| www.googletagmanager.com/gtag/js?id=G-KMS337CM66&cx=c>m=457e53o0za200&tag_exp=102482433~102788824~102803279~102813109~102887800~102926327 |  142.250.178.40 | 200 OK | 370 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-KMS337CM66&cx=c>m=457e53o0za200&tag_exp=102482433~102788824~102803279~102813109~102887800~102926327 IP142.250.178.40:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size370 kB (369820 bytes) Hash571bda314f633b9b290b1aec3a08f07c 83942fbb73ffeeca4ab0a253d3254852ef7fe3e6 1bea7ad2246bb908b1ccad82a4a4733bf5de897c1219bb87f761d34a504a70b3
GET /gtag/js?id=G-KMS337CM66&cx=c>m=457e53o0za200&tag_exp=102482433~102788824~102803279~102813109~102887800~102926327 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Mar 2025 19:37:24 GMT
expires: Tue, 25 Mar 2025 19:37:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 123353
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Raleway | 142.250.178.42 | 200 OK | 1.8 kB |
URL GET fonts.googleapis.com/css?family=Raleway IP142.250.178.42:443
Requested byhttps://www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
File typeASCII text, with very long lines (1856), with no line terminators Hash02734ef92f9bc433d6fc9577d7b86707 8af50716465cf8bd35470f6c54f5e408d18d3a48 fe1016cbe83aaa34ac0d78f7a0171e28e2972236dd596a10e67d1a486f9acd95
GET /css?family=Raleway HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www5.cbox.ws/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 25 Mar 2025 19:37:24 GMT
date: Tue, 25 Mar 2025 19:37:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 | 142.250.178.99 | 200 OK | 22 kB |
URL GET fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 IP142.250.178.99:443
Requested byhttps://www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint63:D6:50:6F:98:C5:59:D1:5A:FF:9D:8D:C3:C1:04:A1:B9:1A:3E:6B ValidityMon, 10 Mar 2025 08:37:01 GMT - Mon, 02 Jun 2025 08:37:00 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 22432, version 1.0 Hashcfd6d958f6802c9f4f64c05575b70801 7f0644e43c42902b466b66723aad8a95ba094b0c 3e44fb721d3be9376c6e5e946109067a04da84ae10b3f27a03ada7a3731e515c
GET /s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www5.cbox.ws
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 22432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Mar 2025 18:25:52 GMT
expires: Fri, 20 Mar 2026 18:25:52 GMT
cache-control: public, max-age=31536000
age: 436292
last-modified: Wed, 01 May 2024 20:31:54 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js IP172.240.253.132:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcoursestiffenjealous.com FingerprintEC:37:27:F0:3A:B2:4F:D7:A0:8D:49:EE:F6:CF:B2:09:67:63:E8:B3 ValidityTue, 25 Feb 2025 13:02:37 GMT - Mon, 26 May 2025 13:02:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8afb1fdc6553c5ffabb80fcbea07175a/invoke.js HTTP/1.1
Host: coursestiffenjealous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Tue, 25 Mar 2025 19:37:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: coursestiffenjealous.com
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 |  188.165.25.76 | 200 OK | 31 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (30837) Hash60f5aa99abb8311da057ab94769cbf1e 68147e22aab00248ab2d1b2ad1583db38266f194 b00a11e8e9333dab053bc194162a385e2fbf7e0bb155bd278dea4a470c332acc
GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/css
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 | 188.165.25.76 | 200 OK | 24 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (24063) Hash9a4bc899dc82a4928dbf26f434953418 182ce4566df208a3b37755cf838d717b8e8d2c48 6d3d2ba38250dc4b7d2d10b60d1ee08fd5c2f52efb2ccc6350c29f7e364f9775
GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 | 188.165.25.76 | 503 Service Unavailable | 0 B |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 503 Service Unavailable
server: nginx
