| kilat.digital/images/2023/12/20/6b2ffffc4e97bb30e6d922ced607f802.png |  104.21.32.1 | 200 OK | 4.9 kB |
URL GET kilat.digital/images/2023/12/20/6b2ffffc4e97bb30e6d922ced607f802.png IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectkilat.digital FingerprintBB:2C:7E:7D:52:8F:27:01:54:7D:8A:E7:89:E7:13:77:C9:42:2D:1F ValidityThu, 20 Mar 2025 04:08:27 GMT - Wed, 18 Jun 2025 05:06:00 GMT
File typePNG image data, 50 x 51, 8-bit/color RGBA, non-interlaced Hash5030a0470aaacc9efd7a5446ed4628a7 c5c53596b62139874adfeb39984d8151638c300c eda0b47e64bebe25ecdc7a33ca1fef3560c2478c4cc4baf776a6a17fc962b6ad
GET /images/2023/12/20/6b2ffffc4e97bb30e6d922ced607f802.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 10:37:52 GMT
content-type: image/png
content-length: 4869
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "1305-60cef6aa8054c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hoyQvmxWNkxrwiKNf2Lp1cORuoSG78JAItVHpbhzUp3Gy%2BIEvEZ8xI5dAiqRw99wiAH62mLuxV9Fl%2FyM5DxyV9CQxfaXsHoAvYuzOcQRRYk7u5Z7bGP560RG0J6BA51t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926e413e4ddab4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=729&min_rtt=492&rtt_var=468&sent=10&recv=14&lost=0&retrans=0&sent_bytes=3279&recv_bytes=1656&delivery_rate=7350253&cwnd=253&unsent_bytes=0&cid=721ee120e2a81c86&ts=445&x=0"
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-1DD49GK74T&l=dataLayer&cx=c>m=45je53p4v9194310631za200&tag_exp=102015666~102482433~102788824~102803279~102813109~102887799~102926062 |  142.250.74.136 | 404 Not Found | 0 B |
URL GET www.googletagmanager.com/gtag/js?id=G-1DD49GK74T&l=dataLayer&cx=c>m=45je53p4v9194310631za200&tag_exp=102015666~102482433~102788824~102803279~102813109~102887799~102926062 IP142.250.74.136:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gtag/js?id=G-1DD49GK74T&l=dataLayer&cx=c>m=45je53p4v9194310631za200&tag_exp=102015666~102482433~102788824~102803279~102813109~102887799~102926062 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
date: Thu, 27 Mar 2025 10:37:52 GMT
content-type: text/html; charset=UTF-8
server: Google Tag Manager
content-length: 1724
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| stageandscreenonline.com/ | 104.21.65.12 | 301 Moved Permanently | 63 kB |
URL User Request GET stageandscreenonline.com/ IP104.21.65.12:443
CertificateIssuerGoogle Trust Services Subjectstageandscreenonline.com Fingerprint5C:12:82:34:C4:A4:49:B9:8C:44:6A:F3:FC:6C:CF:AB:81:23:D1:45 ValidityTue, 04 Mar 2025 12:47:58 GMT - Mon, 02 Jun 2025 13:46:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: stageandscreenonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 27 Mar 2025 10:37:49 GMT
location: https://206.189.92.147/
server: cloudflare
cf-ray: 926e41323ba856cb-OSL
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/themes/frontier/responsive.css?ver=1.3.5 |  206.189.92.147 | 200 OK | 3.4 kB |
URL GET 206.189.92.147/wp-content/themes/frontier/responsive.css?ver=1.3.5 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (3882), with no line terminators Hash4e349eafc49727a5205f4125fd6635e0 d1b5b492ae247632289ceb754031ef7f7aa273bf 10806d8996cb1a26d37a0eef51113e7439b16e12ccf9e8fcc7e8e0cf831082a0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/frontier/responsive.css?ver=1.3.5 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 20 Aug 2024 11:35:57 GMT
etag: "d3c-6201bd4396140-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 834
content-type: text/css
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/page/2/ | 206.189.92.147 | 200 OK | 63 kB |
IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /page/2/ HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Cookie: _ga_ZK4RG4H8Y9=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga=GA1.1.1015499503.1743071872; _ga_R08Z4BLNWS=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga_G78P4W3MNN=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga_1DD49GK74T=GS1.1.1743071872.1.0.1743071872.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
link: <https://206.189.92.147/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-length: 10724
content-type: text/html; charset=UTF-8
date: Thu, 27 Mar 2025 10:37:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/themes/frontier/includes/fonts/arimo-v27-latin-regular.woff2 | 206.189.92.147 | 200 OK | 10 kB |
URL GET 206.189.92.147/wp-content/themes/frontier/includes/fonts/arimo-v27-latin-regular.woff2 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 10016, version 1.0 Hashefc008ddacd9f630d61b0717e7864257 8c79a2fe12c7e4d80f053e40540e4544744600a5 c2cd3e005de210fcbb5372b4267c5d3d067e0564f017dd5ccba202d040f820d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/frontier/includes/fonts/arimo-v27-latin-regular.woff2 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/wp-content/themes/frontier/style.css?ver=1.3.5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 20 Aug 2024 11:35:57 GMT
etag: "2720-6201bd4396140"
accept-ranges: bytes
content-length: 10016
vary: Accept-Encoding
content-type: font/woff2
date: Thu, 27 Mar 2025 10:37:52 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgh_mVMss45BH8N784021DfWtYLEgHPdg2R8PDfTDyONSyqYq_NlaQvBFM2X4NJFffntfWNavutyr0UZc7BlxCV6d-wUaQcTOPR5ilGzCgc7mYgBFNaznuOhRm-x0jTWcbWjo7uSAA_I628OUfyoYycb5_1GAfzxIFZGNmoMnC7EL4cVXDKnnQGRERMZ_w/s16000/dutagif.gif | 142.250.74.33 | 200 OK | 156 kB |
URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgh_mVMss45BH8N784021DfWtYLEgHPdg2R8PDfTDyONSyqYq_NlaQvBFM2X4NJFffntfWNavutyr0UZc7BlxCV6d-wUaQcTOPR5ilGzCgc7mYgBFNaznuOhRm-x0jTWcbWjo7uSAA_I628OUfyoYycb5_1GAfzxIFZGNmoMnC7EL4cVXDKnnQGRERMZ_w/s16000/dutagif.gif IP142.250.74.33:443
CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38 ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
File typeGIF image data, version 89a, 728 x 90 Size156 kB (156070 bytes) Hash3ece6e3de7cc7eb8fd19c7805a953074 f9c94b4ff659c81421f3d482d711eecc3e643646 179b0b357751e63a6d4a36e759b3988d99ef838534b90dc5463b489cced0225c
GET /img/b/R29vZ2xl/AVvXsEgh_mVMss45BH8N784021DfWtYLEgHPdg2R8PDfTDyONSyqYq_NlaQvBFM2X4NJFffntfWNavutyr0UZc7BlxCV6d-wUaQcTOPR5ilGzCgc7mYgBFNaznuOhRm-x0jTWcbWjo7uSAA_I628OUfyoYycb5_1GAfzxIFZGNmoMnC7EL4cVXDKnnQGRERMZ_w/s16000/dutagif.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vf1f"
expires: Fri, 28 Mar 2025 10:37:53 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="dutagif.gif"
x-content-type-options: nosniff
date: Thu, 27 Mar 2025 10:37:53 GMT
server: fife
content-length: 156070
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 206.189.92.147 | 200 OK | 14 kB |
URL GET 206.189.92.147/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 09 Jun 2023 11:19:24 GMT
etag: "3509-5fdb08a8b2700-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4872
content-type: text/javascript
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=GT-PLW94J7D | 142.250.74.136 | 200 OK | 370 kB |
URL GET www.googletagmanager.com/gtag/js?id=GT-PLW94J7D IP142.250.74.136:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size370 kB (370042 bytes) Hash0e89f7acdca035784057b54ac0c0384f bcc946ee63b6f205a53e98c50d564a0869e82775 afda1e4757823b8690762ca61d013a262a86d41e8aefd1b38d4a63b33c2f05df
GET /gtag/js?id=GT-PLW94J7D HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 27 Mar 2025 10:37:51 GMT
expires: Thu, 27 Mar 2025 10:37:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 123368
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/uploads/2024/08/hks-150x150.jpg | 206.189.92.147 | 200 OK | 3.4 kB |
URL GET 206.189.92.147/wp-content/uploads/2024/08/hks-150x150.jpg IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3 Hashdd8004e98a972f43dd4ad789376479d2 36b0cafca429f85c1969ccb5e4932aec32a74021 595e2fd4e7d3ca2f11c85407b5d8b829b6407fe7307a1fee7da6a1f81656380e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/08/hks-150x150.jpg HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 20 Aug 2024 12:21:41 GMT
etag: "d30-6201c77c77f40"
accept-ranges: bytes
content-length: 3376
content-type: image/jpeg
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFj_ce7UVB79B9gmeoOiKwGj1NsUtOLBO_iSwioK71RTEJEWEg5TaQBfXfobdzn4gf0-YD822aBq9pc8jWoTXhlGqQ9EDx01X_U33BOTHgNfRpncgfWQYK4rgzT8iw7knGaQPDwXKEKQxXJdDNalABbsdHow8ut5U9R0Wrf1iiqUi0GqSP6GDjgxgjDcQ/s16000/BANNER-SN.gif | 142.250.74.33 | 200 OK | 158 kB |
URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFj_ce7UVB79B9gmeoOiKwGj1NsUtOLBO_iSwioK71RTEJEWEg5TaQBfXfobdzn4gf0-YD822aBq9pc8jWoTXhlGqQ9EDx01X_U33BOTHgNfRpncgfWQYK4rgzT8iw7knGaQPDwXKEKQxXJdDNalABbsdHow8ut5U9R0Wrf1iiqUi0GqSP6GDjgxgjDcQ/s16000/BANNER-SN.gif IP142.250.74.33:443
CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38 ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
File typeGIF image data, version 89a, 728 x 90 Size158 kB (157880 bytes) Hash9963e8ec6c402d96b2b599e286aa7502 3b3a18ecc207c6d672f6f2ea705ae65f23b3550e 8df5f796b5341ee01f653a8e530a80c29de11ea735abe41ba29f020eaff3cb2e
GET /img/b/R29vZ2xl/AVvXsEgFj_ce7UVB79B9gmeoOiKwGj1NsUtOLBO_iSwioK71RTEJEWEg5TaQBfXfobdzn4gf0-YD822aBq9pc8jWoTXhlGqQ9EDx01X_U33BOTHgNfRpncgfWQYK4rgzT8iw7knGaQPDwXKEKQxXJdDNalABbsdHow8ut5U9R0Wrf1iiqUi0GqSP6GDjgxgjDcQ/s16000/BANNER-SN.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vf0f"
expires: Fri, 28 Mar 2025 10:37:53 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="BANNER-SN.gif"
x-content-type-options: nosniff
date: Thu, 27 Mar 2025 10:37:53 GMT
server: fife
content-length: 157880
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/uploads/2024/08/cropped-scscsc-192x192.jpg | 206.189.92.147 | 200 OK | 3.9 kB |
URL GET 206.189.92.147/wp-content/uploads/2024/08/cropped-scscsc-192x192.jpg IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 192x192, components 3 Hashe978414b36a4a5270d9be4ac2b736742 a9f685a7078c2fd8e5efa2d487aae422924cefc1 f342df705952f97a2e69d27f35e97bc7cc22f91926191ec2995ec5d2175a0939
