aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/bg2.jpg
104.21.3.94200 OK 114 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/bg2.jpg
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1920x941, components 3\012- data
Size 114 kB (113635 bytes)
Hash 5e20d8c5bd6c7a06298a2663a1cc8403
b6a831847567c49b247932edea74bbaec30dd4c5
948b1331677d0f9991d50376bfba436033c5a9cc5919cf9f74c03424b6f3e342
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/bg2.jpg HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: image/jpeg
content-length: 113635
last-modified: Thu, 23 Nov 2023 18:08:35 GMT
etag: "655f9523-1bbe3"
expires: Sun, 24 Dec 2023 14:34:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vo1%2B2l3Ke601ZmxPF3OCbXoArFRP3EWxKphFCOooKUYmdoP19NwEwVYzJGATqaOJFfDODEUUvb7HUm5Yw7zJugDbsjbvPknIT14sgiw8gzGURAfP1Q0R5R4jJjJPh1Z6TkyLNQ5q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b3942abb070b3d-OSL
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/microsoft.png
104.21.3.94200 OK 1.0 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/microsoft.png
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/microsoft.png HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: image/png
content-length: 1045
last-modified: Thu, 23 Nov 2023 18:08:30 GMT
etag: "655f951e-415"
expires: Sun, 24 Dec 2023 14:34:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sEqLsYQxJgnLb8qObdIWRoyvP08ijKhJ0idCIzIfHci2zP0%2BjVcljXimPJKmnvylZ%2FSvC8jV34Px3hS%2BsyEVc1I6cCbDSKul%2BaunbIZ8Fx0PPf8CXDpKNPi90tPPGVv5bYU5eUA9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b3942acb150b3d-OSL
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/def.png
104.21.3.94200 OK 3.8 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/def.png
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 77a2ffc5545f87551d74781201de9b3b
c9c3798afd2ae95aa3bba3c428335d49c8255b06
316e6a6737bd296ab30aca2ef7fa36f119d15786a2432d01e31fdc130272f15c
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/def.png HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: image/png
content-length: 3834
last-modified: Thu, 23 Nov 2023 18:08:28 GMT
etag: "655f951c-efa"
expires: Sun, 24 Dec 2023 14:34:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ui9AwgfxzmerOE1GTSLBeORm8%2F2T%2Fun50QL06eJ%2F0oVyg%2BtTMXB0opvEfMgCiJdbCM9IZ5MUtBstiy5NlIoD4bx%2B6nt%2Fl2OHOnwDY7ghZvLNUHbIKfo2NVy0vUexNK0kjx7fOLmX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b3942adb1a0b3d-OSL
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/cross.png
104.21.3.94200 OK 44 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/cross.png
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type PNG image data, 2080 x 2080, 8-bit/color RGBA, non-interlaced\012- data
Hash 4487a588bf2a07e3d1936d705c5ceefd
db193b3e2ab9fbee6eae99ced2366b1ef5f16971
3821ef20f5904fdb993e34d87ff8fb9c5786a382efb0eeee8b4f00c91428b701
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/cross.png HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: image/png
content-length: 44098
last-modified: Thu, 23 Nov 2023 18:08:32 GMT
etag: "655f9520-ac42"
expires: Sun, 24 Dec 2023 14:34:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qWupS6kfHEhEarfRskWNEpk2Y7TM2V2ZLnSoLrBqEAt8zWU1DJdsHbJwfXV075AzIWD1l4kZe80EQMHuJwx0CkBpFljYSGPyRR7050DqoFYoh3IvJ%2BjqCcfPyAnmolMjkN1MmXOi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b3942adb220b3d-OSL
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/virus-images.jpg
104.21.3.94200 OK 8.2 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/virus-images.jpg
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 254x71, components 3\012- data
Hash 5fc559a242f0ea0a023f10830887d2af
9d744c2f3a6bf5b715496350c8de7124cdd7ddc8
3b531d403dc8ce7cbb0efb1a0c307cfb2bbaaf21feaff9f3546f13bebda71887
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/virus-images.jpg HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: image/jpeg
content-length: 8196
last-modified: Thu, 23 Nov 2023 18:08:24 GMT
etag: "655f9518-2004"
expires: Sun, 24 Dec 2023 14:34:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R9%2FdQuO%2B9Ht6EZxB6qNh56pYxgEuxQEP6wK4JzplFZMe3VmaOBxwrLB9ju9VCHjcqT2%2F4xvcf6O0GTwuRUCFR4%2BNwa1dSfK2EHQqzk30y5J2PxO6WL9DYG9j5Fl8k55MmihaQrvo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82b3942adb250b3d-OSL
alt-svc: h3=":443"; ma=86400
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
151.101.129.229200 OK 23 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js