date: Tue, 25 Mar 2025 19:37:21 GMT
content-length: 0
retry-after: 10
cause: Netty Pool is full
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7&sec=css&theme=10&v=1742220502&h=ff04eb4b |  195.201.153.71 | 200 OK | 17 kB |
URL GET www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7&sec=css&theme=10&v=1742220502&h=ff04eb4b IP195.201.153.71:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 CertificateIssuerLet's Encrypt Subjectcbox.ws Fingerprint07:6E:3D:01:D3:14:34:96:15:23:E9:B5:0A:21:3F:32:F7:E9:4F:81 ValiditySun, 26 Jan 2025 11:21:50 GMT - Sat, 26 Apr 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /box/?boxid=937307&boxtag=9zksm7&sec=css&theme=10&v=1742220502&h=ff04eb4b HTTP/1.1
Host: www5.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www5.cbox.ws/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:23 GMT
content-type: text/css;charset=UTF-8
p3p: CP="NOI DSP COR NID CURa OUR NOR"
expires: Tue, 15 Jul 2025 14:08:32 GMT
cache-control: public, max-age=10368000
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-NCGEYMENH7&cx=c>m=457e53o0za200&tag_exp=102482433~102788824~102803279~102813109~102887800~102926327 | 142.250.178.40 | 200 OK | 334 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-NCGEYMENH7&cx=c>m=457e53o0za200&tag_exp=102482433~102788824~102803279~102813109~102887800~102926327 IP142.250.178.40:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (7994) Size334 kB (334020 bytes) Hash4b15bc6f6d7323232d864ccd8d29676b 09058b1b1c2a8cf26f33f3016050d91459b9f694 c017e069c00f30ae6da8288de0139d842ad429bbdcf2db8168dff038ba354d88
GET /gtag/js?id=G-NCGEYMENH7&cx=c>m=457e53o0za200&tag_exp=102482433~102788824~102803279~102813109~102887800~102926327 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Mar 2025 19:37:24 GMT
expires: Tue, 25 Mar 2025 19:37:24 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 115100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| galaxyporn-net.yqlog.com/ | 188.165.25.76 | 200 OK | 79 kB |
URL User Request GET galaxyporn-net.yqlog.com/ IP188.165.25.76:443
CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:21 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: public, max-age=3600
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 188.165.25.76 | 200 OK | 88 kB |
URL GET galaxyporn-net.yqlog.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65336) Hashadb6a5f27be99ddec618ca1bb664cee3 17ce2437bc1172a4ecef21d20560615caef9b2f3 72156036faaf2e0c48a80632ec19705992612559f8d34974d6b3c146e394b66e
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-198246385-1 | 142.250.178.40 | 200 OK | 261 kB |
URL GET www.googletagmanager.com/gtag/js?id=UA-198246385-1 IP142.250.178.40:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint16:BA:A3:B5:22:51:BB:87:46:7F:17:3F:9D:14:B3:35:F0:FE:B1:8D ValidityMon, 10 Mar 2025 08:35:59 GMT - Mon, 02 Jun 2025 08:35:58 GMT
File typeJavaScript source, ASCII text, with very long lines (5436) Size261 kB (261404 bytes) Hash760c681c973ab361e38e7d5b5869e01b 4551bea3161eec4045643c5dbdd4309116d5124f 5931528cdc708214fd1bd7ed5b74896792bb99f1722a649362e2ca70dc2cc81f
GET /gtag/js?id=UA-198246385-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 25 Mar 2025 19:37:21 GMT
expires: Tue, 25 Mar 2025 19:37:21 GMT
cache-control: private, max-age=900
last-modified: Tue, 25 Mar 2025 18:20:18 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 92634
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| coursestiffenjealous.com/b1/cf/c2/b1cfc2eb57446e322dd21c1dede9ffa3.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET coursestiffenjealous.com/b1/cf/c2/b1cfc2eb57446e322dd21c1dede9ffa3.js IP172.240.253.132:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcoursestiffenjealous.com FingerprintEC:37:27:F0:3A:B2:4F:D7:A0:8D:49:EE:F6:CF:B2:09:67:63:E8:B3 ValidityTue, 25 Feb 2025 13:02:37 GMT - Mon, 26 May 2025 13:02:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /b1/cf/c2/b1cfc2eb57446e322dd21c1dede9ffa3.js HTTP/1.1
