| linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde |  103.224.182.242 | 302 Found | 16 kB |
URL User Request GET linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde IP103.224.182.242:80 ASN#133618 Trellian Pty. Limited
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846630.4016738
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:17:12 GMT
server: Apache
location: https://linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
|
|
| obseu.seaskydvd.com/ct?id=80705&url=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=20a783c5cb695de12545780e21e8ae10eefb406a&tsf=0&tsfmi=&tsfu=&cb=1741846634540&hl=2&op=0&ag=2881387774&rand=54059097281090067160762118508022567182572982099112982089017126157252250252002941260557&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=7koz4iGQwu&pto=2717&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1741846634.vdAKhqRs0wQJk16Y&suid=1.1741846634.t4wZFuwN1F0Ay5zR&tuid=1.1741846634.ZiTsnlhVCwz83FpN&fbc=->m=-&it=7%2C2085%2C340&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D |  3.248.162.96 | 200 OK | 5.5 kB |
URL GET obseu.seaskydvd.com/ct?id=80705&url=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=20a783c5cb695de12545780e21e8ae10eefb406a&tsf=0&tsfmi=&tsfu=&cb=1741846634540&hl=2&op=0&ag=2881387774&rand=54059097281090067160762118508022567182572982099112982089017126157252250252002941260557&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=7koz4iGQwu&pto=2717&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1741846634.vdAKhqRs0wQJk16Y&suid=1.1741846634.t4wZFuwN1F0Ay5zR&tuid=1.1741846634.ZiTsnlhVCwz83FpN&fbc=->m=-&it=7%2C2085%2C340&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D IP3.248.162.96:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5473), with no line terminators Hash326057cd100d8ebb180c894a98c361e5 7fb6e8a21a7c3f46218010a4f8e6120ba5067982 7f99520ed9de4a00cfcd6c9f484adb6a13fa0d737629b913775b04220aa24df2
GET /ct?id=80705&url=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=20a783c5cb695de12545780e21e8ae10eefb406a&tsf=0&tsfmi=&tsfu=&cb=1741846634540&hl=2&op=0&ag=2881387774&rand=54059097281090067160762118508022567182572982099112982089017126157252250252002941260557&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDgzMzRdLFsiYWJuY2giLDE1XSxbLTUsIi0iXSxbLTEwLCItIl0sWy0yNywiLSJdLFstMzIsIjAiXSxbLTQxLCItIl0sWy01MSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcInRjYmxvY2tcIixcInNlYXJjaGJveEJsb2NrXCIsXCJnZXRYTUxodHRwXCIsXCJhamF4UXVlcnlcIixcImFqYXhCYWNrZmlsbFwiLFwibG9hZEZlZWRcIixcInhtbEh0dHBcIixcImxzXCIsXCJnZXRMb2FkRmVlZEFyZ3VtZW50c1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwiX19jdGNnX2N0XzgwNzA1X2V4ZWNcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy0xNiwiMCJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwwLDAsMCwwLFwiLVwiLFwiLVwiLDEyODAsMTAyNCxudWxsXSJdLFstMjAsIi0iXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDAxMTEwMDEwMDAwMDEwMDAwMDAwMDAiXSxbLTcsIi0iXSxbLTksIi0iXSxbLTY4LCItIl0sWy0xOCwiWzEsMCwwLDBdIl0sWy0yMiwiW1wiLVwiLFwiblwiXSJdLFstMjUsIi0iXSxbLTI5LCItIl0sWy00MCwiMzciXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFNseFlTbEpBWFU5ZEYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhJQUFrTkZRNElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hTbHhZU2xKQVhVOWRGMXBXVkJaS1FVa1dVQllMQ3cxZkFRd0tDUXRZV0F0YkQxeGFDZ2xZV0ZvQVdBRU1YVmdMV2x0ZkFCZFRTZ01JQXc4TENBa0pGVXBjVFcxUVZGeFdURTBaVVZoWFhWVmNTeE1PQ0FBV1RSZGNRVWxXUzAxS0ZnVjVVVTFOU1VvREZoWmNURlpiRjBwY1dFcFNRRjFQWFJkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2c9PSJdLFstNjksIkxpbnV4IHg4Nl82NHx8fDQ4fC18LSJdLFsxMiwie1wiY3R4XCI6XCJ3ZWJnbFwiLFwidlwiOlwibWVzYVwiLFwiclwiOlwibGx2bXBpcGVcIixcInNsdlwiOlwid2ViZ2wgZ2xzbCBlcyAxLjBcIixcImd2ZXJcIjpcIndlYmdsIDEuMFwiLFwiZ3ZlblwiOlwibW96aWxsYVwiLFwiYmVuXCI6MjQsXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWy0yNCwiW10iXSxbLTI2LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTM0LCItIl0sWy0zNSwiWzE3NDE4NDY2MzQ0MzQsMF0iXSxbLTQyLCI4ODMzOTkwMTYiXSxbLTQ2LCIwIl0sWy01MywiMDAxIl0sWy01NCwie1wiaFwiOltcIjMyOTk3Mjg0NTJcIixcIjgyMjgyMzExOVwiLFwiXzNcIixcIjI2MzkyMjI0NjhcIl0sXCJkXCI6W10sXCJiXCI6W1wiXzBcIixcIjI2NDYwMzg4MlwiXSxcInNcIjoxfSJdLFstNjEsIi0iXSxbLTcwLCItIl0sWy0xMywiLSJdLFstMjMsIisiXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTU4LCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W1wiZGVzY3JpcHRpb25cIl19Il0sWy03MSwiYTAxMDAxMDExMDAxMDAxMDEwMDAxMDEwMDExMDExMDAwMDAwMTAiXSxbLTE3LCI0OCJdLFstMjEsIi0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstNTAsIi0iXSxbLTIsIjYsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstNjQsIi0iXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZV0iXSxbLTQ1LCI3NTIsMCwwLDcxOSwwLDAsNzYxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy04LCItIl0sWy02NSwiLSJdLFstNjYsIi0iXSxbLTY3LCItIl0sWy0xLCJMaW51eCB4ODZfNjQiXSxbLTU1LCIwIl0sWy01OSwiLSJdLFstMzcsIi0iXSxbLTM4LCJpLC0xLC0xLDE2MzAsMCwxLDAsNzEsMjE0LDExMSwtMSwwLCwyMjIwLDI2ODEsMjY4MCJdLFstNDksIi0iXSxbLTUyLCItIl0sWy0zLCJbXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCIsXCJpbnRlcm5hbC1wZGYtdmlld2VyXCJdIl0sWy02MCwiLSJdLFstNzIsIkV4VT0iXSxbImJuY2giLDI0MV0sWy0xMiwiXCIxXCIiXSxbLTMxLCJmYWxzZSJdLFstMzMsIi0iXSxbLTQsIi0iXSxbLTE0LCItIl0sWy0xNSwiLSJdLFstNDQsIjAsNSwwLDUiXSxbLTQ4LCIwLDAiXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNjIsIjU4Il0sWy02MywiLSJdLFsiZGRiIiwiMCw3LDAsMCwwLDMsMCwwLDAsMCwwLDAsMCwwLDEsMSwwLDEsMSwwLDAsMCwwLDAsMCwwLDAsMiwwLDAsMCwyLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCw0LDM4LDAsMCwwLDEsMCwwLDAsMCwwLDEsMCwwLDIsMCwwLDAsMCwwLDAsMCwwLDEsMCwxLDEsMSwwIl0sWyJjYiIsIjAsMCwwLDAsMCwwLDAsMSwwLDQsMSwwLDI1LDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCw4LDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDEsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAiXV0%3D&dep=0&pre=0&sdd=&cri=7koz4iGQwu&pto=2717&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1741846634.vdAKhqRs0wQJk16Y&suid=1.1741846634.t4wZFuwN1F0Ay5zR&tuid=1.1741846634.ZiTsnlhVCwz83FpN&fbc=->m=-&it=7%2C2085%2C340&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Thu, 13 Mar 2025 06:17:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=fcf5554be3ce3383dce25f46fd64b840; Max-Age=29030400; Path=/; Expires=Thu, 12 Feb 2026 06:17:14 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://ww38.linoleumsquat.com
content-length: 1773
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.74.161 | 200 OK | 391 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.74.161:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.linoleumsquat.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODY5YzBkYmJ8fHwxNzQxODQ2NjMzLjgwNTR8Y2ZlMWQ5ZGE4YTZjZDg3OTAwNzU4MzgxMDNkM2Q3YWMxMWUzODBiN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTc4M2M1Y2I2OTVkZTEyNTQ1NzgwZTIxZThhZTEwZWVmYjQwNmF8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1431741846634820&num=0&output=afd_ads&domain_name=ww38.linoleumsquat.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846634821&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46 ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT
File typeSVG Scalable Vector Graphics image Hash249bb4c6a37dfa60d6ecf838cada5020 4e56099d13b015804f79d1182f66982bc6e4662b a2cebc2af2fd29cbee1ed7860ef5b12088b85259918d8bf2f2aaa99b915fa3f4
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Mar 2025 06:13:28 GMT
