad51e38407fc7537c0f5a57b2e2a98a2 aa3894717d22e9dcbc873892ebb1acffda370b3e c8a9fd4eab4e83382cc66fde70911b41fdb83c6cdd24493a9b42c0ce6d37a941
GET /s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10076
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 02:15:15 GMT
expires: Wed, 16 Apr 2025 02:15:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:43 GMT
content-type: font/woff2
age: 198674
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| intelligent-money-offers.net/exit-popup-im/css/style.css | 193.34.166.179 | 200 OK | 642 B |
URL GET HTTP/1.1intelligent-money-offers.net/exit-popup-im/css/style.css IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash4bd48cfdaab4e073c4a7b0239e00fa5a 8ef869404d08a065de7516f0cabe775d24839d50 2f2b7db1dae377202f4e3a9d16287ec62d5d7cb3cffa8b22995fdc655d19e99d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /exit-popup-im/css/style.css HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jan 2024 14:46:33 GMT
ETag: W/"65b122c9-62b"
X-Upstream: stavri-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 36b54f9113946f211bf199ba53ec76b8
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/exit-popup-im/css/intgrtn-modal.css?v=1706107593 | 193.34.166.179 | 200 OK | 828 B |
URL GET HTTP/1.1intelligent-money-offers.net/exit-popup-im/css/intgrtn-modal.css?v=1706107593 IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeASCII text, with very long lines (524) Hashc74fb14cfa8f9d422d09a5f812b59f37 ced3ede92290a6c4a4b586b21504ac0050da99f5 40ea4bb950759b857f790efd2700b9f1b605cdce854469a62c37ee4ca78fdd52
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /exit-popup-im/css/intgrtn-modal.css?v=1706107593 HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jan 2024 14:46:33 GMT
ETag: W/"65b122c9-1d89"
X-Upstream: stavri-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: e0751929f3288e1bd9832d0e366263cd
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/exit-popup-im/css/bootstrap.css | 193.34.166.179 | 200 OK | 25 kB |
URL GET HTTP/1.1intelligent-money-offers.net/exit-popup-im/css/bootstrap.css IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeASCII text, with very long lines (570) Hashebc6974f342b0cd34ce48d7398b4cba4 d7d550a5508af454062575f421df142a7c4df8cd eb8937db42c9ebf8e00f8e2e5cbc14a4a148058a165cdf3a0519aa344f258242
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /exit-popup-im/css/bootstrap.css HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jan 2024 14:46:33 GMT
ETag: W/"65b122c9-2ef5d"
X-Upstream: evlampi-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 91d9a1fd694640331d5c96ae85616fe2
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/exit-popup-im/js/jquery.min.js | 193.34.166.179 | 200 OK | 35 kB |
URL GET HTTP/1.1intelligent-money-offers.net/exit-popup-im/js/jquery.min.js IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJavaScript source, ASCII text, with very long lines (522) Hash049f756abe05d0fe50872a02e6b79ab3 9f4f135c4efcbf799265d9305a3e4db1e9e60de3 cff299b55aa6ed2728b3d2b51f97f397879e7b9f01443190365d19f35949f97c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /exit-popup-im/js/jquery.min.js HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jan 2024 14:46:33 GMT
ETag: W/"65b122c9-21041"
X-Upstream: stavri-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 3ec5d055006668bd3a83407eb1442186
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/exit-popup-im/img/stop.png | 193.34.166.179 | 200 OK | 5.0 kB |
URL GET HTTP/1.1intelligent-money-offers.net/exit-popup-im/img/stop.png IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced Hashdc00ec155d13ead977b78ed4a15dff43 8849b2d3ce65aaf398f093f90f4a2d5af371b66b 5e4b7d13b0771dc1ef3266ff906022c74b05a7baf949646cfea3b462009302ef
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /exit-popup-im/img/stop.png HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 24 Jan 2024 14:46:33 GMT
ETag: W/"65b122c9-13cc"
X-Upstream: stavri-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 6783a4b883892f603b4186a6c8f08c89
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.js?v=1202431893 | 193.34.166.179 | 200 OK | 50 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.js?v=1202431893 IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJavaScript source, ASCII text Hashb74a78a8e492a9b171dab179eeab69fb 6e7fe630cf763a0a45fd77c922d728ad2b386cae 6298f0a9a101a54afa0ed7e7ccd9bb8f6583638f84082c69f5e0e5a2c9961f2e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/integration/sdk.js?v=1202431893 HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 18 Apr 2024 08:44:57 GMT