Host: coursestiffenjealous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Tue, 25 Mar 2025 19:37:25 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: coursestiffenjealous.com
|
|
| galaxyporn-net.yqlog.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2 | 188.165.25.76 | 503 Service Unavailable | 0 B |
URL GET galaxyporn-net.yqlog.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.2 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 503 Service Unavailable
server: nginx
date: Tue, 25 Mar 2025 19:37:21 GMT
content-length: 0
retry-after: 10
cause: Netty Pool is full
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 188.165.25.76 | 503 Service Unavailable | 0 B |
URL GET galaxyporn-net.yqlog.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 503 Service Unavailable
server: nginx
date: Tue, 25 Mar 2025 19:37:21 GMT
content-length: 0
retry-after: 10
cause: Netty Pool is full
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 188.165.25.76 | 200 OK | 14 kB |
URL GET galaxyporn-net.yqlog.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hashccbe19535c8e4b1478d4b9ce5e58370d 2403550f3442e1889e47676a2da53135bb16c2e1 daf4720b9eb50d31fb016bbda35fd90c710c2f551916634569a9d21b3f70dacb
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:23 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:23 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| static.cbox.ws/jsc/jsc_10_1662968291.js |  104.21.16.1 | 200 OK | 78 kB |
URL GET static.cbox.ws/jsc/jsc_10_1662968291.js IP104.21.16.1:443
Requested byhttps://www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 CertificateIssuerGoogle Trust Services Subjectcbox.ws FingerprintE9:43:44:DD:41:56:40:BC:6D:4C:7F:2F:BC:59:41:B0:3F:35:C8:74 ValidityMon, 03 Feb 2025 10:03:38 GMT - Sun, 04 May 2025 11:01:47 GMT
File typeJavaScript source, ASCII text, with very long lines (575) Hash313170096fa29b6180e803ea83b88b35 92a6a7211b5ab93f552e30a56983e6bfb4f480b7 ee9be91699ff4cf58c547b83514c18568a274bfa1a5e63726714798cf33fc4a0
GET /jsc/jsc_10_1662968291.js HTTP/1.1
Host: static.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www5.cbox.ws/
Origin: https://www5.cbox.ws
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 19:37:24 GMT
content-type: application/x-javascript
content-length: 25769
last-modified: Mon, 12 Sep 2022 07:38:20 GMT
etag: "631ee1ec-64a9"
content-encoding: gzip
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 322823
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=scAoH32YCrZZH0FJG8yBGpsf0s0GZzuUAgCnadyk%2FTqZ%2Fr901ZKEWDy2ut0oYzyAbYnGhAmtBVNHzHfdxfMfK8sc3Et0F0iMjzwKAr8BnhD1toBZblylMg8RNlV04czeLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9260dcd88c6070c7-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=20581&min_rtt=19740&rtt_var=1672&sent=61&recv=20&lost=0&retrans=0&sent_bytes=76861&recv_bytes=1254&delivery_rate=570780&cwnd=215&unsent_bytes=0&cid=f58dd9d50ab5c82e&ts=191&x=0"
X-Firefox-Spdy: h2
|
|
| galaxyporn.net/wp-includes/js/wp-emoji-release.min.js?ver=6.7.2 | 172.67.179.56 | 200 OK | 19 kB |
URL GET galaxyporn.net/wp-includes/js/wp-emoji-release.min.js?ver=6.7.2 IP172.67.179.56:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerGoogle Trust Services Subjectgalaxyporn.net Fingerprint91:AF:16:51:44:35:73:B6:89:80:8C:96:11:34:1F:68:D5:9E:FF:0A ValidityTue, 04 Mar 2025 07:58:40 GMT - Mon, 02 Jun 2025 08:58:35 GMT
File typeJavaScript source, ASCII text, with very long lines (15752) Hashb976b651932bfd25b9ddb5b7693d88a7 7fcb7cb5c11227f9213b1e08a07d0212209e1432 4e6ce5444c7f396cef0eb1fa3611034151e485dd06fbe5573a5583e1eebc98c3
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.7.2 HTTP/1.1
Host: galaxyporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 19:37:26 GMT
content-type: text/javascript
last-modified: Thu, 27 Jun 2024 10:55:22 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cache-control: max-age=14400
cf-cache-status: HIT
age: 4839
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yAVyfchdOzK9O8e9luA6sCWbr89VLpxDsj0Fbq51W5vZoLj%2BWtra4Lb1b5Pivnyxje3FxMOrdjdDundtzBetftRWVTW2rIr%2Fkw3Yhzr0Jwpm0wAMxvg%2Fb6k9qNC%2FjVvo7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9260dce31aaefeac-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=20029&min_rtt=20012&rtt_var=4232&sent=6&recv=9&lost=0&retrans=0&sent_bytes=3207&recv_bytes=1069&delivery_rate=216918&cwnd=229&unsent_bytes=0&cid=d6cb998eb3bd9ebe&ts=54&x=0"
X-Firefox-Spdy: h2
|
|
| galaxyporn.net/icon.svg | 172.67.179.56 | 200 OK | 505 B |
IP172.67.179.56:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerGoogle Trust Services Subjectgalaxyporn.net Fingerprint91:AF:16:51:44:35:73:B6:89:80:8C:96:11:34:1F:68:D5:9E:FF:0A ValidityTue, 04 Mar 2025 07:58:40 GMT - Mon, 02 Jun 2025 08:58:35 GMT
File typeSVG Scalable Vector Graphics image Hash1f2eb6b90e327180ac66555792588651 e8bffc7e8ceba9efcc7e2c006f28641f7215670b d2ceb2cf44a792d1f7014de9e50fa920c293e4111615402f6774f683e48af1ba
GET /icon.svg HTTP/1.1
Host: galaxyporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://galaxyporn-net.yqlog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 19:37:27 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800
expires: Tue, 01 Apr 2025 14:10:22 GMT
last-modified: Tue, 25 Mar 2025 13:25:11 GMT
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 19625
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lHAObtSSom3s7gCqSekKzlPH1475lRL2HkHtiI46KSA4O1h10juLL%2Fjw1valkmq5cmdCQcX8iLNO%2FQ1H26KiHepRzHjYakYMNOoy0v2VAzRBkWqsw%2Bu2GFHX2R5w48Ywew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 9260dcebcc7dfc46-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=27147&min_rtt=21485&rtt_var=12101&sent=11&recv=6&lost=0&retrans=0&sent_bytes=4047&recv_bytes=1103&delivery_rate=27646&cwnd=12000&unsent_bytes=0&cid=6d63446c4e43661e&ts=1350&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/style.css?ver=1.7.6.1742923312 | 188.165.25.76 | 200 OK | 76 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/style.css?ver=1.7.6.1742923312 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeassembler source, ASCII text Hashfd11f69c8b00aa08c51bfdccd05e942c d438aaea6d2f431bbb2ab6758db79786216d3d92 2a0563a5beb0f0971675c9e3175de71283861c074730b89e53b3b7e139315e50
GET /wp-content/themes/retrotube/style.css?ver=1.7.6.1742923312 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/css
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pop.hubhc.com:5043/pub.js | 46.4.107.42 | 200 OK | 10 kB |
URL GET pop.hubhc.com:5043/pub.js IP46.4.107.42:5043 ASN#24940 Hetzner Online GmbH
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuernetart.com sp. z o.o. Subject*.hubhc.com FingerprintAD:F9:76:E0:E7:C8:9D:54:AE:8F:4E:81:9F:7B:4D:97:01:B3:E4:2D ValidityWed, 08 May 2024 06:25:18 GMT - Tue, 06 May 2025 00:00:00 GMT
File typeJavaScript source, ASCII text, with very long lines (10042) Hash455b19f20f734f7258eb572d70c86f6d 7733af4b8f22c80f4ca86c2d98affe6b4fed4a52 8d03490289ccff76ac6e42369a69a5f408012023aea46be10b2eeca68dcbe645
GET /pub.js HTTP/1.1
Host: pop.hubhc.com:5043
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 25 Mar 2025 19:37:21 GMT
Server: Popup Tracking Service
Cache-Control: public, max-age=86400, must-revalidate
Content-Type: text/javascript
Content-Length: 10043
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1741077133 | 188.165.25.76 | 200 OK | 39 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1741077133 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hashbe82e67d150fe3389c08e7a8c0ad85fb 262e3b6e3a49cb3fc13ba4ffa976ee3942dc45d4 7cc5a76e8a68ce8b924cdb7607b16a27ef82f20536828bfa000ed43838a51c82
GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1741077133 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| test.pop-hc.com:5043/bid_publisher?idfeed=3038&key=93cef9100723038a8df0f596211dbf472504da35&hints= | 46.4.107.42 | 204 No Content | 0 B |
URL GET test.pop-hc.com:5043/bid_publisher?idfeed=3038&key=93cef9100723038a8df0f596211dbf472504da35&hints= IP46.4.107.42:5043 ASN#24940 Hetzner Online GmbH
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.pop-hc.com FingerprintDA:E9:B1:15:43:D7:37:1D:04:CF:4E:9F:19:EA:63:FB:ED:FB:24:3E ValidityThu, 23 May 2024 00:00:00 GMT - Fri, 23 May 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bid_publisher?idfeed=3038&key=93cef9100723038a8df0f596211dbf472504da35&hints= HTTP/1.1
Host: test.pop-hc.com:5043
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://galaxyporn-net.yqlog.com
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Tue, 25 Mar 2025 19:37:26 GMT
Server: Popup Tracking Service
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Cache-Control: no-cache, no-store, must-revalidate
|
|
| wss://flr-eu4.cbox.ws:4435/?pool=5-937307-0 |  95.217.32.205 | 101 Switching Protocols | 0 B |
URL GET wss://flr-eu4.cbox.ws:4435/?pool=5-937307-0 IP95.217.32.205:4435 ASN#24940 Hetzner Online GmbH
Requested byhttps://www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 CertificateIssuerLet's Encrypt Subjectcbox.ws Fingerprint07:6E:3D:01:D3:14:34:96:15:23:E9:B5:0A:21:3F:32:F7:E9:4F:81 ValiditySun, 26 Jan 2025 11:21:50 GMT - Sat, 26 Apr 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pool=5-937307-0 HTTP/1.1
Host: flr-eu4.cbox.ws:4435
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://www5.cbox.ws
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DiOGXfIUBceob9fKYhxPPg==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Upgrade: websocket
Connection: Upgrade
Sec-Websocket-Accept: owLuOf6HzSxXiMdL7sUhLo74Ohw=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 | 188.165.25.76 | 200 OK | 4.6 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5089), with no line terminators Hash94c0b8315dee6f50f0a11c564b5ea89b d0c6ffd707c1596ee930a9872e9ccd1613273d10 d418da85f16f21e7b8763f8bf35ca398cf0e1533d11b2a1e27a4c7fa92dcabcc
GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 | 188.165.25.76 | 200 OK | 5.9 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (6031), with no line terminators Hashdbdc8c5f8595c20d7322408adfd4df15 51233488c694e5214b65cee86f1200e39e4287bd db4b2172bf11d66b497ee21257b6bd2383c95dbc5bb52d2903a90d31a1e1e4d8
GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 | 195.201.153.71 | 200 OK | 13 kB |
URL GET www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 IP195.201.153.71:443 ASN#24940 Hetzner Online GmbH
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcbox.ws Fingerprint07:6E:3D:01:D3:14:34:96:15:23:E9:B5:0A:21:3F:32:F7:E9:4F:81 ValiditySun, 26 Jan 2025 11:21:50 GMT - Sat, 26 Apr 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /box/?boxid=937307&boxtag=9zksm7 HTTP/1.1
Host: www5.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:23 GMT
content-type: text/html; charset=UTF-8
p3p: CP="NOI DSP COR NID CURa OUR NOR"
cache-control: public, max-age=10
last-modified: Tue, 25 Mar 2025 18:00:39 GMT
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js IP172.240.253.132:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcoursestiffenjealous.com FingerprintEC:37:27:F0:3A:B2:4F:D7:A0:8D:49:EE:F6:CF:B2:09:67:63:E8:B3 ValidityTue, 25 Feb 2025 13:02:37 GMT - Mon, 26 May 2025 13:02:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8afb1fdc6553c5ffabb80fcbea07175a/invoke.js HTTP/1.1
Host: coursestiffenjealous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Tue, 25 Mar 2025 19:37:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 0
Host: coursestiffenjealous.com
|
|
| coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js IP172.240.253.132:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcoursestiffenjealous.com FingerprintEC:37:27:F0:3A:B2:4F:D7:A0:8D:49:EE:F6:CF:B2:09:67:63:E8:B3 ValidityTue, 25 Feb 2025 13:02:37 GMT - Mon, 26 May 2025 13:02:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8afb1fdc6553c5ffabb80fcbea07175a/invoke.js HTTP/1.1
Host: coursestiffenjealous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Tue, 25 Mar 2025 19:37:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: coursestiffenjealous.com
|
|
| coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js IP172.240.253.132:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcoursestiffenjealous.com FingerprintEC:37:27:F0:3A:B2:4F:D7:A0:8D:49:EE:F6:CF:B2:09:67:63:E8:B3 ValidityTue, 25 Feb 2025 13:02:37 GMT - Mon, 26 May 2025 13:02:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8afb1fdc6553c5ffabb80fcbea07175a/invoke.js HTTP/1.1
Host: coursestiffenjealous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Tue, 25 Mar 2025 19:37:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: coursestiffenjealous.com
|
|
| galaxyporn-net.yqlog.com/apple-touch-icon.png | 188.165.25.76 | 302 Found | 11 kB |
URL GET galaxyporn-net.yqlog.com/apple-touch-icon.png IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /apple-touch-icon.png HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Cookie: proxy-permission-asked=true; _ga_KMS337CM66=GS1.1.1742931444.1.0.1742931444.0.0.0; _ga=GA1.1.815049849.1742931444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 25 Mar 2025 19:37:27 GMT
content-type: image/png
content-length: 0
location: https://galaxyporn.net/apple-touch-icon.png
expires: Sat, 24 May 2025 19:37:27 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
X-Firefox-Spdy: h2
|
|
| galaxyporn.net/apple-touch-icon.png | 172.67.179.56 | 200 OK | 11 kB |
URL GET galaxyporn.net/apple-touch-icon.png IP172.67.179.56:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerGoogle Trust Services Subjectgalaxyporn.net Fingerprint91:AF:16:51:44:35:73:B6:89:80:8C:96:11:34:1F:68:D5:9E:FF:0A ValidityTue, 04 Mar 2025 07:58:40 GMT - Mon, 02 Jun 2025 08:58:35 GMT
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash47617df9e5199f2a3d287b3b5f31c9a1 7d79722400422d724884cdf29f5af2c4c48c3261 70a99d5556722f6ea6419bba98c65a38c2bae29e3b65628a81d783d7d18f294d
GET /apple-touch-icon.png HTTP/1.1
Host: galaxyporn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://galaxyporn-net.yqlog.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 25 Mar 2025 19:37:27 GMT
content-type: image/png
content-length: 10989
cache-control: public, max-age=604800
expires: Tue, 01 Apr 2025 14:14:11 GMT
last-modified: Tue, 25 Mar 2025 13:29:16 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 19396
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67CRfQvCWclSLxdcDZE4M01dI2ruu4yFwVS%2Bj%2FCtR%2B6%2BsNLskN%2FYOVMsVksRHxB3ehCJgDi2hF%2FGQvViVPPlvV%2BMCKaPdnCfh7r%2BAHoC1UnuN%2FpN2tmPFtjYkgZQU1BOJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9260dcec1d92fc46-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=28024&min_rtt=21485&rtt_var=10829&sent=13&recv=8&lost=0&retrans=0&sent_bytes=5160&recv_bytes=1438&delivery_rate=805&cwnd=12000&unsent_bytes=0&cid=6d63446c4e43661e&ts=1399&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 | 188.165.25.76 | 200 OK | 819 B |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (905), with no line terminators Hash01597dddfbc10e99d18ae837b1b8cb0c 4a75e20b1cfb0653b06590574286c8197593c09b ad22361c015817a1ab020fd1856807801083c9a0a52ea157f410aaa633c08a6d
GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Cookie: proxy-permission-asked=true; _ga_KMS337CM66=GS1.1.1742931444.1.0.1742931444.0.0.0; _ga=GA1.1.815049849.1742931444
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:26 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:26 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 | 188.165.25.76 | 200 OK | 21 kB |
URL GET galaxyporn-net.yqlog.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (20018) Hash411d324de2ffdc734973324ea2327314 9eec8426d5ecc09acce14cefe9d617021ca1bfe2 4849bba2f1f6a90c929f95939a2487bf1cfcfbe7f27535466880c15f05618a78
GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 25 Mar 2025 19:37:22 GMT
content-type: text/javascript
vary: Accept-Encoding
expires: Thu, 24 Apr 2025 19:37:22 GMT
cache-control: max-age=2592000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js | 172.240.253.132 | 403 Forbidden | 0 B |
URL GET coursestiffenjealous.com/8afb1fdc6553c5ffabb80fcbea07175a/invoke.js IP172.240.253.132:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerLet's Encrypt Subjectcoursestiffenjealous.com FingerprintEC:37:27:F0:3A:B2:4F:D7:A0:8D:49:EE:F6:CF:B2:09:67:63:E8:B3 ValidityTue, 25 Feb 2025 13:02:37 GMT - Mon, 26 May 2025 13:02:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /8afb1fdc6553c5ffabb80fcbea07175a/invoke.js HTTP/1.1
Host: coursestiffenjealous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Server: nginx/1.21.6
Date: Tue, 25 Mar 2025 19:37:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: coursestiffenjealous.com
|
|
| static.cbox.ws/fonts/fontawesome-webfont.woff2?v=4.6.3 | 104.21.16.1 | 200 OK | 72 kB |
URL GET static.cbox.ws/fonts/fontawesome-webfont.woff2?v=4.6.3 IP104.21.16.1:443
Requested byhttps://www5.cbox.ws/box/?boxid=937307&boxtag=9zksm7 CertificateIssuerGoogle Trust Services Subjectcbox.ws FingerprintE9:43:44:DD:41:56:40:BC:6D:4C:7F:2F:BC:59:41:B0:3F:35:C8:74 ValidityMon, 03 Feb 2025 10:03:38 GMT - Sun, 04 May 2025 11:01:47 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 71896, version 4.393 Hashe6cf7c6ec7c2d6f670ae9d762604cb0b 97e438cc545714309882fbceadbf344fcaddcec5 7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: static.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www5.cbox.ws
DNT: 1
Connection: keep-alive
Referer: https://www5.cbox.ws/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 25 Mar 2025 19:37:24 GMT
content-type: application/octet-stream
content-length: 71896
last-modified: Fri, 29 Jul 2016 08:15:26 GMT
etag: "579b109e-118d8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 649711
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rYe0nKJVfztvmN%2FGj5VfZcaPvOMJ0SLRLFHgu1opP3bgA9mojOhka3UJAWLa9A6vIn%2BpmUyr8r%2F2iGtB8FMb%2Fh3NYNakTWeKoIbhFVZx%2FKPmTDFYuL5aryyRzH%2Fcw8vfyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 9260dcd7a9cf70c7-AMS
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=19820&min_rtt=19740&rtt_var=4293&sent=7&recv=9&lost=0&retrans=0&sent_bytes=3184&recv_bytes=1112&delivery_rate=216928&cwnd=214&unsent_bytes=0&cid=f58dd9d50ab5c82e&ts=56&x=0"
X-Firefox-Spdy: h2
|
|
| galaxyporn-net.yqlog.com/icon.svg | 188.165.25.76 | 302 Found | 505 B |
URL GET galaxyporn-net.yqlog.com/icon.svg IP188.165.25.76:443
Requested byhttps://galaxyporn-net.yqlog.com/ CertificateIssuerCentralNic Luxembourg Sàrl Subject*.yqlog.com FingerprintCC:C2:9F:46:52:7C:A2:95:FF:D6:3B:46:AA:92:1F:DC:EE:BC:F2:0A ValidityMon, 01 Jul 2024 00:00:00 GMT - Tue, 01 Jul 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /icon.svg HTTP/1.1
Host: galaxyporn-net.yqlog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://galaxyporn-net.yqlog.com/
Cookie: proxy-permission-asked=true; _ga_KMS337CM66=GS1.1.1742931444.1.0.1742931444.0.0.0; _ga=GA1.1.815049849.1742931444
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 25 Mar 2025 19:37:27 GMT
content-type: image/svg+xml
content-length: 0
location: https://galaxyporn.net/icon.svg
expires: Sat, 24 May 2025 19:37:27 GMT
cache-control: max-age=5184000
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: BYPASS
X-Firefox-Spdy: h2
|
|