expires: Fri, 14 Mar 2025 05:13:28 GMT
cache-control: public, max-age=82800
age: 228
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/mon | 3.248.162.96 | 200 OK | 0 B |
IP3.248.162.96:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2728
Origin: https://ww38.linoleumsquat.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Cookie: cg_uuid=fcf5554be3ce3383dce25f46fd64b840
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.linoleumsquat.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:20 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ | 103.224.182.242 | 200 OK | 2.5 kB |
URL User Request GET linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ IP103.224.182.242:443 ASN#133618 Trellian Pty. Limited
CertificateIssuerLet's Encrypt Subjecttiao03.cc FingerprintDB:92:58:23:BB:F6:F3:EB:09:11:9A:EA:58:79:3C:97:B0:11:8A:51 ValidityMon, 03 Mar 2025 08:02:26 GMT - Sun, 01 Jun 2025 08:02:25 GMT
File typeHTML document, ASCII text, with very long lines (2534), with no line terminators Hash2e12ac4969dcbc135d44e595e2e55815 92f9326ace99d65052b23a0afddee6dc47ddc668 d7c208f2e21fae23213ca55961f7616efc580c55d599edb48ec1176fce0604f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ HTTP/1.1
Host: linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:17:10 GMT
server: Apache
set-cookie: __tad=1741846630.4016738; expires=Sun, 11-Mar-2035 06:17:10 GMT; Max-Age=315360000
vary: Accept-Encoding
content-encoding: gzip
content-length: 681
content-type: text/html; charset=UTF-8
connection: close
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 142.250.74.174 | 200 OK | 145 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP142.250.74.174:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.linoleumsquat.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODY5YzBkYmJ8fHwxNzQxODQ2NjMzLjgwNTR8Y2ZlMWQ5ZGE4YTZjZDg3OTAwNzU4MzgxMDNkM2Q3YWMxMWUzODBiN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTc4M2M1Y2I2OTVkZTEyNTQ1NzgwZTIxZThhZTEwZWVmYjQwNmF8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1431741846634820&num=0&output=afd_ads&domain_name=ww38.linoleumsquat.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846634821&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
File typeJavaScript source, ASCII text, with very long lines (1967) Size145 kB (144886 bytes) Hashb1b4e87893fc25133cbbea713084c466 b2dcf7dcb9e6a72135d2016aabe5aa48f6c3e1db cea34d6ccfec5a5c1deaa81fd5c06b0bc81800b5ea12d842395b18a96e6a0038
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:17:15 GMT
expires: Thu, 13 Mar 2025 06:17:15 GMT
cache-control: private, max-age=3600
etag: "10889517268433763295"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.161 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.161:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.linoleumsquat.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODY5YzBkYmJ8fHwxNzQxODQ2NjMzLjgwNTR8Y2ZlMWQ5ZGE4YTZjZDg3OTAwNzU4MzgxMDNkM2Q3YWMxMWUzODBiN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTc4M2M1Y2I2OTVkZTEyNTQ1NzgwZTIxZThhZTEwZWVmYjQwNmF8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1431741846634820&num=0&output=afd_ads&domain_name=ww38.linoleumsquat.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846634821&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46 ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT
File typeSVG Scalable Vector Graphics image Hash592bbd56abac313ab322bc38f7027496 ecc40e55421cbfc9cc24e256c999a497b84d997f fe3a1073d51df0f353dfa771acde9ea020e215a74edf7b24775e50282b6d6eda
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 12 Mar 2025 21:04:24 GMT
