| browser-session.com/?a=1112&c=1665&s2=w2fko9cgbaubods0jp2ve18u |  52.2.48.141 | 302 Found | 264 B |
URL User Request GET HTTP/1.1browser-session.com/?a=1112&c=1665&s2=w2fko9cgbaubods0jp2ve18u IP52.2.48.141:443
CertificateIssuerGlobalSign nv-sa Subject*.browser-session.com FingerprintA2:B5:E2:09:A3:05:B9:12:3A:A0:B0:83:AD:E8:46:BC:9A:A2:70:32 ValidityWed, 13 Dec 2023 13:27:38 GMT - Mon, 13 Jan 2025 13:27:37 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hasha01c1942ecf0616eb257f0f049812431 f87c79f82b4816577091c51d3a2e72c861be5b7b 4f109b0f65e5a47e8e6ea935d6b8075df93b55cce9e1d738d58e1328bc71a9f1
GET /?a=1112&c=1665&s2=w2fko9cgbaubods0jp2ve18u HTTP/1.1
Host: browser-session.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 264
Content-Type: text/html; charset=utf-8
Date: Fri, 26 Apr 2024 21:26:22 GMT
Location: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
P3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: sid=NfyqBIzUm6Sn60qSMufWpY0AO6IJI57nZU2ZVeeWMzV1dE7I53we3Q==; domain=.browser-session.com; path=/; SameSite=None; secure; HttpOnly
trk=5mxevEy/hIbMNKf4wHKAyo0AO6IJI57nZU2ZVeeWMzV1dE7I53we3Q==; domain=.browser-session.com; expires=Sun, 26-Apr-2026 21:26:22 GMT; path=/; SameSite=None; secure; HttpOnly
c1314=NfyqBIzUm6SOUbc9Dep8WjndDhtlcFWqaMYaRawjAdAJl6H/iq4k6A==; domain=.browser-session.com; expires=Sun, 26-May-2024 21:26:22 GMT; path=/; SameSite=None; secure; HttpOnly
Connection: close
|
|
| cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css |  104.17.25.14 | 200 OK | 19 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css IP104.17.25.14:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (52276) Hash5222e06b77a1692fa2520a219840e6be 8b4236206a8b86af3761a244277663046d7ff7ee 0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5
GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: text/css; charset=utf-8
content-length: 18778
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64cac444-495a"
last-modified: Wed, 02 Aug 2023 21:01:56 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 68078
expires: Wed, 16 Apr 2025 21:26:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ONHh66ff6c7kkv0mfRihMMI8IDDLAkgABXfEFJnX5dpBATLBW1t81FdVjbSQvzRo%2BsFTiHsYEGsmA%2Fx56UCJLE7ARh%2Bc36o8sHNDuBKekw7aJtkyydhmDZkZVcrDVvNE05ClNJqk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9a69b0859b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js | 151.101.193.229 | 200 OK | 25 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js IP151.101.193.229:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash6baf57f25796c332144ed58a2a0cd9ee f7fd0f3dc84b2cf93bf81e832505a673f354e0a3 82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd
GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.2
x-jsd-version-type: version
etag: W/"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 21:26:23 GMT
age: 1636916
x-served-by: cache-fra-etou8220085-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25109
X-Firefox-Spdy: h2
|
|
| flozo11111.pcapredict.com/js/sensor.js | 34.117.233.127 | 200 OK | 14 kB |
URL GET HTTP/2flozo11111.pcapredict.com/js/sensor.js IP34.117.233.127:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerSectigo Limited Subject*.pcapredict.com Fingerprint44:4F:D5:8A:1B:10:1F:DF:8C:B4:61:DE:CC:20:6E:8A:85:17:A2:B3 ValidityTue, 15 Aug 2023 00:00:00 GMT - Tue, 13 Aug 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (325), with CRLF, LF line terminators Hashc732c2c11c0cffa76623c963950a817e 95d1cc96b76d1afe6db8bdaaf9b2d918d8170807 9bc0468473bc57e5bce36d2166d1186507ec321a8b2e6a90736184781bf3edef
