| GET static.addtoany.com/menu/modules/core.pt5ow5lr.js | 104.22.70.197 | 200 OK | 72 kB |
URL GET static.addtoany.com/menu/modules/core.pt5ow5lr.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash7e998bb147b26903e88f08f39c0e2cfc 6c93ab9cb3371591d4031dc60b9c3ae571c3329e ef39bcc03d88448d0d38aba3dc609e9c9c444d037aebec926e6715e1cf956674
GET /menu/modules/core.pt5ow5lr.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536ac8ec9308-CPH
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
etag: W/"6e938442141e4680b5bd4187b8d6c216"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJpd9%2FCdj6F%2BzW%2BqkJSDRIyfZHhHRYNOOBvBumQa9nEkn5l6hb9vvI8jnwETOj74j6FbYW2ncDY2Bx%2BoV65PxTdJyIApSc9X7DMC4Y4RrEBzJTNa7Y7s9elYHKlg78Y4ZLLMpgre"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET 64.227.120.231/favicon-apple.png | 64.227.120.231 | 200 OK | 6.7 kB |
URL GET 64.227.120.231/favicon-apple.png IP 64.227.120.231:443
ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerZeroSSL Subjectc.cpfrx.info FingerprintB7:39:39:75:C6:64:C8:A0:4D:59:92:A2:8B:56:23:21:0F:FB:C5:F2 ValiditySat, 26 Apr 2025 00:00:00 GMT - Fri, 25 Jul 2025 23:59:59 GMT
File typePNG image data, 256 x 256, 8-bit/color RGB, non-interlaced Hash25b50c0a0f5248e142194bc7e2a3df22 cfbd9aab7c17ca50077e3ce032c9ac5ae28212e7 7edb2809098d209bdc54258b582cf1b05de69c7605ff2e8b7908837566326d5b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon-apple.png HTTP/1.1
Host: 64.227.120.231
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/_ja/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: image/png
last-modified: Fri, 01 Nov 2024 20:17:46 GMT
vary: Accept-Encoding
etag: W/"6725376a-1a36"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET static.addtoany.com/menu/svg/icons/a2a.js | 104.22.70.197 | 200 OK | 182 B |
URL GET static.addtoany.com/menu/svg/icons/a2a.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with no line terminators Hashbaf0595a19bdc7f7497b74731d2166c4 fd5714384c52fc0338083574434d12328313896c 3dab93242ee573bbcfc22c9d15acd47794e500ed44e6bd48a35400b39d65aa43
GET /menu/svg/icons/a2a.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d39599308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"0aca4ea1e5f8f250126a8e0c597dd969"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NmjCni2gP7C9Rd1BK3pL1MfJXtO1L1ThdpGnYVFPre8mOJ6FswlT4O0gTKmKkDYg6FezI8gYhsJ1317pu8arZPFkjxvs3ssi9ZMC4n%2B4VfWDduKOgHsdcaHeEKep1uqqesg9fVTz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET static.addtoany.com/menu/svg/icons/link.js | 104.22.70.197 | 200 OK | 1.4 kB |
URL GET static.addtoany.com/menu/svg/icons/link.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (1437), with no line terminators Hash2612b308f45d0aeddbd8540f3cf792f8 6c6a34a46b238ae0372b7f6126c8686a3c6b91d7 1b1e450814698cfd54d68f041c25c741d2adbde4e8e31a256db1be23d413d96c
GET /menu/svg/icons/link.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d49619308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"dd9ed66e949db0815ba57f9db1b47951"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=egkwcbVHZYW6YmwtgGdkwohBcAA4i%2BrfhtXvk%2Bxdf4Q6wV3EdW2uqS2LY0CRXNf1dlvU2FO%2FLX%2BpsgJKBv8utWw5TTF%2FVh7WQldplOomr10H%2FWrv6m3CHtTeG3T1nvC6k02B5yYxQLm%2Bud8vT7OXhSNN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET cdn.userreport.com/userreport.js | 54.240.174.40 | 200 OK | 234 kB |
