| trck.dtclck.com/click?pid=346&offer_id=924&sub2=792584245301227520&sub1=3896736 | 104.21.46.115 | 302 Found | 0 B |
URL User Request GET HTTP/2trck.dtclck.com/click?pid=346&offer_id=924&sub2=792584245301227520&sub1=3896736 IP 104.21.46.115:443
CertificateIssuerLet's Encrypt Subjectdtclck.com FingerprintD0:A3:9C:8B:94:80:60:28:67:52:CF:AA:3A:51:29:18:42:FD:8C:39 ValidityThu, 29 Feb 2024 12:58:56 GMT - Wed, 29 May 2024 12:58:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=346&offer_id=924&sub2=792584245301227520&sub1=3896736 HTTP/1.1
Host: trck.dtclck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 16 Mar 2024 18:58:06 GMT
content-length: 0
location: https://track.abrevtrk.com/click?pid=2&offer_id=361&sub1=346&sub2=
x-adjust-use-original-forwarded-for: 1
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=22uEmtG5qFqor0GSWo1ZwTDJszh6fBY%2BECaumvmcsy5MTDWRtIPhT6yiC%2FS11vakJNVC3KsDpsfEH54TdMD7pszJOKf%2FUmjjUpmJBcAF8HDq%2BDY1v2qk%2FmRpAPOIKy8tvfY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8656f9066fb90b4d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| track.abrevtrk.com/click?pid=2&offer_id=361&sub1=346&sub2= | 188.114.96.1 | 302 Found | 0 B |
URL User Request GET HTTP/2track.abrevtrk.com/click?pid=2&offer_id=361&sub1=346&sub2= IP 188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectabrevtrk.com FingerprintA2:5A:52:D8:2B:96:BB:AF:BE:46:BF:12:B0:66:DC:CC:46:11:9A:73 ValidityThu, 14 Mar 2024 07:53:13 GMT - Wed, 12 Jun 2024 07:53:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=2&offer_id=361&sub1=346&sub2= HTTP/1.1
Host: track.abrevtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 16 Mar 2024 18:58:06 GMT
content-length: 0
location: https://anamera-cletting.com/666dadbd-75d0-4c9d-b252-9664eddc10d5?campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=65f5ebbe00c5250001125d58; expires=Sun, 16 Mar 2025 18:58:06 GMT; secure; SameSite=None
afoffers={"361":1710615486}; expires=Sun, 16 Mar 2025 18:58:06 GMT; secure; SameSite=None
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hmsFBbjiVyIWyBgaLloRHFhCn3otLlepeUd3tKZniqjWOrukMmuUJWILBPIM9LxC%2Bkl6hS1beELQ1vHDFrFL31nmp5jQZF3KfVSJJ%2FYhQqRSHrmENDQhyp9sOslMXZXtk8oN6tw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8656f9087d321c12-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| anamera-cletting.com/666dadbd-75d0-4c9d-b252-9664eddc10d5?campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 | 35.157.125.133 | 302 Found | 0 B |
URL User Request GET HTTP/2anamera-cletting.com/666dadbd-75d0-4c9d-b252-9664eddc10d5?campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 IP 35.157.125.133:443
CertificateIssuerLet's Encrypt Subjectanamera-cletting.com Fingerprint6B:3A:CB:74:C6:DA:C9:EF:BD:BE:FE:DC:BE:72:0D:16:3F:1C:FD:A9 ValidityFri, 08 Mar 2024 06:52:54 GMT - Thu, 06 Jun 2024 06:52:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /666dadbd-75d0-4c9d-b252-9664eddc10d5?campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 HTTP/1.1
Host: anamera-cletting.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 16 Mar 2024 18:58:06 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
pragma: no-cache