GET /js/sensor.js HTTP/1.1
Host: flozo11111.pcapredict.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.24.0
content-length: 13814
content-encoding: gzip
x-robots-tag: noindex
via: 1.1 google
date: Fri, 26 Apr 2024 21:15:06 GMT
cache-control: public, max-age=60
content-type: text/javascript;charset=UTF-8
age: 677
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css | 151.101.193.229 | 200 OK | 35 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css IP151.101.193.229:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Hashcd822b7fd22c8a95a68470c795adea69 1f139981b9b47a766efa0a61bb78ada351f16c4b 3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df
GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.2
x-jsd-version-type: version
etag: W/"38df4-HxOZgbm0enZu+gphu3ito1HxbEs"
content-encoding: br
accept-ranges: bytes
date: Fri, 26 Apr 2024 21:26:23 GMT
age: 5287911
x-served-by: cache-fra-etou8220083-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34902
X-Firefox-Spdy: h2
|
|
| awesomegive.com/assets/images/cvv-img.png |  188.114.96.1 | 200 OK | 5.0 kB |
URL GET HTTP/3awesomegive.com/assets/images/cvv-img.png IP188.114.96.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 126 x 49, 8-bit/color RGBA, non-interlaced Hash6b5ee4f59cb109299b68a5811ee7a663 dddff940806cb24a58be770b239271ab6b4afcd4 b9092aa1f03dd21e0cfde9cb27338136b43919d87075cc631f757a83296f68b9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/images/cvv-img.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: image/png
content-length: 5014
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: "6124464b-1396"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r6PLQnS6K34is1TLwdCLjGF0%2BSO6HKH45HtqEuFpy1sWNTOv45Roj7pdClnktUfT84xw7nTvDESPi%2BLmhdVBi%2BVEGhpGD9PyvIyZQ72heYfMF%2BlBF%2FWCcZz8ChWrYlYXimg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69aec321bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| awesomegive.com/assets/images/secure.png | 188.114.96.1 | 200 OK | 22 kB |
URL GET HTTP/3awesomegive.com/assets/images/secure.png IP188.114.96.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 528 x 53, 8-bit/color RGBA, non-interlaced Hash2ef2f4adb9b1d68c5f9b79d881807aee 376a64b8b40543205b14c484070d4e77731c0e9d e6b807fed694f06d0c1e856efc61949c8829cd40af6e29f8ec8e588efe0855c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/images/secure.png HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: image/png
content-length: 22283
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: "6124464b-570b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNfrYRDu4G7sBUJTgCt9zFdEikZGVwoAZ%2FiXGXyMZ2cs7pzt1BmfHPqPp8J4TCN3LmOx%2FxRap2ulNJHfbk9RHRPhiiW7TOiLppanzJ4Vbs1ai2ug4%2FFsjAXofsvqydpE2Mg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69aec361bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtm.js?id=GTM-K2L5F4ZL | 142.250.74.168 | 200 OK | 68 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-K2L5F4ZL IP142.250.74.168:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (2202) Hash3fcb4939877534068cfd91167e820c3a 70db36097945b0bf2b29a8486779495c4eb600f5 b991b6519e1ff0127dea131eda27a5585525658d68f0897594b724e8b5f32794
GET /gtm.js?id=GTM-K2L5F4ZL HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 21:26:23 GMT