URL GET cdn.userreport.com/userreport.js IP 54.240.174.40:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerAmazon Subject*.userreport.com Fingerprint4F:2B:C9:80:0F:4F:2F:55:1D:35:D2:47:C6:EC:E1:BA:9C:41:31:94 ValiditySat, 19 Oct 2024 00:00:00 GMT - Sun, 16 Nov 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (5431) Size234 kB (233508 bytes) Hashfae9e55918aeb37d2cc7c1a683b83b39 3bb1afbc245b02cbbcd8ba0c3f8982c2e7cfe983 5dab681601c578be4f7edb054fcc231ffdf8edd6722e02c6755060f758ad178b
GET /userreport.js HTTP/1.1
Host: cdn.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 68311
last-modified: Mon, 17 Jun 2024 08:43:06 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: 90PrkftqJEg6uvZpcLnXj_G3ytNZmqiI
accept-ranges: bytes
server: AmazonS3
date: Fri, 13 Jun 2025 02:39:00 GMT
cache-control: max-age=3600
etag: "c9f01668b5bab26392d9e12e8819a473"
x-cache: Hit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BdLzF87PWF1UWtW17IGUcugYYA1Hy6rbg8qxQhsH_NrWNq8-YP7PBg==
age: 1222
X-Firefox-Spdy: h2
|
|
| GET www.googletagmanager.com/gtag/js?id=G-FZZM73M15D | 142.250.74.168 | 200 OK | 396 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-FZZM73M15D IP 142.250.74.168:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:76:57:2F:C3:21:F2:5F:71:E4:85:A5:DB:F7:65:3F:51:03:55:07 ValidityMon, 12 May 2025 08:42:57 GMT - Mon, 04 Aug 2025 08:42:56 GMT
File typeJavaScript source, ASCII text, with very long lines (5913) Size396 kB (395550 bytes) Hash43e77561037bf1aec543de4db3c9bf1c 9969fa2ce6c377716b763aab65e65c132d14fc8b 210f7f806c44a91a02ffe283f8c4622eea0c147b6eba92c6a41ee06687c715ac
GET /gtag/js?id=G-FZZM73M15D HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 13 Jun 2025 02:58:22 GMT
expires: Fri, 13 Jun 2025 02:58:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 132024
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET 64.227.120.231/images/logo.png | 64.227.120.231 | 200 OK | 11 kB |
URL GET 64.227.120.231/images/logo.png IP 64.227.120.231:443
ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerZeroSSL Subjectc.cpfrx.info FingerprintB7:39:39:75:C6:64:C8:A0:4D:59:92:A2:8B:56:23:21:0F:FB:C5:F2 ValiditySat, 26 Apr 2025 00:00:00 GMT - Fri, 25 Jul 2025 23:59:59 GMT
File typePNG image data, 700 x 138, 8-bit/color RGBA, non-interlaced Hash0d4dd664a361c078ba7d5dc005af9444 79649599760905a851baa79ea0ea34e1c947cee5 9c604fa5f3154dedb82917258dbff71b3000c906eeef72d20a0178ca615723e4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /images/logo.png HTTP/1.1
Host: 64.227.120.231
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/_ja/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: image/png
last-modified: Thu, 10 Apr 2025 19:10:12 GMT
vary: Accept-Encoding
etag: W/"67f81794-29e4"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET static.addtoany.com/menu/sm.25.html#type=core&event=load | 104.22.70.197 | 200 OK | 716 B |
URL GET static.addtoany.com/menu/sm.25.html#type=core&event=load IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeHTML document, ASCII text, with very long lines (624) Hash41b7ed0cbe240173eea85148fcba633e 39acd5fe099974486a1c9ba11ba0fe7be6bc97ca 274d4116239b63097bb7c16e56e27cbb5a77be20392fb8e2317c0a0235185cad
GET /menu/sm.25.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: text/html; charset=utf-8