IP 151.101.129.229:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (65299)
Hash f81d0a1705048649befc8b595e455a94
aec551e4d573463088fca7d14fb644eb389f1839
b0212543cc5a4a0a31c1b5a9d1e8973261992116b4cfde3e7dfcf33b4e81a97b
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aawwe.mqringjpv.com
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"1499a-rsVR5NVzRjCI/KfRT7ZE6zifGDk"
content-encoding: br
accept-ranges: bytes
date: Fri, 24 Nov 2023 18:05:12 GMT
age: 21963930
x-served-by: cache-fra-eddf8230133-FRA, cache-bma1680-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23377
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
151.101.129.229200 OK 26 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP 151.101.129.229:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (65326)
Hash d432e4222814b62dd30c9513dcc29440
2cac4afc120983921411296bd4e8fd8a94ba237e
4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aawwe.mqringjpv.com
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.0
x-jsd-version-type: version
etag: W/"27681-LKxK/BIJg5IUESlr1Oj9ipS6I34"
content-encoding: br
accept-ranges: bytes
date: Fri, 24 Nov 2023 18:05:12 GMT
age: 21808808
x-served-by: cache-fra-eddf8230111-FRA, cache-bma1680-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26291
X-Firefox-Spdy: h2
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/before.js
104.21.3.94200 OK 1.6 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/before.js
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type ASCII text, with CRLF line terminators
Hash 87c2dc3aeb373ca8445f7410ef387689
688f4be3cfb8688b4441f382724495a7b82b3f62
31681779c6f394370dad146169896e9ec2b8f7c716c4b1db78c459033e48bf95
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/before.js HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 18:08:28 GMT
vary: Accept-Encoding
etag: W/"655f951c-16e"
expires: Sun, 24 Dec 2023 14:34:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=105iIcCHAhETIMf0RM95FGBr%2FV6KpB%2B6uxDCWV%2BJfCnlShLMLjbkxCzW3l6qfqhZLYF%2BQfZbsRDp9rBS%2FzP%2FTOdlXWQie6JNWXqDU3t%2BlJxZFZS8BJUvO3yb%2FXMq3pQm8RGFIls9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942afb3f0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
104.17.24.14200 OK 4.0 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js
IP 104.17.24.14:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (11084), with no line terminators
Hash 65f1d21d5fcc9d21da758adababd0c3c
e0661d07d64c00008bc9d013d16eec0a0f156dc7
d2b82e612d2a812e8be2a57300dab8923c4f2edbe7a799e7da70791b595646fe
GET /ajax/libs/modernizr/2.8.3/modernizr.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 3980
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f26-2b4c"
last-modified: Mon, 04 May 2020 16:13:26 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1487974
expires: Wed, 13 Nov 2024 18:05:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xs4fgv%2FwTqAHl3sPgxJHV1H8KOGVDUkK4Ie5ZRWjDKndhpbuoA6TnSzGkvrt%2FkeU55BytWIbBTc9w%2BBCeT87KMKgusA%2BYPP4qPcX3zbA6p6eHzBcqAvIsFmiaYif8KqAR9BD071Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82b3942bfed1b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
104.17.24.14200 OK 27 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP 104.17.24.14:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (32180)
Hash 7f9fb969ce353c5d77707836391eb28d
62c4042e9ebc691a5372d653b424512a561d1670
2051d61446d4dbffb03727031022a08c84528ab44d203a7669c101e5fbdd5515
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 56375
expires: Wed, 13 Nov 2024 18:05:12 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ObAhib2lUj4lpU1GD%2BolYBPmJkp%2Bqi6xGsurzUZZMiRwciLDMnBQITPrekT1b1EZw5aYwSP%2BkOH%2Fqm2qVlLAXORUXXYWYtlRTx1%2FWGYSluGy%2FLAQlEjKW1Dh%2BkcHIXobAyFVLksC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82b3942bfed2b524-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513
216.58.207.232200 OK 89 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-GZ2WHBX513
IP 216.58.207.232:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (5955)
Hash c963853af9ef0394a4d4c5bca948a1f5
e7d52d015214ff5f08d48405b647166b461b08c0
c215e6ba3533b561523b27757edbd72c97894d7a9ad5e937c5baa67ed1daffd5
GET /gtag/js?id=G-GZ2WHBX513 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 Nov 2023 18:05:13 GMT
expires: Fri, 24 Nov 2023 18:05:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89153
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
aawwe.mqringjpv.com/favicon.ico