Vary: Accept-Encoding
ETag: W/"6620dd89-7a2f9"
Expires: Fri, 18 Apr 2025 09:26:29 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: 3de67dd11925faa33bd93b48c298f017
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
PX-Cache-Status: MISS
|
|
| ifdtrcking.com/uploads/project_banners/1b2a9bef3a77079ff49408406be31b90.png | 176.97.72.227 | | 7.8 kB |
URL GET ifdtrcking.com/uploads/project_banners/1b2a9bef3a77079ff49408406be31b90.png IP176.97.72.227:0
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectifdtrcking.com Fingerprint78:E6:1D:72:73:71:26:50:EF:D2:22:7F:42:8D:E8:84:EE:9E:0D:76 ValiditySun, 03 Mar 2024 02:03:36 GMT - Sat, 01 Jun 2024 02:03:35 GMT
File typePNG image data, 380 x 52, 8-bit/color RGBA, non-interlaced Hash1b2a9bef3a77079ff49408406be31b90 8cfb1ae0c25426ab3150f84b4f21abfde419d322 08dedbe39f63b6f4ed6f208855d2c6232a88a26ebb3ebc8a3767878c1fb4b34c
GET /uploads/project_banners/1b2a9bef3a77079ff49408406be31b90.png HTTP/1.1
Host: ifdtrcking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 Feb 2022 22:58:56 GMT
Vary: Accept-Encoding
ETag: W/"620598b0-1e70"
Expires: Tue, 18 Mar 2025 08:11:47 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
PX-Cache-Status: HIT
X-Server: armagedon
PX-X-Request-Id: e75b5e242205469038a64186062e5ff2
|
|
| intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.css?v=2.66.5 | 193.34.166.179 | 200 OK | 8.6 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/integration/sdk.css?v=2.66.5 IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash11551ef44c6dccf85a6287f4bfe11182 d9b25491d60633670c86cf7cd76e0abf858bc360 617a4b507a3a45bc358f56b14d884283ab84e61e8ed5956d4d1684d5130e6b47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/integration/sdk.css?v=2.66.5 HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 02 Feb 2024 09:51:23 GMT
Vary: Accept-Encoding
ETag: W/"65bcbb1b-14923"
Expires: Sat, 01 Feb 2025 13:28:26 GMT
Cache-Control: max-age=31536000
Content-Encoding: gzip
X-Server: karen
PX-X-Request-Id: c07add832201d45f8e1323f5f1b53ad9
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
PX-Cache-Status: HIT
|
|
| intelligent-money-offers.net/intgrtn/api/v1/projects/details.php? | 193.34.166.179 | 200 OK | 7.7 kB |
URL GET HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/projects/details.php? IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hashc788cad8e9d6217cc30243798ae31514 d2bfc2629f57477e2a97c902c31cd52c2b026d4f b71a121c533a26c059dcd28db234379add9b7341e6c57fbc0258901c8c9179c8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /intgrtn/api/v1/projects/details.php? HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://intelligent-money-offers.net/exit-popup-im/
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: karen
PX-X-Request-Id: 26779367e3b2114bac3255417f38bee0
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
|
|
| intelligent-money-offers.net/intgrtn/api/v1/events/add.php | 193.34.166.179 | 200 OK | 162 B |
URL POST HTTP/1.1intelligent-money-offers.net/intgrtn/api/v1/events/add.php IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/exit-popup-im/ CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hash8ece72edad95aae09945bf2ffa01bd03 6625cc8651f3669dd51f976d750da15b79ad83da 5c37737ccb75675773ca4d7060d161fe931171d4bb7d92c76b57c3990abb91b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /intgrtn/api/v1/events/add.php HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Intgrtn-Referer: https://intelligent-money-offers.net/exit-popup-im/
Content-Length: 30
Origin: https://intelligent-money-offers.net
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/exit-popup-im/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:30 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://intelligent-money-offers.net
Access-Control-Allow-Headers: accept, origin, content-type, authorization, Cache-Control, X-Requested-With, Intgrtn-Referer
Access-Control-Allow-Methods: POST, GET, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
X-Server: karen
PX-X-Request-Id: 85737b0bf48d432ea18b50459b9e2c2a
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
|
|
| intelligent-money-offers.net/uinames/api/photos/male/2.jpg | 193.34.166.179 | 200 OK | 5.9 kB |
URL GET HTTP/1.1intelligent-money-offers.net/uinames/api/photos/male/2.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3 Hash152a6de05f13a248c2258b7768fff7a2 f8950601330d10ffdf737aa6d7adeb6491356762 a5e0730abd9b09b56a51f6dc57178c9ef8f30dbac4cbbe9d3e488e61c86ce3f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uinames/api/photos/male/2.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:34 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 28 Mar 2021 11:21:25 GMT
