| ww38.zummerprime.com/munin/a/ls?t=67d27861&token=b9974513c87582e3b973af2d9dfde8ff7058cf9e |  76.223.26.96 | 201 Created | 0 B |
URL GET ww38.zummerprime.com/munin/a/ls?t=67d27861&token=b9974513c87582e3b973af2d9dfde8ff7058cf9e IP76.223.26.96:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerLet's Encrypt Subjectww38.zummerprime.com Fingerprint25:F4:B4:A2:FB:F1:45:12:EE:0C:BD:F7:8C:92:B8:28:D3:6C:9D:9E ValidityFri, 27 Dec 2024 07:36:29 GMT - Thu, 27 Mar 2025 07:36:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/ls?t=67d27861&token=b9974513c87582e3b973af2d9dfde8ff7058cf9e HTTP/1.1
Host: ww38.zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Thu, 13 Mar 2025 06:17:06 GMT
server: Caddy, nginx
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_ew0tBfNbdNjps6oRmIOpuJHZ1EHP3fm2VaffQqoYzQM3LunciXsL1bINeAjSg7RLguf9uw7js/EsHjmVyim+mw==
x-log-success: 67d278620ee00d438e05f7b2
content-length: 0
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.161 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.161:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.zummerprime.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODYxY2VkY2V8fHwxNzQxODQ2NjI1Ljg2NTV8ZmY5NmEzODk5NDdjNjQwYTZmOGI0MDNjN2I0MWQ3NDQwNGEwMmM3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI5OTc0NTEzYzg3NTgyZTNiOTczYWYyZDlkZmRlOGZmNzA1OGNmOWV8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107%2C17301545&format=r3%7Cs&nocache=9121741846626924&num=0&output=afd_ads&domain_name=ww38.zummerprime.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846626926&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46 ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT
File typeSVG Scalable Vector Graphics image Hash592bbd56abac313ab322bc38f7027496 ecc40e55421cbfc9cc24e256c999a497b84d997f fe3a1073d51df0f353dfa771acde9ea020e215a74edf7b24775e50282b6d6eda
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 12 Mar 2025 21:04:24 GMT
expires: Thu, 13 Mar 2025 20:04:24 GMT
cache-control: public, max-age=82800
age: 33164
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| zummerprime.com/js/fingerprint/iife.min.js | 103.224.182.242 | 200 OK | 34 kB |
URL GET zummerprime.com/js/fingerprint/iife.min.js IP103.224.182.242:443 ASN#133618 Trellian Pty. Limited
Requested byhttps://zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ CertificateIssuerLet's Encrypt Subjectstijnjanssens.com Fingerprint42:FC:EC:16:41:B6:85:75:F6:94:BA:9F:BB:BA:D1:7F:69:2F:1D:08 ValiditySun, 09 Mar 2025 07:11:31 GMT - Sat, 07 Jun 2025 07:11:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/fingerprint/iife.min.js HTTP/1.1
Host: zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:17:02 GMT
server: Apache
last-modified: Tue, 22 Oct 2024 03:25:40 GMT
etag: "85c0-6250852d63500-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 14345
content-type: application/javascript
connection: close
|
|
| obseu.seaskydvd.com/mon |  54.75.69.192 | 200 OK | 0 B |
IP54.75.69.192:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2366
Origin: https://ww38.zummerprime.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Cookie: cg_uuid=1ac5518753525bee4a824e212fa37276
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.zummerprime.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:10 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ | 103.224.182.242 | 200 OK | 1.9 kB |
URL User Request GET zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ IP103.224.182.242:443 ASN#133618 Trellian Pty. Limited
CertificateIssuerLet's Encrypt Subjectstijnjanssens.com Fingerprint42:FC:EC:16:41:B6:85:75:F6:94:BA:9F:BB:BA:D1:7F:69:2F:1D:08 ValiditySun, 09 Mar 2025 07:11:31 GMT - Sat, 07 Jun 2025 07:11:30 GMT
File typeHTML document, ASCII text, with very long lines (1989), with no line terminators Hash9ae7353042348d14fca9754e318a5678 d8137239d0c0df37225028481baf4b96a5a4ad01 fa1ffac85fece0eb18f6aa75d3025934facad36128ee5147ceed49d97897f4ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/ HTTP/1.1
Host: zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Thu, 13 Mar 2025 06:17:01 GMT
server: Apache
set-cookie: __tad=1741846621.4429263; expires=Sun, 11-Mar-2035 06:17:01 GMT; Max-Age=315360000
vary: Accept-Encoding
content-encoding: gzip
content-length: 627
content-type: text/html; charset=UTF-8
connection: close
|
|
| obseu.seaskydvd.com/ct?id=80705&url=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=b9974513c87582e3b973af2d9dfde8ff7058cf9e&tsf=0&tsfmi=&tsfu=&cb=1741846626874&hl=2&op=0&ag=2881387774&rand=13669000651510262688050819010105222110511712807616106116281207801119671752781135065860&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=RW9WXSss2k&pto=3328&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1741846626.AhHipsVXUvSgORE0&suid=1.1741846626.oRKoJbZBDlvBYmSp&tuid=1.1741846626.PlT0EDpkbYWO1edm&fbc=->m=-&it=7%2C2410%2C354&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D | 54.75.69.192 | 200 OK | 4.7 kB |
URL GET obseu.seaskydvd.com/ct?id=80705&url=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=b9974513c87582e3b973af2d9dfde8ff7058cf9e&tsf=0&tsfmi=&tsfu=&cb=1741846626874&hl=2&op=0&ag=2881387774&rand=13669000651510262688050819010105222110511712807616106116281207801119671752781135065860&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=RW9WXSss2k&pto=3328&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1741846626.AhHipsVXUvSgORE0&suid=1.1741846626.oRKoJbZBDlvBYmSp&tuid=1.1741846626.PlT0EDpkbYWO1edm&fbc=->m=-&it=7%2C2410%2C354&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D IP54.75.69.192:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4749), with no line terminators Hashb0c19b8f927b297fc6dbb5b595eabf1c 09e7cfea587fe63e04a982b8f3cab69222b812a0 f7281159ae872eac01d90dedd20bf71f8a4878e521c10a8e1488d5c70212b569
GET /ct?id=80705&url=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=b9974513c87582e3b973af2d9dfde8ff7058cf9e&tsf=0&tsfmi=&tsfu=&cb=1741846626874&hl=2&op=0&ag=2881387774&rand=13669000651510262688050819010105222110511712807616106116281207801119671752781135065860&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=RW9WXSss2k&pto=3328&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1741846626.AhHipsVXUvSgORE0&suid=1.1741846626.oRKoJbZBDlvBYmSp&tuid=1.1741846626.PlT0EDpkbYWO1edm&fbc=->m=-&it=7%2C2410%2C354&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Thu, 13 Mar 2025 06:17:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=1ac5518753525bee4a824e212fa37276; Max-Age=29030400; Path=/; Expires=Thu, 12 Feb 2026 06:17:07 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://ww38.zummerprime.com
content-length: 1556
X-Firefox-Spdy: h2
|
|
