| www2.thepiratebay3.to/static/css-new/img/tpb.jpg |  172.67.221.111 | 200 OK | 19 kB |
URL GET HTTP/3www2.thepiratebay3.to/static/css-new/img/tpb.jpg IP172.67.221.111:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 275x295, components 3 Hash6b945b5f5e2b8fc40ba470740ec483f6 6449d5cb355eeaa9c50e9a888995ed0f5bbd3f81 acecaff92aec4aaf0f1fecb2efaad6cdc3cc91e9d695792ac9d2ee9addefc322
GET /static/css-new/img/tpb.jpg HTTP/1.1
Host: www2.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/static/css-new/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:49 GMT
content-type: image/jpeg
content-length: 19176
last-modified: Sat, 24 Feb 2024 15:52:38 GMT
etag: "65da10c6-4ae8"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6157
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OB07ne9mgjLdTdhAZ%2BSDEsA%2FoOoikljmiZ6ybZq7UleWLtzVHU3aW%2BrS4H8Drg9qzGowwaFprK7EOjHVP2k4xJSh4pxecfkHadAnokmtpv5c5XxU%2FR4UZ0HdOBEPOOT1aO47TdZJys4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e422afd70b505-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www2.thepiratebay3.to/static/css-new/img/icon-https.gif | 172.67.221.111 | 200 OK | 533 B |
URL GET HTTP/3www2.thepiratebay3.to/static/css-new/img/icon-https.gif IP172.67.221.111:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
File typeGIF image data, version 89a, 14 x 13 Hash94647057a3487e7891a1ab8bbcdbae6b 510f5ff6e88813df7ba8d9e2fea8f5c65bc8bc07 56e8784bfd3a800cef9a9f4c23aea069a2fecd18c7490b8721e419842f154f86
GET /static/css-new/img/icon-https.gif HTTP/1.1
Host: www2.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/static/css-new/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:49 GMT
content-type: image/gif
content-length: 533
last-modified: Sat, 24 Feb 2024 15:52:36 GMT
etag: "65da10c4-215"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6157
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D1JMTzr83JJxDmHc%2FDDDZ%2FXphNq85%2BD1E2vaSBPPqe9N6%2Bmwr2JFIsEhWTxNoXlDXynO42RhGXeyA4OkWdm1IDBK7pva1VJim3RFv9o6WVV26Grfs5kUHg8%2Bx%2FuwgnnK4kAOSmYMUdQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e422b0d7bb505-OSL
alt-svc: h3=":443"; ma=86400
|
|
| code.jquery.com/jquery-3.5.1.min.js | 151.101.194.137 | 200 OK | 31 kB |
URL GET HTTP/2code.jquery.com/jquery-3.5.1.min.js IP151.101.194.137:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hashdc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d
GET /jquery-3.5.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15d84"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 19 Apr 2024 16:26:49 GMT
age: 3500850
x-served-by: cache-lga21981-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 36, 498099
x-timer: S1713544009.455639,VS0,VE0
vary: Accept-Encoding
content-length: 30879
X-Firefox-Spdy: h2
|
|
| accountantpacketassail.com/a4/fa/60/a4fa60eaada74bc7625a2961773de086.js | 172.240.108.76 | 200 OK | 16 kB |
URL GET HTTP/1.1accountantpacketassail.com/a4/fa/60/a4fa60eaada74bc7625a2961773de086.js IP172.240.108.76:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectaccountantpacketassail.com Fingerprint3B:41:0C:B9:B5:AE:2D:DC:44:31:34:AF:1B:6A:C2:8C:E3:CE:FE:FD ValidityMon, 15 Apr 2024 12:56:51 GMT - Sun, 14 Jul 2024 12:56:50 GMT
File typeJavaScript source, ASCII text, with very long lines (44076), with no line terminators Hash1c3aa9e912cf384eddf4c5cb1160c985 a15f5662a0db39d4eb6e0277017038e39632a912 595b40b37b42d183e4abcc3b8c0b11dab42c136347724e1ea343113f4ccef427
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /a4/fa/60/a4fa60eaada74bc7625a2961773de086.js HTTP/1.1
Host: accountantpacketassail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: eb277b17638061e8899529009669a017
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| accountantpacketassail.com/a5/18/e8/a518e814c13e6d81b387dd0179d94153.js | 172.240.108.76 | 200 OK | 30 kB |
URL GET HTTP/1.1accountantpacketassail.com/a5/18/e8/a518e814c13e6d81b387dd0179d94153.js IP172.240.108.76:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectaccountantpacketassail.com Fingerprint3B:41:0C:B9:B5:AE:2D:DC:44:31:34:AF:1B:6A:C2:8C:E3:CE:FE:FD ValidityMon, 15 Apr 2024 12:56:51 GMT - Sun, 14 Jul 2024 12:56:50 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashe34f22a8cb8077346814efe44ae54414 752c8381c7916a16f2b3900c9d13faf17c544ec8 41f5dc9e79dd77ce9e4f7683dadaa9aab103ec56d269944209ee9047d7d0e6de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /a5/18/e8/a518e814c13e6d81b387dd0179d94153.js HTTP/1.1
Host: accountantpacketassail.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:49 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-3428_layer=1; expires=Mon, 22 Apr 2024 16:26:49 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e6c165ada7514becbe2fd8fb6a79e59d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| proftrafficcounter.com/stats |  35.158.46.84 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP35.158.46.84:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc03110a9289372961b54484981c655cb 88b35cfeb505beee0f74e16c86c9c9f0b4d6cb57 30ef93d0a7a30b2572579d2b0ec05f1109ab96975a173303393535dd29e13615
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www2.thepiratebay3.to
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; expires=Mon, 17 Apr 2034 16:26:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 35.158.46.84 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP35.158.46.84:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash8c9b121e55ee57344ce6e5ddbf7fb54f ab35d83696fce8f0c249cfc2873c054881f2ac40 021263cc90a78b0489004565474fd2705993cd94ff4f07c18488f93f53b0b11c
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www2.thepiratebay3.to
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=e27a7f7f-cf32-4474-9520-3ef5ecf33837:1:1; expires=Mon, 17 Apr 2034 16:26:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| firmhurrieddetrimental.com/pixel/purst?dl=0&th=0&sc=0&rs=1401&rd=1401&fd=542&bv=24.4.6608&tmpl=70 | 172.240.108.76 | 200 OK | 0 B |
URL GET HTTP/1.1firmhurrieddetrimental.com/pixel/purst?dl=0&th=0&sc=0&rs=1401&rd=1401&fd=542&bv=24.4.6608&tmpl=70 IP172.240.108.76:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectfirmhurrieddetrimental.com Fingerprint94:DA:35:78:10:F3:E2:AF:E7:36:78:AD:8D:3F:55:88:03:F4:1E:75 ValidityTue, 16 Apr 2024 10:32:07 GMT - Mon, 15 Jul 2024 10:32:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1401&rd=1401&fd=542&bv=24.4.6608&tmpl=70 HTTP/1.1
Host: firmhurrieddetrimental.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| capaciousdrewreligion.com/advertisers.js | 172.240.253.132 | 200 OK | 0 B |
URL GET HTTP/1.1capaciousdrewreligion.com/advertisers.js IP172.240.253.132:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectcapaciousdrewreligion.com Fingerprint53:B6:ED:C6:B5:B6:60:3E:6D:02:5A:92:2E:C3:12:74:64:A1:23:DC ValidityWed, 06 Mar 2024 11:57:32 GMT - Tue, 04 Jun 2024 11:57:31 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: capaciousdrewreligion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:50 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 093a586389d7538b5dc527c504df3d38
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| downstairsnegotiatebarren.com/sfp.js |  188.114.96.1 | 200 OK | 28 kB |
URL GET HTTP/2downstairsnegotiatebarren.com/sfp.js IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectdownstairsnegotiatebarren.com Fingerprint2C:6A:E1:8E:26:5B:1D:8B:86:CB:C1:72:4E:52:4B:8B:67:3A:D2:44 ValidityMon, 04 Mar 2024 21:53:07 GMT - Sun, 02 Jun 2024 21:53:06 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hashf4a2f8f9f99541c6f105bbd0a025bd40 1f8e3eff12168fdd9e719adfc098d24a45b6916a b717cb04231a10d425fd55b73c85a5407119c6826a8bac94142fddfff6958716
GET /sfp.js HTTP/1.1
Host: downstairsnegotiatebarren.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:50 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 5fd312244516be83b1f095bf1479d95c
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 19 Apr 2024 16:26:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5ZCNEG0s9xChxhNioLWqSRYP7K3zs1fmvnH8cM%2F0s0x9uGo29VRAt8Ezf4k0iDOuOEKD7bsKEVHFlREw3CdO5125Nk0FFQ6Kory2FZYKNPNoIk%2FWi5WtVlcnGp7bstBpdkoQUa%2B3z9APASW1GNeqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e422e3c445688-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| connectionsoathbottles.com/sbar.json?key=a4fa60eaada74bc7625a2961773de086&uuid=3c1b0744-721d-4686-a429-611aa3ee5bab%3A1%3A1 | 192.243.61.225 | 200 OK | 8.2 kB |
URL GET HTTP/1.1connectionsoathbottles.com/sbar.json?key=a4fa60eaada74bc7625a2961773de086&uuid=3c1b0744-721d-4686-a429-611aa3ee5bab%3A1%3A1 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
Hash3841b07321b0bac36f8470ddb768759b e302a90fa1da2ac6fd5dcd76e88529a686b82c44 40298b04047206b853a864745d884948b6a85aa08e97a9164120d5f464f403ad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sbar.json?key=a4fa60eaada74bc7625a2961773de086&uuid=3c1b0744-721d-4686-a429-611aa3ee5bab%3A1%3A1 HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:50 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www2.thepiratebay3.to
Access-Control-Allow-Origin: https://www2.thepiratebay3.to
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=19072806; expires=Sat, 20 Apr 2024 16:26:50 GMT; secure; SameSite=None
uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; expires=Fri, 26 Apr 2024 16:26:50 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 20 Apr 2024 16:26:50 GMT; secure; SameSite=None
