Report - partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom

Report Overview

Submitted URL
partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
IP
35.168.187.233
ASN
#14618 AMAZON-AES
Submitted
2024-04-24 15:52:48
Access
public
Website Title
Mindfire Solutions: Custom Cloud Solutions in the E-Learning Industry E-Learning Industry: Reliance on the Cloud The Covid-19 pandemic brought about generational changes in people’s lives the world over. One of the sectors most severely affected by the - Whitepaper-Mindfire-1.pdf
Final URL
file:///root/Downloads/Whitepaper-Mindfire-1.pdf
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
28

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-24	438 B	29 kB	104.17.25.14
use.typekit.net	494	2010-08-02	2012-07-05	2024-04-23	422 B	4.5 kB	23.36.76.122
p.typekit.net	620	2010-08-02	2012-05-23	2024-04-23	883 B	338 B	23.36.76.96
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-24	5.5 kB	201 kB	142.250.74.106
polyfill.io	102644	2013-03-18	2016-02-12	2024-04-23	514 B	571 B	104.18.51.3
stackpath.bootstrapcdn.com	2467	2012-05-25	2018-06-15	2024-04-24	461 B	160 kB	104.18.11.207
partnersitcnetwork.com	unknown	2022-05-24	2022-06-07	2023-11-01	8.0 kB	2.7 MB	35.168.187.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed
2024-04-24	medium	partnersitcnetwork.com	Sinkholed

ThreatFox

No alerts detected

Files detected

URL
partnersitcnetwork.com/58493-290174/141699?mode=file&t=1713973943280
IP
35.168.187.233
ASN
#14618 AMAZON-AES

File type
PDF document, version 1.4, 9 pages
Size
2.5 MB (2526961 bytes)
Hash
04dd902f6e93d020b6f3e8b0560ff2db
8854183f54c9f3a7530b4995682b25b38b7626ad
7c3c33a500488c3b1f5682927b08e3a3e0a5cec95639c2fc0c4494f92370bdc4

JavaScript (4)

	URL	Size	First Seen	Last Seen
	polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7	103 B	2023-12-17	2024-04-28
Pretty URL polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 IP 104.18.51.3 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-17 19:37:38 Last Seen2024-04-28 21:47:53 Times Seen99 Hash 59a46dbbf533fd37ef4a33480d1d894a 24fa508fa9ab6e6e0cde097cc4d7f44f07d5fecd 59c2d73d2bc35a4fa8778ccb547d1be85aea093f276e6b8dd698ffecc7390677 Loading...

	partnersitcnetwork.com/lib/uri/uri.js	77 kB	2023-03-07	2024-04-26
Pretty URL partnersitcnetwork.com/lib/uri/uri.js IP 35.168.187.233 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:23:25 Last Seen2024-04-26 00:44:26 Times Seen1499 Hash 64437cd33e2fa1a40e6850ee6388639e 809078716153b491c00852f366ca3f8d6e03df22 96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js	90 kB	2023-03-07	2024-05-06
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:01 Last Seen2024-05-06 00:11:33 Times Seen141646 Hash dc5e7f18c8d36ac1d3d4753a87c98d0a c8e1c8b386dc5b7a9184c763c88d19a346eb3342 f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d Loading...

	partnersitcnetwork.com/lpScripts/assetsBehavior.js?v=1	21 kB	2024-02-26	2024-04-24
Pretty URL partnersitcnetwork.com/lpScripts/assetsBehavior.js?v=1 IP 35.168.187.233 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-26 20:40:06 Last Seen2024-04-24 17:52:51 Times Seen7 Hash e51fa0534be3ff8a26a468f98a7333c2 14c0a034533c333513ca7c39d67f16b371e566e4 bf1f649abef099d6184f96c683488c9d6f3b6c959d4fc9fc577fe72c141bc5dc Loading...