set-cookie: 666dadbd-75d0-4c9d-b252-9664eddc10d5-v4=bcZUKzL05ePZapK4Wk4DgOBEiNfE-hJyqk40MfUg2WU; Max-Age=86400; Expires=Sun, 17-Mar-2024 18:58:06 GMT; Domain=anamera-cletting.com; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=I5ccaW_tAdtqYeCFoxZcZ8AWQ6wHZxGY-sACAug_waTu4KjevaUrsZG88g9sPVlMIO5z9pPGma_4IhVqZfhzfLU0UXbYfW4V3GMokrZ9NzkvhIhzPM_eHoEotTweN27IYHwXJDHdHCgf1fkSHKlJM4Ei75dVWifkexeVZJTS61AOaMXEeDang21xDlNeitwqYq-JAsF65bgM_XXsPHHSkVGSHIfA1O-77lLJrJVM5BU8xMDX5BTxViOjP1_CZjvd9zZJq1eAtjwjJqYD63axtQorFz7Dm3GIyyccT_w4MVVJhrvUiB9N4fmUOgUM7LzTahAxKXmmqMEDYol4jEv6F1hNV-fMLQYLp5Eupcwt1oODazt-esidHkJaYwvyneZ3uqna2oRMMOr1-Yb2gkF0V7NFjFR_9oPRjzahpjC8YV335KCrjjW3XVuSwmRQWHjI; Max-Age=86400; Expires=Sun, 17-Mar-2024 18:58:06 GMT; Domain=anamera-cletting.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
|
|
| static.production.push-sender.com/mng/channels/init.min.js?ver=1706801784 | 143.204.55.82 | 200 OK | 5.1 kB |
URL GET HTTP/2static.production.push-sender.com/mng/channels/init.min.js?ver=1706801784 IP 143.204.55.82:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerAmazon Subjectproduction.push-sender.com Fingerprint7D:DE:F0:A4:F1:90:8E:A4:04:C1:E0:62:0D:05:EB:54:29:89:C9:C8 ValidityMon, 17 Apr 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash103567d9acb277a9e7198d6f2d9b0070 8ec89acceaa05a62e75b68fda777471527047972 4f4f4be443f597ce30b14ecd7705e3150041cc818c9a35c673c0bfe84acb8378
GET /mng/channels/init.min.js?ver=1706801784 HTTP/1.1
Host: static.production.push-sender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 08 Feb 2024 14:25:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sat, 16 Mar 2024 03:49:08 GMT
etag: W/"8853549c3d94b135cff7696e087dc08f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g_XaatLKQo6HoUvU2tFOmWfZpnAvRnJ0ZMpxFiVn_x98BYCYtGFy2Q==
age: 54542
X-Firefox-Spdy: h2
|
|
| static.production.push-sender.com/mng/subs_window.js?ver=1706801784 | 143.204.55.82 | 200 OK | 5.5 kB |
URL GET HTTP/2static.production.push-sender.com/mng/subs_window.js?ver=1706801784 IP 143.204.55.82:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerAmazon Subjectproduction.push-sender.com Fingerprint7D:DE:F0:A4:F1:90:8E:A4:04:C1:E0:62:0D:05:EB:54:29:89:C9:C8 ValidityMon, 17 Apr 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash61294d83b7e27dc37a3d7e117f16988f 9c74a12d0a7d55a15ed12a4c3897af2d1c536b18 d18fe18f85074b2bbaccb8d1f424c977b5fde2e771efa96d7a93986b969daae1
GET /mng/subs_window.js?ver=1706801784 HTTP/1.1
Host: static.production.push-sender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 08 Feb 2024 14:25:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sat, 16 Mar 2024 01:56:43 GMT
etag: W/"2b3010e6d2440c83b9cfff48def5f0c1"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: iKZVnjvFnmUh3GFroWh84VugviENs2DMdi5nAn0nGtig38etWr2HSw==
age: 63157
X-Firefox-Spdy: h2
|
|
| zeniocloud.com/JAIA.js?sub1=enjoyablefun.com | 188.114.96.1 | 200 OK | 9.1 kB |
URL GET HTTP/2zeniocloud.com/JAIA.js?sub1=enjoyablefun.com IP 188.114.96.1:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectzeniocloud.com FingerprintFD:31:E5:23:F0:E6:E0:B5:7F:67:26:F7:34:69:A7:B3:CA:39:1C:37 ValidityMon, 11 Mar 2024 16:41:24 GMT - Sun, 09 Jun 2024 16:41:23 GMT