uncs=1; expires=Sat, 20 Apr 2024 16:26:50 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 20 Apr 2024 16:26:50 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 20 Apr 2024 16:26:50 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2467e1e38a3d375d0b5efc11497bfb3c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| connectionsoathbottles.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS0Wsc1Re%2Bk19%2B%2BiAIlr5VYVERRbOZmd2d2bUPYq2R2LQJraJvcmbu3c01d%2BcO987sbPIULGjfXAXpgy%2BTb5MGtYj9AywyKSgUhKxPeTCP%2FgOFPorsGlw9MJzzne8MfOc799O9%2FJT5yOnk8lW9I5Wi5Vbdrb38oeddrK3JJB%2FWhu3go6B5sWYGr3eCuvtK7R0Rb%2Bll3%2FVc13O92oo0oquHy1MSMr3b8eodt970616riaH5L7a5A0sO%2BOCUnYPkk8UHznnIuELS%2F%2BGysFuZTl97u58ryrTBgB%2B%2Bn2wlukjQn5dd46CbHJ5NQ9vjlfvQycFMLvTgn8FITpjz831EyeGZSESD%2FZnOSEEkiPhTKAYVhKogqUKsb0LyYwbEHNfWkfTvXNOmoO2%2FWZqyE7b4%2BBFkMWGLv59H0v%2F%2BkpLD2g2t8kzqxGLYLSGHFWSvQpofIdtZgCyOEGefQPJf2fLjNST9%2FXWrNCQ%2FebERe5EbNptLoe%2FxpWbQDpao6XeWAs8jagjRiiiaGSRlBdmtoMQIZB3k0086yLsO8tRBn5%2FUYs%2FzQpfH5LY7cdzgoYgC7noUdj3y3KCNPJ7uMEKWjhCrEWKzi9TsYkt%2Bcdx6Fib%2FCXazhOUObMYw4CUKwVBYhoIYCslQZAzFoDzgyvq2vMOVzSPvLPtnuVGOddbbowOd9UTCQGYEw8u99JQ9M%2FXQeeHJl7AlTmrU7FLgCiJOYTOKw8Bvkd8JvDBscOG2A1hZQtqF2cY7csIu%2FPIHUjlh%2F7%2F9JyI6glVHiOU5UP4cqChBmyV2knvZpkiloUxEtE11bXrgukSaLSLbdvbUKbswO%2BXVjUcQ8UN2FohNidSU%2BFg%2BYOipW%2BPrumD713Vh2b31NJN9uUPTM9%2FIKBNPfHtFbBfa8NXLdvTNm%2FGUmJZ33xM2W6OEy6Rn2XeXJOfCrGgTC%2Fbjqv1ARBu53byUmyRP1zbeWlntp0ZYK3VSgeSx%2FgyxnLCn8fns%2Fb5a24c0FUxeop%2FPlUpdIU53YdN5z2oGo%2BY4Sh0UeTk2fjRvKsmgxBxTVML%2BC0fzemxo%2BjfJcs%2FeQs8sgLKbSPolBqbEQJUgNYLN%2FzfOUvPwjd8as0CkFsaRMgv7kTLqy5nJE3bl9lew8qQWNhouBZ2WF4Ykwqjpt7uBx4n8ZuAHATWQ2Un3%2Ba%2Ff%2FQsAAP%2F%2FAQAA%2F%2F9Tu%2FwfmQQAAA%3D%3D | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1connectionsoathbottles.com/ren.gif?sid=H4sIAAAAAAAC%2F1RS0Wsc1Re%2Bk19%2B%2BiAIlr5VYVERRbOZmd2d2bUPYq2R2LQJraJvcmbu3c01d%2BcO987sbPIULGjfXAXpgy%2BTb5MGtYj9AywyKSgUhKxPeTCP%2FgOFPorsGlw9MJzzne8MfOc799O9%2FJT5yOnk8lW9I5Wi5Vbdrb38oeddrK3JJB%2FWhu3go6B5sWYGr3eCuvtK7R0Rb%2Bll3%2FVc13O92oo0oquHy1MSMr3b8eodt970616riaH5L7a5A0sO%2BOCUnYPkk8UHznnIuELS%2F%2BGysFuZTl97u58ryrTBgB%2B%2Bn2wlukjQn5dd46CbHJ5NQ9vjlfvQycFMLvTgn8FITpjz831EyeGZSESD%2FZnOSEEkiPhTKAYVhKogqUKsb0LyYwbEHNfWkfTvXNOmoO2%2FWZqyE7b4%2BBFkMWGLv59H0v%2F%2BkpLD2g2t8kzqxGLYLSGHFWSvQpofIdtZgCyOEGefQPJf2fLjNST9%2FXWrNCQ%2FebERe5EbNptLoe%2FxpWbQDpao6XeWAs8jagjRiiiaGSRlBdmtoMQIZB3k0086yLsO8tRBn5%2FUYs%2FzQpfH5LY7cdzgoYgC7noUdj3y3KCNPJ7uMEKWjhCrEWKzi9TsYkt%2Bcdx6Fib%2FCXazhOUObMYw4CUKwVBYhoIYCslQZAzFoDzgyvq2vMOVzSPvLPtnuVGOddbbowOd9UTCQGYEw8u99JQ9M%2FXQeeHJl7AlTmrU7FLgCiJOYTOKw8Bvkd8JvDBscOG2A1hZQtqF2cY7csIu%2FPIHUjlh%2F7%2F9JyI6glVHiOU5UP4cqChBmyV2knvZpkiloUxEtE11bXrgukSaLSLbdvbUKbswO%2BXVjUcQ8UN2FohNidSU%2BFg%2BYOipW%2BPrumD713Vh2b31NJN9uUPTM9%2FIKBNPfHtFbBfa8NXLdvTNm%2FGUmJZ33xM2W6OEy6Rn2XeXJOfCrGgTC%2Fbjqv1ARBu53byUmyRP1zbeWlntp0ZYK3VSgeSx%2FgyxnLCn8fns%2Fb5a24c0FUxeop%2FPlUpdIU53YdN5z2oGo%2BY4Sh0UeTk2fjRvKsmgxBxTVML%2BC0fzemxo%2BjfJcs%2FeQs8sgLKbSPolBqbEQJUgNYLN%2FzfOUvPwjd8as0CkFsaRMgv7kTLqy5nJE3bl9lew8qQWNhouBZ2WF4Ykwqjpt7uBx4n8ZuAHATWQ2Un3%2Ba%2Ff%2FQsAAP%2F%2FAQAA%2F%2F9Tu%2FwfmQQAAA%3D%3D IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RS0Wsc1Re%2Bk19%2B%2BiAIlr5VYVERRbOZmd2d2bUPYq2R2LQJraJvcmbu3c01d%2BcO987sbPIULGjfXAXpgy%2BTb5MGtYj9AywyKSgUhKxPeTCP%2FgOFPorsGlw9MJzzne8MfOc799O9%2FJT5yOnk8lW9I5Wi5Vbdrb38oeddrK3JJB%2FWhu3go6B5sWYGr3eCuvtK7R0Rb%2Bll3%2FVc13O92oo0oquHy1MSMr3b8eodt970616riaH5L7a5A0sO%2BOCUnYPkk8UHznnIuELS%2F%2BGysFuZTl97u58ryrTBgB%2B%2Bn2wlukjQn5dd46CbHJ5NQ9vjlfvQycFMLvTgn8FITpjz831EyeGZSESD%2FZnOSEEkiPhTKAYVhKogqUKsb0LyYwbEHNfWkfTvXNOmoO2%2FWZqyE7b4%2BBFkMWGLv59H0v%2F%2BkpLD2g2t8kzqxGLYLSGHFWSvQpofIdtZgCyOEGefQPJf2fLjNST9%2FXWrNCQ%2FebERe5EbNptLoe%2FxpWbQDpao6XeWAs8jagjRiiiaGSRlBdmtoMQIZB3k0086yLsO8tRBn5%2FUYs%2FzQpfH5LY7cdzgoYgC7noUdj3y3KCNPJ7uMEKWjhCrEWKzi9TsYkt%2Bcdx6Fib%2FCXazhOUObMYw4CUKwVBYhoIYCslQZAzFoDzgyvq2vMOVzSPvLPtnuVGOddbbowOd9UTCQGYEw8u99JQ9M%2FXQeeHJl7AlTmrU7FLgCiJOYTOKw8Bvkd8JvDBscOG2A1hZQtqF2cY7csIu%2FPIHUjlh%2F7%2F9JyI6glVHiOU5UP4cqChBmyV2knvZpkiloUxEtE11bXrgukSaLSLbdvbUKbswO%2BXVjUcQ8UN2FohNidSU%2BFg%2BYOipW%2BPrumD713Vh2b31NJN9uUPTM9%2FIKBNPfHtFbBfa8NXLdvTNm%2FGUmJZ33xM2W6OEy6Rn2XeXJOfCrGgTC%2Fbjqv1ARBu53byUmyRP1zbeWlntp0ZYK3VSgeSx%2FgyxnLCn8fns%2Fb5a24c0FUxeop%2FPlUpdIU53YdN5z2oGo%2BY4Sh0UeTk2fjRvKsmgxBxTVML%2BC0fzemxo%2BjfJcs%2FeQs8sgLKbSPolBqbEQJUgNYLN%2FzfOUvPwjd8as0CkFsaRMgv7kTLqy5nJE3bl9lew8qQWNhouBZ2WF4Ykwqjpt7uBx4n8ZuAHATWQ2Un3%2Ba%2Ff%2FQsAAP%2F%2FAQAA%2F%2F9Tu%2FwfmQQAAA%3D%3D HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0d8e691e0b4cc4d3c58ffaecb172e48f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=e27a7f7f-cf32-4474-9520-3ef5ecf33837&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=a518e814c13e6d81b387dd0179d94153&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=e27a7f7f-cf32-4474-9520-3ef5ecf33837&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=a518e814c13e6d81b387dd0179d94153&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=e27a7f7f-cf32-4474-9520-3ef5ecf33837&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=a518e814c13e6d81b387dd0179d94153&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d94209d655ae1c57a975bdb2568f0a7f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| unseenreport.com/pxf.gif?uuid=e27a7f7f-cf32-4474-9520-3ef5ecf33837&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=a4fa60eaada74bc7625a2961773de086&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 | 192.243.59.20 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=e27a7f7f-cf32-4474-9520-3ef5ecf33837&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=a4fa60eaada74bc7625a2961773de086&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 IP192.243.59.20:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subject*.unseenreport.com Fingerprint71:46:15:FD:76:6A:F5:5B:51:06:CC:93:DD:D8:63:E3:8B:10:BF:13 ValidityFri, 22 Mar 2024 07:32:41 GMT - Thu, 20 Jun 2024 07:32:40 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=e27a7f7f-cf32-4474-9520-3ef5ecf33837&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=a4fa60eaada74bc7625a2961773de086&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=16 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8b52923a70608058d53080ef514d1b69
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_1.png | 188.114.96.1 | 200 OK | 1.1 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_1.png IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hashd4d69630de198f952456bd95946cff99 63666fc0c400af0789069bcf8fb5ec3092e3c7b5 3bc79b2b43c6496e7be7ea2cc22838c9e14bd7d4ab27d049d8a01a6423607e87
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_1.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: image/png
content-length: 1137
last-modified: Thu, 07 Mar 2024 13:41:38 GMT
etag: "65e9c412-471"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 445133
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=REAnn%2BxpQ2n3hgAJrzj8ccgkjjxvJGKd9A5KGtWvKtCtn8qTLQ%2FtBUc9UiL2yOfGBmm4%2Bt0NX%2B%2BntC6RIPDYZfbN6%2BDxDg9g8eInEUyU%2BOwA0d2mE57O%2BtczoqM30K%2Fhmozeyf0iA9Kl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42366db41c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/together.png | 188.114.96.1 | 200 OK | 7.9 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/together.png IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 122 x 34, 8-bit/color RGBA, non-interlaced Hash54586abdf290194d7ae038a0455ea8ab 72d36e7a2d9c8b0522313c00eaf49f8385d260ab 021f210aa8754996bd01111c47a2c9e8bca5c491b74485193243801e17d6ba36
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /sb/notifications/antivirus/mcafee/scan-virus/1/img/together.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: image/png
content-length: 7907
last-modified: Thu, 07 Mar 2024 13:41:38 GMT
etag: "65e9c412-1ee3"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 445132
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9IRxElY3QW2KHsYOLLPQOiaF9rsGXs2OA2%2FnoAKgVgICLJ6DUKxWopUH25zS%2FRYUVgCs8uPBMB6sog9TAqApKIU3%2FmcQ04N4L39ogp%2FC6zKtqnQ3WXDwQ0ZXxOUNlHDPgm0EG3hvkzyj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42366dba1c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/atten.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/atten.png IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 100 x 89, 8-bit/color RGBA, non-interlaced Hash73ee5f5a65419cdae683e3ce557667c5 c63479fd67f9bcf0ff867e518ed12dbb223929fb beaf85377ddd403e8beb6772e27ef87608e0da79d09e3080798c339d9b822135
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /sb/notifications/antivirus/mcafee/scan-virus/1/img/atten.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: image/png
content-length: 2453
last-modified: Thu, 07 Mar 2024 13:41:38 GMT
etag: "65e9c412-995"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 445132
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HYeBKbp1%2Bqk8XHZzqSNBkcueljQkqUDLka0WVmFQBoudMQoWfnQXPqdD7J8%2BSLRfYDhKW8K5G7f4SDNPdo1c9PgTi8uGcNuuDydc5EVJaNADkTllH%2FH8uX%2F94J03sAh6HllPMokHwtEO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42366dbc1c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_2.png | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_2.png IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Hashfd22397dfe5d6d7349164ce82847fd53 dcc678c0c3c6d91d88b021081f280377fa65ee01 3c6902c5acb08e21fef1afb46bcf770245b6b942f0613d8063a5032065c4d317
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_2.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: image/png
content-length: 2431
last-modified: Thu, 07 Mar 2024 13:41:39 GMT
etag: "65e9c413-97f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 445133