104.21.3.94404 Not Found 146 B URL GET HTTP/3 aawwe.mqringjpv.com/favicon.ico
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 40b3fc14254227ec5012d996bf90c4e1
b0dd06eb5a779151151101337889ff09953f8ac0
740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /favicon.ico HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Fri, 24 Nov 2023 18:05:14 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fp94KcqRCW1OCafKEDnK0gP7ZlPbTc%2FcDRar1e8o80euYbTGjyiXJn8KO%2FFty8J7A%2BDLmWhVjaP%2FKolXCL1aDU%2FiQiIcavvn6y9hFffGUsYkBAewSyubESo70cxGVgA%2FjYxspxSg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942f0fbd0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/fullscreen.js
104.21.3.94200 OK 245 B URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/fullscreen.js
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type ASCII text, with no line terminators
Hash e70e5bc6acccc111d1016ccb1de66c20
b75154dabdb11f3c546fe085efdd740a8b88ea90
c8988f92f8e1a825f5f34ed45ca542b25eab1b845c5a0f459dff5045a4ee486e
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/fullscreen.js HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 18:08:37 GMT
vary: Accept-Encoding
etag: W/"655f9525-f5"
expires: Sun, 24 Dec 2023 14:34:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9f30zubm8nWS97%2F5F%2Bx4zqNOo3QHiUEpGdru59q14RftWvvHtTNbthuqBNqLIgmzlhea%2FP8IHyElVEn77ELhheFcylTT2y%2FnuJISwNeWpYlGaZVidDMeXye6jsasECJIznDUEnD4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942afb3e0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/alert-en.wav
104.21.3.94206 Partial Content 49 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/alert-en.wav
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 22050 Hz\012- data
Hash eaba2def43c393dec5968574cb6a93b2
2301a72722e9e456c60bb3a261790c876a3e0c32
01779f322914cd536b687be02e2f8bb3cf91821bfa2dbaa2bbff255c38724641
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/alert-en.wav HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Fri, 24 Nov 2023 18:05:14 GMT
content-type: application/octet-stream
content-length: 1701582
last-modified: Thu, 23 Nov 2023 18:08:35 GMT
etag: "655f9523-19f6ce"
content-range: bytes 0-1701581/1701582
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tfUDj5ZvI21Pzgbn6KZ8qSS7To74PU3uGraMR%2Fw4YxIncLEfXNZ5HXgm23pcnua4rPAsgGabAGwokbfCh4Ckx8VAAhonNlzUWzUncazmgheFgR2l2bpD%2FU6dyUp1ctEVfJ4XWWE5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942e6f2a0b3d-OSL
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/main.js
104.21.3.94200 OK 1.4 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/main.js
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type ASCII text, with very long lines (1587), with no line terminators
Hash 8a61bd76a24b9f1ae3f0864256fe2219
48e7ab3d8ed14bf21d63c879e48899e70793073a
e65cc6553c751e915ab1ff5ab7698bdf0aaf907845ce6324407f6e49b4c154a6
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/main.js HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 18:08:31 GMT
vary: Accept-Encoding
etag: W/"655f951f-595"
expires: Sun, 24 Dec 2023 14:34:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GDyJ6EpJTAVFICnu1BygJusbOVaf3Jb7lNJTlgUawN3TlOnsBy7KjIZA%2B%2FyWzE%2FZG11VDCDPw%2BthTEi6tVXGLrgmR0aH0XYk6LnGvYWf7CvNPG8rsGp3kkWMGA%2BUmuxJxvmrEsP2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942afb400b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx?phone=(0101)-50555-94769&
104.21.3.94301 Moved Permanently 9.5 kB URL User Request GET HTTP/2 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx?phone=(0101)-50555-94769&
IP 104.21.3.94:443
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aiksaganamihsoreh/wxxx?phone=(0101)-50555-94769& HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: text/html
location: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TuFqt28ehqKimGTfcHGvijry2rhcdeExbABpr7C2bxraTpCXIV9OZI%2BzuGOw%2FuQs7jp1zFMgcsosWHCSkiOxgZq4vfhfCRG%2B%2FD070MRMs7pR%2Fl1YBNrSpRU0Fxyv1yM7yyG9cAqn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b39421ed2bb4fa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
104.18.11.207200 OK 28 kB URL GET HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP 104.18.11.207:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint5B:F7:8F:50:AD:E5:5B:5E:8C:4A:39:3D:0C:98:E8:8C:18:4B:3D:8A
ValidityFri, 30 Dec 2022 00:00:00 GMT - Sat, 30 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (27303)
Hash 4fbd15cb6047af93373f4f895639c8bf
12d6861075de8e293265ff6ff03b1f3adcb44c76
ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 19:04:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e9a84d03a1f7c6aa17012c712a6e5dd5
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 2380671
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82b3942bfde556b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/light.js
104.21.3.94200 OK 503 B URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/light.js
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type ASCII text, with very long lines (545), with no line terminators
Hash d64718a85daf432be5f8d3c9fe3a45bd
d1b2721f29e5a1a6e6344a53162f32c53eb98e1e
de0997f0917e44e1840ce9d82cc86fd7f6cae542f906c62d78ae71c6af0ee303
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/light.js HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 18:08:30 GMT
vary: Accept-Encoding
etag: W/"655f951e-1f7"
expires: Sun, 24 Dec 2023 14:34:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fuR%2BAa0CACrvZJQUE%2BE4BnXuFLmBv9Ub1jjvQktQD1pJdhf4KnxOJDxuo6eewIt60u3sZUH0PVnKx5BukaxyzE9s4sHIb6BhS0gucXuyKU%2F4ng19Dj0wsDoDI0RkMqXMs7E88F0t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942afb410b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/jscode.js
104.21.3.94200 OK 6.5 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/jscode.js
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type ASCII text, with very long lines (6918), with no line terminators
Hash fbde4da0cb2f7af54c8ad1096fe4d1ce
9609bb67494ece0223a173a55025d128b14f1530
d70004786e99422691c01033d6753fa256b2d088f486c6509f374f12605f4c61
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/jscode.js HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: application/javascript
last-modified: Thu, 23 Nov 2023 18:08:26 GMT
vary: Accept-Encoding
etag: W/"655f951a-194d"
expires: Sun, 24 Dec 2023 14:34:58 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12614
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WqE1L3XdArvc98%2FUW6dcd6uOHrtX1dw0ZOlQ6MMP5KUP8NO9NaZn5elj6L%2BV4T0GsZ2dBcU%2FPJwJWQFoydB0Bt016HayN%2BCMGW7yiZG0zWPd95WlAtJ9QjGTW7VZ18d84MNFMd1z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942afb420b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/main.css
104.21.3.94200 OK 12 kB URL GET HTTP/3 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/main.css
IP 104.21.3.94:443
Requested by https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type ASCII text, with CRLF line terminators
Hash 28169309e74f1e0028e6e719676ab188
bfcad26f7a2ee391cb20e446b0f1a4e17499507a
d5d2eaec4d8f18123d2db3b457a892a5566da301d10ddb3afa85d059c64df7f6
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
GET /aiksaganamihsoreh/wxxx/main.css HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: text/css
last-modified: Thu, 23 Nov 2023 18:08:30 GMT
vary: Accept-Encoding
etag: W/"655f951e-2f4f"
expires: Sun, 24 Dec 2023 14:34:57 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 12615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R3s3mBmqfiUxoX5Uhwfitj6u1BUvKt1rap8fPmwFxQ7vLH83L9yTWnwiUfPxiW8%2BTtvnnTW%2FCTuLpf%2Bbtp%2Fl6ZvgvnxZEngZmL9zqnQie9V3ysQ3ovA%2BWSIUv8hO5RZHkvw5WcRq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b3942abb000b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
104.21.3.94200 OK 9.5 kB URL User Request GET HTTP/2 aawwe.mqringjpv.com/aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769&
IP 104.21.3.94:443
Certificate IssuerGoogle Trust Services LLC
Subjectmqringjpv.com
Fingerprint7E:15:01:FA:D8:B5:04:8A:46:67:FF:49:22:1E:78:8B:20:9E:49:5E
ValidityThu, 23 Nov 2023 12:06:56 GMT - Wed, 21 Feb 2024 12:06:55 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8766), with no line terminators
Hash 31d72be9a1b894fd8256c57a93707713
fd926e8fa09bf4a67a13a0a1b5314d413a25dbf1
feb309dd9946247c676156a61da75e3d1166dd315ff2d291b8e68d45ee38f811
Analyzer Verdict Alert urlquery scam Scam - Fake AntiVirus / Security software
urlquery scam Scam - Fake AntiVirus / Security software
OpenPhish phishing Office365
GET /aiksaganamihsoreh/wxxx/?phone=(0101)-50555-94769& HTTP/1.1
Host: aawwe.mqringjpv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 18:05:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OzQvfn7RsaUsSRDz1Ebwv0J6ms4urrh8cvgLo%2Bh49Iu2qKdl%2FDE6yNkONIqX%2BNgcUtAYaku%2Fn7lT4SjovIxYeZLYYlbzj14ZJNw%2BrJjbAU38zA%2FTz4HjWKHnNi9pcj9p2YggiLF4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82b39426dc58b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2