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/08/cropped-scscsc-192x192.jpg HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Cookie: _ga_ZK4RG4H8Y9=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga=GA1.1.1015499503.1743071872; _ga_R08Z4BLNWS=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga_G78P4W3MNN=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga_1DD49GK74T=GS1.1.1743071872.1.0.1743071872.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 21 Aug 2024 04:58:20 GMT
etag: "f35-6202a6413d300"
accept-ranges: bytes
content-length: 3893
content-type: image/jpeg
date: Thu, 27 Mar 2025 10:37:52 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| | 206.189.92.147 | 200 OK | 63 kB |
IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
link: <https://206.189.92.147/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-length: 10764
content-type: text/html; charset=UTF-8
date: Thu, 27 Mar 2025 10:37:50 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 206.189.92.147 | 200 OK | 88 kB |
URL GET 206.189.92.147/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 28 Aug 2023 22:44:24 GMT
etag: "15601-604036f996200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 30368
content-type: text/javascript
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| kilat.digital/images/2023/12/20/bd350c38cdf02a19edcb5022f4d46f19.png | 104.21.32.1 | 200 OK | 4.4 kB |
URL GET kilat.digital/images/2023/12/20/bd350c38cdf02a19edcb5022f4d46f19.png IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectkilat.digital FingerprintBB:2C:7E:7D:52:8F:27:01:54:7D:8A:E7:89:E7:13:77:C9:42:2D:1F ValidityThu, 20 Mar 2025 04:08:27 GMT - Wed, 18 Jun 2025 05:06:00 GMT
File typePNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced Hashb0117639b16db6e53203b3bfe4efebd5 b23aeefac6efd0a9ca19831f94830ab771ea92e4 94bfec52c757c42fbffa1d4b8fbcef0f63a148605871d8d9ffe1636009ed2f0e
GET /images/2023/12/20/bd350c38cdf02a19edcb5022f4d46f19.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 10:37:52 GMT
content-type: image/png
content-length: 4441
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "1159-60cef6aa2c58a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WshHoLbeEFXP3xRr%2FMX24FW818Donga2y%2B7lFl5wx4rH4u4IhJLxcEWTBzJTX1F8XeKnpoySFpZGiHXgJ1IsU5R6m9LPiXOtdi8xaOMiHEoF%2FrEVi1E%2Fu%2B1S5MD3kRbu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926e413e5deab4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1120&min_rtt=463&rtt_var=932&sent=32&recv=22&lost=0&retrans=0&sent_bytes=27090&recv_bytes=1656&delivery_rate=10090592&cwnd=255&unsent_bytes=0&cid=721ee120e2a81c86&ts=497&x=0"
X-Firefox-Spdy: h2
|
|
| kilat.digital/images/2023/12/22/2b1184d165c244636c89bef160799697.png | 104.21.32.1 | 200 OK | 6.4 kB |
URL GET kilat.digital/images/2023/12/22/2b1184d165c244636c89bef160799697.png IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectkilat.digital FingerprintBB:2C:7E:7D:52:8F:27:01:54:7D:8A:E7:89:E7:13:77:C9:42:2D:1F ValidityThu, 20 Mar 2025 04:08:27 GMT - Wed, 18 Jun 2025 05:06:00 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashd741630b051b58d3492b540f7957d49e feabf9b7dbee4296e4f8d77e33893abcb37f21f8 be19e08c869c3747ed73cb1d1988173ece7ccd5925cfc17f35b77f900e49c7fb
GET /images/2023/12/22/2b1184d165c244636c89bef160799697.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 10:37:52 GMT
content-type: image/png
content-length: 6449
last-modified: Fri, 22 Dec 2023 11:59:08 GMT
etag: "1931-60d17f193918c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ag5ZgHZk1FPmxhwDibfb9iKF5b260sPkSRRCSXECwl%2BS5Crr89Jt%2FByPO4wEbgzfaenuYGVxmTfxI8gXTqHuvQcWm%2BVjWhKvul0ZcHZsyrLMTxCbTG9uLq1WMjzUdGE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926e413e5df9b4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=746&min_rtt=492&rtt_var=340&sent=16&recv=16&lost=0&retrans=0&sent_bytes=8926&recv_bytes=1656&delivery_rate=8627606&cwnd=255&unsent_bytes=0&cid=721ee120e2a81c86&ts=459&x=0"
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-includes/css/dist/block-library/style.min.css?ver=6.7 | 206.189.92.147 | 200 OK | 115 kB |
URL GET 206.189.92.147/wp-includes/css/dist/block-library/style.min.css?ver=6.7 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
Size115 kB (114706 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 13 Nov 2024 23:57:49 GMT
etag: "1c012-626d419db7940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15177
content-type: text/css
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/themes/frontier/includes/genericons/genericons.css?ver=1.3.5 | 206.189.92.147 | 200 OK | 28 kB |
URL GET 206.189.92.147/wp-content/themes/frontier/includes/genericons/genericons.css?ver=1.3.5 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeASCII text, with very long lines (18732) Hashddc038dee5f190d484a548cd38bf6b44 0056a93693917ba456a6af6195d47dccdb51a051 11767e2677e127953439c215e06fd9a229dea6affa64d2fd37b67898d7ab7363
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/frontier/includes/genericons/genericons.css?ver=1.3.5 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 20 Aug 2024 11:35:57 GMT
etag: "6e71-6201bd4396140-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16451
content-type: text/css
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/uploads/2025/02/Untitled-Project-2025-02-11T130409.682-150x150.jpg | 206.189.92.147 | 200 OK | 3.6 kB |
URL GET 206.189.92.147/wp-content/uploads/2025/02/Untitled-Project-2025-02-11T130409.682-150x150.jpg IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 150x150, components 3 Hashff85bfe8ee365f7740f68ba2f22aa729 9529ee027c4d84df37dd94d02a36b04797572038 e0271c773d75d8de58060c491ca9db3cc18aef6f0cebd547ab5b2a6b54fdd2ab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/02/Untitled-Project-2025-02-11T130409.682-150x150.jpg HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 11 Feb 2025 06:07:42 GMT
etag: "e0a-62dd7a48dee9f"
accept-ranges: bytes
content-length: 3594
content-type: image/jpeg
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/uploads/2025/01/zdvsdv.png | 206.189.92.147 | 200 OK | 63 kB |
URL GET 206.189.92.147/wp-content/uploads/2025/01/zdvsdv.png IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typePNG image data, 800 x 200, 8-bit/color RGBA, non-interlaced Hashba5e190c9ce147c96afb8ff2ddcc7beb 8bcc4f73957d6e45f3cb7095528ee207e5c3b897 3bf885133ea8088211ffd97b0999f13a2c84e37e9ed3a2a653d619082fcd3660
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/01/zdvsdv.png HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Fri, 10 Jan 2025 12:45:52 GMT
etag: "f546-62b597992a000"
accept-ranges: bytes
content-length: 62790
content-type: image/png
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/uploads/2025/02/Untitled-Project-2025-02-10T155331.662-150x150.jpg | 206.189.92.147 | 200 OK | 4.6 kB |