Hashf4f3488e75e640653e3c26d5ee69c6a5 86a4b3208d25a585979799d6de9ebfc2e1512621 36665bb601401b9cb15444cf7c90809db9af5f747ff4ccd404cc4d6f2d175765
GET /JAIA.js?sub1=enjoyablefun.com HTTP/1.1
Host: zeniocloud.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Mar 2024 18:58:07 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Sat, 16 Mar 2024 15:29:19 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UX9kQfAYGPvJiXbhJpwn7bxsNDrlLD8MTYb3p93AQDBhI%2BwT5qaUFpKOV9yyUEmxT3zlnlRXTTtBQ%2F7qz5nitQ0FL092pHxTu%2FX3rOILVxQrznEbXsoTrNYKRowSXP9mkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90c6ae45696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/images/m2.jpg | 104.21.38.182 | 200 OK | 6.4 kB |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/images/m2.jpg IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 159x316, components 3 Hash71130ea2db1113fec1a8ae384b889b4c 3324840da2eded9f99edf58722bc41771aac15c6 baab8046aed5a23f5079d0501464152b054b5dbb223e5764dd814898f433388c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/images/m2.jpg HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:08 GMT
content-type: image/jpeg
content-length: 6399
last-modified: Wed, 30 Jun 2021 12:19:42 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EDLGdQeC5P2Cxj8YLok9qoMrNEuZG9oR2FpdYM92QLgXp9a5vTOjKDQnh95WnIca78ipZ9OsGDwiMZCe5ZSSO8EzAI3%2FRuTFW4kHeu%2FOp4LvmlhnpuvevVBaWWLsQIixyzyd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90fac42569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/images/m3.jpg | 104.21.38.182 | 200 OK | 6.9 kB |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/images/m3.jpg IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 183x275, components 3 Hash44b329eb4129b50b5f2826e9bb6bc412 c03d73af82114b96ef53dc258299d4ac6f34df3d 8f5c74102bb44c32ef0187191037d7272650945bd42c3268ae5d0ee66dbd81db
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/images/m3.jpg HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:08 GMT
content-type: image/jpeg
content-length: 6868
last-modified: Wed, 30 Jun 2021 12:19:42 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CFlC4Ph74H052J%2BfFk9l%2F4WLduym9gzoJsHVWCx4zC9qg0aXKNY8TQMCqcYTHNK4%2BdjqSwtGdg%2BOgwJrmtMsMwC9L%2B%2F0htXl2unH1dCAHZI4fqJYAE0U8bp%2BAz3EHyTozo%2BA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90fac49569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/images/1.jpg | 104.21.38.182 | 200 OK | 129 kB |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/images/1.jpg IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x900, components 3 Size129 kB (129173 bytes) Hash9453c8ac8807605febd75ddfb3cacc26 9b35a629015487b26366084ef8d781a088f5ce76 5b7d44bbd14295b9cc79e85d6259e30b8e98c2b8c421187ec5fca2bd054361ec
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/images/1.jpg HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:08 GMT
content-type: image/jpeg
content-length: 129173