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDBS6UIvtF7PcV4kQf4x07PAGzIKHoho8CvFDCwzgimcADh4uBHoPgXU3VJUNLYBIxdY40bWtfQw%2FQrSe5v8MPchBMhaWlezPpPEcEUrRoQp3N%2BaYk7GSF%2F2Qg9QQPD4wfzpgvcnjk8b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42366db81c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_3.png | 188.114.96.1 | 200 OK | 1.0 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_3.png IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typePNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced Hash118f0c5583f13e7f2e42ac3c34d54a4a aca14f746b4889df053494c8fa043f8a4b22a511 746872277e95c813f0720fb138d445af664d09b0e9968bb2dfc453a4f30f75da
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /sb/notifications/antivirus/mcafee/scan-virus/1/img/icon_3.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: image/png
content-length: 1010
last-modified: Thu, 07 Mar 2024 13:41:38 GMT
etag: "65e9c412-3f2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 445132
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8QeBwsfeHBGyzmVXa4rXwNU5G0A9Hgr%2BJ8Cnqb6d0qZ%2FIvlGYF0jMEp5d35QzNKIwMsGDd%2FHizFNh%2BGnV9lkClMA1qpwOrEZbA6w43Ejm9YozhRRCWT81NpMujUTuTTi4Wg4%2BrHZL8L3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42366dbd1c16-OSL
alt-svc: h3=":443"; ma=86400
|
|
| connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2F%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Findex.html&l=7016&fd=48 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2F%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Findex.html&l=7016&fd=48 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2F%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Findex.html&l=7016&fd=48 HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/css/style.css | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/css/style.css IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hash3e8359747cb05941cb00fa227208ab44 ca169455a8d0d54b40dd8abbb6bd5129dea73a5e 963c01f4240bdbb3472b8fff96abcd61a0e9fa07167fae9f996ca63a1d892d87
GET /sb/notifications/antivirus/mcafee/scan-virus/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: text/css
last-modified: Thu, 07 Mar 2024 13:41:34 GMT
etag: W/"65e9c40e-1fb4"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1150247
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=woq0PaS8Z1KvGnt8%2FtSAskSJtGTyugYMKe7o9bg%2FDAXL6Lrjbe7lyzQvT9eKblGlogsz5%2Fk%2BwkdW4%2F55QyLzhSvMHmv5I%2BIeTo4Wf57boPNLhAmzjm3WOPEoZjGUVh8sZGgH2%2BoBBcGM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4235d8731c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/css/animate.css | 188.114.96.1 | 200 OK | 4.8 kB |
URL GET HTTP/2cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/css/animate.css IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
Hashe1d8acd5ee9d1a90ea09313cbd8f2b02 8a8327b115d1356715e63270d1ce6d46124c7b1a 3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/notifications/antivirus/mcafee/scan-virus/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: text/css
last-modified: Thu, 07 Mar 2024 13:41:34 GMT
etag: W/"65e9c40e-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oPkBI%2FKa87SbAj9%2BBf74JRNTwSlTfMzWK9Xn4OQuoIWP9dOf535MdQc8NWRFGBD5d8RcVudA1CI8d7ghDlPfkeldQ%2BXTntHcOzKRpHHVukIGxYS7fUEj7AY6BLpdFZBnWpHMiSEwAle9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4235c8701c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fjs%2Fscript.js&l=58799&fd=556 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fjs%2Fscript.js&l=58799&fd=556 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fjs%2Fscript.js&l=58799&fd=556 HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| connectionsoathbottles.com/pixel/sbs?c=1 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1connectionsoathbottles.com/pixel/sbs?c=1 IP172.240.108.68:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbs?c=1 HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| connectionsoathbottles.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd9lV9%2BuhAEh9mNQqMiiqZT1X%2Bqu52FOI6ROJlJmFF0J%2B9fdZ55Va94r6qrk1VwQGdnK8gs3FROJxPUQZwP4CCVAYUBIe0qC7P0CwzMUqTbYOuF4t5zzy0499z36V5%2BShrI6cnlq2ZHaU2X23W%2F9vKHQXCxtqaSfFgbdsOPwtbFmh283gvr%2Fiu1dyTfMssNP%2FD9wA9qK8rKyAyXpyRUercX1Ht%2BvdWoB%2B0Whva%2F2OUeHPUgBqfkHJSYLD7wzkPxCkn8w2XptjKTvvZ2nGuaGYuBOHw%2F2UpMkSCel5H1ECWHZ9Mw7njlPkxyMJMLM%2FhnkKkJ8X6%2BD5YcnokEG%2BzPdDINmYCJp1AMKkhdQdEK3NyEEscE4ALX1pHEd64ZW9Dtv1k6ZSdk8fEjqGJCFn8%2FjyT%2B%2FpJWw9oNo%2FNMmcRhGJVQwwqqXyHNj5DtLEAVR%2BDZJ1DiV7L8eA1JvL%2FutIESJy82ecD8Tqu11GkEYqkVdsMl2mr0lsIgoLQpZZtRNjNIqQoqqqDlCNR5yKef8pBHHvLUQyxOajwIgo4vOPW7Pc6boiNZKPyAdqKABn7YRc6nO4yQpSNwPQK3u0jtLrbUF8ftZ2Hzn%2BA2SzjhwWUEA1GikASFIygoQaEIioygGJQHQruGK%2B8I7XIWnOXGWW6WY5P19%2BiByfoyIaB2BCvKvfSUPDP10HvhyZewJU9qtBXR0JeUCtppMd4JG23a6IVBp9MU0u%2BGcKqEcguzjXfUhFz45Q%2BkakL%2Bf%2FtPMHoEp4%2FA1TnQ%2FDnQogTdLLGT3Ms2ZaoszSSj27RubB%2FClEizRWTb3p4%2BJRdmp7y68QiSPyRnAW5LpLbEx%2BoBQV%2FfGl83Bdm%2FbgpH7q2nmYrVDp2e%2BUZGM%2FnEt1fkdmGsWL3sRt%2B8yafEtLz7nnTZGk2ESvqOfHdJCSHtirFckh9X3QeSbeRu81Jukzxd23hrZTVOrXROmaQCVcfmM3A1IU%2Fj89n7fbW2D2Ur2LxEnM%2BVKlOBp7tw6bznDIHVc8xSD0Vejm2DzZtaEWg5x5SVcP%2FCbF6PLZ3%2BTVW5526hbxdAs5tI4hIDW2KgS1A9gsv%2FN85S%2B%2FCN35qzANMLY6btwj7TVn85M3lCrtz%2BCk6d1Jq%2B6DAZyQ6TrXYrklywdpv5POKsKbpdjsxNoue%2FfvcvAAAA%2F%2F8BAAD%2F%2F9NvKfeZBAAA | 192.243.61.225 | 200 OK | 7 B |