expires: Fri, 26 Apr 2024 21:26:23 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 68463
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7HKFBGVPCH&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 101 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-7HKFBGVPCH&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size101 kB (100681 bytes) Hashbc59c5fe0c27bb05e81730e9bc7f2d94 7b82db1e734c8a4dc4ff19d85e68697f9aff5835 f58087ba9289be4d7991aa350861f9b2dd9959118fc0f80900cc0310045a1ecf
GET /gtag/js?id=G-7HKFBGVPCH&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 21:26:23 GMT
expires: Fri, 26 Apr 2024 21:26:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 100681
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| demotestingflow.com/custom/sweep-blank-v3-c80/css/error_handler.css | 188.114.97.1 | 200 OK | 1.4 kB |
URL GET HTTP/2demotestingflow.com/custom/sweep-blank-v3-c80/css/error_handler.css IP188.114.97.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subjectdemotestingflow.com FingerprintF5:72:0C:17:90:C5:A1:24:D2:85:5A:AD:86:ED:85:D3:D2:B2:74:8D ValidityMon, 18 Mar 2024 20:59:06 GMT - Sun, 16 Jun 2024 20:59:05 GMT
Hashaccfa834aa934b3e448066a65c34a2b0 f2d3033664d9e5e3c3e5bb8189c197c68e54fd59 06211caf6663c728740a01618bf087f7104cecd9df2a7870956d2fa757f9807a
GET /custom/sweep-blank-v3-c80/css/error_handler.css HTTP/1.1
Host: demotestingflow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 17:31:13 GMT
etag: W/"661429e1-abf"
cache-control: max-age=14400
cf-cache-status: HIT
age: 677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jmMVYwXVDM%2Bldq5SgT7z79GUDFjelWSwL2uXp%2FZKa%2BIzXUHrRn9ytyvyvBF9KiAmSm5GaukfBOBj3j%2F2XAs5t29Nd9pNx0ljKWg9sxINos7cIAaEb0Bwf9ET85%2Fq4sz5gt0rOom3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69b3ce5b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| demotestingflow.com/custom/sweep-blank-v3-c80/css/overrides.css | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/2demotestingflow.com/custom/sweep-blank-v3-c80/css/overrides.css IP188.114.97.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subjectdemotestingflow.com FingerprintF5:72:0C:17:90:C5:A1:24:D2:85:5A:AD:86:ED:85:D3:D2:B2:74:8D ValidityMon, 18 Mar 2024 20:59:06 GMT - Sun, 16 Jun 2024 20:59:05 GMT
File typeassembler source, ASCII text Hash8f7729568e3da9d7fd5fdcee8914ef08 c9ab00c9558da86e8b48eb48d7c5a9df9cab31c0 0a11d937e4b8795e1ccb374b8fa7df3187efe735296dd0a20e1c591443ebe681
GET /custom/sweep-blank-v3-c80/css/overrides.css HTTP/1.1
Host: demotestingflow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 17:31:13 GMT
etag: W/"661429e1-a85"
cache-control: max-age=14400
cf-cache-status: HIT
age: 677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JRdoP8mfx7IvoHQ0X4jKQ74twYmaH9fwXlCXR6Vblb%2BdnWdyu8PahuESj05yIe2elAsdjl1i82XLpnUA4%2B2V98KGDM5v0%2Fafx%2FQ0Q%2B5c9icljV4L6guAgkl5GOQ2wnshYG3e%2FJV4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69b3ce2b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= | 188.114.96.1 | 200 OK | 37 kB |
URL User Request GET HTTP/2awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= IP188.114.96.1:443
CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1996) Hashabf5ef9784fab656e140ef63794db492 204261aeb8dda916d4e6ae17d5990049141bc5c3 a6390c48b6d90e49a42371cdabdf2f2775037a30f55f24f37aa2cc694f00fb57