HTTP Transactions (30)

URL IP Response Size

partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5

35.168.187.233

200 OK

2.7 kB

URL User Request GET HTTP/1.1
partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
HTML document, ASCII text, with very long lines (1774)
Size
2.7 kB (2733 bytes)
Hash
2d35a8280df2020b5c44e26f49fc3c46
2394a708419a822be3f885cbc646d88116ee68bf
d04828725eae4160d88bd5fcee7d53019d7d53904906bfad16964611f6f65445

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5 HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.2.12
Cache-Control: max-age=0, must-revalidate, private
Date: Wed, 24 Apr 2024 15:52:22 GMT
Expires: Wed, 24 Apr 2024 15:52:22 GMT
Content-Encoding: gzip

cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js

104.17.25.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
28 kB (27958 bytes)
Hash
dc5e7f18c8d36ac1d3d4753a87c98d0a
c8e1c8b386dc5b7a9184c763c88d19a346eb3342
f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d

HTTP Headers

GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:52:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1721158
expires: Mon, 14 Apr 2025 15:52:22 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvlsIUEn0OJY7l2wufGaBW0XI3luwBCFmX%2FIEfD2oMdeLao5m55UaJ5rvAjEMXyTWXvwjY%2FpPxIeJP0Dq6Hbni5ktvAPNAmU4Q4xl80RkR5AmCgrH2Ebv8Xx2txcJeHG8hA3tbSQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 879742945a465684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

partnersitcnetwork.com/ckeditor/contents.css?t=N94E

35.168.187.233

200 OK

1.3 kB

URL GET HTTP/1.1
partnersitcnetwork.com/ckeditor/contents.css?t=N94E
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
ASCII text
Size
1.3 kB (1284 bytes)
Hash
ea34863bd1770c4274d7ed7c58449f2a
1aefe351289c27d7b741cd38baaaad3398e306ba
43b78285c786c968e35d8a44aafb06df291e840e106bd01ddf36df96ce84ff5d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ckeditor/contents.css?t=N94E HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: text/css
Last-Modified: Fri, 29 Mar 2024 08:56:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6606825b-b46"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

partnersitcnetwork.com/uploads/uploadedFonts/fontsImport.css?v=1713973942

35.168.187.233

200 OK

14 kB

URL GET HTTP/1.1
partnersitcnetwork.com/uploads/uploadedFonts/fontsImport.css?v=1713973942
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
ASCII text, with very long lines (508)
Size
14 kB (13728 bytes)
Hash
7c2fba9f585d90b1456a12f41e53b784
6e660f7f08ed50eddb1e613bce25756eff27ca17
7c38973f9de7f9eda1f2f71063804a06b5b56717290fb57e02fc7618e290bd02

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/uploadedFonts/fontsImport.css?v=1713973942 HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: text/css
Last-Modified: Mon, 15 Apr 2024 10:51:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"661d06bb-22e0f"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

partnersitcnetwork.com/ckeditor/plugins/assetImageEditor/styles/assetImageEditor.css

35.168.187.233

200 OK

6.0 kB

URL GET HTTP/1.1
partnersitcnetwork.com/ckeditor/plugins/assetImageEditor/styles/assetImageEditor.css
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
ASCII text, with very long lines (14633)
Size
6.0 kB (5981 bytes)
Hash
787386e5e10ff3bb89548b79491676c9
91954bf6893e1369d4d29eed13684241e114474e
83f3a7c1ef45aec623457bf7f8165b0ec4ef1699a7822796ded8fa4ee7f67562

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ckeditor/plugins/assetImageEditor/styles/assetImageEditor.css HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: text/css
Last-Modified: Fri, 29 Mar 2024 08:56:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6606825b-392a"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

partnersitcnetwork.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1699654651791

35.168.187.233

200 OK

1.8 kB

URL GET HTTP/1.1
partnersitcnetwork.com/ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1699654651791
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
ASCII text
Size
1.8 kB (1792 bytes)
Hash
ed9a27db1cd91b4b6ad7485390086f9e
ef1bf83232d25324e0dfbbae0b7005b6aad8a46f
3f3772a40c5faac6138cd1b7e2609ff25aa9e97c13acfdde0250797306166841

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ckeditor/plugins/formBuilder/styles/formBuilder.css?v=1.3.1699654651791 HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: text/css
Last-Modified: Fri, 29 Mar 2024 08:56:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6606825b-14ee"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

partnersitcnetwork.com/ckeditor/plugins/lpLinkV2/css/styles.css

35.168.187.233

200 OK

681 B

URL GET HTTP/1.1
partnersitcnetwork.com/ckeditor/plugins/lpLinkV2/css/styles.css
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
ASCII text, with very long lines (2158)
Size
681 B (681 bytes)
Hash
20944bcec784ce7e2b95b62808da9869
29fa6fc754e5f8cda684cfcadad4b996f7404e61
479da2477e3d7631c8cca6c411d1b2afad9d5e66bc6bb7acc8b1bdafadd75499