URL GET 206.189.92.147/wp-content/uploads/2025/02/Untitled-Project-2025-02-10T155331.662-150x150.jpg IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 150x150, components 3 Hash720db018c771e5ac1a68ca37be628324 91d771160e84e552a97719b827c26abba187aa59 de57576985f2df6473279f965f5e37cb0048b4b2e89d72e830f8744b73bcdf0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/02/Untitled-Project-2025-02-10T155331.662-150x150.jpg HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Mon, 10 Feb 2025 08:54:00 GMT
etag: "1222-62dc5d979929c"
accept-ranges: bytes
content-length: 4642
content-type: image/jpeg
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/themes/frontier/includes/fonts/roboto-condensed-v25-latin-regular.woff2 | 206.189.92.147 | 200 OK | 16 kB |
URL GET 206.189.92.147/wp-content/themes/frontier/includes/fonts/roboto-condensed-v25-latin-regular.woff2 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15700, version 1.0 Hash3d7f7413fca69bff4d231ebdc50aaab0 cb18e7943b6a8a0e3672d7242197c19a226b92e8 6b4fac99c39b9ee2693d87a2508d0c7d4b4859072966616bd1f6e18c5b2f9d36
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/frontier/includes/fonts/roboto-condensed-v25-latin-regular.woff2 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/wp-content/themes/frontier/style.css?ver=1.3.5
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 20 Aug 2024 11:35:57 GMT
etag: "3d54-6201bd4396140"
accept-ranges: bytes
content-length: 15700
vary: Accept-Encoding
content-type: font/woff2
date: Thu, 27 Mar 2025 10:37:52 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTJJhTiPTwEohnf-rs3qsyE2LQPmOSL5eCXA8-gEXpFWRJnGq3oCSt12JypMLqBVuOOUdMM8MMi93ROkHitSpwQiDIW_NopZ59xB4_F64YFsH7Z7V1G-Z37PciOJHBV9yFkOimcokKztpbb8pLdC8rUG56dn_4fQrWPirx3VjSC2BUKuzYMYHYXznr/s1600/banner-grab.gif | 142.250.74.33 | 200 OK | 140 kB |
URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTJJhTiPTwEohnf-rs3qsyE2LQPmOSL5eCXA8-gEXpFWRJnGq3oCSt12JypMLqBVuOOUdMM8MMi93ROkHitSpwQiDIW_NopZ59xB4_F64YFsH7Z7V1G-Z37PciOJHBV9yFkOimcokKztpbb8pLdC8rUG56dn_4fQrWPirx3VjSC2BUKuzYMYHYXznr/s1600/banner-grab.gif IP142.250.74.33:443
CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38 ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
File typeGIF image data, version 89a, 728 x 90 Size140 kB (140026 bytes) Hashb3699c921ed7e513a6f1c8b4037a35a4 fd948a2d11d0d78955af65c5c2576a5489bc1e00 b7a8fbcc7bd66e3643028ae7cacc5b26fb61367c39fec1385840f180f778d69b
GET /img/b/R29vZ2xl/AVvXsEiTJJhTiPTwEohnf-rs3qsyE2LQPmOSL5eCXA8-gEXpFWRJnGq3oCSt12JypMLqBVuOOUdMM8MMi93ROkHitSpwQiDIW_NopZ59xB4_F64YFsH7Z7V1G-Z37PciOJHBV9yFkOimcokKztpbb8pLdC8rUG56dn_4fQrWPirx3VjSC2BUKuzYMYHYXznr/s1600/banner-grab.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "ve0b"
expires: Fri, 28 Mar 2025 10:37:53 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="banner-grab.gif"
x-content-type-options: nosniff
date: Thu, 27 Mar 2025 10:37:53 GMT
server: fife
content-length: 140026
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/uploads/2024/08/cropped-scscsc-32x32.jpg | 206.189.92.147 | 200 OK | 894 B |
URL GET 206.189.92.147/wp-content/uploads/2024/08/cropped-scscsc-32x32.jpg IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 32x32, components 3 Hash7d1a1265f850fa474005dc44e4d7adfe e96e37594706cbbd113f27e90eb426a81a191e6d 9998475c1b75de709d5195b3a4376bff55ebbea6fe86ddaa817107b55470ced5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2024/08/cropped-scscsc-32x32.jpg HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Cookie: _ga_ZK4RG4H8Y9=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga=GA1.1.1015499503.1743071872; _ga_R08Z4BLNWS=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga_G78P4W3MNN=GS1.1.1743071872.1.0.1743071872.0.0.0; _ga_1DD49GK74T=GS1.1.1743071872.1.0.1743071872.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Wed, 21 Aug 2024 04:58:20 GMT
etag: "37e-6202a6413d300"
accept-ranges: bytes
content-length: 894
content-type: image/jpeg
date: Thu, 27 Mar 2025 10:37:52 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| kilat.digital/images/2023/12/22/b3f1b578ebdb270700ff9b0c9475cf69.png | 104.21.32.1 | 200 OK | 4.7 kB |
URL GET kilat.digital/images/2023/12/22/b3f1b578ebdb270700ff9b0c9475cf69.png IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectkilat.digital FingerprintBB:2C:7E:7D:52:8F:27:01:54:7D:8A:E7:89:E7:13:77:C9:42:2D:1F ValidityThu, 20 Mar 2025 04:08:27 GMT - Wed, 18 Jun 2025 05:06:00 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashcfc71f968c80d7016b1a4730ec3f3907 2e6bd6a445ca8b4b3a695c6b96fd8c70b84cd075 9222231a795c8e5915e155f3bd76c99e1583f3eade60f686b0451e3e06ce86e0
GET /images/2023/12/22/b3f1b578ebdb270700ff9b0c9475cf69.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 10:37:52 GMT
content-type: image/png
content-length: 4688
last-modified: Fri, 22 Dec 2023 11:59:08 GMT
etag: "1250-60d17f195664a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ieK7zlIwFqUh4sQkMAEV71FEkM7w6QzW3rWw4%2BgGi0XsoLhkiRXmg9qXClaoroT8nMvpNFiyHOQ9Z6UOdm4irm%2BSEUzB8MFsMkvIgGg%2Bs3dC5PbMCLXXBtji%2FA5Q23S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926e413e3dd2b4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=686&min_rtt=492&rtt_var=224&sent=27&recv=20&lost=0&retrans=0&sent_bytes=21833&recv_bytes=1656&delivery_rate=10090592&cwnd=255&unsent_bytes=0&cid=721ee120e2a81c86&ts=485&x=0"
X-Firefox-Spdy: h2
|
|
| kilat.digital/images/2023/12/20/ed94593b02796a81fe558659411b7562.png | 104.21.32.1 | 200 OK | 5.3 kB |
URL GET kilat.digital/images/2023/12/20/ed94593b02796a81fe558659411b7562.png IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectkilat.digital FingerprintBB:2C:7E:7D:52:8F:27:01:54:7D:8A:E7:89:E7:13:77:C9:42:2D:1F ValidityThu, 20 Mar 2025 04:08:27 GMT - Wed, 18 Jun 2025 05:06:00 GMT
File typePNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced Hashf8adc6b2e88287e0a1b81ba25b816894 9abf1c80cbe7ea3ba7484fd83a94698b47c616a6 a191ebfab47c1982b4ab1a41ac6e3636939395b6677a176a317a44d7dab5805e
GET /images/2023/12/20/ed94593b02796a81fe558659411b7562.png HTTP/1.1
Host: kilat.digital
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Mar 2025 10:37:52 GMT
content-type: image/png
content-length: 5278
last-modified: Wed, 20 Dec 2023 11:38:06 GMT
etag: "149e-60cef6aa41d4b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z45KXTxHIZXQhfgp9IDNNIjcXFOcMfqo5pBACoeqDL0tQrpsHkhYvVYA1x8AK5MJS4jrM%2BTNspHQTd2OHjariN1CrddNAnPkErWLjRhBu8923GJd3uFqU%2FC3p4yIZNMy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 926e413e5dfeb4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=734&min_rtt=492&rtt_var=249&sent=22&recv=18&lost=0&retrans=0&sent_bytes=15988&recv_bytes=1656&delivery_rate=10090592&cwnd=255&unsent_bytes=0&cid=721ee120e2a81c86&ts=481&x=0"
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-includes/js/wp-emoji-release.min.js?ver=6.7 | 206.189.92.147 | 200 OK | 19 kB |
