Report - meintracker.com/go/b796a64b-83f7-4722-93ae-945debd1e4d1

Report Overview

Submitted URL
meintracker.com/go/b796a64b-83f7-4722-93ae-945debd1e4d1
IP
3.70.16.242
ASN
#16509 AMAZON-02
Submitted
2022-11-24 14:10:31
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
16

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
a9playspin.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	1.8 MB	185.151.30.162
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	488 B	32 kB	216.58.207.195
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	35.165.176.211
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	52 kB	34.120.237.76
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	445 B	746 B	142.250.74.10
meintracker.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	386 B	1.5 kB	3.70.16.242
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.1 kB	4.2 kB	142.250.74.3

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-24	medium	meintracker.com/go/b796a64b-83f7-4722-93ae-945debd1e4d1	Malware
2022-11-24	medium	a9playspin.com/js/common.js	Malware
2022-11-24	medium	a9playspin.com/sounds/alert.mp3	Malware
2022-11-24	medium	a9playspin.com/sounds/spin.mp3	Malware
2022-11-24	medium	a9playspin.com/sounds/win.mp3	Malware
2022-11-24	medium	a9playspin.com/js/bootstrap.bundle.js	Malware
2022-11-24	medium	a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0	Malware
2022-11-24	medium	a9playspin.com/js/jquery.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0	1.4 kB	2023-03-07	2023-03-29
Pretty URL a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0 IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:03 Last Seen2023-03-29 21:48:55 Times Seen2 Hash 4544e8cffed5cd11ba040f9b7a069047 f8b325bab9fc2597f98cc6e8c703ba0ec45c9b3d 8cb6553967aaf52b61f6df0f20b937ac4e7c00aa204863c05ecc054bb0701ce8 Loading...

	a9playspin.com/js/bootstrap.bundle.js	230 kB	2023-03-07	2024-02-24
Pretty URL a9playspin.com/js/bootstrap.bundle.js IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:03 Last Seen2024-02-24 18:44:44 Times Seen52 Hash bd1604da466f7535f07899082f104eec bb2d1e4300f1095224b953400c1bb6a5ad6d2768 b2b23019880036b8da69b195b82dc6eced23bf55e1dcab7b748737fcfd046dfd Loading...

	a9playspin.com/js/jquery.js	87 kB	2023-03-07	2024-04-18
Pretty URL a9playspin.com/js/jquery.js IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:32 Last Seen2024-04-18 08:31:54 Times Seen2963 Hash 378087a64e1394fc51f300bb9c11878c 0c3192b500a4fd550e483cf77a49806a5872185b 4fe68fa216176e6d1f4580e924bafecc9f519984ecc06b1a840a08b0d88c95de Loading...

	a9playspin.com/js/common.js	0 B	2023-03-07	2024-04-19
Pretty URL a9playspin.com/js/common.js IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-19 15:05:30 Times Seen36960897 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0	3.6 kB	2023-03-07	2023-03-12
Pretty URL a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0 IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:03 Last Seen2023-03-12 10:03:22 Times Seen1 Hash 87e40ec8bc4875b348d48263e9eb2fdc d4968f12877f75a022a0c201e82707b8dae560b1 bd695f27979b78e2dc12a89cd1ee29c840bb0047ac5a65a38e2df190db5bbc7d Loading...

	a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0	1.0 kB	2023-03-07	2023-03-29
Pretty URL a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0 IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:03 Last Seen2023-03-29 21:48:55 Times Seen2 Hash c8a6b03f0e0f7b899af34b968b6a8fab bfb4ac862560103b4c0ab123aad4b1a00f82492d 3d2dcd4844cbc3278b7a2b09a1b90a8e5cfab0a8920f065bea2be54165e03b49 Loading...

	a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0	2.6 kB	2023-03-07	2023-03-29
Pretty URL a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0 IP 185.151.30.162 ASN #48254 20i Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:24:03 Last Seen2023-03-29 21:48:55 Times Seen2 Hash f52598b452def2de69c92ee0ac67249a 70d0df43de251f7b8a473fe779bc0938c2dfa045 252ca5709005edaf9657bd202bc2273a29fda63f35d5b8484dd85dd925c58546 Loading...

HTTP Transactions (51)

URL IP Response Size

meintracker.com/go/b796a64b-83f7-4722-93ae-945debd1e4d1

3.70.16.242

302 Found

304 B

URL HTTP/1.1
meintracker.com/go/b796a64b-83f7-4722-93ae-945debd1e4d1
IP
3.70.16.242:0
ASN
#16509 AMAZON-02

File type
HTML document, ASCII text, with very long lines (304), with no line terminators
Size
304 B (304 bytes)
Hash
35bf83de3cff9742854775010d3c84c2
061a30bf576d364756be77e028257d91536b8b00
22d265c56a3735a544c6b2b64713dc0d85647c025803b29c9acaaf2c5fe240eb

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /go/b796a64b-83f7-4722-93ae-945debd1e4d1 HTTP/1.1
Host: meintracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 302 Found
Server: openresty
Date: Thu, 24 Nov 2022 14:10:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 304
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
Location: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Set-Cookie: bemob-uniq-visit:b796a64b-83f7-4722-93ae-945debd1e4d1=1; Domain=meintracker.com; Path=/; Expires=Fri, 25 Nov 2022 14:10:19 GMT; HttpOnly
bemob-rotation:b796a64b-83f7-4722-93ae-945debd1e4d1:random:6603232f1b53b09731ea068c2aa1cfee=0-1-0; Domain=meintracker.com; Path=/; Expires=Fri, 25 Nov 2022 14:10:19 GMT; HttpOnly
bemob-track-url=https%3A%2F%2Fa9playspin.com%2F%3Fbemobdata%3Dc%253Db796a64b-83f7-4722-93ae-945debd1e4d1..l%253D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%253D0..b%253D0; Domain=meintracker.com; Path=/; Expires=Fri, 25 Nov 2022 14:10:19 GMT; HttpOnly
Vary: Accept
X-Response-Time: 7.746ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1456357aecbd23f21ad98da57e0127eb
7074815b39fa8da9013883971d665e4c1b0797ea
f3eba265ee64870b2f822f1511b36c747d763c382557789cdad8be1d3b52d1f5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F3EBA265EE64870B2F822F1511B36C747D763C382557789CDAD8BE1D3B52D1F5"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2215
Expires: Thu, 24 Nov 2022 14:47:14 GMT
Date: Thu, 24 Nov 2022 14:10:19 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3446
Cache-Control: max-age=163098
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:19 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:28:37 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13676
Expires: Thu, 24 Nov 2022 17:58:15 GMT
Date: Thu, 24 Nov 2022 14:10:19 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 13:18:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3081
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: IYoWZZTOUChqsU59mqKI9YNC3Jl+AU1opjbUJW26beTc1pk5RYwkAjlLXQ7w+Ndm8Wy3WWiiIyk=
x-amz-request-id: MSCJ1W6TR2V9M481
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 13:43:25 GMT
age: 1614
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:10:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
45efa92d1f0d74349a6079fcecea7f62
568c9d34689f8e959fa12b7cb647689e4b9eb544
dde39137f1494c855989934919e4d2e0779a7a2f9a00f23d6901fef9e9ad1146

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DDE39137F1494C855989934919E4D2E0779A7A2F9A00F23D6901FEF9E9AD1146"
Last-Modified: Wed, 23 Nov 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21585
Expires: Thu, 24 Nov 2022 20:10:04 GMT
Date: Thu, 24 Nov 2022 14:10:19 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 13:11:11 GMT
cache-control: public,max-age=3600
age: 3548
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6178
Cache-Control: max-age=160767
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:49:47 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

a9playspin.com/images/app-03.jpg

185.151.30.162

200 OK

5.8 kB

URL HTTP/2
a9playspin.com/images/app-03.jpg
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 43x27, components 3\012- data
Size
5.8 kB (5845 bytes)
Hash
9364041c43cea8ed574e72b90a26efeb
34eb1fdf6f4fc6da6e73ffba0685255604af584c
d29c83b2538a4eddc77ca9d40230911270f8a3262a5d311da99f6bc5d5aeea79