last-modified: Wed, 30 Jun 2021 12:19:42 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFmdYNk%2BwAU5I%2BJUzDoGKt4tNwPIMfh35tfGropT7H1P01E4uo9s7qiU5A1%2B0yQQc3c%2B%2B2yOqS%2BabCFwQZCXrT566EYWz5vJ99vEhPLxEHVQ3ri%2ByFAH1WzMQ17DEqmQcM0y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90fac4f569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/images/fav.png | 104.21.38.182 | 200 OK | 40 kB |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/images/fav.png IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typePNG image data, 180 x 158, 8-bit/color RGBA, non-interlaced Hashd247464194e7c924f627837b571d7ef0 20f5d082cb19e5a55d5d62fb26ca160828af95df c461948d7b5c6dc1988ecee4f4a618595ebc26fa9923f29f680d2772db09a775
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/images/fav.png HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:08 GMT
content-type: image/png
content-length: 40381
last-modified: Tue, 15 Aug 2023 12:15:13 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nB%2BYcxHIYu5TxMLEdYhtvGAUSX2z%2FjJyCtttE9WB47ArjPEKQnmR1e4T0v%2F%2BZUc20CEGZglQzWG3zK5c5JGIRlQfRvc%2Fi19s7VeBsWnTqrZfe0cgFHH8ssMFBNIVRffBqwnL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f9116ea2569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| alexatracker.com/jscode/JAIA.js?sub1=enjoyablefun.com&sub2=&sub3=&sub4=&sub5=&prid= | 104.21.85.99 | 200 OK | 0 B |
URL GET HTTP/2alexatracker.com/jscode/JAIA.js?sub1=enjoyablefun.com&sub2=&sub3=&sub4=&sub5=&prid= IP 104.21.85.99:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectalexatracker.com Fingerprint53:A9:D4:7B:33:3F:2E:86:5D:21:0E:A2:F1:2E:5B:E7:1D:4A:E5:33 ValidityMon, 22 Jan 2024 11:33:38 GMT - Sun, 21 Apr 2024 11:33:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jscode/JAIA.js?sub1=enjoyablefun.com&sub2=&sub3=&sub4=&sub5=&prid= HTTP/1.1
Host: alexatracker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Mar 2024 18:58:08 GMT
content-type: application/json; charset=UTF-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
cf-cache-status: BYPASS
set-cookie: trbarid=fd4748d198a9ab3909ba7305245cbaa090aa519af4453b06c0ccaac00e7757e3a%3A2%3A%7Bi%3A0%3Bs%3A7%3A%22trbarid%22%3Bi%3A1%3Bi%3A646752528082791360%3B%7D; expires=Sat, 21-Mar-2026 18:58:08 GMT; Max-Age=63504000; path=/; secure; HttpOnly; SameSite=None
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=07Ki9qUxNPU6l6sw%2B7bC3dJrGCvCP5TGoUAtlYZF4V6O90uRxojczwnZ1Sx6kkQOUxu3ab03ISh%2F3WcVapr7B6ky0KpbTYEg4ncYl5CD8DSHPlKy8i3nG4henO8xwyoUhKiQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90fefbd5699-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.google.com/specimen/PT+Sans | 142.250.74.14 | 200 OK | 0 B |
URL GET HTTP/2fonts.google.com/specimen/PT+Sans IP 142.250.74.14:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /specimen/PT+Sans HTTP/1.1
Host: fonts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 16 Mar 2024 18:58:07 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: script-src 'nonce-U5TkQkvuoUumT9dtRPY1qg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=512=t6a2U6Upreh-lxm6dPjaRRWjJrWdLVWnpBNVTCS8Vo7ewTZ0nAsMq9lt3v00IPFhwhMKyvUnCbXjmC2jA2upMZ_tzslPfB3KGMPqpATTONbGmDVFZ_ONqDA8eA-aPwGYHMdILd4nE7p9pgH41MRXptohUgAlMUgt_0xJMVdCSb4; expires=Sun, 15-Sep-2024 18:58:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/images/m1.jpg | 104.21.38.182 | 200 OK | 8.8 kB |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/images/m1.jpg IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 183x275, components 3 Hash48bfc335894f8559c7f070c6a63b4ac8 127dbdca2b46ab3affa452ace170a7532bb6b56f ed9ce36044c480351fbe863bdcba73bba599b3d2b0d134d915390b996ead084d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/images/m1.jpg HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:08 GMT
content-type: image/jpeg
content-length: 8813
last-modified: Wed, 30 Jun 2021 12:19:42 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I7AdolKhdOL93%2FbmH0jKgjQRv3DIQrABfy359UiOFOJsl5wBHTg9A3jk5Ojg89wgVeerSOzO0qiOu6V9sKUWKt5MLlqJJ%2Fjpc1slJa%2BXAWe3r3AwiCbGMfr%2FPei4HbcPg54H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90fac3e569a-OSL
alt-svc: h3=":443"; ma=86400
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 | 104.21.38.182 | 200 OK | 110 kB |
URL User Request GET HTTP/2enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 IP 104.21.38.182:443
CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeHTML document, ASCII text, with very long lines (3093) Size110 kB (109975 bytes) Hash3b2b0efb2c1ca031508bee71ab8d3909 a4a2dd240fbc7382dba2037bd1369666942003c6 1a80376852ace5f059a764fce0b111ea43b112d6d971933ebd700d0c669b6d6a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 16 Mar 2024 18:58:07 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HnKHg3e5fZYD0Y7%2BZGun7tL1MyIWYwNVitJf8%2FGkhKD1IVNzzbjxQeh3wrdSuXNHTIfLBDmCJXaHwwT3K7gBiiLWkr%2B9aTagWqU9V9FCFWGrJmERflDj5ICIFJy5Kcj6Xt66"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8656f909ed68b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.production.push-sender.com/mng/subs_window.css?ver=1706801784 | 143.204.55.82 | 200 OK | 7.1 kB |
URL GET HTTP/2static.production.push-sender.com/mng/subs_window.css?ver=1706801784 IP 143.204.55.82:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerAmazon Subjectproduction.push-sender.com Fingerprint7D:DE:F0:A4:F1:90:8E:A4:04:C1:E0:62:0D:05:EB:54:29:89:C9:C8 ValidityMon, 17 Apr 2023 00:00:00 GMT - Thu, 16 May 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (7434), with no line terminators Hash7edfc18d48d2641549d953ad7b35769d b57f256b8a85278ce3459c2aac1b517b40889f94 460354d6acce1e481e3f0a6436a6484f25f9a58e1c8540eaa61047573e72d968
GET /mng/subs_window.css?ver=1706801784 HTTP/1.1
Host: static.production.push-sender.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 08 Feb 2024 14:25:55 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Sat, 16 Mar 2024 04:44:06 GMT
etag: W/"adb85744f96b502ad68d63ede0adcd4e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pyhBVcTok5d1bo4vw_EjD3q4nAvVQa0i_iQ04_DvTUY4PZgXJQXDxQ==
age: 51245
X-Firefox-Spdy: h2
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/js/backoffer.js | 104.21.38.182 | 200 OK | 430 B |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/js/backoffer.js IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeJavaScript source, ASCII text, with very long lines (430), with no line terminators Hash6d5aa83d23ce0b9f72d3b87d000d8fae 034fb8768eb58ffc0b5849e2c162989741a6cbec 89266112a6c823b9c03dd5a32d8f1c5e9f4cbf4cf876b56c825781ea389d0800
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/js/backoffer.js HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:07 GMT
content-type: text/javascript
last-modified: Wed, 30 Jun 2021 12:19:43 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YKRGvEauIwNMTnMwxQ0NO40cGXvR8%2B4%2B6DHJ49MSzorx4D3V3yE%2B4rAJwyTIMuAPBPk9a%2BHhc8mqeoA9j2MZBHRVJU04HnZCqGzZKALoX3LVz7xLbXjptVpmMRSmMiAjH79B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90c0fe7569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.google.com/specimen/PT+Sans | 142.250.74.14 | 200 OK | 0 B |
URL GET HTTP/3fonts.google.com/specimen/PT+Sans IP 142.250.74.14:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint10:56:04:10:FC:03:7F:7E:3C:66:30:BC:66:D3:01:C9:38:E5:FB:51 ValidityMon, 19 Feb 2024 08:03:54 GMT - Mon, 13 May 2024 08:03:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /specimen/PT+Sans HTTP/1.1
Host: fonts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://enjoyablefun.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 16 Mar 2024 18:58:08 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: script-src 'nonce-RodQOHquPc8uYTiHBRB_XA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri /cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: NID=512=LpI0jTGia-lrVkmiJHoS01zXrfvOAIP-5YCO37l6BSQPqIVN64LoKlyotcN_MMqsrk_rfEfs8AJGnRWnuWGvGUqY6czCdwdtG7LbHIIBPbh4lUitrNSPf6GkKrtMGJetRQMzBz4Y7_BJ_ybrMMjP6fnHWiy7xtzOkWAm-i07l5s; expires=Sun, 15-Sep-2024 18:58:07 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| enjoyablefun.com/aff/eng/a/new/11-404126/js/jquery-3.3.1.min.js?15669127159 | 104.21.38.182 | 200 OK | 89 kB |
URL GET HTTP/3enjoyablefun.com/aff/eng/a/new/11-404126/js/jquery-3.3.1.min.js?15669127159 IP 104.21.38.182:443
Requested byhttps://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361 CertificateIssuerGoogle Trust Services LLC Subjectenjoyablefun.com FingerprintBF:84:69:0A:8E:AE:5B:67:00:81:B9:13:45:AC:BE:A5:D9:D7:08:E7 ValidityThu, 01 Feb 2024 13:38:20 GMT - Wed, 01 May 2024 13:38:19 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hash6e0d1634a8278271b8d27eada31720cc 76208e872112204fd2d815735699e490eb461af4 f4f73f5eef189e65d178fabac89e738af142aecfc4d0b496e5a4fd86a1be06ca
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /aff/eng/a/new/11-404126/js/jquery-3.3.1.min.js?15669127159 HTTP/1.1
Host: enjoyablefun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://enjoyablefun.com/aff/eng/a/new/11-404126/?cep=7UATgEQYsNGgdTUQwxtvOJbXyZAXuaIqulZWs2pwLFfWQ3ltm_3Okt6GQymOw_6uj9yEsQoxM5xrNj1h1y0fHbiGZMWS53_4rG0lSID4bem-StdzgnvfNtrxv2YAefkyoZH5Vp6-NMKMqmKYlaLq9CTtDPPmWKJMNvwlXyL2DAx-S7GbrJmUaN-qF-lPJdL7C1YWEQ83KeSUHU3mjj_1rl9de9ipRASuBlRObUFwPyVTUDpDbT2GlFzpN3FdrKiCKAu4tsWo-sdXSw1Tr1BStZUGz-QROnduRkbqxFfTWpaZ_Bbh6MBdfCoKwdBtZf2Vnp1Pt43e4xx936ocs8eVqpVgMbXnXwmjSAouiisnMzNot349s6_Y8qiVW5A__LUPUvRYPnb8bcMcGmWajG8vq1z602rpExFoot8KCIiTTmH7EbHhZBVy5TpfnyRzWkIs&lptoken=17eb108f619c72b086b6&campaign=346&clickid=65f5ebbe00c5250001125d58&pid=2&var6=361
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 16 Mar 2024 18:58:07 GMT
content-type: text/javascript
last-modified: Thu, 17 Mar 2022 12:23:31 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pM8i53gd8o8aDW4bmJI%2BKRC4ARtEmqaupOLR7kLdePq4Aeir98rz96pKawnBKjWaEsDXRPjNFps3WufqDerGHm7xBEfN%2BaglofOlkuF0wSw2Tz%2BTIURMDB9Dglv3oqlNTaDx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8656f90bffde569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|