expires: Thu, 13 Mar 2025 20:04:24 GMT
cache-control: public, max-age=82800
age: 33172
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7 |  0.0.0.0 | | 0 B |
URL User Request GET linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7 IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-7 HTTP/1.1
Host: linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846630.4016738
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
|
|
| euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 54.240.174.123 | 200 OK | 110 kB |
URL GET euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP54.240.174.123:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerAmazon Subject*.seaskydvd.com Fingerprint5D:E2:D2:FB:0A:F9:91:11:96:63:07:24:64:47:1E:C8:64:72:1A:12 ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size110 kB (109609 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40006
content-encoding: gzip
server: Caddy
date: Thu, 13 Mar 2025 04:25:15 GMT
cache-control: max-age=43200
expires: Thu, 13 Mar 2025 16:24:48 GMT
etag: "1ac29-K2vKTT/fSsVMZT/lyLBmrZkxYUA"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4ue814_C2y30TLqxBds0ddvXiQgU6Ww18rhwAmGTCwGJUE7JB1R3ew==
age: 6746
X-Firefox-Spdy: h2
|
|
| ww38.linoleumsquat.com/munin/a/tr/browserjs?domain=linoleumsquat.com&toggle=browserjs&uid=MTc0MTg0NjYzMy43OTplNDExZjQwMjIyNWRjNDViNDQzZDQ1ZDk2YmQyZjMxMjY2MjBhMGI5MWNlZjgxOGI4ZDg3ODQ4YTgyMzYyZGNkOjY3ZDI3ODY5YzBkZDc%3D | 13.248.148.254 | 200 OK | 0 B |
URL GET ww38.linoleumsquat.com/munin/a/tr/browserjs?domain=linoleumsquat.com&toggle=browserjs&uid=MTc0MTg0NjYzMy43OTplNDExZjQwMjIyNWRjNDViNDQzZDQ1ZDk2YmQyZjMxMjY2MjBhMGI5MWNlZjgxOGI4ZDg3ODQ4YTgyMzYyZGNkOjY3ZDI3ODY5YzBkZDc%3D IP13.248.148.254:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerLet's Encrypt Subjectww38.linoleumsquat.com Fingerprint11:5C:09:68:6C:AF:44:F5:BA:91:21:78:2B:8E:87:25:2F:33:6B:AC ValiditySat, 04 Jan 2025 04:17:01 GMT - Fri, 04 Apr 2025 04:17:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/tr/browserjs?domain=linoleumsquat.com&toggle=browserjs&uid=MTc0MTg0NjYzMy43OTplNDExZjQwMjIyNWRjNDViNDQzZDQ1ZDk2YmQyZjMxMjY2MjBhMGI5MWNlZjgxOGI4ZDg3ODQ4YTgyMzYyZGNkOjY3ZDI3ODY5YzBkZDc%3D HTTP/1.1
Host: ww38.linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:13 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
|
|
| ww38.linoleumsquat.com/munin/a/ls?t=67d27869&token=20a783c5cb695de12545780e21e8ae10eefb406a | 13.248.148.254 | 201 Created | 0 B |
URL GET ww38.linoleumsquat.com/munin/a/ls?t=67d27869&token=20a783c5cb695de12545780e21e8ae10eefb406a IP13.248.148.254:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerLet's Encrypt Subjectww38.linoleumsquat.com Fingerprint11:5C:09:68:6C:AF:44:F5:BA:91:21:78:2B:8E:87:25:2F:33:6B:AC ValiditySat, 04 Jan 2025 04:17:01 GMT - Fri, 04 Apr 2025 04:17:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/ls?t=67d27869&token=20a783c5cb695de12545780e21e8ae10eefb406a HTTP/1.1
Host: ww38.linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Thu, 13 Mar 2025 06:17:14 GMT
server: Caddy, nginx
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LT7VJWINe5w2g8TepgDF+pewXwsAEbmNJoRDrk0HF7ucS92zmx9Q1tvhOVPhvuygxzLUVQp2o0goTWidoZh/yw==
x-log-success: 67d2786a25c1ed01950deba4
content-length: 0
X-Firefox-Spdy: h2
|
|
| ww38.linoleumsquat.com/munin/a/tr/answercheck/yes?domain=linoleumsquat.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0MTg0NjYzMy43OTplNDExZjQwMjIyNWRjNDViNDQzZDQ1ZDk2YmQyZjMxMjY2MjBhMGI5MWNlZjgxOGI4ZDg3ODQ4YTgyMzYyZGNkOjY3ZDI3ODY5YzBkZDc%3D | 13.248.148.254 | 200 OK | 0 B |
URL GET ww38.linoleumsquat.com/munin/a/tr/answercheck/yes?domain=linoleumsquat.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0MTg0NjYzMy43OTplNDExZjQwMjIyNWRjNDViNDQzZDQ1ZDk2YmQyZjMxMjY2MjBhMGI5MWNlZjgxOGI4ZDg3ODQ4YTgyMzYyZGNkOjY3ZDI3ODY5YzBkZDc%3D IP13.248.148.254:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerLet's Encrypt Subjectww38.linoleumsquat.com Fingerprint11:5C:09:68:6C:AF:44:F5:BA:91:21:78:2B:8E:87:25:2F:33:6B:AC ValiditySat, 04 Jan 2025 04:17:01 GMT - Fri, 04 Apr 2025 04:17:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/tr/answercheck/yes?domain=linoleumsquat.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0MTg0NjYzMy43OTplNDExZjQwMjIyNWRjNDViNDQzZDQ1ZDk2YmQyZjMxMjY2MjBhMGI5MWNlZjgxOGI4ZDg3ODQ4YTgyMzYyZGNkOjY3ZDI3ODY5YzBkZDc%3D HTTP/1.1
Host: ww38.linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77
Cookie: _cq_duid=1.1741846634.vdAKhqRs0wQJk16Y; _cq_suid=1.1741846634.t4wZFuwN1F0Ay5zR
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:15 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
|
|
| linoleumsquat.com/favicon.ico | 0.0.0.0 | | 0 B |
URL GET linoleumsquat.com/favicon.ico IP0.0.0.0:0
Requested byhttps://linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true | 216.58.207.228 | 200 OK | 145 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP216.58.207.228:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
File typeJavaScript source, ASCII text, with very long lines (1967) Size145 kB (144888 bytes) Hash5ccd45281c295a4bd36b051067f44a22 512833ee3ac243a030b5423418a3fd7c2318ab0f cb6fc82c90950661df5097feba853496046b91308187220b275eb6816f0531b4
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:17:14 GMT
expires: Thu, 13 Mar 2025 06:17:14 GMT
cache-control: private, max-age=3600
etag: "7007029288439555429"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=lhk4pkkczijd&cd_fexp=72717108&aqid=a3jSZ8fKC_-ixdwPrNjy-AU&psid=5837883959&pbt=bv&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C526%7C194%7C115&lle=0&ifv=1&hpt=1 | 142.250.74.174 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=lhk4pkkczijd&cd_fexp=72717108&aqid=a3jSZ8fKC_-ixdwPrNjy-AU&psid=5837883959&pbt=bv&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C526%7C194%7C115&lle=0&ifv=1&hpt=1 IP142.250.74.174:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=lhk4pkkczijd&cd_fexp=72717108&aqid=a3jSZ8fKC_-ixdwPrNjy-AU&psid=5837883959&pbt=bv&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C526%7C194%7C115&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-5MQ1NkcZPqExrmK4nkN9hQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:17 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 | 13.248.148.254 | 200 OK | 16 kB |
URL User Request GET ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 IP13.248.148.254:443
CertificateIssuerLet's Encrypt Subjectww38.linoleumsquat.com Fingerprint11:5C:09:68:6C:AF:44:F5:BA:91:21:78:2B:8E:87:25:2F:33:6B:AC ValiditySat, 04 Jan 2025 04:17:01 GMT - Fri, 04 Apr 2025 04:17:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 HTTP/1.1
Host: ww38.linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:13 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_kEC0wwSLeSWSTzdp71jfuzKkqhKDdeDkX6Hnwaw+15Zf57I4mQuwkWFlOTu48fhPI3j+A/31wwBwMurw4fDsrw==
x-buckets: bucket011,bucket088,bucket077
x-domain: linoleumsquat.com
x-language: norwegian
x-pcrew-blocked-reason:
x-pcrew-ip-organization: Obos Nett
x-subdomain: ww38
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/mon | 3.248.162.96 | 200 OK | 0 B |
IP3.248.162.96:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3508
Origin: https://ww38.linoleumsquat.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Cookie: cg_uuid=fcf5554be3ce3383dce25f46fd64b840
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.linoleumsquat.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:16 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde | 103.224.182.242 | 302 Found | 16 kB |
URL User Request GET linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde IP103.224.182.242:443 ASN#133618 Trellian Pty. Limited
CertificateIssuerLet's Encrypt Subjecttiao03.cc FingerprintDB:92:58:23:BB:F6:F3:EB:09:11:9A:EA:58:79:3C:97:B0:11:8A:51 ValidityMon, 03 Mar 2025 08:02:26 GMT - Sun, 01 Jun 2025 08:02:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846630.4016738
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:17:13 GMT
server: Apache
location: http://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png | 54.230.245.8 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP54.230.245.8:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Wed, 12 Mar 2025 11:05:03 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zgSa1R1ik2cJRs__CYtZvT_8itSIPXOSByjttCqZvq6M-Hx_2KuM_g==
age: 69131
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/mon | 3.248.162.96 | 200 OK | 0 B |
IP3.248.162.96:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2731
Origin: https://ww38.linoleumsquat.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Cookie: cg_uuid=fcf5554be3ce3383dce25f46fd64b840
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.linoleumsquat.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:25 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| linoleumsquat.com/js/fingerprint/iife.min.js | 103.224.182.242 | 200 OK | 34 kB |
URL GET linoleumsquat.com/js/fingerprint/iife.min.js IP103.224.182.242:443 ASN#133618 Trellian Pty. Limited
Requested byhttps://linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ CertificateIssuerLet's Encrypt Subjecttiao03.cc FingerprintDB:92:58:23:BB:F6:F3:EB:09:11:9A:EA:58:79:3C:97:B0:11:8A:51 ValidityMon, 03 Mar 2025 08:02:26 GMT - Sun, 01 Jun 2025 08:02:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/fingerprint/iife.min.js HTTP/1.1
Host: linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:17:11 GMT
server: Apache
last-modified: Tue, 22 Oct 2024 03:25:40 GMT
etag: "85c0-6250852d63500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14345
content-type: application/javascript
connection: close
|
|
| obseu.seaskydvd.com/mon | 3.248.162.96 | 200 OK | 0 B |
IP3.248.162.96:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2728
Origin: https://ww38.linoleumsquat.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Cookie: cg_uuid=fcf5554be3ce3383dce25f46fd64b840
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.linoleumsquat.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:18 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.linoleumsquat.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODY5YzBkYmJ8fHwxNzQxODQ2NjMzLjgwNTR8Y2ZlMWQ5ZGE4YTZjZDg3OTAwNzU4MzgxMDNkM2Q3YWMxMWUzODBiN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTc4M2M1Y2I2OTVkZTEyNTQ1NzgwZTIxZThhZTEwZWVmYjQwNmF8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1431741846634820&num=0&output=afd_ads&domain_name=ww38.linoleumsquat.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846634821&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77 | 142.250.74.174 | 200 OK | 15 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.linoleumsquat.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODY5YzBkYmJ8fHwxNzQxODQ2NjMzLjgwNTR8Y2ZlMWQ5ZGE4YTZjZDg3OTAwNzU4MzgxMDNkM2Q3YWMxMWUzODBiN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTc4M2M1Y2I2OTVkZTEyNTQ1NzgwZTIxZThhZTEwZWVmYjQwNmF8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1431741846634820&num=0&output=afd_ads&domain_name=ww38.linoleumsquat.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846634821&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77 IP142.250.74.174:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.linoleumsquat.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODY5YzBkYmJ8fHwxNzQxODQ2NjMzLjgwNTR8Y2ZlMWQ5ZGE4YTZjZDg3OTAwNzU4MzgxMDNkM2Q3YWMxMWUzODBiN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDIwYTc4M2M1Y2I2OTVkZTEyNTQ1NzgwZTIxZThhZTEwZWVmYjQwNmF8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1431741846634820&num=0&output=afd_ads&domain_name=ww38.linoleumsquat.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846634821&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.linoleumsquat.com%2F0%2F0%2F0%2Fe33cb7a9538df5f5b2b11be11c7d54da%2F5_244445_2768356%2F1543_3544513_4642101_63%2F75301574_107-178-200-197%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-13d3-bf62-a47341ca2d77 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 13 Mar 2025 06:17:15 GMT
expires: Thu, 13 Mar 2025 06:17:15 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-E3YO0fo7RC1oWHjcJtgtug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3187
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/tracker/tc_imp.gif?e=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&cri=7koz4iGQwu&ts=533&cb=1741846635074 | 3.248.162.96 | 200 OK | 43 B |
URL GET obseu.seaskydvd.com/tracker/tc_imp.gif?e=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&cri=7koz4iGQwu&ts=533&cb=1741846635074 IP3.248.162.96:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=7koz4iGQwu&ts=533&cb=1741846635074 HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Cookie: cg_uuid=fcf5554be3ce3383dce25f46fd64b840
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 13 Mar 2025 06:17:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=88i29u7bhds7&cd_fexp=72717108&aqid=a3jSZ8fKC_-ixdwPrNjy-AU&psid=5837883959&pbt=bs&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C526%7C194%7C115&lle=0&ifv=1&hpt=1 | 142.250.74.174 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=88i29u7bhds7&cd_fexp=72717108&aqid=a3jSZ8fKC_-ixdwPrNjy-AU&psid=5837883959&pbt=bs&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C526%7C194%7C115&lle=0&ifv=1&hpt=1 IP142.250.74.174:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=88i29u7bhds7&cd_fexp=72717108&aqid=a3jSZ8fKC_-ixdwPrNjy-AU&psid=5837883959&pbt=bs&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C526%7C194%7C115&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-In1DrUCzGUW1mEaWIB3i2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:17 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww38.linoleumsquat.com/favicon.ico | 13.248.148.254 | 200 OK | 0 B |
URL GET ww38.linoleumsquat.com/favicon.ico IP13.248.148.254:443
Requested byhttps://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77 CertificateIssuerLet's Encrypt Subjectww38.linoleumsquat.com Fingerprint11:5C:09:68:6C:AF:44:F5:BA:91:21:78:2B:8E:87:25:2F:33:6B:AC ValiditySat, 04 Jan 2025 04:17:01 GMT - Fri, 04 Apr 2025 04:17:00 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ww38.linoleumsquat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.linoleumsquat.com/0/0/0/e33cb7a9538df5f5b2b11be11c7d54da/5_244445_2768356/1543_3544513_4642101_63/75301574_107-178-200-197/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-13d3-bf62-a47341ca2d77
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Thu, 13 Mar 2025 06:17:14 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
|
|