HTTP Headers

GET /images/app-03.jpg HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/jpeg
content-length: 5845
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "16d5-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/app-01.jpg

185.151.30.162

200 OK

5.5 kB

URL HTTP/2
a9playspin.com/images/app-01.jpg
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 40x25, components 3\012- data
Size
5.5 kB (5452 bytes)
Hash
78029276add90927fab41c23cdfd3d6e
54697bb56c2eb10fbeb9cb68d0b468d03c523fab
37a51d0de22a60bf52fd38a2aa396135933ee62c52833b1f83c2f1b68b100bbb

HTTP Headers

GET /images/app-01.jpg HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/jpeg
content-length: 5452
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "154c-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/app-02.jpg

185.151.30.162

200 OK

6.1 kB

URL HTTP/2
a9playspin.com/images/app-02.jpg
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 40x25, components 3\012- data
Size
6.1 kB (6079 bytes)
Hash
f12ed22744c2d0cb74b310f47103a325
24a13dabacaa6b2172ea6d9a6eed8e098bfd32d4
96c4b503dbdef32f70802ebbec8c19c625187290e106c1ea0b32b9e3634c4641

HTTP Headers

GET /images/app-02.jpg HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/jpeg
content-length: 6079
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "17bf-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/js/common.js

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/js/common.js
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/common.js HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: application/javascript
content-length: 0
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:09:14 GMT
etag: "0-5e580aff1fe80"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/logo.png

185.151.30.162

200 OK

9.1 kB

URL HTTP/2
a9playspin.com/images/logo.png
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
PNG image data, 70 x 57, 8-bit/color RGBA, non-interlaced\012- data
Size
9.1 kB (9102 bytes)
Hash
32285b6b30cde4aacf463b543f1733a8
cc9ba99ff87e83b4fe6bec517b14abb3239b0ff3
73b64f1c91407083d0a520374f2301a0c8984e06ad35df59e32efe9b79395316

HTTP Headers

GET /images/logo.png HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/png
content-length: 9102
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "238e-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/slot-start.png

185.151.30.162

200 OK

125 kB

URL HTTP/2
a9playspin.com/images/slot-start.png
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
PNG image data, 470 x 321, 8-bit/color RGB, non-interlaced\012- data
Size
125 kB (125378 bytes)
Hash
596d4b3c68eb24a0d8d7e6ede0a6f72b
8c58a0037131758b977853f4a20b5cdf3ff64c1c
e8536c1846be43ffbb4fbd1a8edbc2cc2a64dacddf0f79f38c4ae0625aa7e32b

HTTP Headers

GET /images/slot-start.png HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/png
content-length: 125378
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "1e9c2-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/slot-result-1.png

185.151.30.162

200 OK

122 kB

URL HTTP/2
a9playspin.com/images/slot-result-1.png
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
PNG image data, 470 x 321, 8-bit/color RGB, non-interlaced\012- data
Size
122 kB (122509 bytes)
Hash
eaf82df6174444568ad5b3b30e815840
d9b913b70c132ace743a38d49784ea2ff307be4d
02fdb6c8cf02d4640cf84786aa99276bcbcb05524fe57839c0a834dd1c6c2c51

HTTP Headers

GET /images/slot-result-1.png HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/png
content-length: 122509
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "1de8d-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/slot-result-2.png

185.151.30.162

200 OK

128 kB

URL HTTP/2
a9playspin.com/images/slot-result-2.png
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
PNG image data, 470 x 321, 8-bit/color RGB, non-interlaced\012- data
Size
128 kB (128120 bytes)
Hash
d4e71dd315bf748a1131f12f93488364
31ab8a70f683a1627d6b1f21a92c3551b553aefa
2d894f367b70114ef5328334162d70c44c2e8572fb4ae3e76afdb20a4127e03f

HTTP Headers

GET /images/slot-result-2.png HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/png
content-length: 128120
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "1f478-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/slot-win.png

