loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
162.0.217.174 479 B URL loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
IP 162.0.217.174:0
File type HTML document, Unicode text, UTF-8 text
Hash efaa7de84a97d6a9e2faa19a2e216170
c9d5e21eb2ed1c557d8f4808dbd740a5b2e5e55f
ff542c3b377a0b7d970192336c92509401dae58b0f5ae4fd2ed918f650cc784a
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET / HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.0.30
content-type: text/html; charset=UTF-8
content-length: 479
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 08:45:25 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
162.0.217.174200 OK 6.3 kB URL User Request GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
IP 162.0.217.174:443
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (522)
Hash 65b07ec73fd002c7767248a681d67d4a
58f84dd0acca58abb5bfdc18463ae871eaf680ed
4b3258d4e34be7ab3a31000952882111e57eea96ee087a56239aa8b4c407c7b2
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Tue, 05 Dec 2023 16:34:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6287
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/tapa.css
162.0.217.174200 OK 4.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/tapa.css
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type assembler source, ASCII text, with very long lines (324), with CRLF line terminators
Hash 79b667a63f2b3d5ed3bb9686f17ed9be
19c288e08bbc7540332e9fd9682c2c114119b280
503ac25c7c767d529df031eaf6570bce665c021b332493226f658b4274466e0d
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/tapa.css HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: text/css
last-modified: Wed, 23 Aug 2023 03:22:56 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4220
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
code.jquery.com/jquery-1.4.4.min.js
151.101.130.137200 OK 27 kB URL GET HTTP/2 code.jquery.com/jquery-1.4.4.min.js
IP 151.101.130.137:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (820)
Hash 73a9c334c5ca71d70d092b42064f6476
b75990598ee8d3895448ed9d08726af63109f842
517364f2d45162fb5037437b5b6cb953d00d9b2b3b79ba87d9fe57ea6ee6070c
GET /jquery-1.4.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-13309"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 07 Dec 2023 08:45:26 GMT
age: 3811342
x-served-by: cache-lga21980-LGA, cache-bma1658-BMA
x-cache: HIT, HIT
x-cache-hits: 8715, 9
x-timer: S1701938726.392286,VS0,VE0
vary: Accept-Encoding
content-length: 27078
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/mnc.png
162.0.217.174200 OK 187 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/mnc.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 140 x 30, 1-bit colormap, non-interlaced\012- data
Hash 271021cfa45940978184be0489841fd3
201030af9b1bc5d3c8d453efbfdf89b68d6c1be5
c5a324f181af16879b6c4c52b731b23392f2816def159b157c4de620cff1cd41
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/mnc.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-length: 187
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/msmm.png
162.0.217.174200 OK 168 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/msmm.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 31 x 30, 4-bit colormap, non-interlaced\012- data
Hash acb05ebcd5f488fc99169cff02b6dd04
dca893a7b514503e947a57aa072482a0e0cba912
1ab5ef4e7e196cb1ff39df44e1a0a39f6880b906ef6fd6da3cfdbb92ffd33115
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/msmm.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:48 GMT
accept-ranges: bytes
content-length: 168
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/set.png
162.0.217.174200 OK 364 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/set.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/set.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-length: 364
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/vsc.png
162.0.217.174200 OK 722 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/vsc.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 128 x 128, 1-bit colormap, non-interlaced\012- data
Hash 42d8f2cc1ae5759c2369f255f36ebc03
8e592162eec14e72d0a751d714a641dbece91f6b
31c6dbe9d867436244f38566adad57e3870f4c8489c6804280eb564bfac5c1bd
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/vsc.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-length: 722
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/bel.png
162.0.217.174200 OK 276 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/bel.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 13 x 13, 8-bit colormap, non-interlaced\012- data
Hash 7616d96c388301e391653647e1f5f057
b1868c8f0f46309a8e26f584ac82000d54c06ecd
4c1606563842cce5f1788329d4417ae3618b33c6365c56a7122439b6ab45c977
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/bel.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-length: 276
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/pcm.png
162.0.217.174200 OK 1.3 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/pcm.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 166 x 92, 4-bit colormap, non-interlaced\012- data
Hash 05cdf1a2c2fc8f07bea0a8f4f9356637
b7bbd626d1d6c832509e820cae1d971b34f625e6
afe332157f4efe355f3181284e99f4331c4d19703ed1678b5316d2933f95e98e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/pcm.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:48 GMT
accept-ranges: bytes
content-length: 1270
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/dm.png
162.0.217.174200 OK 332 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/dm.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 100 x 100, 1-bit colormap, non-interlaced\012- data
