| casual.meetnearbyujxj.quest/dating/EN/v2/bgwomen3.jpg | 172.67.199.181 | | 123 kB |
URL casual.meetnearbyujxj.quest/dating/EN/v2/bgwomen3.jpg IP172.67.199.181:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1550x787, components 3 Size123 kB (122873 bytes) Hash1e6e3e0c2cb3926fbba0630c670bc4e1 a34ba42fad6b1df9e90cd9ebe0d6cf8785a172cf e28005910ea7967e159b041f1e2a0ad91e638d15af5d3ad06dd0709ef4aae9ad
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /dating/EN/v2/bgwomen3.jpg HTTP/1.1
Host: casual.meetnearbyujxj.quest
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual.meetnearbyujxj.quest/dating/EN/v2/18.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 03:46:28 GMT
content-type: image/jpeg
content-length: 122873
last-modified: Mon, 11 Mar 2024 09:25:08 GMT
etag: "1dff9-6135f1e1afc65"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VrFZUOQxA9EnSU6N1wUCINUPYBaoNloqM2%2BxcwF0P5WTlfTE6m8YG9lwxKW8Zxg5cyfgKO%2FLWy6MGPVp6KRQHpU68MrTTJDnlskahZ5APdsTzRdOrftPNorszJLnDQf38GQMcc%2BUPIXWX5yHmmE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e58100cbad568b-OSL
alt-svc: h3=":443"; ma=86400
|
| www.googletagmanager.com/gtm.js?id=GTM-WFVW9LX | 142.250.74.168 | | 66 kB |
URL www.googletagmanager.com/gtm.js?id=GTM-WFVW9LX IP142.250.74.168:0
File typeJavaScript source, ASCII text, with very long lines (2358) Hash084aeb9450b3a37004aa19136003bbdf 6a06803a465b5935ee2ac5cb868c58c5196c0d0f ec81b21f6ff2f831b069e70fa5c6191bffd38d2876acbd27f43de4e3cc69141d
GET /gtm.js?id=GTM-WFVW9LX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual.meetnearbyujxj.quest/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 May 2024 03:46:28 GMT
expires: Sat, 04 May 2024 03:46:28 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 May 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 65876
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
| casual.meetnearbyujxj.quest/favicon.ico | 172.67.199.181 | | 1.1 kB |
URL casual.meetnearbyujxj.quest/favicon.ico IP172.67.199.181:0
File typeMS Windows icon resource - 1 icon, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel Hashb808be982ba48901217c3195400178f1 17683935bdf9e663c752f36e32c3cd47c7e1a9f9 515c324ac7b04d92a9a406e5021a241dfd91b5572f68de57de1e0590d832f877
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: casual.meetnearbyujxj.quest
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://casual.meetnearbyujxj.quest/dating/EN/v2/18.php
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 04 May 2024 03:46:29 GMT
content-type: image/x-icon
last-modified: Fri, 04 Jun 2021 00:57:29 GMT
etag: W/"290-5c3e62d14d928"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ql27ttaJc2JODGnsvoRWeXqDuhktQZwO2RCwxqkyOyRTFI%2B6jknQ2Gz7Ky5D9C21SECkSL7SmOluWgVrR1LQ6TNuw512ij7QOSKufvR4oU%2Fphzregi%2BPwI9VIlkf76lbV5cSYVtAO14mGnWfblE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e581032c87568b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=AoWKkm0B0Vhe-6Iu0Ah1US0wTqpO3wkBTJLkwijn3Uy9tXznj8yD9XvvYaCuocwvYVNZpmr1O8RM-etpmmf0QwKGC9i6rieYZ5oHZWIKxidrPLU10rNjSdEdnbQPFwHN
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sat, 04 May 2024 03:45:17 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 90
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|