| ww38.zummerprime.com/munin/a/tr/answercheck/yes?domain=zummerprime.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0MTg0NjYyNS44NDczOmVjODg3NzhiNjMxZjU0Mzk0MWU4ZjIwYzgxY2FjYmNlOTQyYzEzMWQ4ZWQzNDM3NmI2NmM0MGNiYzllNGI5ZTA6NjdkMjc4NjFjZWRmNQ%3D%3D | 76.223.26.96 | 200 OK | 0 B |
URL GET ww38.zummerprime.com/munin/a/tr/answercheck/yes?domain=zummerprime.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0MTg0NjYyNS44NDczOmVjODg3NzhiNjMxZjU0Mzk0MWU4ZjIwYzgxY2FjYmNlOTQyYzEzMWQ4ZWQzNDM3NmI2NmM0MGNiYzllNGI5ZTA6NjdkMjc4NjFjZWRmNQ%3D%3D IP76.223.26.96:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerLet's Encrypt Subjectww38.zummerprime.com Fingerprint25:F4:B4:A2:FB:F1:45:12:EE:0C:BD:F7:8C:92:B8:28:D3:6C:9D:9E ValidityFri, 27 Dec 2024 07:36:29 GMT - Thu, 27 Mar 2025 07:36:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/tr/answercheck/yes?domain=zummerprime.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0MTg0NjYyNS44NDczOmVjODg3NzhiNjMxZjU0Mzk0MWU4ZjIwYzgxY2FjYmNlOTQyYzEzMWQ4ZWQzNDM3NmI2NmM0MGNiYzllNGI5ZTA6NjdkMjc4NjFjZWRmNQ%3D%3D HTTP/1.1
Host: ww38.zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209
Cookie: _cq_duid=1.1741846626.AhHipsVXUvSgORE0; _cq_suid=1.1741846626.oRKoJbZBDlvBYmSp
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:07 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.74.161 | 200 OK | 391 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.74.161:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.zummerprime.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODYxY2VkY2V8fHwxNzQxODQ2NjI1Ljg2NTV8ZmY5NmEzODk5NDdjNjQwYTZmOGI0MDNjN2I0MWQ3NDQwNGEwMmM3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI5OTc0NTEzYzg3NTgyZTNiOTczYWYyZDlkZmRlOGZmNzA1OGNmOWV8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107%2C17301545&format=r3%7Cs&nocache=9121741846626924&num=0&output=afd_ads&domain_name=ww38.zummerprime.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846626926&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com FingerprintF0:E7:0B:8F:93:C0:9E:F3:15:26:E3:94:7C:D8:3F:00:DE:01:8F:46 ValidityWed, 26 Feb 2025 15:33:54 GMT - Wed, 21 May 2025 15:33:53 GMT
File typeSVG Scalable Vector Graphics image Hash249bb4c6a37dfa60d6ecf838cada5020 4e56099d13b015804f79d1182f66982bc6e4662b a2cebc2af2fd29cbee1ed7860ef5b12088b85259918d8bf2f2aaa99b915fa3f4
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 13 Mar 2025 06:13:28 GMT
expires: Fri, 14 Mar 2025 05:13:28 GMT
cache-control: public, max-age=82800
age: 220
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/mon | 54.75.69.192 | 200 OK | 0 B |
IP54.75.69.192:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2369
Origin: https://ww38.zummerprime.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Cookie: cg_uuid=1ac5518753525bee4a824e212fa37276
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.zummerprime.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:17 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 54.240.174.69 | 200 OK | 110 kB |
URL GET euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP54.240.174.69:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerAmazon Subject*.seaskydvd.com Fingerprint5D:E2:D2:FB:0A:F9:91:11:96:63:07:24:64:47:1E:C8:64:72:1A:12 ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size110 kB (109609 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40006
content-encoding: gzip
server: Caddy
date: Thu, 13 Mar 2025 04:25:15 GMT
cache-control: max-age=43200
expires: Thu, 13 Mar 2025 16:24:48 GMT