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /ckeditor/plugins/lpLinkV2/css/styles.css HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: text/css
Last-Modified: Fri, 29 Mar 2024 08:56:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6606825b-86f"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

partnersitcnetwork.com/lpScripts/assetsBehavior.js?v=1

35.168.187.233

200 OK

5.9 kB

URL GET HTTP/1.1
partnersitcnetwork.com/lpScripts/assetsBehavior.js?v=1
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
JavaScript source, ASCII text
Size
5.9 kB (5921 bytes)
Hash
e51fa0534be3ff8a26a468f98a7333c2
14c0a034533c333513ca7c39d67f16b371e566e4
bf1f649abef099d6184f96c683488c9d6f3b6c959d4fc9fc577fe72c141bc5dc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lpScripts/assetsBehavior.js?v=1 HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: application/javascript
Last-Modified: Sat, 27 Jan 2024 11:22:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"65b4e765-5241"
Cache-Control: no-cache
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Encoding: gzip

partnersitcnetwork.com/lib/uri/uri.js

35.168.187.233

200 OK

20 kB

URL GET HTTP/1.1
partnersitcnetwork.com/lib/uri/uri.js
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (1107)
Size
20 kB (19895 bytes)
Hash
64437cd33e2fa1a40e6850ee6388639e
809078716153b491c00852f366ca3f8d6e03df22
96361c580499a6dd7afa83f352fb2a27c159a39daf794e2e6813514be8a8fbe9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /lib/uri/uri.js HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: application/javascript
Last-Modified: Mon, 12 Apr 2021 20:19:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6074ab5b-12c3e"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Content-Encoding: gzip

use.typekit.net/mgr2odi.css

23.36.76.122

200 OK

4.1 kB

URL GET HTTP/2
use.typekit.net/mgr2odi.css
IP
23.36.76.122:443
ASN
#20940 Akamai International B.V.

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (520)
Size
4.1 kB (4083 bytes)
Hash
f03cf609aeed247d3a9aba2d34b2a5ab
054962aa9a1a564550b81b40cb1db1f3e28872f7
8e3662b3e186bc0a9fba2ebbd70284e4a0b0161413c12ee1cdf39de30e0d114a

HTTP Headers

GET /mgr2odi.css HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: text/css;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: private, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 4083
date: Wed, 24 Apr 2024 15:52:22 GMT
X-Firefox-Spdy: h2

partnersitcnetwork.com/res/common/img/current_year_light.png

35.168.187.233

200 OK

8.0 kB

URL GET HTTP/1.1
partnersitcnetwork.com/res/common/img/current_year_light.png
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
PNG image data, 488 x 71, 8-bit/color RGB, non-interlaced
Size
8.0 kB (7982 bytes)
Hash
5cac4f457ad91d35606145433ee8a22f
82c0d66a2b3609077a76c8b7db46a0ea1dd7928f
3f65990b25d46c36f827d7b464a70f1fdc661772b8d27e9287eebe77268c8ba2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /res/common/img/current_year_light.png HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: image/png
Content-Length: 7982
Last-Modified: Sat, 27 May 2023 08:16:55 GMT
Connection: keep-alive
ETag: "6471bc77-1f2e"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

partnersitcnetwork.com/uploads/c_58493/logos/images-1.png

35.168.187.233

200 OK

5.2 kB

URL GET HTTP/1.1
partnersitcnetwork.com/uploads/c_58493/logos/images-1.png
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
PNG image data, 310 x 162, 8-bit colormap, non-interlaced
Size
5.2 kB (5245 bytes)
Hash
f3a5a6631eb7083ecd363ee0eab9deb3
766c24e1294387d238e0b28cf3030ac057e95320
7f9bf3dcb7db09f55ce2f05ff464a3b5a75665abca4f0914fbfd5339a2f0e6d4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/c_58493/logos/images-1.png HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:22 GMT
Content-Type: image/png
Content-Length: 5245
Last-Modified: Wed, 24 Apr 2024 08:27:26 GMT
Connection: keep-alive
ETag: "6628c26e-147d"
Expires: Wed, 24 Apr 2024 16:52:22 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

p.typekit.net/p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css

23.36.76.96

200 OK

5 B

URL GET HTTP/2
p.typekit.net/p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css
IP
23.36.76.96:443
ASN
#20940 Akamai International B.V.

