| girlsnear4ycouf2.click/landings/70/js/vendor.c646da3c88b8155a753aeef51880893f.js |  0.0.0.0 | | 0 B |
URL GET girlsnear4ycouf2.click/landings/70/js/vendor.c646da3c88b8155a753aeef51880893f.js IP0.0.0.0:0
Requested byhttps://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /landings/70/js/vendor.c646da3c88b8155a753aeef51880893f.js HTTP/1.1
Host: girlsnear4ycouf2.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D
Cookie: XSRF-TOKEN=eyJpdiI6IitTN25helVNTUtJRWdhc3VVQlhtY1E9PSIsInZhbHVlIjoiYVhDeFF2c1NQNUpYWEIzVS9VZDRZUW5wSERvS0l3M1RxT2xtb25OaUgvS2Fnb3NNZmhzcVVtZEFoTjZFUXE3NCIsIm1hYyI6IjhmNTkxNWI0MjY0ODg0MTY0MmFiMTJiYmVkM2Q0NGRkODQ1ZWVhMTUxZTlkNDAzYjlhNzNkNjU2NmNiN2YyMTkifQ%3D%3D; laravel_session=eyJpdiI6ImRQNWN5NHdJbVN5NWRlTU4wR0Izd0E9PSIsInZhbHVlIjoiRW1KK3cwQW5IUit0Z1hBa1FwNGMycElrNWxRVGJ1bURxcGg5QTFxajcyOWhvL241aG9lK3N4Y200azdQTFovMSIsIm1hYyI6ImQ0ZDgxZWNmN2Q2NzVlMzk3MGYzY2YyNmU0NDE4NzEzYjM1YTQ4NWQyOTJhOTc1YjA4MTBlYmY1OWMyNDk3MTIifQ%3D%3D; SRVNAME=w2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| goodnplenty53.obedfobedfordparkdistrictcohi.life/7Ze5EaXy7ENa7P5sb2ExQHdpbmRlcm1lcmUuY29t_XBvbGxvcwECAyZzMz1td3o |  172.67.145.242 | 200 OK | 330 B |
URL User Request GET HTTP/2goodnplenty53.obedfobedfordparkdistrictcohi.life/7Ze5EaXy7ENa7P5sb2ExQHdpbmRlcm1lcmUuY29t_XBvbGxvcwECAyZzMz1td3o IP172.67.145.242:443
CertificateIssuerGoogle Trust Services LLC Subjectobedfobedfordparkdistrictcohi.life FingerprintE4:D6:66:C9:15:E4:9F:87:53:85:2D:DB:AC:78:8A:DD:DC:62:A6:B5 ValiditySat, 27 Apr 2024 08:33:00 GMT - Fri, 26 Jul 2024 08:32:59 GMT
File typeHTML document, ASCII text, with very long lines (356), with no line terminators Hashfc819d2edf51345ea3defbba7ac9f3d9 04074df6484e78122a4bf19c24853f81684fc0da b9216a5529db44dafa99fdf4319ce346bdccbe95895e9b771a161cfbba186fb1
GET /7Ze5EaXy7ENa7P5sb2ExQHdpbmRlcm1lcmUuY29t_XBvbGxvcwECAyZzMz1td3o HTTP/1.1
Host: goodnplenty53.obedfobedfordparkdistrictcohi.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:48:11 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/5.4.16
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BxUwWebfZZdVwTiFQlJ5prCogqI%2FBSTil%2F3nwSc3yC%2FuZcz2aBnDwQifYBTUpjtBqSWTPr7q9Z19z8orm5oyhMr1OHnsqVgQr7o0xBDxX1mYHPZFuuW0Xrv4JekRmA1UiLAbTawvPbi9qUTjIlwtGuMXsVYzj2jVsH4fYJ6EfgOiJaM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ca702fb1b56bb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| goodnplenty53.obedfobedfordparkdistrictcohi.life/favicon.ico | 0.0.0.0 | | 0 B |
URL GET goodnplenty53.obedfobedfordparkdistrictcohi.life/favicon.ico IP0.0.0.0:0
Requested byhttps://goodnplenty53.obedfobedfordparkdistrictcohi.life/7Ze5EaXy7ENa7P5sb2ExQHdpbmRlcm1lcmUuY29t_XBvbGxvcwECAyZzMz1td3o CertificateIssuerGoogle Trust Services LLC Subjectobedfobedfordparkdistrictcohi.life FingerprintE4:D6:66:C9:15:E4:9F:87:53:85:2D:DB:AC:78:8A:DD:DC:62:A6:B5 ValiditySat, 27 Apr 2024 08:33:00 GMT - Fri, 26 Jul 2024 08:32:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: goodnplenty53.obedfobedfordparkdistrictcohi.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goodnplenty53.obedfobedfordparkdistrictcohi.life/7Ze5EaXy7ENa7P5sb2ExQHdpbmRlcm1lcmUuY29t_XBvbGxvcwECAyZzMz1td3o
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D | 104.21.45.121 | 200 OK | 6.3 kB |
URL User Request GET HTTP/2girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D IP104.21.45.121:443
CertificateIssuerGoogle Trust Services LLC Subjectgirlsnear4ycouf2.click FingerprintCB:6A:92:C0:B8:9A:1B:A6:FD:31:20:FA:BD:1E:82:42:7A:75:02:15 ValidityThu, 18 Apr 2024 10:46:50 GMT - Wed, 17 Jul 2024 10:46:49 GMT
File typeHTML document, ASCII text, with very long lines (6682), with no line terminators Hash74095841e68843b8dbaaa6d6a2b6a9ed 002eab63d4d3b32f8637c594e9687076dcf1ea93 04393282a779b6a8cc4704cb6abc04038f938c82b74ff6188c55d6e833da58cb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D HTTP/1.1
Host: girlsnear4ycouf2.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://goodnplenty53.obedfobedfordparkdistrictcohi.life/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:48:15 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: XSRF-TOKEN=eyJpdiI6IitTN25helVNTUtJRWdhc3VVQlhtY1E9PSIsInZhbHVlIjoiYVhDeFF2c1NQNUpYWEIzVS9VZDRZUW5wSERvS0l3M1RxT2xtb25OaUgvS2Fnb3NNZmhzcVVtZEFoTjZFUXE3NCIsIm1hYyI6IjhmNTkxNWI0MjY0ODg0MTY0MmFiMTJiYmVkM2Q0NGRkODQ1ZWVhMTUxZTlkNDAzYjlhNzNkNjU2NmNiN2YyMTkifQ%3D%3D; expires=Wed, 08-May-2024 23:48:15 GMT; Max-Age=7200; path=/; samesite=lax
laravel_session=eyJpdiI6ImRQNWN5NHdJbVN5NWRlTU4wR0Izd0E9PSIsInZhbHVlIjoiRW1KK3cwQW5IUit0Z1hBa1FwNGMycElrNWxRVGJ1bURxcGg5QTFxajcyOWhvL241aG9lK3N4Y200azdQTFovMSIsIm1hYyI6ImQ0ZDgxZWNmN2Q2NzVlMzk3MGYzY2YyNmU0NDE4NzEzYjM1YTQ4NWQyOTJhOTc1YjA4MTBlYmY1OWMyNDk3MTIifQ%3D%3D; expires=Wed, 08-May-2024 23:48:15 GMT; Max-Age=7200; path=/; httponly; samesite=lax
SRVNAME=w2; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hm16tUbexkhMYDP5TqMCPdezqMtZVdcEVLBudVLaHFa4AlTtvlxBK4ezXTMQ0z42rJW4akE5hbSQy3dx3MBVdB9UaczeXDxwcoZnte1uDgx4rUjLYUKJ1voih03uL1jf%2FQLxojwOvP14"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880ca7128e9e0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| svntrk.com/assets/ser10_663bf31f0050b.js |  188.114.96.1 | 200 OK | 0 B |
URL GET HTTP/2svntrk.com/assets/ser10_663bf31f0050b.js IP188.114.96.1:443
Requested byhttps://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D CertificateIssuerCloudflare, Inc. Subjectsvntrk.com Fingerprint83:5F:B1:05:69:64:18:2B:AF:21:B6:08:6A:BF:B6:F1:B5:95:C8:99 ValidityThu, 28 Dec 2023 00:00:00 GMT - Fri, 27 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/ser10_663bf31f0050b.js HTTP/1.1
Host: svntrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsnear4ycouf2.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 08 May 2024 21:48:15 GMT
content-type: text/javascript; charset=UTF-8
cache-control: no-cache, private
cf-cache-status: BYPASS
set-cookie: svnimp=663bf31f9c23e; path=/; secure; httponly; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W5Y9i89yJKoJsP8XD9BEeIUcnVMrHv%2FwhVow%2FXuaIR8OGeulD%2Fk2fCYAWUe%2FHQCnslBzFkbHgB8f5YO6Z6796L5IuQ1N3GxFimjzv1U2ZFM8WBkttLBMKtcTwMIq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ca723b9edb529-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| girlsnear4ycouf2.click/scripts/fp.v3.646d4b3deea4287def3fdfc18906bcc7.js | 104.21.45.121 | 200 OK | 40 kB |
URL GET HTTP/3girlsnear4ycouf2.click/scripts/fp.v3.646d4b3deea4287def3fdfc18906bcc7.js IP104.21.45.121:443
Requested byhttps://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D CertificateIssuerGoogle Trust Services LLC Subjectgirlsnear4ycouf2.click FingerprintCB:6A:92:C0:B8:9A:1B:A6:FD:31:20:FA:BD:1E:82:42:7A:75:02:15 ValidityThu, 18 Apr 2024 10:46:50 GMT - Wed, 17 Jul 2024 10:46:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scripts/fp.v3.646d4b3deea4287def3fdfc18906bcc7.js HTTP/1.1
Host: girlsnear4ycouf2.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D
Cookie: XSRF-TOKEN=eyJpdiI6IitTN25helVNTUtJRWdhc3VVQlhtY1E9PSIsInZhbHVlIjoiYVhDeFF2c1NQNUpYWEIzVS9VZDRZUW5wSERvS0l3M1RxT2xtb25OaUgvS2Fnb3NNZmhzcVVtZEFoTjZFUXE3NCIsIm1hYyI6IjhmNTkxNWI0MjY0ODg0MTY0MmFiMTJiYmVkM2Q0NGRkODQ1ZWVhMTUxZTlkNDAzYjlhNzNkNjU2NmNiN2YyMTkifQ%3D%3D; laravel_session=eyJpdiI6ImRQNWN5NHdJbVN5NWRlTU4wR0Izd0E9PSIsInZhbHVlIjoiRW1KK3cwQW5IUit0Z1hBa1FwNGMycElrNWxRVGJ1bURxcGg5QTFxajcyOWhvL241aG9lK3N4Y200azdQTFovMSIsIm1hYyI6ImQ0ZDgxZWNmN2Q2NzVlMzk3MGYzY2YyNmU0NDE4NzEzYjM1YTQ4NWQyOTJhOTc1YjA4MTBlYmY1OWMyNDk3MTIifQ%3D%3D; SRVNAME=w2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:48:15 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 09 Apr 2024 11:06:03 GMT
etag: W/"6615211b-9ca8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2675
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DIXNYazFJP34%2BS2l3W3h0ed1spt6SHzKu7LbzPPq1X%2Fehg1I%2BlruNSsahRV2bXw1GDHvd03RK%2Fjb8rMG5yC1vyF4IiGCWqXW1jaVurwtATt8CpMlEqQBqPjw%2FfEkOyL9X6druW4sTUTy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ca72399c0569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| girlsnear4ycouf2.click/landings/70/fonts/vendor.385b113642131292f90332a42c514783.css | 104.21.45.121 | 200 OK | 10 kB |
URL GET HTTP/3girlsnear4ycouf2.click/landings/70/fonts/vendor.385b113642131292f90332a42c514783.css IP104.21.45.121:443
Requested byhttps://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D CertificateIssuerGoogle Trust Services LLC Subjectgirlsnear4ycouf2.click FingerprintCB:6A:92:C0:B8:9A:1B:A6:FD:31:20:FA:BD:1E:82:42:7A:75:02:15 ValidityThu, 18 Apr 2024 10:46:50 GMT - Wed, 17 Jul 2024 10:46:49 GMT
File typeASCII text, with very long lines (10203) Hashc92facb94733950490245aa41dac2d90 b966089bd6950b34c56b87a5ca1e982ecba2d961 8399abab9213355fd700f93643f96de62de5c4683bf25709b2b3770ef9a7d229
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /landings/70/fonts/vendor.385b113642131292f90332a42c514783.css HTTP/1.1
Host: girlsnear4ycouf2.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://girlsnear4ycouf2.click/?s1=ser10&i_=bG9hMUB3aW5kZXJtZXJlLmNvbQ%3D%3D
Cookie: XSRF-TOKEN=eyJpdiI6IitTN25helVNTUtJRWdhc3VVQlhtY1E9PSIsInZhbHVlIjoiYVhDeFF2c1NQNUpYWEIzVS9VZDRZUW5wSERvS0l3M1RxT2xtb25OaUgvS2Fnb3NNZmhzcVVtZEFoTjZFUXE3NCIsIm1hYyI6IjhmNTkxNWI0MjY0ODg0MTY0MmFiMTJiYmVkM2Q0NGRkODQ1ZWVhMTUxZTlkNDAzYjlhNzNkNjU2NmNiN2YyMTkifQ%3D%3D; laravel_session=eyJpdiI6ImRQNWN5NHdJbVN5NWRlTU4wR0Izd0E9PSIsInZhbHVlIjoiRW1KK3cwQW5IUit0Z1hBa1FwNGMycElrNWxRVGJ1bURxcGg5QTFxajcyOWhvL241aG9lK3N4Y200azdQTFovMSIsIm1hYyI6ImQ0ZDgxZWNmN2Q2NzVlMzk3MGYzY2YyNmU0NDE4NzEzYjM1YTQ4NWQyOTJhOTc1YjA4MTBlYmY1OWMyNDk3MTIifQ%3D%3D; SRVNAME=w2
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 08 May 2024 21:48:25 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 11:06:22 GMT
etag: W/"6615212e-27dc"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGWouxuOD75B5ZwUsnrX1sZst37JoKoMlioTqh6QRTJeWLdKWxFouqfdx2drtAjqG6uuzrBW0DWkbj90Hfoc6YamMwFuJfP3fx39ch6xHxP0cC%2Bv0yXKra1NqkX%2Fmi5%2Bziyz6COnGHsv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880ca72399c2569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|