ETag: W/"606066b5-171f"
X-Upstream: stavri-***ko
PX-Cache-Status: STALE
X-Server: karen
PX-X-Request-Id: 4f9b3e960f214c8088b2830b41c92247
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/uinames/api/photos/female/23.jpg | 193.34.166.179 | 200 OK | 8.1 kB |
URL GET HTTP/1.1intelligent-money-offers.net/uinames/api/photos/female/23.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3 Hash1f5ffa3ec16805adaabe8a278fc4da46 a30e7621518da00cf468f3af4a87e668f23cb16d e953ee7ef156d6d128680bf113fb733180a88167788a50fe10c7b291835ba4bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uinames/api/photos/female/23.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:39 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 28 Mar 2021 11:21:25 GMT
ETag: W/"606066b5-1f8d"
X-Upstream: evlampi-***ko
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 87712ee057705320cdca2de87d8247de
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/uinames/api/photos/female/1.jpg | 193.34.166.179 | 200 OK | 4.3 kB |
URL GET HTTP/1.1intelligent-money-offers.net/uinames/api/photos/female/1.jpg IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 240x240, components 3 Hash52c0893d702d11ac54d7c0d2f49565ce 01dccb951b99362edc9c6df8e83164ea45bf8793 87c3d6fd5612da10034aa622837e343d25f9af65faf43749183788cf2c224b27
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /uinames/api/photos/female/1.jpg HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:44 GMT
Content-Type: image/jpeg
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 28 Mar 2021 11:21:25 GMT
ETag: W/"606066b5-10a5"
X-Upstream: stavri-***ko
PX-Cache-Status: STALE
X-Server: karen
PX-X-Request-Id: 928019f307acf7801b1b8cf068ace4a4
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css | 193.34.166.179 | 200 OK | 528 kB |
URL GET HTTP/1.1intelligent-money-offers.net/the-immediate-edge-b2c6/styles.470e43d627df834d.css IP193.34.166.179:443
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size528 kB (527704 bytes) Hash35a6da782cbe1b255c1449f160b334f5 4d30668062ac9a984f153c87539a6f331272a4fd cd45bb3c56399a015d193399be54a60bbc63f933520e3bb6caa569f2f740b3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/styles.470e43d627df834d.css HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 18 Apr 2024 09:26:27 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 10 Jan 2024 08:49:13 GMT
ETag: W/"659e5a09-80d58"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/styles.470e43d627df834d.css
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: 42db7809b51989a314c11293f1e643e2
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432144 1713426431
Content-Encoding: gzip
|
|
| intelligent-money-offers.net/the-immediate-edge-b2c6/media/video-no.mp4 |  0.0.0.0 | | 0 B |
URL GET intelligent-money-offers.net/the-immediate-edge-b2c6/media/video-no.mp4 IP0.0.0.0:0
Requested byhttps://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd CertificateIssuerLet's Encrypt Subjectintelligent-money-offers.net FingerprintD4:CD:C3:A3:CF:34:5E:C0:E0:62:31:CC:91:8A:84:64:A6:8D:33:FA ValiditySat, 23 Mar 2024 02:36:10 GMT - Fri, 21 Jun 2024 02:36:09 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /the-immediate-edge-b2c6/media/video-no.mp4 HTTP/1.1
Host: intelligent-money-offers.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://intelligent-money-offers.net/the-immediate-edge-b2c6/?intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K&intgrtn_custom2=cogeegda6vts739vo1b0&country=NO&intgrtn_redirectReturningLead=auto&intgrtn_language=no&intgrtn_lpType=1step&intgrtn_contentType=nopwd
Cookie: intgrtn_clickID=qWxPprDaYJnQ2gZBELzOwqk0OyQb8V4vkedG795l3m0AojM1K; intgrtn_custom2=cogeegda6vts739vo1b0; intgrtn_redirectReturningLead=auto; intgrtn_language=no; intgrtn_locale=en-US
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 206 Partial Content
Server: nginx
Date: Thu, 18 Apr 2024 09:26:29 GMT
Content-Type: video/mp4
Content-Length: 85865636
Connection: keep-alive
Last-Modified: Mon, 14 Aug 2023 08:25:02 GMT
ETag: "64d9e4de-51e34a4"
X-Upstream: stavri-***ko
PX-Mapped-Request-URI: /the-immediate-edge-b2c6/media/video-no.mp4
PX-Cache-Status: HIT
X-Server: karen
PX-X-Request-Id: b270363e83eaac1403715ede25eea5b6
PX-IPCountryISO: NO
PX-IPTimestamp: 1713275072 1713432326 1713426431
Content-Range: bytes 0-85865635/85865636
|
|