Hash 9d8a90a63d20f05d27e5d6abb35e0cd0
5873b4007e9d55b4d891a4c427b3735ed23dbfe8
7df9f467d23ee1887edb2123cca10a1a9c4624cdcf7199c64e78a8430031f9f5
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/dm.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-length: 332
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/cs.png
162.0.217.174200 OK 2.7 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/cs.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 520 x 520, 8-bit colormap, non-interlaced\012- data
Hash b01a30d354bfcf51edf33e0b0ea07402
c421359518d1ae258237bf501c563b7f059f8b9b
b67a7c07a045d7cb0f2e216a557aec0d99405e17c36d1a6b1ff3e2733aa35348
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/cs.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:48 GMT
accept-ranges: bytes
content-length: 2681
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/re.gif
162.0.217.174200 OK 15 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/re.gif
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type GIF image data, version 89a, 193 x 71\012- data
Hash 6fcb78e0cd7933a70eea2cf071f82118
70364bffd62fe33360abe70ecc7f7c0541b3b54c
4b436b0b6a47db85c88f83dc3fe3fd9a96c0a4018b28832165df929dffe0bc86
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/re.gif HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/gif
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-length: 14751
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/nvidia.js
162.0.217.174200 OK 617 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/nvidia.js
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2055), with no line terminators
Hash 6ebcbed0dc957cd9298e2629e35a0139
e1603b3e92c0828daebd15b2ddd12c22ceed5b20
73310aa233204005c5d97ccd8b6c8c06dda83205f1de6571aa798400fb5bedeb
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/nvidia.js HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: application/javascript
last-modified: Sat, 05 Aug 2023 01:22:20 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 617
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/jupiter.js
162.0.217.174200 OK 203 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/jupiter.js
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type ASCII text, with CRLF line terminators
Hash cd6c33fbc221d0271c910af910e6ebed
9b52f24d6f10b885bb19db1c4b531469f96d2914
318698ae5e67c32550d6b40ac09848d598f6317f51a8f09638ba925f6e7cc479
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/jupiter.js HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: application/javascript
last-modified: Fri, 04 Aug 2023 18:07:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 203
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/bx1.png
162.0.217.174200 OK 119 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/bx1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 1056 x 908, 8-bit/color RGBA, non-interlaced\012- data
Size 119 kB (119006 bytes)
Hash ef22913e13a0b39c209a671202ec3ff3
a38104877c60e7c9f2aed41b3f92418f8981973e
8e4039a48ffb24b4cdc57ddd4384a16af9eb7efa678577e280308bc9750a0bbc
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/bx1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Wed, 23 Aug 2023 03:15:16 GMT
accept-ranges: bytes
content-length: 119006
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.usertrust.com/
172.64.149.23 282 B IP 172.64.149.23:0
Hash 8666cf051c1e35d45c02946c400e93e4
c4f2943322fd3f208f94d67eca415a90e08742ea
d76f2a6168f48e3d6fd2a68fa54c5f9952ceb6e6971a05c78ffc54df4fb122f1
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 08:45:26 GMT
Content-Type: application/ocsp-response
Content-Length: 282
Connection: keep-alive
Last-Modified: Tue, 05 Dec 2023 01:02:32 GMT
Expires: Tue, 12 Dec 2023 01:02:31 GMT
Etag: "c4f2943322fd3f208f94d67eca415a90e08742ea"
Cache-Control: max-age=441491,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1763
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 831b7e12ea2e56aa-OSL
ipwho.is/?lang=en
195.201.57.90200 OK 668 B IP 195.201.57.90:443
ASN #24940 Hetzner Online GmbH
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerGoGetSSL
Subjectipwho.is
FingerprintCF:72:15:7E:2B:59:F6:B9:88:69:73:70:91:60:90:87:80:67:B9:A4
ValidityWed, 05 Apr 2023 00:00:00 GMT - Fri, 05 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (668), with no line terminators
Hash 74cb67d81564c2951363856ef095271b
829ea5490269c46ed702bf39c63faeccdf216984
8c3b5c5986c8d31e61c31fc9e1604d122178f0a950896b4d0a61a4050e334811
GET /?lang=en HTTP/1.1
Host: ipwho.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 07 Dec 2023 08:45:26 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: ipwhois
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
X-Robots-Tag: noindex
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/f24.png
162.0.217.174200 OK 483 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/f24.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 1920 x 4236, 8-bit colormap, non-interlaced\012- data
Size 483 kB (483167 bytes)
Hash c3aa26411736b8f01982741dbd37b043
bad171a74fb4b5d1f433197b66bcd24db953fd90
11d4d0aa8bf0ab597bee785cd9d03301787faee4aae43d66ab53b15f0fe7d849
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/f24.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:26 GMT
content-type: image/png
last-modified: Tue, 22 Aug 2023 04:07:22 GMT
accept-ranges: bytes
content-length: 483167
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/_Fm7-alert.mp3
162.0.217.174206 Partial Content 194 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/_Fm7-alert.mp3