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:22 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJK5ax7t%2Bqoz%2Btf3bBnGVp%2FeT7JAeoEU23n7Y1mZHctI1IKiTfsC4ioKq0ObAEc6SPcxNwx9upvP1P57FTfQ0nC4Vjt182jeYuwRtYxi0LRKuLpi1aE4T%2FbsaZBvPiESgB8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; path=/
__cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr; SameSite=Lax; path=/; expires=Sat, 27-Apr-24 20:26:22 GMT; HttpOnly
server: cloudflare
cf-ray: 87a9a6964e7bb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 0 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-3ds-api-key,x-3ds-sdk-version
Referer: https://awesomegive.com/
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-length: 0
access-control-allow-headers: Authorization, Content-Type, X-3DS-API-KEY, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED, X-3DS-SDK-VERSION
access-control-allow-methods: POST, GET
access-control-allow-origin: *
access-control-expose-headers: Authorization, X-3DS-CORRELATION-ID, X-3DS-TRANSACTION-ID, X-3DS-TRANSACTION-UPDATED
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE2NzY4NCwianRpIjoiYTIxODI5MTMtMDQxMy0xMWVmLTk4MTItMDI0MmFjMTEwMDA4IiwiaWF0IjoxNzE0MTY2Nzg0LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.V2o-hXEJFopCztCWeyzLWwGy6jgh0VxNFQt9SoV4LFA
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE2NzY4NCwianRpIjoiYTIxOTc2NGItMDQxMy0xMWVmLTgyZDktMDI0MmFjMTEwMDBhIiwiaWF0IjoxNzE0MTY2Nzg0LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.g0Up7mhiWmBCoEC9XVvmiQPyWsHN3kx9g8lluri-VDg
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE2NzY4NCwianRpIjoiYTIxYTBiMzYtMDQxMy0xMWVmLWFjNDgtMDI0MmFjMTEwMDA2IiwiaWF0IjoxNzE0MTY2Nzg0LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.hlwHLDM06cYxbWpWZaoZ20SNC1oMimVRlXdyqmXgXL0
X-Firefox-Spdy: h2
|
|
| api.3dsintegrator.com/v2.2/authorize | 44.198.110.122 | 200 OK | 28 B |
URL POST HTTP/2api.3dsintegrator.com/v2.2/authorize IP44.198.110.122:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
Hash22168e652d9612a0044519feabee2ead c81871548c6f72ef308f783d1c7300356511bf6c a6631c5d7464de9c50745eabea01871d406a6121c3d35f9837bed89cf2512d08
POST /v2.2/authorize HTTP/1.1
Host: api.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-3DS-API-KEY: 8fd6e05ee3c07880d76df8d3a7629844
X-3DS-SDK-VERSION: 2.2.20230227
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:24 GMT
content-type: application/json; charset=utf-8
content-length: 28
access-control-allow-headers: Authorization,Content-Type, X-3DS-API-KEY
access-control-allow-methods: POST
access-control-allow-origin: *
access-control-expose-headers: Authorization
authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiI4ZmQ2ZTA1ZWUzYzA3ODgwZDc2ZGY4ZDNhNzYyOTg0NCIsImV4cCI6MTcxNDE2NzY4NCwianRpIjoiYTIxYTk0YjgtMDQxMy0xMWVmLTk4MTItMDI0MmFjMTEwMDA4IiwiaWF0IjoxNzE0MTY2Nzg0LCJpc3MiOiJwYWF5LTNkcy1hcGktbmV4dCJ9.XpSqB1bQDnMwxZHg1d_uh12oWX3wvg5tBHLwM0LqyF0
X-Firefox-Spdy: h2
|
|
| awesomegive.com/assets/images/blank.png?1714166782 | 188.114.96.1 | 200 OK | 975 B |
URL GET HTTP/3awesomegive.com/assets/images/blank.png?1714166782 IP188.114.96.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced Hash9b888ea076f4a4ec256b1693a83936ed bd93a6aa83f4126fcd3d8cf817af7585332d1ea5 2627c5f17f84a80fb9d57ed833b9be09500acf344772836d78ae86861a102fe3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/images/blank.png?1714166782 HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr; _ga_7HKFBGVPCH=GS1.1.1714166784.1.0.1714166784.0.0.1718225475; _ga=GA1.1.316787405.1714166784
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:26:26 GMT