etag: "1ac29-K2vKTT/fSsVMZT/lyLBmrZkxYUA"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IdaOYuApkBdh6r77gPerCjj3gQs69dHoGUM_491HubZrE1MI6EE5BQ==
age: 6738
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true | 216.58.207.228 | 200 OK | 145 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP216.58.207.228:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
File typeJavaScript source, ASCII text, with very long lines (1967) Size145 kB (144888 bytes) Hash5ccd45281c295a4bd36b051067f44a22 512833ee3ac243a030b5423418a3fd7c2318ab0f cb6fc82c90950661df5097feba853496046b91308187220b275eb6816f0531b4
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:17:06 GMT
expires: Thu, 13 Mar 2025 06:17:06 GMT
cache-control: private, max-age=3600
etag: "7007029288439555429"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png | 54.230.245.138 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP54.230.245.138:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Wed, 12 Mar 2025 11:05:03 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3PcGCR4pkbkvQJdWrUXtTkHNXy7Xy8Gz_YjK1bh-XEpWugDB1GysRw==
age: 69123
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/tracker/tc_imp.gif?e=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&cri=RW9WXSss2k&ts=602&cb=1741846627476 | 54.75.69.192 | 200 OK | 43 B |
URL GET obseu.seaskydvd.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126eefcf31ec41889a9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f6748d3d08c022d371cfb7b720682698a37c355380727c650015d63555cc1bc6c4977be26bb25cb43e2923bf94c6eaa04337b10d24ded47ff85cbcd78f27d45ae2995f6117f84164c1c3b1dc58a537bf06caff6ce841411e916c8f4299645ca6ac44e850e30c9745bff104d1464cd4d25b69dfafe66ec79f306c503841b2228e6c835793a7a598465888d6fa94660aeccf93d4c7926c8863c3c99c2095f384e635259a2887a672e55a6f84c2cdfacf57f91e053711e7da9f2a190cb7ebc8cdb52f94a8e066b70c7eb9db4f53c8ccea729cb2104c3a18d685855fd7e70efd7176cf092be29d253bd06f0dd459751989022db382a968627c73099d1bcf2dae6eb4b2da77be2edf3285431e88237c4bc44b04c1308d15e0c84cfd09296a6c863927d8ad3a28135b378696bcb2f66d09083116887a537af13b8dc1adb33ab6f1d04038172bb1f8388f932fc832a9853b0c298df75d1161320b95a060c311e3383a871eb0a8381c320b7c12aaadd68de90b6b12ac2f4e34d3931dfa41a40c9e8460d4fb0e8f06bb93f85fc0aafed33b763b667d55ec911c8be6a87173ae1b184307f327d06351d0a57a7fc8973c454f748534636eee20fd2851d13e8ee9fb7a169ddfbb2bc8be5aaee5d197cf65a83a94f38c34e781ec8750b3161eb7eb0604f82e6dc669576816586b629d2ae5bd97612243f142a5391dde1c42a2d159705408ac58ffbbdd7561a88e6fd708bca6c6d8e921f216ce6879a1373ee7384529d1ae13a9b11dacb0ef9bd33e58688d6cb467fe6b239679f74a08db0fa16cd6a6714059d7a5f42e5f64d85ed08d8dbce991792d995390d3644a22ff817a047ccfe7b8a2011334b38616da40b9c8b3749ab2d95f1a0779b9a0f9e7e61bd0d6e7fc7fadb182bba3281db4c83172c101ee3667ddbf1c775db0b6fc4d14aff889daed717c841477c44b42e7203d8c95302a836f5a0d3319d84bd7d0125f734647150dd1d42fb8bf20a47c2112d8ac2d905b080a8c54b3fa82ca9453644c625207ed6cc05418bd6e3cae3b213e332ba6fd525c28d1ec5edf8283ff39b41c096a2afc7fbd1d129418ae239489d3d92168059e0e537b5c8ccd16daf80d5f9e75b7d94e58be2519511d10604680069d4913e32dd6dee5bd38830b366709a341e8d56dbeb3917f2181264458ee8ca6ec0820a3073552dcededabe93209213bdae3420c9e06d577113034b4bbf65c1922634beb5ccd7a0e3fff8aec53ae3eb8b182e7c4f66732c645b946e0b6cf5c699b42cbfa40d3d8bc318f1854a95d7839e8ee7db71fa079b05ab3ca5d4b0d0972c3798acd4ef383f463980eacba7665fff81436502b83bf3627b14e64ce270da1678c1084bce87a9adc898d2eada3cd046d4cc7f8ba7afdf77e69ca03015cd82813eb135e08ada567580dc7bcc993a2afb5c54ae54052f4b7ee7db6015b30a642865f9629880a72d0bf665045f7598b1aeab68c955616affeafa94f12581432645466872c4672160bb3813b094&cri=RW9WXSss2k&ts=602&cb=1741846627476 IP54.75.69.192:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126eefcf31ec41889a9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f6748d3d08c022d371cfb7b720682698a37c355380727c650015d63555cc1bc6c4977be26bb25cb43e2923bf94c6eaa04337b10d24ded47ff85cbcd78f27d45ae2995f6117f84164c1c3b1dc58a537bf06caff6ce841411e916c8f4299645ca6ac44e850e30c9745bff104d1464cd4d25b69dfafe66ec79f306c503841b2228e6c835793a7a598465888d6fa94660aeccf93d4c7926c8863c3c99c2095f384e635259a2887a672e55a6f84c2cdfacf57f91e053711e7da9f2a190cb7ebc8cdb52f94a8e066b70c7eb9db4f53c8ccea729cb2104c3a18d685855fd7e70efd7176cf092be29d253bd06f0dd459751989022db382a968627c73099d1bcf2dae6eb4b2da77be2edf3285431e88237c4bc44b04c1308d15e0c84cfd09296a6c863927d8ad3a28135b378696bcb2f66d09083116887a537af13b8dc1adb33ab6f1d04038172bb1f8388f932fc832a9853b0c298df75d1161320b95a060c311e3383a871eb0a8381c320b7c12aaadd68de90b6b12ac2f4e34d3931dfa41a40c9e8460d4fb0e8f06bb93f85fc0aafed33b763b667d55ec911c8be6a87173ae1b184307f327d06351d0a57a7fc8973c454f748534636eee20fd2851d13e8ee9fb7a169ddfbb2bc8be5aaee5d197cf65a83a94f38c34e781ec8750b3161eb7eb0604f82e6dc669576816586b629d2ae5bd97612243f142a5391dde1c42a2d159705408ac58ffbbdd7561a88e6fd708bca6c6d8e921f216ce6879a1373ee7384529d1ae13a9b11dacb0ef9bd33e58688d6cb467fe6b239679f74a08db0fa16cd6a6714059d7a5f42e5f64d85ed08d8dbce991792d995390d3644a22ff817a047ccfe7b8a2011334b38616da40b9c8b3749ab2d95f1a0779b9a0f9e7e61bd0d6e7fc7fadb182bba3281db4c83172c101ee3667ddbf1c775db0b6fc4d14aff889daed717c841477c44b42e7203d8c95302a836f5a0d3319d84bd7d0125f734647150dd1d42fb8bf20a47c2112d8ac2d905b080a8c54b3fa82ca9453644c625207ed6cc05418bd6e3cae3b213e332ba6fd525c28d1ec5edf8283ff39b41c096a2afc7fbd1d129418ae239489d3d92168059e0e537b5c8ccd16daf80d5f9e75b7d94e58be2519511d10604680069d4913e32dd6dee5bd38830b366709a341e8d56dbeb3917f2181264458ee8ca6ec0820a3073552dcededabe93209213bdae3420c9e06d577113034b4bbf65c1922634beb5ccd7a0e3fff8aec53ae3eb8b182e7c4f66732c645b946e0b6cf5c699b42cbfa40d3d8bc318f1854a95d7839e8ee7db71fa079b05ab3ca5d4b0d0972c3798acd4ef383f463980eacba7665fff81436502b83bf3627b14e64ce270da1678c1084bce87a9adc898d2eada3cd046d4cc7f8ba7afdf77e69ca03015cd82813eb135e08ada567580dc7bcc993a2afb5c54ae54052f4b7ee7db6015b30a642865f9629880a72d0bf665045f7598b1aeab68c955616affeafa94f12581432645466872c4672160bb3813b094&cri=RW9WXSss2k&ts=602&cb=1741846627476 HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Cookie: cg_uuid=1ac5518753525bee4a824e212fa37276
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Thu, 13 Mar 2025 06:17:07 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| ww38.zummerprime.com/favicon.ico | 76.223.26.96 | 200 OK | 0 B |
URL GET ww38.zummerprime.com/favicon.ico IP76.223.26.96:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerLet's Encrypt Subjectww38.zummerprime.com Fingerprint25:F4:B4:A2:FB:F1:45:12:EE:0C:BD:F7:8C:92:B8:28:D3:6C:9D:9E ValidityFri, 27 Dec 2024 07:36:29 GMT - Thu, 27 Mar 2025 07:36:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ww38.zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Thu, 13 Mar 2025 06:17:06 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 142.250.74.174 | 200 OK | 145 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP142.250.74.174:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.zummerprime.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODYxY2VkY2V8fHwxNzQxODQ2NjI1Ljg2NTV8ZmY5NmEzODk5NDdjNjQwYTZmOGI0MDNjN2I0MWQ3NDQwNGEwMmM3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI5OTc0NTEzYzg3NTgyZTNiOTczYWYyZDlkZmRlOGZmNzA1OGNmOWV8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107%2C17301545&format=r3%7Cs&nocache=9121741846626924&num=0&output=afd_ads&domain_name=ww38.zummerprime.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846626926&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
File typeJavaScript source, ASCII text, with very long lines (1967) Size145 kB (144886 bytes) Hashb1b4e87893fc25133cbbea713084c466 b2dcf7dcb9e6a72135d2016aabe5aa48f6c3e1db cea34d6ccfec5a5c1deaa81fd5c06b0bc81800b5ea12d842395b18a96e6a0038
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Thu, 13 Mar 2025 06:17:07 GMT
expires: Thu, 13 Mar 2025 06:17:07 GMT
cache-control: private, max-age=3600
etag: "10889517268433763295"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/mon | 54.75.69.192 | 200 OK | 0 B |
IP54.75.69.192:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 3148
Origin: https://ww38.zummerprime.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Cookie: cg_uuid=1ac5518753525bee4a824e212fa37276
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.zummerprime.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:08 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ud4b3s76ie41&cd_fexp=72717107%2C17301545&aqid=Y3jSZ9zeEo3YxdwP6aWKmAg&psid=5837883959&pbt=bv&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C531%7C208%7C112&lle=0&ifv=1&hpt=1 | 142.250.74.174 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ud4b3s76ie41&cd_fexp=72717107%2C17301545&aqid=Y3jSZ9zeEo3YxdwP6aWKmAg&psid=5837883959&pbt=bv&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C531%7C208%7C112&lle=0&ifv=1&hpt=1 IP142.250.74.174:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=ud4b3s76ie41&cd_fexp=72717107%2C17301545&aqid=Y3jSZ9zeEo3YxdwP6aWKmAg&psid=5837883959&pbt=bv&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C531%7C208%7C112&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-_xyv1nsNWvQwV-ic1mZ-gw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:09 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| zummerprime.com/favicon.ico |  0.0.0.0 | | 0 B |
URL GET zummerprime.com/favicon.ico IP0.0.0.0:0
Requested byhttps://zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde | 103.224.182.242 | 302 Found | 16 kB |
URL User Request GET zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde IP103.224.182.242:80 ASN#133618 Trellian Pty. Limited
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846621.4429263
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:17:03 GMT
server: Apache
location: https://zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
|
|
| zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde | 103.224.182.242 | 302 Found | 16 kB |
URL User Request GET zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde IP103.224.182.242:443 ASN#133618 Trellian Pty. Limited
CertificateIssuerLet's Encrypt Subjectstijnjanssens.com Fingerprint42:FC:EC:16:41:B6:85:75:F6:94:BA:9F:BB:BA:D1:7F:69:2F:1D:08 ValiditySun, 09 Mar 2025 07:11:31 GMT - Sat, 07 Jun 2025 07:11:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=8d55004929240135af7d0f6cb8e03fde HTTP/1.1
Host: zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __tad=1741846621.4429263
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Thu, 13 Mar 2025 06:17:04 GMT
server: Apache
location: http://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
|
|
| ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 | 76.223.26.96 | 200 OK | 16 kB |
URL User Request GET ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 IP76.223.26.96:443
CertificateIssuerLet's Encrypt Subjectww38.zummerprime.com Fingerprint25:F4:B4:A2:FB:F1:45:12:EE:0C:BD:F7:8C:92:B8:28:D3:6C:9D:9E ValidityFri, 27 Dec 2024 07:36:29 GMT - Thu, 27 Mar 2025 07:36:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 HTTP/1.1
Host: ww38.zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:05 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_K/qdAKtN1TzdIOqkapdVlCHj3cywUo/8aw/W1PlVK7LALKaFrRhVz9t/3LeHvAe8TP94MK1LmVzDQtCzmkTZzA==
x-buckets: bucket011,bucket088,bucket077
x-domain: zummerprime.com
x-language: norwegian
x-pcrew-blocked-reason:
x-pcrew-ip-organization: Obos Nett
x-subdomain: ww38
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
|
|
| ww38.zummerprime.com/munin/a/tr/browserjs?domain=zummerprime.com&toggle=browserjs&uid=MTc0MTg0NjYyNS44NDczOmVjODg3NzhiNjMxZjU0Mzk0MWU4ZjIwYzgxY2FjYmNlOTQyYzEzMWQ4ZWQzNDM3NmI2NmM0MGNiYzllNGI5ZTA6NjdkMjc4NjFjZWRmNQ%3D%3D | 76.223.26.96 | 200 OK | 0 B |
URL GET ww38.zummerprime.com/munin/a/tr/browserjs?domain=zummerprime.com&toggle=browserjs&uid=MTc0MTg0NjYyNS44NDczOmVjODg3NzhiNjMxZjU0Mzk0MWU4ZjIwYzgxY2FjYmNlOTQyYzEzMWQ4ZWQzNDM3NmI2NmM0MGNiYzllNGI5ZTA6NjdkMjc4NjFjZWRmNQ%3D%3D IP76.223.26.96:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerLet's Encrypt Subjectww38.zummerprime.com Fingerprint25:F4:B4:A2:FB:F1:45:12:EE:0C:BD:F7:8C:92:B8:28:D3:6C:9D:9E ValidityFri, 27 Dec 2024 07:36:29 GMT - Thu, 27 Mar 2025 07:36:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /munin/a/tr/browserjs?domain=zummerprime.com&toggle=browserjs&uid=MTc0MTg0NjYyNS44NDczOmVjODg3NzhiNjMxZjU0Mzk0MWU4ZjIwYzgxY2FjYmNlOTQyYzEzMWQ4ZWQzNDM3NmI2NmM0MGNiYzllNGI5ZTA6NjdkMjc4NjFjZWRmNQ%3D%3D HTTP/1.1
Host: ww38.zummerprime.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Thu, 13 Mar 2025 06:17:06 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.zummerprime.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODYxY2VkY2V8fHwxNzQxODQ2NjI1Ljg2NTV8ZmY5NmEzODk5NDdjNjQwYTZmOGI0MDNjN2I0MWQ3NDQwNGEwMmM3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI5OTc0NTEzYzg3NTgyZTNiOTczYWYyZDlkZmRlOGZmNzA1OGNmOWV8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107%2C17301545&format=r3%7Cs&nocache=9121741846626924&num=0&output=afd_ads&domain_name=ww38.zummerprime.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846626926&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209 | 142.250.74.174 | 200 OK | 15 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.zummerprime.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODYxY2VkY2V8fHwxNzQxODQ2NjI1Ljg2NTV8ZmY5NmEzODk5NDdjNjQwYTZmOGI0MDNjN2I0MWQ3NDQwNGEwMmM3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI5OTc0NTEzYzg3NTgyZTNiOTczYWYyZDlkZmRlOGZmNzA1OGNmOWV8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107%2C17301545&format=r3%7Cs&nocache=9121741846626924&num=0&output=afd_ads&domain_name=ww38.zummerprime.