| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ | 172.67.177.252 | 200 OK | 0 B |
URL User Request GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ IP 172.67.177.252:443
CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lander/2japan-v1_1698931590/ HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 07 Dec 2023 08:42:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 07 Dec 2023 09:42:03 GMT
Location: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EmyuSZyWnr00lDSrRXo0O5ZdcbiFBBXldvRP1RTlytdAt9Szq8LJdpfJIC9vDc2xaLtfsXMlIP6vPTOShE3wAlzISv8jR2z7nncYTT%2BlT%2Fw9LHdPpJcqgc1R5oLnWPGUP8QpeA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 831b791d0a985694-OSL
alt-svc: h2=":443"; ma=60
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js | 104.17.25.14 | 200 OK | 27 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js IP 104.17.25.14:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (32180) Hash7f9fb969ce353c5d77707836391eb28d 62c4042e9ebc691a5372d653b424512a561d1670 2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1145787
expires: Tue, 26 Nov 2024 08:42:04 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ngrQSG%2BaRPNn%2FczIVRKoR62yne6EGGZ8PCr7sTFjJ9Wq6ZxBYZIVKFDE%2B3xc9sPeuXmBJ9aM0V60xgqRASM3i4A7d1xXyEXbm%2FAVvFT8GLrJJPmkex25fOQgvR90tGQMdBMWCLmm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 831b79209d1d7127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/microsoft.png | 104.21.51.90 | 200 OK | 700 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/microsoft.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 47 x 46, 8-bit colormap, non-interlaced\012- data Hash0ff56a6a86d5e52a8befd4c71d1842df 9a5cd44dd2f43a37ce3af14e167bcba480e97ff4 81e528ea37468236da238a66c1539207d5eca2db4dbeb429bb0e67b80f04a9bb
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/microsoft.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 700
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-2bc"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Y8%2BSiNxtxm9ojs%2B1PahAM0S6mKg0Y%2FXGUkOyODXa7CGD%2FcOWuTSACHv5OYVe%2FUgfq4Ved6Dt6jCogEw2gNlffeK4Uc%2FUTzqE%2BSeW06htn4DkyJ68J07Ngv7XwV6bWl1dTtGWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b79207870712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/minimize.jpeg | 104.21.51.90 | 200 OK | 2.2 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/minimize.jpeg IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x39, components 3\012- data Hash1ba392dce74f8987dca48bf65d817c8f db0b8444c46125105b52f272bd422a7f52da1f72 a05245b6f7fd752af4a7b0131bbdfdf3eaee6c5a25a81cb498e0f0759189473c
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/minimize.jpeg HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/jpeg
content-length: 2247
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-8c7"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ua4o4Jlal3LKz3U6Iy%2FoXG1cEgrk7y72ztTFwTi3ibVHsfQhXq8hhGXu4f%2BHEmqrwUJ4ib5mcKpECUzc4NanPtPIV47G%2B9x08W65gP4WAtjrWKVpR0yGb8vTkf4pFwWfA22YQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b7920786e712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/que.png | 104.21.51.90 | 200 OK | 349 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/que.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data Hash7454c652e0733d92de6c920c2d646ae0 34a5bd8c7401f95e346895b0e5ccffbf0e9ad638 44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/que.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 349
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-15d"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lrU%2FEzYBvoFctHgf0v1%2Ba7mVvhQd0K3hr2dp9PLr9SKBunMP4NveBwiHdVDgT3psQx2TdmOtKJE9sndixysly7U3vecuFFZSv8TgjKxSAgIKXOpohe1N%2FmqDMjA%2FjsundP4TGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088a8712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/pc.png | 104.21.51.90 | 200 OK | 4.9 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/pc.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 166 x 92, 8-bit/color RGBA, non-interlaced\012- data Hashcc5132b56ba46b03dd998aa1fe220106 403e007a0b17d76a9945fa5ec46a9d01733b3040 598699133be5eef63e3b9b5540609ec0dc91d7af9c7f70a3b890e57491a70ae0