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerDigiCert Inc
Subjectuse.typekit.net
Fingerprint15:AD:3F:8A:55:B7:BC:20:D8:70:5B:06:E0:D2:92:7C:BE:C6:E0:56
ValidityThu, 01 Feb 2024 00:00:00 GMT - Mon, 03 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
5 B (5 bytes)
Hash
83d24d4b43cc7eef2b61e66c95f3d158
f0cafc285ee23bb6c28c5166f305493c4331c84d
1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb

HTTP Headers

GET /p.css?s=1&k=mgr2odi&ht=tk&f=137.138.139.140.169.170.171.172.173.174.175.176.5474.5475.25136.25137.143.144.147.148.156.157.161.162.2003.2004.2005.2006.2007.2008.2009.2010.2011.2012.9938.9939.39002.39004.12046.12047.12048.12049.12050.12051.12053.12054.12055.12056.17398.17399.17400.17401.22618.22619.14032.14033.14034.14035.26425.26426.35617.35620.26435.35615.26438.26439.35630.35633.26448.35628.26893.26894.26897.26898.26909.26910.26913.26914.29382.29383&a=14392602&app=typekit&e=css HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://use.typekit.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: text/css
content-length: 5
last-modified: Tue, 07 Mar 2023 19:56:00 GMT
etag: "640796d0-5"
cache-control: public, max-age=604800
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
accept-ranges: bytes
date: Wed, 24 Apr 2024 15:52:23 GMT
X-Firefox-Spdy: h2

partnersitcnetwork.com/uploads/c_1/backgrounds/UnsubDefaultBg.jpg

35.168.187.233

200 OK

36 kB

URL GET HTTP/1.1
partnersitcnetwork.com/uploads/c_1/backgrounds/UnsubDefaultBg.jpg
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Size
36 kB (35855 bytes)
Hash
5a53f3bb3371cba1cf18ff05d25ce539
7b62f7040fa006be398bee680c1d5d9eea3f4128
c681cf5b8a666c89e46beab836e01cfe79d88c6a9cdd2a062dd09e3ac2787e59

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/c_1/backgrounds/UnsubDefaultBg.jpg HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:23 GMT
Content-Type: image/jpeg
Content-Length: 35855
Last-Modified: Wed, 23 Sep 2020 13:24:56 GMT
Connection: keep-alive
ETag: "5f6b4ca8-8c0f"
Expires: Wed, 24 Apr 2024 16:52:23 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

fonts.googleapis.com/css2?family=Noto+Sans:wght@400&display=swap

142.250.74.106

200 OK

7.3 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Noto+Sans:wght@400&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
7.3 kB (7275 bytes)
Hash
9dcb2be9b2b4122cfba7934fda3b42d3
22c98c701f89410ad0b6f85e084b18eeef47e492
3730d9fc410a630d8a733bf76a41f59ff0fde139208165384665929a3cbcb647

HTTP Headers

GET /css2?family=Noto+Sans:wght@400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Noto+Color+Emoji:wght@400&display=swap

142.250.74.106

200 OK

6.0 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Noto+Color+Emoji:wght@400&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
6.0 kB (5973 bytes)
Hash
da9790f7f69308f8c8ca58c27ac215fc
96c4b5405a07dbc0f1054f969edb4d3b6235d1de
79a6df7968135ad21be5ce7c1b5c900f0a691d7792fd2c03c3a425ec639fd3b3

HTTP Headers

GET /css2?family=Noto+Color+Emoji:wght@400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

partnersitcnetwork.com/uploads/uploadedFonts/92/Regular/Segoe-UI.ttf

35.168.187.233

200 OK

34 kB

URL GET HTTP/1.1
partnersitcnetwork.com/uploads/uploadedFonts/92/Regular/Segoe-UI.ttf
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
TrueType Font data, 18 tables, 1st "FFTM", 48 names, Macintosh
Size
34 kB (34164 bytes)
Hash
0e7e9a9b5c4abaadef7bc8f4e4574084
995e37cfba0e3df9a716891a4cf9a05b38b118f9
3745c347d168dd938971aed573ab2140b6a766f658c4f353f06ddc05e976ff7a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/uploadedFonts/92/Regular/Segoe-UI.ttf HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/uploads/uploadedFonts/fontsImport.css?v=1713973942
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:23 GMT
Content-Type: application/octet-stream
Content-Length: 34164
Last-Modified: Fri, 24 Feb 2023 15:46:13 GMT
Connection: keep-alive
ETag: "63f8dbc5-8574"
Expires: Wed, 24 Apr 2024 16:52:23 GMT
Cache-Control: max-age=3600
Accept-Ranges: bytes

partnersitcnetwork.com/favicon.ico

35.168.187.233

200 OK

34 kB

URL GET HTTP/1.1
partnersitcnetwork.com/favicon.ico
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Size
34 kB (34494 bytes)
Hash
d4a95c780824be97bc45a187ab7ad24b
53aeb2d44190d91ec2006379b3ddbd202b865d24
502322d8592de8395d6e7c2c37b18e04904e62d8f8b3caaa53858e4ebc64b692