content-type: image/png
content-length: 975
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: "6124464b-3cf"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LVzUMdnIyrGELFnh%2FVOTzTqhRIWH2c2sS8zULzcrG1Kh%2FsqAwK33DwukVOPtqQvZbu4tviSN0tXRge%2FekZMJmsvdDgBKW8OM6d3niCJQYBfdaDCyrEH28oHHhKqmakfGFLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a6afffa11bfe-OSL
alt-svc: h3=":443"; ma=86400
|
|
| server-side-tagging-udav3vnfya-uc.a.run.app/g/collect?v=2&tid=G-7HKFBGVPCH>m=45je44o0v9171086644z89171152653za200&_p=1714166783168&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=316787405.1714166784&ecid=1718225475&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3l3l2l1&sst.tft=1714166783168&sst.ude=0&_s=1&sid=1714166784&sct=1&seg=0&dl=https%3A%2F%2Fawesomegive.com%2F9bln-wtr3%2Fcheckout%3Fpub%3D1112%26c1%3D%26c2%3Dw2fko9cgbaubods0jp2ve18u%26c3%3D501126894%26click_id%3D501126894%26c4%3D%26c5%3D&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2253&richsstsse | 216.239.32.53 | 200 OK | 65 B |
URL GET HTTP/2server-side-tagging-udav3vnfya-uc.a.run.app/g/collect?v=2&tid=G-7HKFBGVPCH>m=45je44o0v9171086644z89171152653za200&_p=1714166783168&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=316787405.1714166784&ecid=1718225475&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3l3l2l1&sst.tft=1714166783168&sst.ude=0&_s=1&sid=1714166784&sct=1&seg=0&dl=https%3A%2F%2Fawesomegive.com%2F9bln-wtr3%2Fcheckout%3Fpub%3D1112%26c1%3D%26c2%3Dw2fko9cgbaubods0jp2ve18u%26c3%3D501126894%26click_id%3D501126894%26c4%3D%26c5%3D&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2253&richsstsse IP216.239.32.53:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.a.run.app Fingerprint89:44:18:AD:66:88:B6:FD:BF:4B:EB:11:8C:A5:4D:62:07:6B:49:49 ValidityMon, 08 Apr 2024 06:31:59 GMT - Mon, 01 Jul 2024 06:31:58 GMT
File typeASCII text, with no line terminators Hash09e2b0b335a8a3fe7af59bc95afb7805 ce618c52e5e3e2e4d0151e76c21f4df73d1ee9c5 ad1d4f9f8632a757694e89ac2387e5719b475b295a228ed119e49a809f86f476
GET /g/collect?v=2&tid=G-7HKFBGVPCH>m=45je44o0v9171086644z89171152653za200&_p=1714166783168&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=316787405.1714166784&ecid=1718225475&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3l3l2l1&sst.tft=1714166783168&sst.ude=0&_s=1&sid=1714166784&sct=1&seg=0&dl=https%3A%2F%2Fawesomegive.com%2F9bln-wtr3%2Fcheckout%3Fpub%3D1112%26c1%3D%26c2%3Dw2fko9cgbaubods0jp2ve18u%26c3%3D501126894%26click_id%3D501126894%26c4%3D%26c5%3D&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=2253&richsstsse HTTP/1.1
Host: server-side-tagging-udav3vnfya-uc.a.run.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: FPID=FPID2.2.L%2FP8A7RPd6zCoNdT%2FHKWA3rdIDp8AofWGg9g8VU%2F%2Fh0%3D.1714166784; Max-Age=63072000; Domain=awesomegive.com; Path=/; Secure; HttpOnly
FPLC=Nmce8xILWy0XVE9sMlxAUZiTB0bnuyJlTLDbLwJRVyjh7QarFp53FfSywIrdeQyJPydRfwBiFDMl3JFpahV7B61wmOY5uCvOlfC7Tpy908WG7xE1UAB8RFYGR0nS6Q%3D%3D; Max-Age=72000; Domain=awesomegive.com; Path=/; Secure
cache-control: no-cache
content-type: text/plain
x-content-type-options: nosniff
x-accel-buffering: no
access-control-allow-origin: https://awesomegive.com
access-control-allow-credentials: true
date: Fri, 26 Apr 2024 21:26:24 GMT
server: Google Frontend
expires: Fri, 26 Apr 2024 21:26:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| awesomegive.com/assets/js/app.min.js | 188.114.96.1 | 200 OK | 45 kB |
URL GET HTTP/3awesomegive.com/assets/js/app.min.js IP188.114.96.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeJavaScript source, ASCII text, with very long lines (29177) Hashb331d79c122809116865976836f2319a c3a447f5c1b7fde359e6b0a7f8962ffd4350cb9a 627587890dfc820f64014e0ef50c9a54aec5fb2740e9261187a209655f64518e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/js/app.min.js HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: application/javascript
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: W/"6124464b-b081"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BkSdbDjKv93lwIPI2ykOiWBSlUHNc3TDfZdS0W90KjzQAnKBzLtVmcfULlEqiNNaKYj2PNuXTEuV20KhApX9%2BCxWq2gJJKVIud5GnAX4h%2FBIyzJrTpqyvhgDeqUkzdKvFBg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69aec351bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| server-side-tagging-udav3vnfya-uc.a.run.app/g/collect?v=2&tid=G-7HKFBGVPCH>m=45je44o0v9171086644za200&_p=1714166783168&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=316787405.1714166784&ecid=1718225475&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&_eu=AEA&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3l3l2l1&sst.tft=1714166783168&sst.sp=1&sst.em_event=1&sst.ude=0&_s=2&sid=1714166784&sct=1&seg=0&dl=https%3A%2F%2Fawesomegive.com%2F9bln-wtr3%2Fcheckout%3Fpub%3D1112%26c1%3D%26c2%3Dw2fko9cgbaubods0jp2ve18u%26c3%3D501126894%26click_id%3D501126894%26c4%3D%26c5%3D&dt=&en=scroll&epn.percent_scrolled=90&tfd=2778&richsstsse | 216.239.32.53 | 200 OK | 65 B |
URL GET HTTP/3server-side-tagging-udav3vnfya-uc.a.run.app/g/collect?v=2&tid=G-7HKFBGVPCH>m=45je44o0v9171086644za200&_p=1714166783168&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=316787405.1714166784&ecid=1718225475&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&_eu=AEA&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3l3l2l1&sst.tft=1714166783168&sst.sp=1&sst.em_event=1&sst.ude=0&_s=2&sid=1714166784&sct=1&seg=0&dl=https%3A%2F%2Fawesomegive.com%2F9bln-wtr3%2Fcheckout%3Fpub%3D1112%26c1%3D%26c2%3Dw2fko9cgbaubods0jp2ve18u%26c3%3D501126894%26click_id%3D501126894%26c4%3D%26c5%3D&dt=&en=scroll&epn.percent_scrolled=90&tfd=2778&richsstsse IP216.239.32.53:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subject*.a.run.app Fingerprint89:44:18:AD:66:88:B6:FD:BF:4B:EB:11:8C:A5:4D:62:07:6B:49:49 ValidityMon, 08 Apr 2024 06:31:59 GMT - Mon, 01 Jul 2024 06:31:58 GMT
File typeASCII text, with no line terminators Hash09e2b0b335a8a3fe7af59bc95afb7805 ce618c52e5e3e2e4d0151e76c21f4df73d1ee9c5 ad1d4f9f8632a757694e89ac2387e5719b475b295a228ed119e49a809f86f476
GET /g/collect?v=2&tid=G-7HKFBGVPCH>m=45je44o0v9171086644za200&_p=1714166783168&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=316787405.1714166784&ecid=1718225475&ul=en-us&sr=1280x1024&_fplc=0&ur=NO-03&pscdl=noapi&_eu=AEA&sst.etld=google.no&sst.gcsub=region1&sst.gcd=13l3l3l2l1&sst.tft=1714166783168&sst.sp=1&sst.em_event=1&sst.ude=0&_s=2&sid=1714166784&sct=1&seg=0&dl=https%3A%2F%2Fawesomegive.com%2F9bln-wtr3%2Fcheckout%3Fpub%3D1112%26c1%3D%26c2%3Dw2fko9cgbaubods0jp2ve18u%26c3%3D501126894%26click_id%3D501126894%26c4%3D%26c5%3D&dt=&en=scroll&epn.percent_scrolled=90&tfd=2778&richsstsse HTTP/1.1
Host: server-side-tagging-udav3vnfya-uc.a.run.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://awesomegive.com
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
set-cookie: FPID=FPID2.2.L%2FP8A7RPd6zCoNdT%2FHKWA3rdIDp8AofWGg9g8VU%2F%2Fh0%3D.1714166784; Max-Age=63072000; Domain=awesomegive.com; Path=/; Secure; HttpOnly
FPLC=VyaZcQUUypGPpQPMP7%2BxDlnERnal2KF9kTK8jAHemoN%2BeL9jXWH3PKhS3tZX1uzfeydHfeyGWBAc%2FedTC8vRBxs%2F44m5mAuzAcAibSv2F%2BdZpR5HdOdF236zX1Mu4w%3D%3D; Max-Age=72000; Domain=awesomegive.com; Path=/; Secure
cache-control: no-cache
content-type: text/plain
x-content-type-options: nosniff
x-accel-buffering: no
access-control-allow-origin: https://awesomegive.com
access-control-allow-credentials: true
date: Fri, 26 Apr 2024 21:26:24 GMT
server: Google Frontend
expires: Fri, 26 Apr 2024 21:26:24 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| demotestingflow.com/custom/sweep-blank-v3-c80/css/styles.css | 188.114.97.1 | 200 OK | 33 kB |
URL GET HTTP/2demotestingflow.com/custom/sweep-blank-v3-c80/css/styles.css IP188.114.97.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subjectdemotestingflow.com FingerprintF5:72:0C:17:90:C5:A1:24:D2:85:5A:AD:86:ED:85:D3:D2:B2:74:8D ValidityMon, 18 Mar 2024 20:59:06 GMT - Sun, 16 Jun 2024 20:59:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /custom/sweep-blank-v3-c80/css/styles.css HTTP/1.1
Host: demotestingflow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 17:31:13 GMT
etag: W/"661429e1-8217"
cache-control: max-age=14400
cf-cache-status: HIT
age: 677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jsqs8HBcZXJMvrSgwUHqIKg%2BJO%2B0QPQfH0GQvHfR5yyE6VT300zT8aGPm%2FwG%2BowQjivJiTVT1epIXcFVFuiObfdZOw2KOpUuVVNyz%2FmFhXKiOu903Rn1k0GnqMoQqqW91YG3Ccup"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69b4ce9b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| awesomegive.com/assets/vanilla-modal/modal.css?13 | 188.114.96.1 | 200 OK | 6.9 kB |
URL GET HTTP/3awesomegive.com/assets/vanilla-modal/modal.css?13 IP188.114.96.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeASCII text, with very long lines (7294), with no line terminators Hash48125f16dfa8174dc50a7bb35638b391 b12843a780958beae38aa186923ddb129321a706 432e2d1364c784d2c43ba9f24bea3fe9bd0356b9b5ceff366bf6b996da44e064
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/vanilla-modal/modal.css?13 HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: text/css
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: W/"6124464b-1af8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XmTToNtTIwxZTE4Y650o9WWj0upqaDixAR5uCOToZGc86ne65xUReGIYyfvfkUmbRWsMmGOjikGBb%2Fmr%2B9AlNnKFxFcye2jbjVaaIIsiDReNpg3L8Av7NWd2rXHrs0BWuE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69adc191bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| awesomegive.com/assets/js/jquery.min.js | 188.114.96.1 | 200 OK | 96 kB |
URL GET HTTP/3awesomegive.com/assets/js/jquery.min.js IP188.114.96.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerLet's Encrypt Subjectawesomegive.com Fingerprint48:3D:43:2D:A2:44:6B:42:E8:8F:29:13:4F:77:50:8A:64:A5:EE:8F ValidityThu, 18 Apr 2024 20:51:22 GMT - Wed, 17 Jul 2024 20:51:21 GMT
File typeJavaScript source, ASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /assets/js/jquery.min.js HTTP/1.1
Host: awesomegive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Cookie: PHPSESSID=7bcpoks4jliu4ebkdbdkgk5o3m; __cflb=02DiuEopxn5JsRb2k8JV78aUWapccfBjjo9ZnM4zSGLqr
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: application/javascript
last-modified: Tue, 24 Aug 2021 01:07:23 GMT
etag: W/"6124464b-1762a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2FkHxswASx2y9VTpOYv51gSh4%2FiAFEPk%2BVHNxZZih4Iv4qI0NnhSGDM%2B8%2FCT7EmCcZbgnt5ED4SZZ8bLbDsJCI8HFLoK0UvrZTjfJUAijqeSy2ZKMvedm06O6zyagzMO42U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69aec341bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| resources.demotestingurl.com/cdn/morty.js | 0.0.0.0 | | 0 B |
URL GET resources.demotestingurl.com/cdn/morty.js IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/morty.js HTTP/1.1
Host: resources.demotestingurl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| demotestingflow.com/custom/sweep-blank-v3-c80/css/css.css | 188.114.97.1 | 200 OK | 616 B |
URL GET HTTP/2demotestingflow.com/custom/sweep-blank-v3-c80/css/css.css IP188.114.97.1:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerGoogle Trust Services LLC Subjectdemotestingflow.com FingerprintF5:72:0C:17:90:C5:A1:24:D2:85:5A:AD:86:ED:85:D3:D2:B2:74:8D ValidityMon, 18 Mar 2024 20:59:06 GMT - Sun, 16 Jun 2024 20:59:05 GMT
File typeASCII text, with very long lines (640), with no line terminators Hashfa9b8466a751d94f8e3a60691dba55ca 8fc7c2f235137a3847efabd0e2bfbe443a14eb84 81eb4bd79282f39db7d2a0f760a926d19a5045f60b3625b63f22d5eaeea9944d
GET /custom/sweep-blank-v3-c80/css/css.css HTTP/1.1
Host: demotestingflow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 21:26:23 GMT
content-type: text/css
last-modified: Mon, 08 Apr 2024 17:31:13 GMT
etag: W/"661429e1-268"
cache-control: max-age=14400
cf-cache-status: HIT
age: 677
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QMTOBOgjKltpW%2Bs1nyiIfmT8Fh5wNWhTtupOSMO8CReSPK%2FM71EhqDNKhxInaMHMiSL65TV7gBg07twNEJZWdV0KpkXEV0Mf26zuR5HhIO62QQYlfjcjRcf2w9t8gAPQc%2B4dZKP6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a9a69b4ce7b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.3dsintegrator.com/threeds.2.2.20230227.min.js | 143.204.55.87 | 200 OK | 38 kB |
URL GET HTTP/2cdn.3dsintegrator.com/threeds.2.2.20230227.min.js IP143.204.55.87:443
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5= CertificateIssuerAmazon Subject*.3dsintegrator.com FingerprintA1:99:27:2D:60:4B:73:87:D7:2D:A8:20:D1:5A:5B:07:22:79:2B:7A ValidityTue, 16 Jan 2024 00:00:00 GMT - Wed, 12 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (634) Hash1156b587263b305c544ae6f993c9c1cc b451a87ceedf1bce3f47209f05a63cc0648d414a 8b4a3906b4cfab9faa83a58443d90208904999f3f9e8f83ec1775cfbc93b47ae
GET /threeds.2.2.20230227.min.js HTTP/1.1
Host: cdn.3dsintegrator.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Fri, 24 Feb 2023 13:06:30 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 0hMD0EKviGCXlCLKV0CfUZQa0eQPF.Wc
server: PAAY CDN
content-encoding: gzip
date: Fri, 26 Apr 2024 07:15:32 GMT
etag: W/"1156b587263b305c544ae6f993c9c1cc"
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nAVItiDeeTSWaJZFqJ1qqGVKZx2-eA-3abUvas7vvPlVB1iPiqnnpw==
age: 65562
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: public, max-age=604800, immutable
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| resources.demotestingurl.com/cdn/update-price.js | 0.0.0.0 | | 0 B |
URL GET resources.demotestingurl.com/cdn/update-price.js IP0.0.0.0:0
Requested byhttps://awesomegive.com/9bln-wtr3/checkout?pub=1112&c1=&c2=w2fko9cgbaubods0jp2ve18u&c3=501126894&click_id=501126894&c4=&c5=
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn/update-price.js HTTP/1.1
Host: resources.demotestingurl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://awesomegive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|