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846626926&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209 IP142.250.74.174:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.zummerprime.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA3N3x8fHx8fDY3ZDI3ODYxY2VkY2V8fHwxNzQxODQ2NjI1Ljg2NTV8ZmY5NmEzODk5NDdjNjQwYTZmOGI0MDNjN2I0MWQ3NDQwNGEwMmM3Y3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGI5OTc0NTEzYzg3NTgyZTNiOTczYWYyZDlkZmRlOGZmNzA1OGNmOWV8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2617353989497713&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107%2C17301545&format=r3%7Cs&nocache=9121741846626924&num=0&output=afd_ads&domain_name=ww38.zummerprime.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1741846626926&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=795&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=732930958&rurl=https%3A%2F%2Fww38.zummerprime.com%2F0%2F0%2F0%2Fe93d1e98b7addf9155dadd8639e963f1%2F1858%2F1858%2Fuk%2F%3Ffp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26fp%3D-5%2F%26subid1%3D20250313-1717-04c1-9b24-2600a0a6c209 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Thu, 13 Mar 2025 06:17:07 GMT
expires: Thu, 13 Mar 2025 06:17:07 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-2GY4vl-fqFRDDw_Ao3bpGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3176
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=3uos10r1dln7&cd_fexp=72717107%2C17301545&aqid=Y3jSZ9zeEo3YxdwP6aWKmAg&psid=5837883959&pbt=bs&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C531%7C208%7C112&lle=0&ifv=1&hpt=1 | 142.250.74.174 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=3uos10r1dln7&cd_fexp=72717107%2C17301545&aqid=Y3jSZ9zeEo3YxdwP6aWKmAg&psid=5837883959&pbt=bs&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C531%7C208%7C112&lle=0&ifv=1&hpt=1 IP142.250.74.174:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintE3:AE:D7:AE:AB:35:F7:9A:08:17:FA:68:16:8D:9D:D5:35:B1:DA:32 ValidityWed, 26 Feb 2025 15:36:03 GMT - Wed, 21 May 2025 15:36:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=3uos10r1dln7&cd_fexp=72717107%2C17301545&aqid=Y3jSZ9zeEo3YxdwP6aWKmAg&psid=5837883959&pbt=bs&adbx=375&adby=170&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=732930958&csala=6%7C0%7C531%7C208%7C112&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-2IyvC3jRCly37BL2bXlFmg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Thu, 13 Mar 2025 06:17:09 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.seaskydvd.com/mon | 54.75.69.192 | 200 OK | 0 B |
IP54.75.69.192:443
Requested byhttps://ww38.zummerprime.com/0/0/0/e93d1e98b7addf9155dadd8639e963f1/1858/1858/uk/?fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&fp=-5/&subid1=20250313-1717-04c1-9b24-2600a0a6c209 CertificateIssuerZeroSSL Subject*.seaskydvd.com Fingerprint2A:2C:65:3D:CC:44:8A:95:10:32:8C:0D:66:BD:AD:F5:A6:3F:8F:97 ValiditySat, 08 Feb 2025 00:00:00 GMT - Fri, 09 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.seaskydvd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2366
Origin: https://ww38.zummerprime.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.zummerprime.com/
Cookie: cg_uuid=1ac5518753525bee4a824e212fa37276
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.zummerprime.com
content-type: application/json
date: Thu, 13 Mar 2025 06:17:12 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|