185.151.30.162

200 OK

114 kB

URL HTTP/2
a9playspin.com/images/slot-win.png
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
PNG image data, 470 x 321, 8-bit/color RGB, non-interlaced\012- data
Size
114 kB (114296 bytes)
Hash
0d51481bcc0ebc834d92c46f52779ce4
0068be14df92083fe162aaa0f33312a990e680b9
53a9570aab8588eb3709719226ed987497edbecb4b36e9e5ebf03ccef3f34398

HTTP Headers

GET /images/slot-win.png HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/png
content-length: 114296
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "1be78-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/slot-spin.gif

185.151.30.162

200 OK

155 kB

URL HTTP/2
a9playspin.com/images/slot-spin.gif
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
GIF image data, version 89a, 470 x 321\012- data
Size
155 kB (154745 bytes)
Hash
3960496800d44a7825aa46992fa5a12f
0223eee467be1787a0d47c8e5b25a98dcb03a02c
ed68c2ddae8aa030cbae6e1d9145e4dc5eb91180a3fb18b6f9e04cc7d96c3225

HTTP Headers

GET /images/slot-spin.gif HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/gif
content-length: 154745
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "25c79-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/images/banner.jpg

185.151.30.162

200 OK

760 kB

URL HTTP/2
a9playspin.com/images/banner.jpg
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x700, components 3\012- data
Size
760 kB (759556 bytes)
Hash
21f8209091ed6fa3ad6e0623cfad174a
779bad758448a0c98a88f32494cf153a661713c9
6f65b6858ec8edb8156c448491fe8707067307cbee4933a638505262e7af427c

HTTP Headers

GET /images/banner.jpg HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/jpeg
content-length: 759556
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "b9704-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

a9playspin.com/images/bg.jpg

185.151.30.162

200 OK

311 kB

URL HTTP/2
a9playspin.com/images/bg.jpg
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x1110, components 3\012- data
Size
311 kB (310903 bytes)
Hash
5e27bcea35cd44f1be02c08dddac0a02
728d222d853604812597f5208a0ec6d8fead6fa8
aac521c12067334f546aed131f527779e195c78ac0c428a1d808be8c4e8580e7

HTTP Headers

GET /images/bg.jpg HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: image/jpeg
content-length: 310903
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:40 GMT
etag: "4be77-5e5809f9d1600"
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
accept-ranges: bytes
x-via: FRA1
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2

216.58.207.195

200 OK

31 kB

URL HTTP/2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
216.58.207.195:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size
31 kB (30928 bytes)
Hash
ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780

HTTP Headers

GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://a9playspin.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Nov 2022 16:40:18 GMT
expires: Fri, 17 Nov 2023 16:40:18 GMT
cache-control: public, max-age=31536000
age: 595802
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:10:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

push.services.mozilla.com/

35.165.176.211

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
35.165.176.211:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KeE3SMawznGffMGDjO+AVA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fmERhWAiC1dWHYVaKud79cW7uA0=

a9playspin.com/sounds/alert.mp3

185.151.30.162

206 Partial Content

8.8 kB

URL HTTP/2
a9playspin.com/sounds/alert.mp3
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural\012- data
Size
8.8 kB (8802 bytes)
Hash
6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /sounds/alert.mp3 HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: audio/mpeg
content-length: 8802
server: Apache
x-provided-by: StackCDN
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
content-range: bytes 0-8801/8802
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/sounds/spin.mp3

185.151.30.162

206 Partial Content

51 kB

URL HTTP/2
a9playspin.com/sounds/spin.mp3
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo\012- data
Size
51 kB (51290 bytes)
Hash
390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /sounds/spin.mp3 HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: audio/mpeg
content-length: 51290
server: Apache
x-provided-by: StackCDN
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
content-range: bytes 0-51289/51290
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/sounds/win.mp3

185.151.30.162

206 Partial Content

22 kB

URL HTTP/2
a9playspin.com/sounds/win.mp3
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type
Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural\012- data
Size
22 kB (22067 bytes)
Hash
c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /sounds/win.mp3 HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: audio/mpeg
content-length: 22067
server: Apache
x-provided-by: StackCDN
x-origin-cache-status: MISS
x-cdn-cache-status: REVALIDATED
content-range: bytes 0-22066/22067
x-via: FRA1
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 14:10:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 14:10:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 14:10:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16986
Expires: Thu, 24 Nov 2022 18:53:27 GMT
Date: Thu, 24 Nov 2022 14:10:21 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp

34.120.237.76

200 OK

5.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.1 kB (5070 bytes)
Hash
0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8rbsN9OVJmneT9ov-Q7V4RB8DP5UWhhn-7cnukHiBpl06zmMM0zJTg==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:20 GMT
age: 58381
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.5 kB (7462 bytes)
Hash
b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:03:54 GMT
age: 57987
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (13882 bytes)
Hash
64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 58834
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.0 kB (7993 bytes)
Hash
92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7YSXUV-LZpsI7vciFhuqt1EVr6YRkhxcOgMg8z8bxLcOE01_baf6Gg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:06 GMT
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
age: 58995
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.3 kB (4309 bytes)
Hash
841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:14:07 GMT
age: 24974
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6789 bytes)
Hash
d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:15:22 GMT
age: 24899
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

a9playspin.com/css/icofont.min.css

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/css/icofont.min.css
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css/icofont.min.css HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: text/css
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:22 GMT
etag: W/"16836-5e5809e8a6d80"
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: MISS
content-encoding: gzip
x-cdn-cache-status: REVALIDATED
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/css/style.css

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/css/style.css
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css/style.css HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: text/css
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:22 GMT
etag: W/"34ad-5e5809e8a6d80"
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: MISS
content-encoding: gzip
x-cdn-cache-status: REVALIDATED
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/js/bootstrap.bundle.js

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/js/bootstrap.bundle.js
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/bootstrap.bundle.js HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: application/javascript
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:09:14 GMT
etag: W/"38224-5e580aff1fe80"
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: MISS
content-encoding: gzip
x-cdn-cache-status: REVALIDATED
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0 HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: text/html
server: Apache
x-provided-by: StackCDN, StackCDN
last-modified: Fri, 05 Aug 2022 17:09:40 GMT
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: MISS
content-encoding: gzip
x-cdn-cache-status: MISS
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/css/bootstrap.min.css

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/css/bootstrap.min.css
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css/bootstrap.min.css HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: text/css
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:04:22 GMT
etag: W/"38478-5e5809e8a6d80"
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: MISS
content-encoding: gzip
x-cdn-cache-status: REVALIDATED
x-via: FRA1
X-Firefox-Spdy: h2

a9playspin.com/js/jquery.js

185.151.30.162

200 OK

0 B

URL HTTP/2
a9playspin.com/js/jquery.js
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /js/jquery.js HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: application/javascript
server: Apache
x-provided-by: StackCDN
last-modified: Fri, 05 Aug 2022 16:09:14 GMT
etag: W/"15391-5e580aff1fe80"
vary: Accept-Encoding, Accept-Encoding
x-origin-cache-status: MISS
content-encoding: gzip
x-cdn-cache-status: REVALIDATED
x-via: FRA1
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900&display=swap

142.250.74.10

200 OK

0 B

URL HTTP/2
fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900&display=swap
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 14:10:20 GMT
date: Thu, 24 Nov 2022 14:10:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

a9playspin.com/images/favicon.png

185.151.30.162

404 Not Found

0 B

URL HTTP/2
a9playspin.com/images/favicon.png
IP
185.151.30.162:0
ASN
#48254 20i Limited

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /images/favicon.png HTTP/1.1
Host: a9playspin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://a9playspin.com/?bemobdata=c%3Db796a64b-83f7-4722-93ae-945debd1e4d1..l%3D328cba4f-b8e4-4e6e-99f2-2c0e926d143c..a%3D0..b%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 404 Not Found
date: Thu, 24 Nov 2022 14:10:16 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
server: Apache
x-origin-cache-status: EXPIRED
content-encoding: gzip
x-cdn-cache-status: EXPIRED
x-via: FRA1
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (51)

URL HTTP/1.1

IP

ASN

File type

Size