URL GET HTTP/1.1connectionsoathbottles.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd9lV9%2BuhAEh9mNQqMiiqZT1X%2Bqu52FOI6ROJlJmFF0J%2B9fdZ55Va94r6qrk1VwQGdnK8gs3FROJxPUQZwP4CCVAYUBIe0qC7P0CwzMUqTbYOuF4t5zzy0499z36V5%2BShrI6cnlq2ZHaU2X23W%2F9vKHQXCxtqaSfFgbdsOPwtbFmh283gvr%2Fiu1dyTfMssNP%2FD9wA9qK8rKyAyXpyRUercX1Ht%2BvdWoB%2B0Whva%2F2OUeHPUgBqfkHJSYLD7wzkPxCkn8w2XptjKTvvZ2nGuaGYuBOHw%2F2UpMkSCel5H1ECWHZ9Mw7njlPkxyMJMLM%2FhnkKkJ8X6%2BD5YcnokEG%2BzPdDINmYCJp1AMKkhdQdEK3NyEEscE4ALX1pHEd64ZW9Dtv1k6ZSdk8fEjqGJCFn8%2FjyT%2B%2FpJWw9oNo%2FNMmcRhGJVQwwqqXyHNj5DtLEAVR%2BDZJ1DiV7L8eA1JvL%2FutIESJy82ecD8Tqu11GkEYqkVdsMl2mr0lsIgoLQpZZtRNjNIqQoqqqDlCNR5yKef8pBHHvLUQyxOajwIgo4vOPW7Pc6boiNZKPyAdqKABn7YRc6nO4yQpSNwPQK3u0jtLrbUF8ftZ2Hzn%2BA2SzjhwWUEA1GikASFIygoQaEIioygGJQHQruGK%2B8I7XIWnOXGWW6WY5P19%2BiByfoyIaB2BCvKvfSUPDP10HvhyZewJU9qtBXR0JeUCtppMd4JG23a6IVBp9MU0u%2BGcKqEcguzjXfUhFz45Q%2BkakL%2Bf%2FtPMHoEp4%2FA1TnQ%2FDnQogTdLLGT3Ms2ZaoszSSj27RubB%2FClEizRWTb3p4%2BJRdmp7y68QiSPyRnAW5LpLbEx%2BoBQV%2FfGl83Bdm%2FbgpH7q2nmYrVDp2e%2BUZGM%2FnEt1fkdmGsWL3sRt%2B8yafEtLz7nnTZGk2ESvqOfHdJCSHtirFckh9X3QeSbeRu81Jukzxd23hrZTVOrXROmaQCVcfmM3A1IU%2Fj89n7fbW2D2Ur2LxEnM%2BVKlOBp7tw6bznDIHVc8xSD0Vejm2DzZtaEWg5x5SVcP%2FCbF6PLZ3%2BTVW5526hbxdAs5tI4hIDW2KgS1A9gsv%2FN85S%2B%2FCN35qzANMLY6btwj7TVn85M3lCrtz%2BCk6d1Jq%2B6DAZyQ6TrXYrklywdpv5POKsKbpdjsxNoue%2FfvcvAAAA%2F%2F8BAAD%2F%2F9NvKfeZBAAA IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd9lV9%2BuhAEh9mNQqMiiqZT1X%2Bqu52FOI6ROJlJmFF0J%2B9fdZ55Va94r6qrk1VwQGdnK8gs3FROJxPUQZwP4CCVAYUBIe0qC7P0CwzMUqTbYOuF4t5zzy0499z36V5%2BShrI6cnlq2ZHaU2X23W%2F9vKHQXCxtqaSfFgbdsOPwtbFmh283gvr%2Fiu1dyTfMssNP%2FD9wA9qK8rKyAyXpyRUercX1Ht%2BvdWoB%2B0Whva%2F2OUeHPUgBqfkHJSYLD7wzkPxCkn8w2XptjKTvvZ2nGuaGYuBOHw%2F2UpMkSCel5H1ECWHZ9Mw7njlPkxyMJMLM%2FhnkKkJ8X6%2BD5YcnokEG%2BzPdDINmYCJp1AMKkhdQdEK3NyEEscE4ALX1pHEd64ZW9Dtv1k6ZSdk8fEjqGJCFn8%2FjyT%2B%2FpJWw9oNo%2FNMmcRhGJVQwwqqXyHNj5DtLEAVR%2BDZJ1DiV7L8eA1JvL%2FutIESJy82ecD8Tqu11GkEYqkVdsMl2mr0lsIgoLQpZZtRNjNIqQoqqqDlCNR5yKef8pBHHvLUQyxOajwIgo4vOPW7Pc6boiNZKPyAdqKABn7YRc6nO4yQpSNwPQK3u0jtLrbUF8ftZ2Hzn%2BA2SzjhwWUEA1GikASFIygoQaEIioygGJQHQruGK%2B8I7XIWnOXGWW6WY5P19%2BiByfoyIaB2BCvKvfSUPDP10HvhyZewJU9qtBXR0JeUCtppMd4JG23a6IVBp9MU0u%2BGcKqEcguzjXfUhFz45Q%2BkakL%2Bf%2FtPMHoEp4%2FA1TnQ%2FDnQogTdLLGT3Ms2ZaoszSSj27RubB%2FClEizRWTb3p4%2BJRdmp7y68QiSPyRnAW5LpLbEx%2BoBQV%2FfGl83Bdm%2FbgpH7q2nmYrVDp2e%2BUZGM%2FnEt1fkdmGsWL3sRt%2B8yafEtLz7nnTZGk2ESvqOfHdJCSHtirFckh9X3QeSbeRu81Jukzxd23hrZTVOrXROmaQCVcfmM3A1IU%2Fj89n7fbW2D2Ur2LxEnM%2BVKlOBp7tw6bznDIHVc8xSD0Vejm2DzZtaEWg5x5SVcP%2FCbF6PLZ3%2BTVW5526hbxdAs5tI4hIDW2KgS1A9gsv%2FN85S%2B%2FCN35qzANMLY6btwj7TVn85M3lCrtz%2BCk6d1Jq%2B6DAZyQ6TrXYrklywdpv5POKsKbpdjsxNoue%2FfvcvAAAA%2F%2F8BAAD%2F%2F9NvKfeZBAAA HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aa999b114ce70a9e933694313bbc3650
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/favicon.ico | 188.114.96.1 | | 7.4 kB |
URL GET cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/img/favicon.ico IP188.114.96.1:0
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hashebb7784f41e283b042af365dc54e9a0d 099bd47831572b8c90cacf67e20940b72c8f4fd4 d38db89d5e998b9f21899a985f3b1366a3610dc13213a93cf4e96620bbc64b0e
| Analyzer | Verdict | Alert |
|---|
| urlquery | scam | Scam - Fake AntiVirus / Security software |
GET /sb/notifications/antivirus/mcafee/scan-virus/1/img/favicon.ico HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: image/x-icon
last-modified: Thu, 07 Mar 2024 13:41:36 GMT
etag: W/"65e9c410-3aee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3513
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUt0AZhsG%2FZvvNedclaf3OqMtwLesa11opwNZcHKuOqgMnYBAUx%2BobOuxDld6H8I5%2FxX4nHg1i4bicGmCDXhLBQlU6pgCu6NDXEUtSC3W3bKkJJCzCCTJ25FuMCcf3uUdnA8ZFOQwxrB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42366db21c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/js/script.js | 188.114.96.1 | 200 OK | 29 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/js/script.js IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (3660) Hasha3459dc93c6ee01cad3f03c38adc919e e74a6bfae745a43b0b0878c739855b2c1a7b6832 710dabe5814e53c88f23d80f13a3587eb625b4069d7ad3691d29b9663037fb08
GET /sb/notifications/antivirus/mcafee/scan-virus/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Mar 2024 13:41:42 GMT
etag: W/"65e9c416-ff88"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F92lXPo5Vza1G8uLvJrpfXjTRFFUoD%2Bw6CABPMyeIK9Syhec6zS57JTiUVotEU%2FdaBWaM4KVRVsnaPx6KlyzQiiaqLa6cJUXUvnTD4Jvx06e5QB5nOMfSCCV7fvuGcrRLYg%2FMjy%2Bp9d%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4236bde71c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 | 172.67.221.111 | 301 Moved Permanently | 4.6 kB |