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/pc.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 4949
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-1355"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fEQtXMyJ2dC42T31ACbORzc2zkg%2FitdnT54tz%2FQ8Bn2w10h%2FIsiEaTyvBK7Ai%2BLEH1Q5qeqfuI7UEXpj5YpHHc1n%2FrGXDggEgGmsdLTnKdfc7H4Cp6e8CoeQxrpPCBIcE0eK4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088ae712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/bell.png | 104.21.51.90 | 200 OK | 1.1 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/bell.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced\012- data Hasha3555871399f1f67bfacaf437974b03a b6337de87cd7a75a73cd804774651d14c83fe76a 2e48fef820929c21295e13444901f60e3aed61ba6f8c773ff1466e6843e76b49
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/bell.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 1108
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-454"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BJCYSF6h8x%2BSYoQJNPu3stWt9KVdTOGNrPrFuqjcBHn18zpw%2FmgKtuZf0HRnxG3h8qo1jeqZJjH1BVXLpArBJYeUsS00od6QLQlqDV95%2FmGj6xS2Or6CvrVtv5PbbzkBGQqwSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088ad712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/def.png | 104.21.51.90 | 200 OK | 3.8 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/def.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash77a2ffc5545f87551d74781201de9b3b c9c3798afd2ae95aa3bba3c428335d49c8255b06 316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/def.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 3834
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-efa"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n7BjwnK5ka17Jbbtv%2F4fbf3SMw08bGG3k569V3BrUWheMYU3D8HK8XEEC9diAz%2BV0njcp6PNDMJtDjHz9m9PvomBZ1hXqjTAUDrA79hxV6etRdu1oxYPx3%2F3qYeQT4JyHrbMBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088af712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/setting.png | 104.21.51.90 | 200 OK | 364 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/setting.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data Hashe144c3378090087c8ce129a30cb6cb4e 59da5466551de941d0215e45c54aa2ceaf436be1 b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/setting.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 364
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-16c"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3vAg8fUhJInEnO4cIkLRDpSvUD0XQpae%2BX%2FKOWP%2Fwz0O4wRNVECvEMvBYOzWxcln8fDi1Qfv6%2BOUQ6IeXIqLafgPdlahZ6f3xZHz%2BOV0I6mF6ctf%2F81Q1%2FJcna5n4a7Wz5g%2BAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088a2712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/virus-images.jpeg | 104.21.51.90 | 200 OK | 8.2 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/virus-images.jpeg IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 254x71, components 3\012- data Hash5fc559a242f0ea0a023f10830887d2af 9d744c2f3a6bf5b715496350c8de7124cdd7ddc8 3b531d403dc8ce7cbb0efb1a0c307cfb2bbaaf21feaff9f3546f13bebda71887
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/virus-images.jpeg HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/jpeg
content-length: 8196
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-2004"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TJA7aOkFSOUvwulUH297zo2%2BEjiljObjxuDsNp9dHicOg4LmHLn10rFk1ciSlrpShAntu%2Bwl3HFYL%2FsdbQRKGA20rQTWb4ujaCttWnXUTCN9k42f9NUO2%2BEi88BI2h5huWHBMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088bb712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/virus-scan.png | 104.21.51.90 | 200 OK | 26 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/virus-scan.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hash2c497dfff84bd8c5af9254c9d6278ce1 667e72e7ba6f00a54629e28133317022d4b59af6 b2dc4153ee7019c70a1095d5d1304d540e3bba045d99e141f63e5b13362e5a4e
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/virus-scan.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 25871