cf-ray: 94ee536a98e79308-CPH
access-control-allow-origin: *
cache-control: max-age=315360000, immutable
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kXiB0%2BYx1NyD29HnVBOYqG1X8Ejoc3byd6vhD%2FCJoJfNEc%2FBW2iuUA4mYo4XrdX34nbAzXkOx5ShP76%2FTEmSELWwI2Y67Z3HQQOcHyT5eLJ9ltmO7aYyAP7VFPPXU4UPai9YYe9O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 23850
last-modified: Thu, 12 Jun 2025 20:20:52 GMT
priority: u=4,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET static.addtoany.com/menu/svg/icons/twitter.js | 104.22.70.197 | 200 OK | 645 B |
URL GET static.addtoany.com/menu/svg/icons/twitter.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (645), with no line terminators Hashca05cf90bd32d6134c0b92464c343f9a 187feb5cc71d225717838268487a0abc9b8d405c 3003867b66a32c12fdafeefc27cf06d906e5a99ba275550ab757f4bb04834636
GET /menu/svg/icons/twitter.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d395a9308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"af2b829f9b79fabec7c0148a8b7e444b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nYGyVB8tv7cqcOOKiNeF3ow4O90bvr3ZNU3DaNCCKFxVnDMJmZdyRdAeMHq3WjbdzY5Eyshf2XHHY%2B1az8fD%2BlOpg3x9N1BMXNK%2F1bpxMZ8hQXtjVXWaFb%2F3FPPH6oRUNxKqVM0B7JLqw7X9zTu%2FMZk6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET static.addtoany.com/menu/svg/icons/telegram.js | 104.22.70.197 | 200 OK | 360 B |
URL GET static.addtoany.com/menu/svg/icons/telegram.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (360), with no line terminators Hash48f25c508c92c3601cf047609318001f 59117e825084c63a0dda48edec82c14a60e16f23 6415561e892cf9d614e7179f71353af4ceadfd641d71c42fe54c9420eb0d0138
GET /menu/svg/icons/telegram.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d395d9308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"fb47b4f6548b6499923a1beed7472419"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JWYDmaTVNUTYnbmIeMm75H8Q1NIJ2kKXL55Dsg8PgG4sBwh8QPjMr8I2zQv77kiUvVW0itJYXsC5P%2B9SqlkPcynBNcmkNNT3Va1%2BfVo5cMDK5jnttvBUfvU8lRhB3ekQ9yW%2Fkb5s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET static.addtoany.com/menu/svg/icons/pinterest.js | 104.22.70.197 | 200 OK | 892 B |
URL GET static.addtoany.com/menu/svg/icons/pinterest.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (892), with no line terminators Hash829f9f104207e6afc27f967b307d594a b7f2a19ff6f22e82eccce298a79a043134a3ccd8 af131f38af73817b1fbcd3381d88c95f4123b4b5a58ca4bd0872a68f29cbbf2d
GET /menu/svg/icons/pinterest.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d395f9308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"b83511f1e536e2440b4e06f3278d8a84"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dbxsSgF8IKQMYCAn9aOGot9Mt6kOevjMYgl7%2FjtN%2F9YREE2N6Q0DPzpj5f4AyQijaD3MontXvWfBRCCbGv2RfQSrmoi5iP9rKqv2JGhLGj8fD8oCYiJTeALqAa%2BHm%2FIBvNEST4VPVDRSLiSaoJTINj51"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET cdn.userreport.com/w_711722bf-8d17-4423-979e-bc7e656808cf/settings.js | 54.240.174.40 | 200 OK | 5.2 kB |
URL GET cdn.userreport.com/w_711722bf-8d17-4423-979e-bc7e656808cf/settings.js IP 54.240.174.40:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerAmazon Subject*.userreport.com Fingerprint4F:2B:C9:80:0F:4F:2F:55:1D:35:D2:47:C6:EC:E1:BA:9C:41:31:94 ValiditySat, 19 Oct 2024 00:00:00 GMT - Sun, 16 Nov 2025 23:59:59 GMT
File typeASCII text, with very long lines (5165), with no line terminators Hash0f0e3d58549339d9b61e53310d4d4e6d 10b9591f0b108b261235501399bbac6586dce1a9 6b8117a56d756ce4021f0773d384069aac7187ab701e9226c5f78e355e304e6e
GET /w_711722bf-8d17-4423-979e-bc7e656808cf/settings.js HTTP/1.1
Host: cdn.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 1676
last-modified: Tue, 23 Feb 2021 15:03:57 GMT
content-encoding: gzip
x-amz-version-id: 6kahkgKu_51dAUeHjDQPWKFfqN0mQxrD
accept-ranges: bytes
server: AmazonS3
date: Fri, 13 Jun 2025 02:58:24 GMT
cache-control: max-age=0
etag: "a5e8271d062b5a95dc648db5e2547e0d"
x-cache: RefreshHit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VLj-tr3ihqLlQqLiUmFZxEbAHM5GG4B5XkOyATLBT7JkOv1-xbaY3Q==
X-Firefox-Spdy: h2
|
|
| GET cdn.userreport.com/SystemSettings.js | 54.240.174.40 | 200 OK | 894 B |
URL GET cdn.userreport.com/SystemSettings.js IP 54.240.174.40:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerAmazon Subject*.userreport.com Fingerprint4F:2B:C9:80:0F:4F:2F:55:1D:35:D2:47:C6:EC:E1:BA:9C:41:31:94 ValiditySat, 19 Oct 2024 00:00:00 GMT - Sun, 16 Nov 2025 23:59:59 GMT
File typeASCII text, with very long lines (891), with no line terminators Hasha8dd66654110a9514cfee49eeb2a3c9e 44bb507c5ed84dedfd708060b304d9553e23723b 9464552e64337889ef3a9dc120396d91f87b2015ad60a8bc0b61d846839f28af
GET /SystemSettings.js HTTP/1.1
Host: cdn.userreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
content-length: 442
last-modified: Thu, 26 Nov 2020 08:23:54 GMT
content-encoding: gzip
x-amz-version-id: 6kJ.oVpG3emizYDtxaJznkN1t118DNMr
accept-ranges: bytes
server: AmazonS3
date: Fri, 13 Jun 2025 02:58:24 GMT
cache-control: max-age=0
etag: "fbcd727c30fa10bc139aca4aec81f8e3"
vary: accept-encoding
x-cache: RefreshHit from cloudfront
via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TCatKLvm2m9IhcH7ubf0Lq69u7CJQWyMhWNjIqDRq335vitaRN3i2g==
X-Firefox-Spdy: h2
|
|
| GET static.addtoany.com/menu/page.js | 104.22.70.197 | 200 OK | 3.2 kB |
URL GET static.addtoany.com/menu/page.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3179), with no line terminators Hash57b268c32627d8d13671f43be7c47b84 0eebe8bc9958922a2a354b4abdca2f4d326f49e9 53d16f311b01e5f9b5e7dcb2ec11b11e5ed23e155ed05727a7a42472d608118f
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee5368fff692a4-CPH
access-control-allow-origin: *
cache-control: max-age=86400, stale-while-revalidate=30, public
etag: W/"060b0026b51016bf08c9d4b4a73b7960"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0lIFM3bMTXormETVGYt3PcWDl0CQYBhqrP6wgDshgz8pBa7tZKMMErCPiQIQYSJg8yaFfRx6OWepPisOQ33ZPir0XqzfZWuwXdFVKU1NRUZ1ukzMoSx78g84PuC2IS1CwiI1zI8Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: HIT
age: 28349
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 64.227.120.231/assets/__cpa.mainAsync.js?dummy=13c97d81a5b7ed8522c873e84e036472 | 64.227.120.231 | 200 OK | 1.0 MB |
URL GET 64.227.120.231/assets/__cpa.mainAsync.js?dummy=13c97d81a5b7ed8522c873e84e036472 IP 64.227.120.231:443
ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerZeroSSL Subjectc.cpfrx.info FingerprintB7:39:39:75:C6:64:C8:A0:4D:59:92:A2:8B:56:23:21:0F:FB:C5:F2 ValiditySat, 26 Apr 2025 00:00:00 GMT - Fri, 25 Jul 2025 23:59:59 GMT
File typeASCII text, with very long lines (65309) Size1.0 MB (1018024 bytes) Hash13c97d81a5b7ed8522c873e84e036472 e31c542a9ac49f2603d774fca7c993d7822d1e14 753d89df1767ec1a4d1d488f9bdef27628431f8f44fc080dba776cae559b5e3f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /assets/__cpa.mainAsync.js?dummy=13c97d81a5b7ed8522c873e84e036472 HTTP/1.1
Host: 64.227.120.231
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/_ja/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 10 Jun 2025 11:47:47 GMT
vary: Accept-Encoding
etag: W/"68481b63-f88a8"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET static.addtoany.com/menu/svg/icons/reddit.js | 104.22.70.197 | 200 OK | 893 B |
URL GET static.addtoany.com/menu/svg/icons/reddit.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (893), with no line terminators Hash408cc755e613b4f00fbe10d7411ed087 14341990ed687477b3addbdd1a3b50ae8a98589b 68ed9b82b62d45cf5d12587a7e9566a4ddeb94d69bcb225e9e3c7268c76b3cbb
GET /menu/svg/icons/reddit.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d395e9308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"1fe5b5008de689ce6464d7bcb07e742c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2FqbLTlzX6Z8Yeb%2BPHf7QD9exo0%2BH8gabEcMGCxIGI%2FLhECUQwuQYbEeOk0SgxFT1BNeDPyfxBrAfc%2BqVwEov4CAA0whd5MIhwIA2UjUWQk9dPOP3Vg56%2BOS5P4Hw%2B5TfY05sI%2BEdiRvCwikQc54%2B2Wd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET static.addtoany.com/menu/svg/icons/whatsapp.js | 104.22.70.197 | 200 OK | 1.1 kB |
URL GET static.addtoany.com/menu/svg/icons/whatsapp.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (1108), with no line terminators Hash0e8b3ac6bda5451ff39c5ecd6d7b3873 fb477a11167000a30e45369e686ec43dd62d026b c15e1379ca2c59f99912500bbc23a0d1d88f43198cbe1b53d87776fa351385eb
GET /menu/svg/icons/whatsapp.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d395c9308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"83af4df8173e43227812296bb8542dcf"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Cgts8V8MMjSz9AFejp4ypJHTMaz85QJzmnvBTVRzDtsMGT%2BcCvCfNrbgqn69B6p2IcVHPdYmg8TsInzbGiYF7wKYTDsOfVilbBLcrhWZnKt%2FVUE3zqKPFyeQ94FQuiOjJIFftYb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET static.addtoany.com/menu/svg/icons/linkedin.js | 104.22.70.197 | 200 OK | 435 B |
URL GET static.addtoany.com/menu/svg/icons/linkedin.js IP 104.22.70.197:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectstatic.addtoany.com Fingerprint8B:39:17:06:F0:14:1F:A9:7D:B6:A5:4C:2A:E2:27:1B:B5:60:2D:7E ValidityWed, 30 Apr 2025 05:02:07 GMT - Tue, 29 Jul 2025 06:01:59 GMT
File typeASCII text, with very long lines (435), with no line terminators Hash642bb6c34a06bbbc8a77593be82ce6a4 e15d59b78d23923db8723101f547775413f3d3a9 ce5dbb2cdb85126fdc9d774971a56f8848dbee977a382bd512a5f8b49ea8c727
GET /menu/svg/icons/linkedin.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://static.addtoany.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript
cf-ray: 94ee536d39609308-CPH
access-control-allow-origin: *
cache-control: max-age=7776000, stale-while-revalidate=30, public
etag: W/"00b1b78053ab07c79bfea2e5a1db9d70"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6jfPscx9MmuxYsvwyIAvVgouTeQgV6XzQHBns6nDAwva9cQntauJS7y4TeGMBo6Mz8ym0VWinIiHOCYzXlfpgSqWpetcYeYomnrMVwOaVU1ELISn1GlLUBdaBndjFyvnrZXC49cG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: br
cf-cache-status: REVALIDATED
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| | 64.227.120.231 | 200 OK | 292 kB |
IP 64.227.120.231:443
ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerZeroSSL Subjectc.cpfrx.info FingerprintB7:39:39:75:C6:64:C8:A0:4D:59:92:A2:8B:56:23:21:0F:FB:C5:F2 ValiditySat, 26 Apr 2025 00:00:00 GMT - Fri, 25 Jul 2025 23:59:59 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (49967) Size292 kB (292345 bytes) Hashe7c29384a3634c73d3b577473f15e28b 41fce82180bbb3936d63a8e6795fd6a9e9ec9723 5d9acce4598d4dfc00871658d93730f0022f44de5ab000c4de707410196b4f14
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /_ja/ HTTP/1.1
Host: 64.227.120.231
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jun 2025 02:58:21 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-store, no-cache, max-age=0
last-modified: Friday, 13-Jun-2025 02:53:21 UTC
access-control-allow-origin: https://64.227.120.231
strict-transport-security: max-age=0
x-xss-protection: 1
x-content-type-options: nosniff
content-security-policy: default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src https:; frame-src http: https: data:; upgrade-insecure-requests
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/js/all.min.js | 104.17.25.14 | 200 OK | 1.2 MB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/js/all.min.js IP 104.17.25.14:443
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeJavaScript source, ASCII text, with very long lines (65350) Size1.2 MB (1194960 bytes) Hash5e1e1bd25a94741b7828800b758b88df c4198f8a39a892ba4dfd85b7a228e03b77e36a04 20a3ef6979bbe5e4de1afaecc703e1d34cbc5e3ceab36d378539506327692d72
GET /ajax/libs/font-awesome/5.15.1/js/all.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://64.227.120.231
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 362308
cf-ray: 94ee5367fa48568b-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5f7b5b5f-123bd0"
last-modified: Mon, 05 Oct 2020 17:43:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 249628
expires: Wed, 03 Jun 2026 02:58:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NIciWdHbpq6UB233kz8uTFOKW2qLofw1RUsfamlFPjnip3TTjzHe414SQgma3wNdjsaeM3E7suE%2F39o5TZOZgKbX3W9LgbyNsOs4o1v9IjGOnxHoruxVVkemmqwK8pzZYuQk6EHO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET 64.227.120.231/favicon.png | 64.227.120.231 | 200 OK | 7.6 kB |
URL GET 64.227.120.231/favicon.png IP 64.227.120.231:443
ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://64.227.120.231/_ja/ CertificateIssuerZeroSSL Subjectc.cpfrx.info FingerprintB7:39:39:75:C6:64:C8:A0:4D:59:92:A2:8B:56:23:21:0F:FB:C5:F2 ValiditySat, 26 Apr 2025 00:00:00 GMT - Fri, 25 Jul 2025 23:59:59 GMT
File typePNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced Hash27edab9ccce9fbd864dc38857aa905b2 666aa00d29f5e62b3523d1852b2270e59d66c664 50f786265e54b9ffecde5493d988cddc7f60b6f3979ebd908e9fd2c5c4751ae4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.png HTTP/1.1
Host: 64.227.120.231
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://64.227.120.231/_ja/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 13 Jun 2025 02:58:22 GMT
content-type: image/png
last-modified: Fri, 01 Nov 2024 20:17:46 GMT
vary: Accept-Encoding
etag: W/"6725376a-1dc2"
strict-transport-security: max-age=15768000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
|
|