URL User Request GET HTTP/2www.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 IP172.67.221.111:443
CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 HTTP/1.1
Host: www.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 19 Apr 2024 16:26:48 GMT
content-type: text/html
location: https://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MQiC3TtNdfi5EYIQWLXjMOFXSr96d6D99dpkya0AKyOURXYxe2cQgzeSe45hKN1cAf5GZ%2FYdfaT1nleBAk2mGgLMtGLql1Tm0VOOFNsnHnXcvJJB%2B0%2FEQ75UUkKMakHbrFekDKIFfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e42257d5a712d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www2.thepiratebay3.to/s/aHR0cHM6Ly93d3cyLnRoZXBpcmF0ZWJheTMudG8vcy8/cT10b29uK2Jvb20mY2F0ZWdvcnk9MGh0dHBzOi8vZ2V0aW50b3BjLmNvbS9zb2Z0d2FyZXMvM2QtbWF0ZXJpYWwtcmVuZGVyaW5nL3Rvb24tYm9vbS1oYXJtb255LXByZW1pdW0tMjAyMi1mcmVlLWRvd25sb2FkLTkzNDE5NDgvP2lkPTAwMTc3NTg5NjQ5Nw== | 172.67.221.111 | 200 OK | 4.6 kB |
URL GET HTTP/3www2.thepiratebay3.to/s/aHR0cHM6Ly93d3cyLnRoZXBpcmF0ZWJheTMudG8vcy8/cT10b29uK2Jvb20mY2F0ZWdvcnk9MGh0dHBzOi8vZ2V0aW50b3BjLmNvbS9zb2Z0d2FyZXMvM2QtbWF0ZXJpYWwtcmVuZGVyaW5nL3Rvb24tYm9vbS1oYXJtb255LXByZW1pdW0tMjAyMi1mcmVlLWRvd25sb2FkLTkzNDE5NDgvP2lkPTAwMTc3NTg5NjQ5Nw== IP172.67.221.111:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
File typeHTML document, ASCII text, with very long lines (4888), with no line terminators Hash5ce1a82d7964d1b76d5b37b1a11acecc 02f4aceec2d1835061adbdfef755470414d41646 b74d43faff035eaab9828737ed4ca775fe8ccbd08aa92a0cb4ffa6bd3ddfbc2d
GET /s/aHR0cHM6Ly93d3cyLnRoZXBpcmF0ZWJheTMudG8vcy8/cT10b29uK2Jvb20mY2F0ZWdvcnk9MGh0dHBzOi8vZ2V0aW50b3BjLmNvbS9zb2Z0d2FyZXMvM2QtbWF0ZXJpYWwtcmVuZGVyaW5nL3Rvb24tYm9vbS1oYXJtb255LXByZW1pdW0tMjAyMi1mcmVlLWRvd25sb2FkLTkzNDE5NDgvP2lkPTAwMTc3NTg5NjQ5Nw== HTTP/1.1
Host: www2.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=e27a7f7f-cf32-4474-9520-3ef5ecf33837%3A1%3A1; pp_main_a518e814c13e6d81b387dd0179d94153=1; sb_page_a4fa60eaada74bc7625a2961773de086=1; sb_onpage_a4fa60eaada74bc7625a2961773de086=1; sb_main_a4fa60eaada74bc7625a2961773de086=1; sb_count_a4fa60eaada74bc7625a2961773de086=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=connectionsoathbottles.com
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:52 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fyVzRH5uvU4U1kFK6HxAkywJCaLArv3yhicfi7jrPIqOzpmIH8cPpS1gie0gwoBqoA4gv4Uv1%2FxAFA6BaAb6SPGvwFQ6jPcujf%2B25mZZCZU37KO6nWBU5ihzqNOldvFdAi440odk07s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e423a4cb2b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fcss%2Fstyle.css&l=8116&fd=36 | 172.240.108.68 | 200 OK | 0 B |
URL GET HTTP/1.1connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fcss%2Fstyle.css&l=8116&fd=36 IP172.240.108.68:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fcss%2Fstyle.css&l=8116&fd=36 HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| www2.thepiratebay3.to/static/css-new/main.css | 172.67.221.111 | 200 OK | 7.2 kB |
URL GET HTTP/3www2.thepiratebay3.to/static/css-new/main.css IP172.67.221.111:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
File typeASCII text, with very long lines (7194), with no line terminators Hash3fbe9fa7688395ff699b8e6233093b4f 9c0713b2b4b5bcf4640898e28303e08391021721 947684407e2b389a4f95611dc38f0bf2d7eacb8f4e62359dc7641208aa3cbd93
GET /static/css-new/main.css HTTP/1.1
Host: www2.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:49 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=7403
etag: W/"65da1078-1ceb"
last-modified: Sat, 24 Feb 2024 15:51:20 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 6158
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogumSE%2BU7QPQdBmug78byrlXGxs%2F24oEMq1LvafxQOwd20v4UqaTqIqjuWX3n0dC1icytYb6I9hVXlbwfQgWwqZeB4gaQZ9foNc3KrNIO7pcDBMmGai7YTPlSu8Ig0R6j496TUen7zg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e422acd3eb505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 | 172.67.221.111 | 200 OK | 4.6 kB |
URL User Request GET HTTP/2www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 IP172.67.221.111:443
CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
File typeHTML document, ASCII text, with very long lines (4888), with no line terminators Hash5ce1a82d7964d1b76d5b37b1a11acecc 02f4aceec2d1835061adbdfef755470414d41646 b74d43faff035eaab9828737ed4ca775fe8ccbd08aa92a0cb4ffa6bd3ddfbc2d
GET /s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 HTTP/1.1
Host: www2.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:49 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/5.6.40
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x0fUFmp23Qppdvd%2BdpGNRGL9N7cRwoszcPYkckhfCTmaEes2TL%2BHjUFW0Yr6TLMDB%2FBoXQGagj2dkvn19RNEAbjKVLj9d%2FwgyeOZ2rznfwLPdWGs4u5Bg%2FoROBVlJ7eKHzsRNQY8vQU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876e42270ea7712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www2.thepiratebay3.to/favicon.ico | 172.67.221.111 | 200 OK | 1.2 kB |
URL GET HTTP/3www2.thepiratebay3.to/favicon.ico IP172.67.221.111:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectthepiratebay3.to FingerprintE6:A1:D9:F8:E7:D9:4C:B0:03:FD:F0:5A:C0:7C:70:CE:CD:F4:50:B7 ValidityMon, 25 Mar 2024 03:26:28 GMT - Sun, 23 Jun 2024 03:26:27 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash00f8c1f8d3a933c52493dee82235091a d0cea92c09965f0862f4a6c416d76d1c30635b27 679c980199054a55a206bd703b173e538f949264c8b4e82071b0b6938f6e8567
GET /favicon.ico HTTP/1.1
Host: www2.thepiratebay3.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=e27a7f7f-cf32-4474-9520-3ef5ecf33837%3A1%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:50 GMT
content-type: image/x-icon
last-modified: Sat, 24 Feb 2024 15:47:55 GMT
etag: W/"65da0fab-47e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3613
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8IsriYXzyMD6uIqjlU7RYhg%2Bwe%2FpAkx%2BomXqdtvitYdwyA7PSZRSh2mdbIQu%2BTqnhkiRMcWXkIgoyeYq7VZxOc3OhKjMaM4bzsWgFQ0IE4ljumXrYSNOwLdWambIfOm9sBkWIt%2F57%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e4230ab51b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/js/jquery-3.2.1.min.js | 188.114.96.1 | 200 OK | 130 kB |
URL GET HTTP/3cdn.creative-bars1.com/sb/notifications/antivirus/mcafee/scan-virus/1/js/jquery-3.2.1.min.js IP188.114.96.1:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerGoogle Trust Services LLC Subjectcreative-bars1.com Fingerprint3D:29:39:2C:F1:E5:C6:EF:54:F5:70:B5:CF:A8:C2:75:4D:89:72:13 ValidityMon, 15 Apr 2024 15:02:18 GMT - Sun, 14 Jul 2024 15:02:17 GMT
File typeJavaScript source, ASCII text, with very long lines (745) Size130 kB (129575 bytes) Hashe59a2e92b4756cc61e2e4f3082ee1360 c96d002f642bd85adf1e5326bcc0679f9c3ee001 42173a3ca70c715370ce99071f892ad61d3fee33dbf15426fa7eee549a4afca2
GET /sb/notifications/antivirus/mcafee/scan-virus/1/js/jquery-3.2.1.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Mar 2024 13:41:42 GMT
etag: W/"65e9c416-1fa27"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3079111
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rMaJad%2BaojGZ1smih%2Bi3lwNzTYZEkNOKbQVooCps3cnZdIddONiLjrUigR7YNUPtxmQgern75jerwAUVz8WBlN65J2tUWdHVAgU7s%2FS%2FvuXsjMqW9L5ioK6uo0r98YADrZINjaRykPRD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42367dc11c16-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.yourwebbars.com//sb/notifications/antivirus/mcafee/scan-virus/1/index.html |  104.26.7.19 | 200 OK | 7.0 kB |
URL GET HTTP/2cdn.yourwebbars.com//sb/notifications/antivirus/mcafee/scan-virus/1/index.html IP104.26.7.19:443
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49 ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (7365), with no line terminators Hash1f85f85a62ed2a3b4b40460a4cd22ef8 40c75ac416bd839c6e842592d8c2931d797fd7b5 227572856c261884800b5d200432fe2685b87d137dca893c0eab0138ed2f218a
GET //sb/notifications/antivirus/mcafee/scan-virus/1/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www2.thepiratebay3.to
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 16:26:51 GMT
content-type: text/html
last-modified: Thu, 07 Mar 2024 13:41:32 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 94967
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kdLiHJpQCclF2YkjRYsOIG7tPhFSIfmAf6VMtpe15rRA1ZXV2Z1hXS%2FKWfhB86NpA9mRxzIUoNK%2BN7B8j4xGNbxtGbZk6CacEjyYxUKzgnkv57CD%2Fqn58goA8Rf4E2%2BDlq5U2iA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876e42355e4d0b61-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fcss%2Fanimate.css&l=79249&fd=333 | 192.243.61.225 | 200 OK | 0 B |
URL GET HTTP/1.1connectionsoathbottles.com/pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fcss%2Fanimate.css&l=79249&fd=333 IP192.243.61.225:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www2.thepiratebay3.to/s/?q=toon+boom&category=0https://getintopc.com/softwares/3d-material-rendering/toon-boom-harmony-premium-2022-free-download-9341948/?id=001775896497 CertificateIssuerLet's Encrypt Subjectconnectionsoathbottles.com Fingerprint68:98:0D:06:BB:2A:63:40:EA:C8:2E:9C:92:D5:28:92:1A:4A:FB:3B ValidityTue, 16 Apr 2024 10:35:09 GMT - Mon, 15 Jul 2024 10:35:08 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/sbls?bv=24.6.6370&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fantivirus%2Fmcafee%2Fscan-virus%2F1%2Fcss%2Fanimate.css&l=79249&fd=333 HTTP/1.1
Host: connectionsoathbottles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www2.thepiratebay3.to/
Cookie: u_pl=19072806; uid_id2=3c1b0744-721d-4686-a429-611aa3ee5bab:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 19 Apr 2024 16:26:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|