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-650f"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UHVlVw%2Br6KXEMfBQ0oapjTO2P6KM61%2Fpshj9verynj8nJKF39kU4Ag4cY%2FwCohSODGwgre8qILZuN4d43g6yzzjrXJSv7V5YjMTaScbARVQmHc4mLrl8n0%2BAFiYsQiLhAZyH5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088ab712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/cross.png | 104.21.51.90 | 200 OK | 44 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/cross.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data Hash4487a588bf2a07e3d1936d705c5ceefd db193b3e2ab9fbee6eae99ced2366b1ef5f16971 3821ef20f5904fdb993e34d87ff8fb9c5786a382efb0eeee8b4f00c91428b701
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/cross.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 44098
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-ac42"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Pfiha%2FwaUMiE09Cfq%2BFvY7ShsmUVG%2B1O1ZmIRym3BkiDTDE9BxckNzUvzpGgtLB3fLdqIx5rtNaGQiUk1af79T3eYDhsy9XhUPG5Eirix2XOQawUXx7yrsUN5N%2Br5xeLabP3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088b8712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/background.png | 104.21.51.90 | 200 OK | 229 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/background.png IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typePNG image data, 1920 x 1126, 8-bit colormap, non-interlaced\012- data Size229 kB (228699 bytes) Hasha2d12c57680a1afe4db571924393de06 ab5366977ef499046980c840df9851059e4ce5c0 0d3d36645ffc457b43e604a6e0e0dfde2b9d7eef5cbe9e179b2d30a05483ae2b
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/background.png HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: image/png
content-length: 228699
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-37d5b"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8O2X8Gr1w1cQsAwbp5gwCeLkpbFh60iEu8MAvZYKmnmSxYAfvktmUbiGRHa3CTsdbJy0TE41%2FCCfrMW0Df74rIAhZsj5kKMrnvSF05q5WPpMgz4t84nJyKmN49XYfV1GKdN0Lw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b7920786a712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| code.jquery.com/jquery-1.4.4.min.js | 151.101.2.137 | 200 OK | 27 kB |
URL GET HTTP/2code.jquery.com/jquery-1.4.4.min.js IP 151.101.2.137:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (820) Hash73a9c334c5ca71d70d092b42064f6476 b75990598ee8d3895448ed9d08726af63109f842 517364f2d45162fb5037437b5b6cb953d00d9b2b3b79ba87d9fe57ea6ee6070c
GET /jquery-1.4.4.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-13309"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 07 Dec 2023 08:42:04 GMT
age: 3811140
x-served-by: cache-lga21980-LGA, cache-bma1654-BMA
x-cache: HIT, HIT
x-cache-hits: 8715, 1
x-timer: S1701938524.487287,VS0,VE1
vary: Accept-Encoding
content-length: 27078
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-223361919-1 | 142.250.74.136 | 200 OK | 52 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-223361919-1 IP 142.250.74.136:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (2213) Hash19863bf680c8236b36d846e006402b1f c7c9e09d02d9ecc6246e9e8256d5fc042f73c2c2 4c78821e395889e1b7cc352b29b0e509f1c558871a0e036fbed066fcd7bb8543
GET /gtag/js?id=UA-223361919-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 08:42:04 GMT
expires: Thu, 07 Dec 2023 08:42:04 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51592
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-S6V65V75HQ&l=dataLayer&cx=c | 142.250.74.136 | 200 OK | 86 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-S6V65V75HQ&l=dataLayer&cx=c IP 142.250.74.136:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34 ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File typeASCII text, with very long lines (3034) Hash948e65d8e52336dbd5c0ef25ab3017e5 684943fe5e0e906fbd2e4d2bb41acd4df46d4d05 619e233089e9b369e648b9cd10d3eb9bcdb991d9c364c4309a87dcfe84343529
GET /gtag/js?id=G-S6V65V75HQ&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 07 Dec 2023 08:42:05 GMT
expires: Thu, 07 Dec 2023 08:42:05 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css | 151.101.129.229 | 200 OK | 26 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css IP 151.101.129.229:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (65326) Hashd432e4222814b62dd30c9513dcc29440 2cac4afc120983921411296bd4e8fd8a94ba237e 4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ndebelhqwg.sa.com
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: br
accept-ranges: bytes
date: Thu, 07 Dec 2023 08:42:05 GMT
age: 22898220
x-served-by: cache-fra-eddf8230111-FRA, cache-bma1660-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26291
X-Firefox-Spdy: h2
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/before.js | 104.21.51.90 | 200 OK | 67 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/before.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeASCII text, with CRLF line terminators Hash87c2dc3aeb373ca8445f7410ef387689 688f4be3cfb8688b4441f382724495a7b82b3f62 31681779c6f394370dad146169896e9ec2b8f7c716c4b1db78c459033e48bf95
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/before.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: application/javascript
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: W/"6543a3de-16e"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z22w2pYeZx3Qu9id9OYjQWtVA65Wsd5Rd7y7WdEHrFvF02ZFSewN1Shkhi3x0zLdhPnTgifH0jU%2F7goe9fr7kHNRyp%2BO0pw4nd3xeXcS08Qb5cLKCla2V%2FIRFDJ%2FFXtbBxxvXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088c5712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/wa0lDErtm0s.mp3 | 104.21.51.90 | 206 Partial Content | 81 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/wa0lDErtm0s.mp3 IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeMPEG ADTS, layer III, v2, 32 kbps, 24 kHz, Monaural\012- data Hash431fa6d435bc02c1b100f7aad9686999 64185115cabd63931512e63dcce7dca799499a3d 215ec2da0b16b6cef719ec346cae5e130f73f86d32882e5959eff72036573fcc
GET /lander/2japan-v1_1698931590/wa0lDErtm0s.mp3 HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Cookie: _ga_S6V65V75HQ=GS1.1.1701938531.1.0.1701938531.0.0.0; _ga=GA1.1.1206353432.1701938532
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Thu, 07 Dec 2023 08:42:06 GMT
content-type: audio/mpeg
content-length: 80928
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-13c20"
expires: Sun, 17 Dec 2023 08:42:06 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
content-range: bytes 0-80927/80928
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NpJeChv6M%2BBXAkkzymNP7J5hrEIeoqd8PcdVlwcwAAe3sQB%2Bl%2F88f9stbqn3XEpBnj%2BXcw7ibHWf%2F1Qe4TFM4QuyNMJVj4D1tMs5ZjhfnxlOnnmhOwY86JsdXS1SsH%2BHnmEc5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792c7dc8712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/wa0lDErtm0s.mp3 | 104.21.51.90 | 206 Partial Content | 81 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/wa0lDErtm0s.mp3 IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeMPEG ADTS, layer III, v2, 32 kbps, 24 kHz, Monaural\012- data Hash431fa6d435bc02c1b100f7aad9686999 64185115cabd63931512e63dcce7dca799499a3d 215ec2da0b16b6cef719ec346cae5e130f73f86d32882e5959eff72036573fcc
GET /lander/2japan-v1_1698931590/wa0lDErtm0s.mp3 HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Cookie: _ga_S6V65V75HQ=GS1.1.1701938531.1.0.1701938531.0.0.0; _ga=GA1.1.1206353432.1701938532
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Thu, 07 Dec 2023 08:42:06 GMT
content-type: audio/mpeg
content-length: 80928
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: "6543a3de-13c20"
expires: Sun, 17 Dec 2023 08:42:06 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: HIT
age: 0
content-range: bytes 0-80927/80928
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dCHD7EIzNkypHz6AxQ6zOebWad5YOIVhpNGRuy3Kgr8oSGOkNDwN8nKtUBVOeBzFcN5R7azznJHBwu9w7kUlEci%2FlAX61vWzwuZ%2B2h6xYVkApd9IctWXnQyw3kLKLov3INeOvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792d4e7d712e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590 | 104.21.51.90 | 301 Moved Permanently | 38 kB |
URL User Request GET HTTP/2ndebelhqwg.sa.com/lander/2japan-v1_1698931590 IP 104.21.51.90:443
CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lander/2japan-v1_1698931590 HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 07 Dec 2023 08:42:03 GMT
content-type: text/html
location: http://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZpuY4zWpb6%2BAJl1fOQWxKtizx7F%2FGs6qnyK3MjGsYzlu5b9CjS6BeEP%2BDGq6lScSRw%2FnzpnBXGKAoU7FfU9e5AvUf%2BMJswxHo%2Bils7YVz6M5siyBQ4VNzxql4mAQsZDL8FetAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 831b791c7a9e56a5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/bootstrap.js | 104.21.51.90 | 200 OK | 84 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/bootstrap.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeASCII text, with very long lines (65299) Hashf81d0a1705048649befc8b595e455a94 aec551e4d573463088fca7d14fb644eb389f1839 b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/bootstrap.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: application/javascript
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: W/"6543a3de-1499a"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UCxVfbXpFGtzL%2Fa91FBnRgExP2T0ek4%2FDtf%2Fw%2BplVzVYRJbiyNDdIiIVGJAaSBk7yaxWQGDTMWm4mW5azPJXFPDxafxodcFbC0Qjz9chK5UfmU7hYWfWj1OkZBeHvdPY2mmFhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088c0712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/light.js | 104.21.51.90 | 200 OK | 503 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/light.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeASCII text, with very long lines (545), with no line terminators Hashd64718a85daf432be5f8d3c9fe3a45bd d1b2721f29e5a1a6e6344a53162f32c53eb98e1e de0997f0917e44e1840ce9d82cc86fd7f6cae542f906c62d78ae71c6af0ee303
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/light.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: application/javascript
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: W/"6543a3de-1f7"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G7g2joCUF3jp4L11ToFuayXrySSgzCbgX8qdbZalp7nctlCSklX9RMY8IbDdkSnsGSe8J5%2BwFY05H8kBqSCaZqVy9KOSIM5l1qjUyAvQJB3qmTIwZEtu%2BBTVXlyjRJjfgNRlfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792098ca712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/favicon.ico | 104.21.51.90 | 404 Not Found | 146 B |
URL GET HTTP/3ndebelhqwg.sa.com/favicon.ico IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /favicon.ico HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Cookie: _ga_S6V65V75HQ=GS1.1.1701938531.1.0.1701938531.0.0.0; _ga=GA1.1.1206353432.1701938532
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 08:42:06 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lMDM%2FNeyz6UMSeFtAtFBrstH6Em%2F4HpZvTNMulHVFDjkjWMGiu%2F%2FPdJbiZmkTNy6eyHHI9Uj%2B8eSLPsWezeCCgJbepNr%2BSjCOmtrFJk9ERKjyWdik%2FbmMnuLh6xF0GYhEPxmsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792d7e98712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/main.js | 104.21.51.90 | 200 OK | 1.3 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/main.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeASCII text, with very long lines (1440), with no line terminators Hash0623cddfa7783dc8fc61b18ada9d6b8b dede1eff8f20e836a0d3f2ecdc410022501d8141 44105f682f72a8f3de00bce06321ada7a6dc3449b5030e5742a6a40147f70a6e
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/main.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: application/javascript
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: W/"6543a3de-50a"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lZi4lNt2mh4W9S4BzCL04wVRyB2MUxrbjDGIfPG2OgJYUn%2FR3AqFg23hjdvTf7DlRu298L2a7dU6Ss90ybS2siLiS4QkWN4i0jiv0FcFdcZhyTG7gmK6OLW5BwAYLM8INXAz8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792098c8712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/modernizr.js | 104.21.51.90 | 404 Not Found | 146 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/modernizr.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/modernizr.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Cookie: _ga_S6V65V75HQ=GS1.1.1701938531.1.0.1701938531.0.0.0; _ga=GA1.1.1206353432.1701938532
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 08:42:06 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q18vbbLt4dnRY2LGtah19jUkqSo1%2BhrxGAeUerFwDAxaCWYQ2Mu3csGAf96wTU7BM70fa5mZ8zkLc4J4UI3wqgP%2BRjCK67EicZ6Oq4LH7BNlSzp8ST69wxkhyGIGc9FCU%2FCZAA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792c7dc2712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 | 104.18.10.207 | 200 OK | 67 kB |
URL GET HTTP/3maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 IP 104.18.10.207:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04 ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data Hashdb812d8a70a4e88e888744c1c9a27e89 638c652d623280a58144f93e7b552c66d1667a11 ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ndebelhqwg.sa.com
DNT: 1
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:06 GMT
content-type: font/woff2
content-length: 66624
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "db812d8a70a4e88e888744c1c9a27e89"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:48:08
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 9cb0cf31a56354652768ac95b5f7fad5
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 831b792c48f656b9-OSL
alt-svc: h3=":443"; ma=86400
|
|
| maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css | 104.18.10.207 | 200 OK | 28 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css IP 104.18.10.207:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04 ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File typeASCII text, with very long lines (27303) Hash4fbd15cb6047af93373f4f895639c8bf 12d6861075de8e293265ff6ff03b1f3adcb44c76 ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4fbd15cb6047af93373f4f895639c8bf"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 10/31/2023 18:58:32
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1047
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 25754c75fb460a03a208e88579fbc0b3
cdn-cache: HIT
cf-cache-status: HIT
age: 1042169
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 831b79209a05b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/modernizr.js | 104.21.51.90 | 404 Not Found | 146 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/modernizr.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/modernizr.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cTr8RdWhZP4C%2Bdxe%2BJw%2BjOeDM5IbhlGPho6OTe3cr68adeVW5LAZ9P0%2BIgOxKo6ZQwItEBle2uDukcNbxwAxvp9Dw8KsGHkwEgMQG3RIA0Ktgu96y%2FaX8dDwxZTVoAIv3IPArw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088be712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/fullscreen.js | 104.21.51.90 | 200 OK | 245 B |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/fullscreen.js IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeASCII text, with no line terminators Hashe70e5bc6acccc111d1016ccb1de66c20 b75154dabdb11f3c546fe085efdd740a8b88ea90 c8988f92f8e1a825f5f34ed45ca542b25eab1b845c5a0f459dff5045a4ee486e
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/fullscreen.js HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: application/javascript
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: W/"6543a3de-f5"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VMs0dWo4co%2B%2FTS2ejMgVJSPeceg6FTUUyZYQQ0HFsdG%2B%2FAz%2BAwbY1cRtxiW16bkQiRdyXpYRLumognZmbDLf%2BKXBQ%2BC6RuIpwD8qZvKT7GMw55rYDwvjVTbQl7M4MiEdzddp1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b792088c2712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ndebelhqwg.sa.com/lander/2japan-v1_1698931590/main.css | 104.21.51.90 | 200 OK | 12 kB |
URL GET HTTP/3ndebelhqwg.sa.com/lander/2japan-v1_1698931590/main.css IP 104.21.51.90:443
Requested byhttps://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/ CertificateIssuerGoogle Trust Services LLC Subjectndebelhqwg.sa.com FingerprintD9:3D:A6:BD:7F:4C:1A:BF:D5:E3:A7:67:9E:0C:3C:03:91:B7:AC:52 ValidityThu, 16 Nov 2023 12:44:19 GMT - Wed, 14 Feb 2024 12:44:18 GMT
File typeASCII text, with CRLF line terminators Hash31fa8c40f6852c6f77676a241dd9d26e 12160e92eebf846280bdd483f2cd8630eecdf5fb 733b181fd322493d5a99f4d05e17fc4b1b29e8e0dea3a226c8498f38587b3640
Analyzer | Verdict | Alert | urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /lander/2japan-v1_1698931590/main.css HTTP/1.1
Host: ndebelhqwg.sa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ndebelhqwg.sa.com/lander/2japan-v1_1698931590/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 08:42:04 GMT
content-type: text/css
last-modified: Thu, 02 Nov 2023 13:27:58 GMT
etag: W/"6543a3de-2f41"
expires: Sun, 17 Dec 2023 08:42:04 GMT
cache-control: max-age=864000
access-control-allow-origin: *
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gpSV%2F3QVH23fnExxt30FoBoMQwkIui4fIcadCIxU3rNYUdgwYSOzZP1PC%2Fbkc4XqFqfClz5M45E9o4FibJD2WOdyVzfYJgOBlhd41hD987T9ugLYmlhVETCLeZmbu8Cbdq%2BZsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 831b79206861712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|