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type Audio file with ID3 version 2.4.0, contains:\012- MPEG ADTS, layer III, v2, 48 kbps, 22.05 kHz, Monaural\012- data
Size 194 kB (193612 bytes)
Hash 40ce7ccb1aa8b0da1f51995ebb59f4e8
ed8a51e3bae2d58202c02471e6a798bbff84dee9
8f24cf514509b9830bcb4a7204463b87fa3e6d9ce47187192130f8230b1990e3
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/_Fm7-alert.mp3 HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
content-type: audio/mpeg
last-modified: Wed, 01 Feb 2023 15:40:54 GMT
content-range: bytes 0-193611/193612
content-length: 193612
date: Thu, 07 Dec 2023 08:45:26 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/ai2.mp3
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/ai2.mp3
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/ai2.mp3 HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:27 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/msmm.png
162.0.217.174200 OK 168 B URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/msmm.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type PNG image data, 31 x 30, 4-bit colormap, non-interlaced\012- data
Hash acb05ebcd5f488fc99169cff02b6dd04
dca893a7b514503e947a57aa072482a0e0cba912
1ab5ef4e7e196cb1ff39df44e1a0a39f6880b906ef6fd6da3cfdbb92ffd33115
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/msmm.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 14 Dec 2023 08:45:27 GMT
content-type: image/png
last-modified: Fri, 04 Aug 2023 18:07:48 GMT
accept-ranges: bytes
content-length: 168
date: Thu, 07 Dec 2023 08:45:27 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-MT3KXZ4ESV
142.250.74.72200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-MT3KXZ4ESV
IP 142.250.74.72:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash c1d15e1887f2c8a511168edd79571b41
f739d1758939886b45dd6dd6dfcd8d09622e2897
f45f100cd01bebfe7d8802594bbb59e406eb807e41e541ffbbed09507df71d8f
GET /gtag/js?id=G-MT3KXZ4ESV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 08:45:27 GMT
expires: Thu, 07 Dec 2023 08:45:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86204
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FPTBBTDFJE
142.250.74.72200 OK 79 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-FPTBBTDFJE
IP 142.250.74.72:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 49210c86e4eca592ece9623f5c765b2c
7dec4e3beaf3104182d2ff072cb9bc30921e3d73
d20a896c1c0b3ce91d96a4479cace8c225a7b2da021872a124ad59e573502b66
GET /gtag/js?id=G-FPTBBTDFJE HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 08:45:27 GMT
expires: Thu, 07 Dec 2023 08:45:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79419
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-FPTBBTDFJE&l=dataLayer&cx=c
142.250.74.72200 OK 79 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-FPTBBTDFJE&l=dataLayer&cx=c
IP 142.250.74.72:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (4179)
Hash 4f0546e030b0d34d5071f1ea9bea2283
5e81327af848f6322d1764a178c465eb79d711fe
73b369ba64c19940509a99fdc4c6c811bffadcb9d4d130323812061ae5c70ba4
GET /gtag/js?id=G-FPTBBTDFJE&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 08:45:27 GMT
expires: Thu, 07 Dec 2023 08:45:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79417
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:28 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:29 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:30 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:31 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:32 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:33 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:34 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:35 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:36 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:37 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:38 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type troff or preprocessor input textHTML document text\012- HTML document, ASCII text, with very long lines (789), with no line terminators\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w1.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:39 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
162.0.217.174404 Not Found 1.2 kB URL GET HTTP/2 loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png
IP 162.0.217.174:443
Requested by https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Certificate IssuerSectigo Limited
Subjectloveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
Fingerprint51:D9:6E:2C:AE:08:20:89:92:18:59:57:3C:E9:DC:0A:55:88:31:7B
ValidityWed, 06 Dec 2023 00:00:00 GMT - Fri, 06 Dec 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 0bde7d4b3da67537eaf9188e6f8049cf
64300fc482d01d38b40ab20e15960b6509665e5a
5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
GET /Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/w3.png HTTP/1.1
Host: loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://loveyouaiaaiaaiiaaiiaiuaaiuaiiiiaiiiiiaiii.pro/Win%E3%82%A2%E3%82%AB%E3%82%A6%E3%83%B3%E3%83%88%E3%83%AD%E3%82%B0%E3%82%A4%E3%83%B3%E3%82%A8%E3%83%A9%E3%83%BC%E4%BB%8A%E3%81%99%E3%81%90%E9%9B%BB%E8%A9%B1%E3%81%97%E3%81%A6%E3%81%8F%E3%81%A0%E3%81%95%E3%81%84/index.html
Cookie: _ga_MT3KXZ4ESV=GS1.1.1701938734.1.0.1701938734.0.0.0; _ga=GA1.1.762980897.1701938734; _ga_FPTBBTDFJE=GS1.1.1701938734.1.0.1701938734.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1238
date: Thu, 07 Dec 2023 08:45:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2