URL GET 206.189.92.147/wp-includes/js/wp-emoji-release.min.js?ver=6.7 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 27 Jun 2024 19:21:44 GMT
etag: "4926-61be40a908200-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5062
content-type: text/javascript
date: Thu, 27 Mar 2025 10:37:52 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8XZVcVmw_-PlPzFjIcXYzLfgZm-DY46zDikfMPhTQSuMVlmOkkkuc58wQnbkokBwekUjwF3LHkSTrZ_ED6IIYLMDf3BlaIH_pjIkDGStKwnyWBq7S1OfieM69zYcs2136EI9kETWRzfcKeizhI57-K2hUfPFma6okNjOBCFmuc0NfiFt9OlnL1Vzw/s16000/Pilar-new.gif | 142.250.74.33 | 200 OK | 96 kB |
URL GET blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8XZVcVmw_-PlPzFjIcXYzLfgZm-DY46zDikfMPhTQSuMVlmOkkkuc58wQnbkokBwekUjwF3LHkSTrZ_ED6IIYLMDf3BlaIH_pjIkDGStKwnyWBq7S1OfieM69zYcs2136EI9kETWRzfcKeizhI57-K2hUfPFma6okNjOBCFmuc0NfiFt9OlnL1Vzw/s16000/Pilar-new.gif IP142.250.74.33:443
CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint76:FD:48:21:91:D7:93:F0:95:A3:DA:6B:29:ED:D2:2A:3F:D2:DD:38 ValidityMon, 10 Mar 2025 08:36:57 GMT - Mon, 02 Jun 2025 08:36:56 GMT
File typeGIF image data, version 89a, 728 x 90 Hash203bcdbc9d56808d607a3ac56b338d10 cab37908deac64000ba705d33487995129c8fe98 97bbb72303321d5ecec967f0a67333e54816c456fecba365cb0fdaa50ed781c7
GET /img/b/R29vZ2xl/AVvXsEh8XZVcVmw_-PlPzFjIcXYzLfgZm-DY46zDikfMPhTQSuMVlmOkkkuc58wQnbkokBwekUjwF3LHkSTrZ_ED6IIYLMDf3BlaIH_pjIkDGStKwnyWBq7S1OfieM69zYcs2136EI9kETWRzfcKeizhI57-K2hUfPFma6okNjOBCFmuc0NfiFt9OlnL1Vzw/s16000/Pilar-new.gif HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-expose-headers: Content-Length
etag: "vdf4"
expires: Fri, 28 Mar 2025 10:37:53 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Pilar-new.gif"
x-content-type-options: nosniff
date: Thu, 27 Mar 2025 10:37:53 GMT
server: fife
content-length: 95672
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 206.189.92.147/wp-content/themes/frontier/style.css?ver=1.3.5 | 206.189.92.147 | 200 OK | 27 kB |
URL GET 206.189.92.147/wp-content/themes/frontier/style.css?ver=1.3.5 IP206.189.92.147:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subject206.189.92.147 Fingerprint8D:C1:2D:D2:53:C1:82:19:6C:E4:74:20:4D:3C:42:5B:8C:FB:73:DE ValidityThu, 23 Jan 2025 00:00:00 GMT - Wed, 23 Apr 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/frontier/style.css?ver=1.3.5 HTTP/1.1
Host: 206.189.92.147
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Tue, 20 Aug 2024 11:35:57 GMT
etag: "6999-6201bd4396140-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 6367
content-type: text/css
date: Thu, 27 Mar 2025 10:37:51 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-R08Z4BLNWS | 142.250.74.136 | 200 OK | 377 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-R08Z4BLNWS IP142.250.74.136:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (6251) Size377 kB (376611 bytes) Hashdaf8a5089281c24fe907211c006b03d1 d98590d55677c08f03b1567e95c3db641aa0017a 244c60fb3fb81feaf03c3255b2f0efd9d6a644d35d0462e33e2f54d9a42925bb
GET /gtag/js?id=G-R08Z4BLNWS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://206.189.92.147/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 27 Mar 2025 10:37:51 GMT
expires: Thu, 27 Mar 2025 10:37:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 124825
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|