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Date: Wed, 24 Apr 2024 15:52:23 GMT
Content-Type: image/x-icon
Content-Length: 34494
Last-Modified: Wed, 14 Sep 2022 11:51:00 GMT
Connection: keep-alive
ETag: "6321c024-86be"
Accept-Ranges: bytes

partnersitcnetwork.com/58493-290174/141699?mode=file&t=1713973943280

35.168.187.233

200 OK

2.5 MB

URL GET HTTP/1.1
partnersitcnetwork.com/58493-290174/141699?mode=file&t=1713973943280
IP
35.168.187.233:443
ASN
#14618 AMAZON-AES

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerLet's Encrypt
Subjectpartnersitcnetwork.com
Fingerprint81:DD:C7:82:6E:0E:1B:E7:01:9B:AB:4E:DE:A3:A4:F0:2E:ED:FF:9C
ValidityWed, 28 Feb 2024 04:11:10 GMT - Tue, 28 May 2024 04:11:09 GMT

File type
PDF document, version 1.4, 9 pages
Size
2.5 MB (2526961 bytes)
Hash
04dd902f6e93d020b6f3e8b0560ff2db
8854183f54c9f3a7530b4995682b25b38b7626ad
7c3c33a500488c3b1f5682927b08e3a3e0a5cec95639c2fc0c4494f92370bdc4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /58493-290174/141699?mode=file&t=1713973943280 HTTP/1.1
Host: partnersitcnetwork.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.24.0
Content-Type: application/force-download
Content-Length: 2526961
Connection: keep-alive
X-Powered-By: PHP/8.2.12
Content-transfer-encoding: binary
Content-disposition: attachment; filename="Whitepaper-Mindfire-1.pdf"
Cache-Control: max-age=0, must-revalidate, private
Date: Wed, 24 Apr 2024 15:52:23 GMT
Expires: Wed, 24 Apr 2024 15:52:23 GMT

fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap

142.250.74.106

200 OK

7.3 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
gzip compressed data, max compression
Size
7.3 kB (7320 bytes)
Hash
09f021787289dc5a2c3d309a37dede0c
384db106a10ba1e67f46f1bc22fb9a0412c15a2c
db1619dd62c1cfa674c9aacb5d52461218c662a7f5bf3c8b4f446f009191b620

HTTP Headers

GET /css2?family=Ubuntu:ital,wght@0,300;0,400;0,500;0,700;1,300;1,400;1,500;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7

104.18.51.3

200 OK

103 B

URL GET HTTP/2
polyfill.io/v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7
IP
104.18.51.3:443
ASN
#13335 CLOUDFLARENET

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerSectigo Limited
Subject*.polyfill.io
Fingerprint19:AA:59:2F:D9:8A:C1:48:99:20:3C:64:45:4E:E5:A6:1D:E4:92:0C
ValidityTue, 20 Feb 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
103 B (103 bytes)
Hash
355acb45e83e409fc396126ade92ed65
de72924d885389aa9cd797e2e6c725c28526d922
75a4320c68de237c98b4b6192bdbd43afad6143fe30070e6513a3f09b6a15dc2

HTTP Headers

GET /v3/polyfill.min.js?version=3.52.1&features=URL%2CURLSearchParams%2Ces5%2Ces6%2Ces7 HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://partnersitcnetwork.com
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:52:22 GMT
content-type: text/javascript; charset=utf-8
cf-ray: 87974294ab8eb51d-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 246671
cache-control: public, max-age=14400
content-encoding: gzip
expires: Wed, 24 Apr 2024 19:52:22 GMT
last-modified: Sun, 21 Apr 2024 19:21:11 GMT
vary: Accept-Encoding, User-Agent
access-control-allow-methods: GET,HEAD,OPTIONS
server: cloudflare
X-Firefox-Spdy: h2

stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css

104.18.11.207

200 OK

160 kB

URL GET HTTP/2
stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65324)
Size
160 kB (159515 bytes)
Hash
7cc40c199d128af6b01e74a28c5900b0
d305110fb79113a961394b433d851a3410342b8c
2ff5b959fa9f6b4b1d04d20a37d706e90039176ab1e2a202994d9580baeebfd6

HTTP Headers

GET /bootstrap/4.4.1/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:52:22 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"7cc40c199d128af6b01e74a28c5900b0"
last-modified: Mon, 25 Jan 2021 22:04:09 GMT
cdn-cachedat: 10/31/2023 19:00:00
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1078
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: bae8a1587e900a782629330c8ed740ae
cdn-cache: HIT
cf-cache-status: HIT
age: 13169588
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 879742948b70b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap

142.250.74.106

200 OK

2.3 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:wght@400&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (2379), with no line terminators
Size
2.3 kB (2316 bytes)
Hash
03278c047a3192f4a25c4644284d910b
61fc733be8553b3e6d9847d43b4bef84b5ae947d
d5e8a5e5b7bfea2764abadded25ab112a034543a2315c942bb9fd3cbe7ece8fb

HTTP Headers

GET /css2?family=Roboto:wght@400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap

142.250.74.106

200 OK

58 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1572)
Size
58 kB (58315 bytes)
Hash
e9020050e44b5d32786a39a1257ceb64
990cec46bba9d1d77d6d30d6c2321d2442968aba
f322afdaf7184e4ddd7fca589f89cdd7e2e2721dffbf8abed7cb1eca88b0915f

HTTP Headers

GET /css2?family=Open+Sans:ital,wght@0,300;0,400;0,600;0,700;0,800;1,300;1,400;1,600;1,700;1,800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap

142.250.74.106

200 OK

31 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
31 kB (30550 bytes)
Hash
90fffea21b0e3b0cbd8e98b006d5986b
d45f6bad5f439f5bb74aca394c3359a3e2a7c29a
1c7510cd1ecdcdbaf8d47f7e32f1ef6d2606f379c10cc95581e302cb148d95a6

HTTP Headers

GET /css2?family=Source+Sans+Pro:ital,wght@0,200;0,300;0,400;0,600;0,700;0,900;1,200;1,300;1,400;1,600;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap

142.250.74.106

200 OK

28 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
28 kB (28178 bytes)
Hash
7b1884acc9afa1fbd97c1e3e29d13b55
c4b4171b50d3f29d7af642875e63d8427d0067aa
7e7fd9f1e6fd2387dc2a5bb83cb72a1c44206347ad8ffde69bcab829cf88b1ff

HTTP Headers

GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap

142.250.74.106

200 OK

12 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
12 kB (12242 bytes)
Hash
96a9c5fb178c9772913cb12d6dca24dd
ef05b55212524161eb1f13a93cd1115db780cefe
00da328e265ca2a15bd972611a0a78e34ce0aff1f2706fb55ad412a23dfe6364

HTTP Headers

GET /css2?family=Noto+Sans:ital,wght@0,400;0,700;1,400;1,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.106

200 OK

33 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text
Size
33 kB (33066 bytes)
Hash
a7c1149b624e8b1baca2d519a62c6267
c84ccb9b2a262ea9eb48345a86605d9401d40a04
51698055502813cd29205292dfcb7517bd803cf9deb22e21d06bd24fb3bcdf4b

HTTP Headers

GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css?family=Muli

142.250.74.106

200 OK

1.1 kB

URL GET HTTP/3
fonts.googleapis.com/css?family=Muli
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (1155), with no line terminators
Size
1.1 kB (1131 bytes)
Hash
5f2d0717938cad7ed3d9f569ae7aa6e5
1db81dd4db6fb94b6b26526e2750699cb0abd64c
f21035c09762ddbf6f2c329d5d20488da261a8c058ae903d12096fe635277701

HTTP Headers

GET /css?family=Muli HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap

142.250.74.106

200 OK

7.7 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://partnersitcnetwork.com/58493-290174/141699?uid=7CRCAzCMPJu1LyphFD4e6zmscBPHfkd&prom_type=regular&prom_id=250826&pld=26L81sNgpwNGg5
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2
ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT

File type
ASCII text, with very long lines (7874), with no line terminators
Size
7.7 kB (7694 bytes)
Hash
83883a3950b917f5cf818c378f3d7534
0e597e0d42060491b3a0bf1d78f519a540d32489
366a512bc79e7d75125a712c73136dd3d916cfbe75e82e6d4bfecea90d835a03

HTTP Headers

GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://partnersitcnetwork.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 15:52:22 GMT
date: Wed, 24 Apr 2024 15:52:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (30)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers