Report - 8499879.xyz/

Report Overview

Submitted URL
8499879.xyz/
IP
20.187.125.78
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2022-12-07 10:17:10
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
62

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.36.76.226
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.5 kB	93.184.220.29
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
8499879.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	12 kB	2.4 MB	20.187.125.4
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	34.208.31.97
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	55 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed
2022-12-07	medium	8499879.xyz	Sinkholed

JavaScript (9)

	URL	Size	First Seen	Last Seen
	8499879.xyz/js/os2.js	229 kB	2023-03-07	2024-01-27
Pretty URL 8499879.xyz/js/os2.js IP 20.210.228.6 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:11:55 Last Seen2024-01-27 11:14:38 Times Seen100 Hash 14810f2da1b256e6cb313d83f96451c6 11155f79a868d3312482ef7c894e3e6e37a38bc2 d60065d246329215cf232a6d398568e17f225070833e7b54d62b7f9a0eab5fed Loading...

	8499879.xyz/	161 B	2023-03-08	2023-03-14
Pretty URL 8499879.xyz/ IP 20.187.125.4 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:46:58 Last Seen2023-03-14 15:10:07 Times Seen1 Hash a4d9740b3ae7f1860b83f9b91056f3eb 5fee3164226df27b4c19bfbade39a2d1c8f23627 5c8b4d80d84a4a6a13f9377ee876eddf5a919f90f11b0a184f47b3b5a2333709 Loading...

	8499879.xyz/	332 B	2023-03-08	2023-03-26
Pretty URL 8499879.xyz/ IP 20.187.125.4 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:46:58 Last Seen2023-03-26 00:36:43 Times Seen2 Hash f046f285242abc67bf7e86c68a4a3b56 cf20a11d618b1e7534fab6beb88e628866a16898 42bb69c58c8950cedcacdb021fb558e8ecb6ce1258415af0036ee4387b578c3f Loading...

	8499879.xyz/	831 B	2023-03-08	2023-03-26
Pretty URL 8499879.xyz/ IP 20.187.125.4 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:46:58 Last Seen2023-03-26 05:54:16 Times Seen3 Hash 3a95d800e0e17cda0a71e7f3f2758971 7d1b486a89e1c875e29226dc5872bf776258f8df effc1019d69959e0a34869883cc16ec952b6829e8c7257270886e1c99deeb33a Loading...

	8499879.xyz/js/rem.js	840 B	2023-03-07	2024-04-07
Pretty URL 8499879.xyz/js/rem.js IP 20.210.228.6 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23:57 Last Seen2024-04-07 10:14:40 Times Seen819 Hash e74e945fcc19cbd1d5276e5d4548d525 8236e3f3fc64916f9f7f65e8aa2680c9302f0858 33442081f56c808935dba715de506e29ebf99eea4d997a64818edb9081369fa5 Loading...

	8499879.xyz/js/swiper-4.2.0.min.js	120 kB	2023-03-07	2024-04-07
Pretty URL 8499879.xyz/js/swiper-4.2.0.min.js IP 20.210.228.6 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23:57 Last Seen2024-04-07 10:14:40 Times Seen1126 Hash be15b3ba6a71edd608b9af34dfc6130c b11842fbe74778511b86bf899fbd02102b57ac62 add18244c3d92cb789bd50456f05f02ca034c908bbf4210fedbd9013b3bf5d96 Loading...

	8499879.xyz/js/jquery-2.2.4.min.js	86 kB	2023-03-07	2024-04-18
Pretty URL 8499879.xyz/js/jquery-2.2.4.min.js IP 20.210.228.6 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-04-18 23:28:33 Times Seen379864 Hash 2f6b11a7e914718e0290410e85366fe9 69bb69e25ca7d5ef0935317584e6153f3fd9a88c 05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e Loading...

	8499879.xyz/	793 B	2023-03-08	2023-04-01
Pretty URL 8499879.xyz/ IP 20.187.125.4 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 15:01:34 Last Seen2023-04-01 11:01:22 Times Seen10 Hash b63945e583c2737dc6b01c550161ed80 0423a82db1ebf22c6cce148ef7d23a41807fc1fa 6b38dfc635e735a6d86e01e71ffb57444daff2d55ac2ba867d8aae51b875d65a Loading...

	8499879.xyz/js/MobEpp-1.1.1.js	25 kB	2023-03-07	2024-01-28
Pretty URL 8499879.xyz/js/MobEpp-1.1.1.js IP 20.210.228.6 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:23:57 Last Seen2024-01-28 01:14:47 Times Seen344 Hash f01dc4f7b5545c644a23e994b90f79a8 677fbec5177090d91c8bf52fb867563a0a90bb07 ac95fc0c65ee824399cd0ff56706a45d5b240baeda65a1c151db91bfdc79d695 Loading...

HTTP Transactions (52)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8510
Expires: Wed, 07 Dec 2022 12:38:48 GMT
Date: Wed, 07 Dec 2022 10:16:58 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5697
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 10:16:58 GMT
Last-Modified: Wed, 07 Dec 2022 08:42:01 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 09:18:46 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3492
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4165
Expires: Wed, 07 Dec 2022 11:26:23 GMT
Date: Wed, 07 Dec 2022 10:16:58 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: DzcG4HpIgPPR9Xz2+quVwPHmspZ0R1Jupyk+A84eETj8BkGM2KSxKJPGDcWriXyxEzfn7O6smhE=
x-amz-request-id: HXDFFJZNW18BCZ0N
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 09:49:19 GMT
age: 1659
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

8499879.xyz/

20.187.125.4

301 Moved Permanently

166 B

URL HTTP/1.1
8499879.xyz/
IP
20.187.125.4:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
166 B (166 bytes)
Hash
3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Dec 2022 10:16:58 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://8499879.xyz/
Server: WAF/2.4-12.1
X-Cache-Status: MISS

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 10:16:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 10:11:20 GMT
cache-control: public,max-age=3600
age: 339
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5681
Cache-Control: max-age=87872
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 10:16:59 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:41:31 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
59fa10e84c896af59950aa35f4137f16
54c6dc8e2f1a0d1b04725f1bff13f1acba87b279
4f837470fb7384dba378c1b660a024320fbf65ef2a65b00e7f976bc47262d93e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F837470FB7384DBA378C1B660A024320FBF65EF2A65B00E7F976BC47262D93E"
Last-Modified: Wed, 07 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 07 Dec 2022 16:16:59 GMT
Date: Wed, 07 Dec 2022 10:16:59 GMT
Connection: keep-alive

push.services.mozilla.com/

34.208.31.97

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
34.208.31.97:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uSl8K0dxxoNS2A5S0Xzzxg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CzLqawzuEd42nZCgCvDnuEo+/5o=

8499879.xyz/

20.210.228.6

200 OK

1.8 kB

URL HTTP/1.1
8499879.xyz/
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Size
1.8 kB (1847 bytes)
Hash
ec371fec3d7a78ad7ea8fa7afac556b5
b5183148e4bebe66662a470c97b32fe2ca350962
2995b170a43252090532904ee87efe8c3bb36debf9de7966181ab352a0d2f102

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:16:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 07:24:40 GMT
Vary: Accept-Encoding
ETag: W/"638c4b38-1dde"
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/css/style.min.css

20.210.228.6

200 OK

2.2 kB

URL HTTP/1.1
8499879.xyz/css/style.min.css
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (7901), with no line terminators
Size
2.2 kB (2243 bytes)
Hash
69ef8cb910d8bc2fbd65c2e95d2b1fb5
e02b4071bf78113f3617c05120adb18fd8af2d16
58f873c2fcab421edda6525a4c55a327e9fd3bdc8e4695a1003a0528cf6e82cd

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/style.min.css HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-1edd"
Expires: Wed, 14 Dec 2022 10:17:00 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/js/MobEpp-1.1.1.js

20.210.228.6

200 OK

7.3 kB

URL HTTP/1.1
8499879.xyz/js/MobEpp-1.1.1.js
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
7.3 kB (7276 bytes)
Hash
21989554a2695919701e12741d73a810
f1b8997c887441a024cf19d14053ef8176daf878
7e53b7bb6f329adfe746f8d5ede6d267755a88d8bf4f99887f57b5b0a1b2ebb3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/MobEpp-1.1.1.js HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-627b"
Expires: Wed, 14 Dec 2022 10:17:00 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/css/Swiper.css

20.210.228.6

200 OK

4.1 kB

URL HTTP/1.1
8499879.xyz/css/Swiper.css
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (13412), with CRLF line terminators
Size
4.1 kB (4133 bytes)
Hash
580699668499d46586246c69b0b50349
c2dc18d5f0fc9638bfb99bb719c731e0b6602643
5e49038741c8789f0fa5d25cb7b013f1325c11ebc2abb075dbc65cb0fc3b85a4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/Swiper.css HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-3570"
Expires: Wed, 14 Dec 2022 10:17:00 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/css/animate.min.css

20.210.228.6

200 OK

5.1 kB

URL HTTP/1.1
8499879.xyz/css/animate.min.css
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (460)
Size
5.1 kB (5076 bytes)
Hash
8dbb2b2b4b6405fe4ffdd3f5833ab777
d1919f26bcdf85478995089759d4c84cde009e4f
9a682a97278ee7721291c6fd67666ae436235a7e5a0694c85b67f5fd90b84cbd

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/animate.min.css HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-12a90"
Expires: Wed, 14 Dec 2022 10:17:00 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/js/rem.js

20.210.228.6

200 OK

426 B

URL HTTP/1.1
8499879.xyz/js/rem.js
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Size
426 B (426 bytes)
Hash
5dcbb805cedf5a062a5974048e398c7d
98ae9772d635e98297bf72fcfd8d89567fad7b40
548c6fddd61a08eebd4e311d30a8764c28da38661481694d83fd80731a2b02bb

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/rem.js HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-34b"
Expires: Wed, 14 Dec 2022 10:17:00 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12332
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 10:17:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12332
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 10:17:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12332
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 10:17:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12332
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 10:17:01 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12332
Expires: Wed, 07 Dec 2022 13:42:33 GMT
Date: Wed, 07 Dec 2022 10:17:01 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (8997 bytes)
Hash
9fda84db003d0cfc70d73dcb6a3763dd
5c54b4ca3db1c975b3ad7f780f0ebdc867fc2ef4
f00aa6b88dd85164d8f6ee685937a3ca8039b98b442a2e6aede1c4c421b4fc4c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01b6b798-4c76-47d4-ae22-c8967b0f2c5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8997
x-amzn-requestid: 54d7ed8c-119c-4583-929c-fd053524814c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csT_8F78IAMFY6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66cc-3d9816725e7e0b1b3404bc4a;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:46:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FjScmvs74slr4Mr8vhQLRNh-88KqMx4L1FwNKdBwbUUPDuu1ivOuoQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:47:19 GMT
age: 44982
etag: "5c54b4ca3db1c975b3ad7f780f0ebdc867fc2ef4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e5de346-6863-4521-9b1c-e74cf4df1d53.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.4 kB (6422 bytes)
Hash
2409529ecac5140de749d864da85af0d
99f431b4ca446996dbacb969440e2ecfb11fd9e0
81b379b16874d6644b0cf63e02c5174e44a40ab7cb4f4727bb96ad44bfcaa72f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e5de346-6863-4521-9b1c-e74cf4df1d53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6422
x-amzn-requestid: 6d0cc220-31bc-4815-ade5-7e3e5403f39f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cniYTGgRoAMF5lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c7dce-64fbea8330a62e4f741c0c4e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 11:00:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Ww1ouNhiKEmc1TDn6Gwr7crmeiy6pztTeSbEd4Iw6PB_nS4hsDFgbw==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 07:52:33 GMT
age: 8668
etag: "99f431b4ca446996dbacb969440e2ecfb11fd9e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11224 bytes)
Hash
b15136d60fd0a5e0f657a4f5c75d540f
36082b7329d473829178f280cb71a83b1531e486
79478269b1f5dcfd1e45ccd4264fa44805b37c5c8fec820bcbd2fa1689dfbbd8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F962c65f4-b402-46b4-83ba-50f3159341f2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11224
x-amzn-requestid: 938de0b8-1055-4416-9ad7-162ab5f4db9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUINEwdoAMFuOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6701-38b079ef341bb17e567de773;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ViuPsZBEVJ-aGOcsfrl3nXu244mzMUMQVhpPeNlO7W3sBrrfuUfXpA==
via: 1.1 f0ac467993db44dbfc36b778dfcaf73c.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:32:04 GMT
age: 42297
etag: "36082b7329d473829178f280cb71a83b1531e486"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6557 bytes)
Hash
210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: va_vly0iX6rzm_aTWrryPRjoTWlI-_0m6rpS6VrTx-nsd71dk1cSZw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 06:11:41 GMT
age: 14720
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.9 kB (6920 bytes)
Hash
f4193f05dfd1de8bf795f433d4387243
b76ea6ae9df756f131ec16b01cdc7ab19b2d01be
b56231f3c788519751528b849a442d5c7ed828ea4ce3321fd629ca27440ea6e3

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc696fe00-4af0-41c0-a10e-ba5dcc55c22b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6920
x-amzn-requestid: e8fd4184-16b2-4174-9b14-074386b04dcb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cuXZpEXMoAMF1MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638f390a-58acf5140350736c18f94ff5;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 12:43:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DsznPl3Xshc76_XzIE3AJTK5ZZXVowWj5PaL3UoDKae5MnBNVjPsuw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:06:00 GMT
age: 43861
etag: "b76ea6ae9df756f131ec16b01cdc7ab19b2d01be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8701 bytes)
Hash
604a4132da78a0c013b5818644adb121
ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566
eecab519c33596c67f2d2021dfd1af24e7fd8f2ed403f99b4ba0c265c08a259f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F51c41646-4c8f-4a18-bf60-2b67be5db8d0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8701
x-amzn-requestid: 653284c3-ee7f-45f1-9513-3a6c81e1d6e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cm3-2HRWIAMFjfg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c39f8-6f8969a26787a9463ba6c2ec;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 06:11:04 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpyIdH9YEXjxbGhZpBIfzoZHQxMvAKl0eCFQsgMt0e1SSeWsiuey7g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 22:15:06 GMT
age: 43315
etag: "ddf982c6ff7a0d8e5376c119b6642fe7e0ba8566"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

8499879.xyz/js/swiper-4.2.0.min.js

20.210.228.6

200 OK

30 kB

URL HTTP/1.1
8499879.xyz/js/swiper-4.2.0.min.js
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (65273)
Size
30 kB (30540 bytes)
Hash
765539939c06d8d73278658055821794
bc17e2c645db8a7b5a7517627ac41bc9b1569415
68ab9856e6b686c4e8f6e74246040a42b8b42913537e01ab59ebc114e8272bc0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/swiper-4.2.0.min.js HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-1d2d2"
Expires: Wed, 14 Dec 2022 05:40:20 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: HIT

8499879.xyz/js/jquery-2.2.4.min.js

20.210.228.6

200 OK

30 kB

URL HTTP/1.1
8499879.xyz/js/jquery-2.2.4.min.js
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with very long lines (32065)
Size
30 kB (29855 bytes)
Hash
28045013c2c55accfb20fc66ec778904
310a36b0d6a5e3315f9751b7031c2b050b20c29c
27cf827c7a9d308f4bec15de5592fbf6efbad648b7eb0b20ecd052206132cc76

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/jquery-2.2.4.min.js HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-14e4a"
Expires: Wed, 14 Dec 2022 10:17:00 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/js/os2.js

20.210.228.6

200 OK

56 kB

URL HTTP/1.1
8499879.xyz/js/os2.js
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
ASCII text, with CRLF line terminators
Size
56 kB (56221 bytes)
Hash
3ab325277d46d740950c7223e0fd181d
9933fb055823859faa9c864966d6ec772ee0847c
593da6b02d95d250bd58466db88efe6199176dab54fda00103d0ace374b43fdf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/os2.js HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:01 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
Vary: Accept-Encoding
ETag: W/"63884be5-37dc2"
Expires: Wed, 14 Dec 2022 10:17:01 GMT
Cache-Control: max-age=604800
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/?shareName=8499879.xyz

20.210.228.6

200 OK

1.8 kB

URL HTTP/1.1
8499879.xyz/?shareName=8499879.xyz
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text
Size
1.8 kB (1847 bytes)
Hash
ec371fec3d7a78ad7ea8fa7afac556b5
b5183148e4bebe66662a470c97b32fe2ca350962
2995b170a43252090532904ee87efe8c3bb36debf9de7966181ab352a0d2f102

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /?shareName=8499879.xyz HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 07:24:40 GMT
Vary: Accept-Encoding
ETag: W/"638c4b38-1dde"
Content-Encoding: gzip
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/img/5c250a_672x82.png

20.210.228.6

200 OK

15 kB

URL HTTP/1.1
8499879.xyz/img/5c250a_672x82.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 672 x 82, 8-bit colormap, non-interlaced\012- data
Size
15 kB (15372 bytes)
Hash
df3db0e064c9d6c8c5acb94fbac8a208
6e63fb70a4f927e68d2fc11967766e40a1c021fc
db9355be10048325a12133bf8dc9bada3e0b0b58f7c0d646db9a4c544d0367e9

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/5c250a_672x82.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:02 GMT
Content-Type: image/png
Content-Length: 15372
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-3c0c"
Expires: Fri, 06 Jan 2023 10:17:02 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/ce9b31_254x25.png

20.210.228.6

200 OK

2.0 kB

URL HTTP/1.1
8499879.xyz/img/ce9b31_254x25.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 254 x 25, 8-bit colormap, non-interlaced\012- data
Size
2.0 kB (2031 bytes)
Hash
51358951e7c553bab43ac9dc3d72b189
2a63bc531f219c2239d982039c2faf37cfaede1e
0d7df822969b0073396c57eb8fdd86206053cf05eb9946e3970b8b3bd235f731

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/ce9b31_254x25.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 2031
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-7ef"
Expires: Fri, 06 Jan 2023 10:17:01 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Accept-Ranges: bytes

8499879.xyz/img/a4b88a_118x18.png

20.210.228.6

200 OK

786 B

URL HTTP/1.1
8499879.xyz/img/a4b88a_118x18.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 118 x 18, 4-bit colormap, non-interlaced\012- data
Size
786 B (786 bytes)
Hash
9e02dea0c19ee5e350c2d50db15436ed
3b25871f7851f758ddc6d7f16b74e75186d15133
57ed122088a7d60bf8ffa76afa40947bd449d8247a3407e90e0ddd0d0776494a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/a4b88a_118x18.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 786
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-312"
Expires: Fri, 06 Jan 2023 10:17:03 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/96c1b4_750x78.png

20.210.228.6

200 OK

15 kB

URL HTTP/1.1
8499879.xyz/img/96c1b4_750x78.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 750 x 78, 8-bit colormap, non-interlaced\012- data
Size
15 kB (14552 bytes)
Hash
f5b34bed40417cb58e59f67875c22ff4
147f08994e421558597a0ad0551cb56db1c99cb0
23d19e306677154296e801b6acfbc94305e91674d658e976f72e24abd14b1e3f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/96c1b4_750x78.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 14552
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-38d8"
Expires: Fri, 06 Jan 2023 10:17:01 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Accept-Ranges: bytes

8499879.xyz/img/99017a_478x66.png

20.210.228.6

200 OK

5.6 kB

URL HTTP/1.1
8499879.xyz/img/99017a_478x66.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 478 x 90, 8-bit colormap, non-interlaced\012- data
Size
5.6 kB (5621 bytes)
Hash
2307f1f7ba34ac7a43d9845c0f7bec7e
ba5c51588651c1d1e05707080e8f5291d39190b6
f038a06c2dc11155d797db2d52bd5d697d68d46bf0d3887d6534b2b3c5ab5062

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/99017a_478x66.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 5621
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-15f5"
Expires: Fri, 06 Jan 2023 10:17:03 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/5b761b_740x164.png

20.210.228.6

200 OK

200 kB

URL HTTP/1.1
8499879.xyz/img/5b761b_740x164.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 740 x 824, 8-bit colormap, non-interlaced\012- data
Size
200 kB (200307 bytes)
Hash
4455fc510026bf0b14ae4c4b36f92925
d36e7199e9f115a345b73c6bc24b1bd300285083
638073db062faaac208fcbe8019b1ab338b198645b6acd816cddc10a6da28bba

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/5b761b_740x164.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 200307
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-30e73"
Expires: Fri, 06 Jan 2023 10:17:01 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Accept-Ranges: bytes

8499879.xyz/img/55a5e7_686x176.png

20.210.228.6

200 OK

164 kB

URL HTTP/1.1
8499879.xyz/img/55a5e7_686x176.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 686 x 176, 8-bit/color RGBA, non-interlaced\012- data
Size
164 kB (163677 bytes)
Hash
5c3e940385704b35cc224f923a288d28
1ea7137dccae80631765a1af908de411fd88ba21
a5602c3a49cf88cb9cbe6b5fd4a4d7508c494b16647f86a719dc9ca934d4b244

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/55a5e7_686x176.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 163677
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-27f5d"
Expires: Fri, 06 Jan 2023 10:17:03 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/b2e434_698x328.png

20.210.228.6

200 OK

126 kB

URL HTTP/1.1
8499879.xyz/img/b2e434_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
126 kB (126152 bytes)
Hash
55e928630146ddde0ee37adf2c9d4ee8
02a816e8e1ce7ff7ec9e85521210f6d04ec77d08
adf17ed59f056ab3a7a6298f23bd8180dbeedfcac1ded9746353521c7445b162

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/b2e434_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 126152
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-1ecc8"
Expires: Fri, 06 Jan 2023 10:17:01 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Accept-Ranges: bytes

8499879.xyz/img/eeac0d_750x590.png

20.210.228.6

200 OK

307 kB

URL HTTP/1.1
8499879.xyz/img/eeac0d_750x590.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 750 x 311, 8-bit/color RGBA, non-interlaced\012- data
Size
307 kB (307416 bytes)
Hash
56aa5d4ca263b8eafb301fa9e3fe4af6
4e2297f8f46f5cf2fe3d42b3df6b74d53798ba92
719b3e884934967e31e34aa9528b5f51d500644451efdc4002896082084577bc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/eeac0d_750x590.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 307416
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-4b0d8"
Expires: Fri, 06 Jan 2023 10:17:03 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/ae9595_698x328.png

20.210.228.6

200 OK

121 kB

URL HTTP/1.1
8499879.xyz/img/ae9595_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
121 kB (120627 bytes)
Hash
8c2cffada49e862b72fdd32830d5a52c
d62f480e80c3e873c858c20ef3a0b39c2ebcbdb6
663257009d282fc4469afff3e61fe02c8ed3d73d31630832dd8fbe830c5b0fa0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/ae9595_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 120627
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-1d733"
Expires: Fri, 06 Jan 2023 10:17:01 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Accept-Ranges: bytes

8499879.xyz/img/3a6b2a_698x328.png

20.210.228.6

200 OK

87 kB

URL HTTP/1.1
8499879.xyz/img/3a6b2a_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
87 kB (87337 bytes)
Hash
c183cedc10b732fde705e9e2e5bf7916
6798bbcb8b74a910340330530ee10fa0294e7c22
fcf88c4206e1250a97980dc27be151a88f3ecbc14b33d629e41a089bb800f58a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/3a6b2a_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 87337
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-15529"
Expires: Fri, 06 Jan 2023 10:17:01 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Accept-Ranges: bytes

8499879.xyz/img/9e71d4_698x328.png

20.210.228.6

200 OK

121 kB

URL HTTP/1.1
8499879.xyz/img/9e71d4_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
121 kB (121387 bytes)
Hash
d64b0b3253abfca20c7e36f0320acc87
a21738744b68511878d5efd2adc0450571e2fb37
e463da688c53eb2a63ae88043c714f118c3f25670a851c92462817a0824fe84c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/9e71d4_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:03 GMT
Content-Type: image/png
Content-Length: 121387
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-1da2b"
Expires: Fri, 06 Jan 2023 10:17:03 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/d93c85_698x328.png

20.210.228.6

200 OK

118 kB

URL HTTP/1.1
8499879.xyz/img/d93c85_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
118 kB (117904 bytes)
Hash
3f9d48de78fac84d15a7ee6f5b50b293
6187319035d177c68683c5e62a3a06af3492325b
e27fac0af2b5a8bc1463c5a48e79b64db591af59d493a4e58e265e0f2c2e951c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/d93c85_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 117904
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-1cc90"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/324a99_698x328.png

20.210.228.6

200 OK

104 kB

URL HTTP/1.1
8499879.xyz/img/324a99_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
104 kB (103892 bytes)
Hash
ff46d67e3c826439788600c21d45d660
07957a77a4886cd5e7a69873e0b546a845a28243
08359c3f4000c59933f95b079fb5f2a0f6f86f737d3f83c92491d16891e4d159

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/324a99_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 103892
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-195d4"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/efa052_698x328.png

20.210.228.6

200 OK

108 kB

URL HTTP/1.1
8499879.xyz/img/efa052_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
108 kB (107603 bytes)
Hash
9b6c3647ac531d837c801ae8ea5347e0
fd31e046ab2e16de9c2eb2e37ebd8f7c5dcf3c3b
2ed590f6b6c0c7350e5933370f643476f20b373fc04713b9c09218196d5064b7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/efa052_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 107603
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-1a453"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/5921c9_698x328.png

20.210.228.6

200 OK

138 kB

URL HTTP/1.1
8499879.xyz/img/5921c9_698x328.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 698 x 328, 8-bit colormap, non-interlaced\012- data
Size
138 kB (137646 bytes)
Hash
aa96a2721a4f37f5f96704308d1ad9aa
7fd58557cfb31f977559a7e168cc442388371ece
4170750f370113a8708f982340de480cfd2eab8c34207e8e7afb0293cadfc41f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/5921c9_698x328.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 137646
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-219ae"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/cebe53_122x186.png

20.210.228.6

200 OK

8.7 kB

URL HTTP/1.1
8499879.xyz/img/cebe53_122x186.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 122 x 186, 8-bit colormap, non-interlaced\012- data
Size
8.7 kB (8700 bytes)
Hash
43c137b86234b12f8ddfc76f0667b702
1aa8e9deb64d76b3949a60e5fde7abb297481573
b530b361eb3d53a51d566aab13e839cc940ca5616352d58358cc3dc723273f02

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/cebe53_122x186.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 8700
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-21fc"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/img/80a7ca_750x145.png

20.210.228.6

200 OK

55 kB

URL HTTP/1.1
8499879.xyz/img/80a7ca_750x145.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 750 x 145, 8-bit/color RGB, non-interlaced\012- data
Size
55 kB (54947 bytes)
Hash
f7ca525824f0592704bd6ee98fcbb78c
1d46f3ed6eb4fdab4340bf49f944d642822d0fc7
d0de1d80a6037334087f8ba679809fa5603c42da87132cdbe0940217b7459edf

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/80a7ca_750x145.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 54947
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-d6a3"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

8499879.xyz/favicon.ico

20.210.228.6

404 Not Found

146 B

URL HTTP/1.1
8499879.xyz/favicon.ico
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 404 Not Found
Date: Wed, 07 Dec 2022 10:17:05 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive
Server: WAF/2.4-12.1
X-Cache-Status: MISS

8499879.xyz/img/7bbd3b_684x660.png

20.210.228.6

200 OK

568 kB

URL HTTP/1.1
8499879.xyz/img/7bbd3b_684x660.png
IP
20.210.228.6:0
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

File type
PNG image data, 684 x 749, 8-bit/color RGBA, non-interlaced\012- data
Size
568 kB (567730 bytes)
Hash
00b57520abf7d1bcb650ab6be182e35a
c43d95b797f14c07c93d138786dd6192bfba29a5
6f9e776968ad87abb66e1544ac7dc3f0fd79754fa6ec1e2a7ac607d52428d0b3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /img/7bbd3b_684x660.png HTTP/1.1
Host: 8499879.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://8499879.xyz/?shareName=8499879.xyz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 10:17:04 GMT
Content-Type: image/png
Content-Length: 567730
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 06:38:29 GMT
ETag: "63884be5-8a9b2"
Expires: Fri, 06 Jan 2023 10:17:04 GMT
Cache-Control: max-age=2592000
Server: WAF/2.4-12.1
X-Cache-Status: MISS
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations