Report - sonavida.com/click?redirect=https://yosmiugc.com/&dID=1711562011168&hashId=f85a73c9327abaa9e30919f2935523e5a6dd606412db5274c6f8f24bf6671fe906e109&linkName=https://yosmiugc.com/

Report Overview

Submitted URL
sonavida.com/click?redirect=https://yosmiugc.com/&dID=1711562011168&hashId=f85a73c9327abaa9e30919f2935523e5a6dd606412db5274c6f8f24bf6671fe906e109&linkName=https://yosmiugc.com/
IP
3.215.199.215
ASN
#14618 AMAZON-AES
Submitted
2024-04-16 23:03:34
Access
public
Website Title
[Original size] Brown Elegant Fashion Blogger Media Kit
Final URL
yosmiugc.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
58

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
sonavida.com	unknown	2024-02-23	2021-01-31	2024-04-16	630 B	949 B	3.215.199.215
yosmiugc.com	unknown	unknown	No data	No data	14 kB	1.8 MB	103.169.142.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed
2024-04-16	medium	yosmiugc.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	yosmiugc.com/	4.8 kB	2024-04-16	2024-04-18
Pretty URL yosmiugc.com/ IP 103.169.142.0 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-16 07:52:19 Last Seen2024-04-18 11:35:15 Times Seen4 Hash 26f994f99f1b101a2be553064c33b96f 4f8a7507f025d663ef4795d783cc1de2521f0de2 f8cefe905b53a415b50cf326ee3af3372132a62936aa56714ac2ccacd9c49fde Loading...

	yosmiugc.com/js/1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548.js	13 kB	2024-04-17	2024-04-17
Pretty URL yosmiugc.com/js/1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548.js IP 103.169.142.0 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-17 01:03:39 Last Seen2024-04-17 01:03:40 Times Seen4 Hash 88398d79d301b603f3ef49738885cc34 11f4378515166ce7fc24e43f3fc968e20e94bffd 1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548 Loading...

	yosmiugc.com/js/939898b427480d700449229ff00dbb8a6f9f77442b532f697866e6914ab8843a.js	221 B	2023-07-31	2024-04-18
Pretty URL yosmiugc.com/js/939898b427480d700449229ff00dbb8a6f9f77442b532f697866e6914ab8843a.js IP 103.169.142.0 ASN #209242 Cloudflare London, LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-31 10:38:32 Last Seen2024-04-18 11:35:15 Times Seen28 Hash 4df8d731b7f53d45ad7e7e3f0423f0a7 a5a837fe8d790df346622c6af958c4b35c601162 939898b427480d700449229ff00dbb8a6f9f77442b532f697866e6914ab8843a Loading...

HTTP Transactions (30)

URL IP Response Size

sonavida.com/click?redirect=https://yosmiugc.com/&dID=1711562011168&hashId=f85a73c9327abaa9e30919f2935523e5a6dd606412db5274c6f8f24bf6671fe906e109&linkName=https://yosmiugc.com/

3.215.199.215

301 Moved Permanently

330 B

URL User Request GET HTTP/1.1
sonavida.com/click?redirect=https://yosmiugc.com/&dID=1711562011168&hashId=f85a73c9327abaa9e30919f2935523e5a6dd606412db5274c6f8f24bf6671fe906e109&linkName=https://yosmiugc.com/
IP
3.215.199.215:443
ASN
#14618 AMAZON-AES

Certificate
IssuerLet's Encrypt
Subjectsonavida.com
Fingerprint44:C8:5E:35:B1:66:60:6A:AB:FA:A0:AA:1F:7E:D7:E3:91:A9:36:86
ValidityWed, 20 Mar 2024 14:22:49 GMT - Tue, 18 Jun 2024 14:22:48 GMT

File type
HTML document, ASCII text
Size
330 B (330 bytes)
Hash
3441b1bcef299aa43484b7dd09c7c486
5baae80b99bc6fe8ef883101c8954f10a8048477
5ec7b7340ce78fbb60f43826cbb1c790b438da5c97028af705e8a52f808f67a5

HTTP Headers

GET /click?redirect=https://yosmiugc.com/&dID=1711562011168&hashId=f85a73c9327abaa9e30919f2935523e5a6dd606412db5274c6f8f24bf6671fe906e109&linkName=https://yosmiugc.com/ HTTP/1.1
Host: sonavida.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 16 Apr 2024 23:03:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Location: https://yosmiugc.com/
Cache-Control: must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: -1
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Allow-Headers: Content-Type, Authorization, X-Requested-With, XMLHttpRequest, x-csrf-token
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

yosmiugc.com/videos/6635c90ca004efa299f4abc6cd230213.jpg

103.169.142.0

200 OK

16 kB

URL GET HTTP/3
yosmiugc.com/videos/6635c90ca004efa299f4abc6cd230213.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
16 kB (16430 bytes)
Hash
3eb3f39e87599705cda25f67e92fcd25
1f9b67968cf301da09765af2213bf79cab720022
e20599b0c5b0ec932350e91de1e8a6c300c32db9e4e1dedde93200d3eefc62ee

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/6635c90ca004efa299f4abc6cd230213.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 16430
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce900f20712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/ccc1ba9f3ce79d46d72a09732b1c4987.jpg

103.169.142.0

200 OK

24 kB

URL GET HTTP/3
yosmiugc.com/videos/ccc1ba9f3ce79d46d72a09732b1c4987.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 406x720, components 3
Size
24 kB (24191 bytes)
Hash
43c15d82874299ca97da9930e1d72221
39b79022e8605f4e538ef7faa45e733158a878b9
5635cd028cbfabe40e58230d09c8116805a772a403cca63b79b209407b199144

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/ccc1ba9f3ce79d46d72a09732b1c4987.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 24191
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce900f27712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/50e0e3963ad247276cc5ca99770e1faa.jpg

103.169.142.0

200 OK

20 kB

URL GET HTTP/3
yosmiugc.com/videos/50e0e3963ad247276cc5ca99770e1faa.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
20 kB (20085 bytes)
Hash
9c5f884740a78b2ea360c8dad9397b31
728fd6da4ffc876111f45c9312010d8068093f79
223e565fed409ae6b274620689c8d52d0d712e3f04a0d92013725b04daaf1fae

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/50e0e3963ad247276cc5ca99770e1faa.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 20085
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce900f2a712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/d861da72e285d029de2539b38a0eb7e5.jpg

103.169.142.0

200 OK

46 kB

URL GET HTTP/3
yosmiugc.com/videos/d861da72e285d029de2539b38a0eb7e5.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
46 kB (46362 bytes)
Hash
498c2f982c9efd4b02a643a3f8277ff3
f6bd31ba2a62fc39d6fdf17a50b50301131ab3cc
19f75685fb4c15a490e67eb68fdef8a088009e7e4c0414b8cda6d8f6c322bade

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/d861da72e285d029de2539b38a0eb7e5.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 46362
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce901f2d712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/87a6112830cc163bce823a0cf2715528.jpg

103.169.142.0

200 OK

20 kB

URL GET HTTP/3
yosmiugc.com/videos/87a6112830cc163bce823a0cf2715528.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
20 kB (20526 bytes)
Hash
5836b301b26e2e6614e0ff1d1edc7aa3
6571ec24f74df44aacad9e63c817e8fbfadd60c3
f13fbfedf7a9eca0d5528fcb98b940fb389fca43a6608168095bd72a4a08e93f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/87a6112830cc163bce823a0cf2715528.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 20526
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce900f23712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/12992043dc30fa80dc114c297c32b8d7.jpg

103.169.142.0

200 OK

21 kB

URL GET HTTP/3
yosmiugc.com/videos/12992043dc30fa80dc114c297c32b8d7.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
21 kB (21358 bytes)
Hash
fe15e91af33afd131e60f8b351da295b
43e5a34230b1eb27daa534f2c6f4febdc70062d5
88622b94255a852f3a4616ad9df9a5fa2d775f95c1522343d2366d4cf76b0186

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/12992043dc30fa80dc114c297c32b8d7.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 21358
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce901f2b712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/

103.169.142.0

200 OK

55 kB

URL User Request GET HTTP/2
yosmiugc.com/
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
HTML document, ASCII text, with very long lines (65536), with no line terminators
Size
55 kB (55249 bytes)
Hash
28c399919bce7208cee641ed4cb934e1
bbd2723fda1c2223b08a770781e0740452138950
b1d93ae7ba8298db89fab681463c32c36fd0be9ccbe330e392ce350b0bb342a2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: text/html
strict-transport-security: max-age=31536000
content-security-policy: frame-ancestors 'self' *.canva.com canva.com; report-uri https://csp.canva.com/_cspreport?app=websites; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'nonce-487e6107-c5c6-4b7c-a899-e4f4ea676a8f' https://www.google.com/recaptcha/api.js;
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: all
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce8dab520afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

yosmiugc.com/videos/4b38c2e1bbec3ded45b81f3aef007725.jpg

103.169.142.0

200 OK

55 kB

URL GET HTTP/3
yosmiugc.com/videos/4b38c2e1bbec3ded45b81f3aef007725.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 406x720, components 3
Size
55 kB (54677 bytes)
Hash
3176aa64245855dbae41fa6410b24fc3
ea167712c8beb88ac1a70caaf67204e13f3a712f
cbf7449abdcc9f0418175a265450fdf7a12ea7f30b3b3df8b9b0d25fe9dec52e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/4b38c2e1bbec3ded45b81f3aef007725.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 54677
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce902f36712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/d690ca716bab7e6f8501c2559213e754.jpg

103.169.142.0

200 OK

26 kB

URL GET HTTP/3
yosmiugc.com/videos/d690ca716bab7e6f8501c2559213e754.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 406x720, components 3
Size
26 kB (26284 bytes)
Hash
3bcf2b0bf65d3b150cc9570c1536ef49
6ddd749cface66f7a9f20be86a0928687b99b771
ac6e311577268854b9af6caf59f83ffc208d2ae5d3ea58fdd4c42e52a9cca11f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/d690ca716bab7e6f8501c2559213e754.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 26284
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce900f28712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/6375a936d0ddb1826a17f403e1327b79.jpg

103.169.142.0

200 OK

26 kB

URL GET HTTP/3
yosmiugc.com/videos/6375a936d0ddb1826a17f403e1327b79.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 406x720, components 3
Size
26 kB (25644 bytes)
Hash
b75fb1d2668bd5aeef1f3912071b9a7e
1455b21fd9c7297241df4256cd25256dfd456011
e7674a5534d360bce1c61bc6fc0928fab6971b20443f65682cdcc5a88e464cdc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/6375a936d0ddb1826a17f403e1327b79.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 25644
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce900f26712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/a05159eefa9b3b93ff0a4be18eef82f4.jpg

103.169.142.0

200 OK

25 kB

URL GET HTTP/3
yosmiugc.com/videos/a05159eefa9b3b93ff0a4be18eef82f4.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 406x720, components 3
Size
25 kB (24919 bytes)
Hash
db16fbc41caf7538a027874e0afa7e52
4615803fe8c33543588efc6bd10dfde1c0fccfe7
dc619a9fc264d640b54bf4d0514d1a5273d62015ba648f061e85edaae55ee7e4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/a05159eefa9b3b93ff0a4be18eef82f4.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 24919
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce901f2f712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/b125f773d8f32558364a07379a719b0d.jpg

103.169.142.0

200 OK

32 kB

URL GET HTTP/3
yosmiugc.com/videos/b125f773d8f32558364a07379a719b0d.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 580x720, components 3
Size
32 kB (31611 bytes)
Hash
1393ee9bade2ce1ce4825b073271823b
50cee00718a5fd54334ad57e2d75cf76334f52e6
eef6f16248e64db6ece8358a4c37298b462d7ca38184b6761cda0f52c9102655

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/b125f773d8f32558364a07379a719b0d.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 31611
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce902f3b712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/fonts/e0da07061f6ae8f5a251280af5a9fde6.woff2

103.169.142.0

200 OK

38 kB

URL GET HTTP/3
yosmiugc.com/fonts/e0da07061f6ae8f5a251280af5a9fde6.woff2
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
Web Open Font Format (Version 2), CFF, length 37712, version 1.0
Size
38 kB (37712 bytes)
Hash
51ae7ffd07a508de0089b79dd2e620e8
a457b82e30a3f4b95d51728a542f24fe27f3e7ce
c2e22aec2521d4c67aed868cbec6dee1d7d8df4d538f6227e25082f1c5e49763

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/e0da07061f6ae8f5a251280af5a9fde6.woff2 HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: application/octet-stream
content-length: 37712
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce904f79712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/f05864bed0075d6db38e4eee5a6f2b0f.jpg

103.169.142.0

200 OK

29 kB

URL GET HTTP/3
yosmiugc.com/videos/f05864bed0075d6db38e4eee5a6f2b0f.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
29 kB (28842 bytes)
Hash
5f6b652025e03df791f02559b5d72f48
5f7e15233818d5ba04350aa932130bbfc54ca137
2ca5d5cb999f30cd3e7fa5763a35a76009b14cc2a5faa57d97fd4ef77691571b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/f05864bed0075d6db38e4eee5a6f2b0f.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 28842
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce901f34712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/fonts/1e205ffecc628d4c78e453629dc36300.woff2

103.169.142.0

200 OK

20 kB

URL GET HTTP/3
yosmiugc.com/fonts/1e205ffecc628d4c78e453629dc36300.woff2
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 19612, version 1.0
Size
20 kB (19612 bytes)
Hash
7688cb4e33cd0c402ee909ffe8b129c6
7b63f30b1bb64c56ec28efc14aeea3e8e054ebf1
e7df2f58d93e1fde8102a724ac0680cb6d34b17610adf4c08e9da388b41718d4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/1e205ffecc628d4c78e453629dc36300.woff2 HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: application/octet-stream
content-length: 19612
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce91b9ab712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/fonts/83a1bcd0ead0443eec51934c4bce7519.woff2

103.169.142.0

200 OK

17 kB

URL GET HTTP/3
yosmiugc.com/fonts/83a1bcd0ead0443eec51934c4bce7519.woff2
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
Web Open Font Format (Version 2), TrueType, length 16872, version 1.6684
Size
17 kB (16872 bytes)
Hash
30632d8bec6db7d6a63c2811f8f58773
e6b7d891cd6977b9e90eef939b2b25878851a788
76d6bf91b90462e5206e1f417051fa6b2744d4d28e5e0576869e4d3800003cf9

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/83a1bcd0ead0443eec51934c4bce7519.woff2 HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: application/octet-stream
content-length: 16872
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce91d9f6712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/images/e638ee823d26ace2436ae9fa1ec511ba.png

103.169.142.0

200 OK

5.8 kB

URL GET HTTP/3
yosmiugc.com/images/e638ee823d26ace2436ae9fa1ec511ba.png
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Size
5.8 kB (5777 bytes)
Hash
94363902513f5a46ab282cf61c1c8206
49afb7b98c5f550d0267b74efb44bf8eb534b72b
34f69005a0ffd31442508afed032b3d22726204a60eafc038c22ef56ade68d84

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/e638ee823d26ace2436ae9fa1ec511ba.png HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/png
content-length: 5777
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce922a30712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/js/1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548.js

103.169.142.0

200 OK

453 kB

URL GET HTTP/3
yosmiugc.com/js/1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548.js
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JavaScript source, ASCII text, with very long lines (13385)
Size
453 kB (453256 bytes)
Hash
88398d79d301b603f3ef49738885cc34
11f4378515166ce7fc24e43f3fc968e20e94bffd
1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/1dc49404df778084ec710b82843a115ee454c349a099d0dc46f4c2e566840548.js HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: application/javascript
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce902f3d712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/348a4b21dce1aa20e70c1c01f10ec2fa.jpg

103.169.142.0

200 OK

32 kB

URL GET HTTP/3
yosmiugc.com/videos/348a4b21dce1aa20e70c1c01f10ec2fa.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 416x720, components 3
Size
32 kB (32281 bytes)
Hash
e5582fc741b5b7247ea59ab421b2059c
bcff7bb48276e8cefaee0705dfc48641e97b1267
3ef04fc7c654be1b53de661be2e361edf7f1a2fb0e66df093f5d2cbb6f1c525a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/348a4b21dce1aa20e70c1c01f10ec2fa.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/jpeg
content-length: 32281
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce902f3a712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/fonts/efb8e00a810ae053334deaa5cdde1d26.woff2

103.169.142.0

200 OK

19 kB

URL GET HTTP/3
yosmiugc.com/fonts/efb8e00a810ae053334deaa5cdde1d26.woff2
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
Web Open Font Format (Version 2), CFF, length 19172, version 1.6684
Size
19 kB (19172 bytes)
Hash
3fc108fc81a42ac877e999a3e3526a39
e34203fa4b4e86f512e1a4adc472d969751b3dad
42953d5734bd1187824a93d4f7e7ff3dbfd74a13eea1f9fd0336ae6bd3fbe44d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /fonts/efb8e00a810ae053334deaa5cdde1d26.woff2 HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: application/octet-stream
content-length: 19172
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce904f66712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/images/cadc4f2d86d69cf8f406450ae7882849.png

103.169.142.0

200 OK

50 kB

URL GET HTTP/3
yosmiugc.com/images/cadc4f2d86d69cf8f406450ae7882849.png
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
PNG image data, 447 x 720, 8-bit/color RGBA, non-interlaced
Size
50 kB (50199 bytes)
Hash
344dd46b604ef1ed8bc69a1aba05b9b1
b5e18e36e3f22beb81831ef65997f9bbef58df4c
1875de8c8617935a3ea339a48317fa3680485282c00c43eb851528be912d3e5e

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/cadc4f2d86d69cf8f406450ae7882849.png HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/png
content-length: 50199
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce936b5e712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/26387fa4f5b1e3f7b6217b27d79bf264.png

103.169.142.0

200 OK

510 B

URL GET HTTP/3
yosmiugc.com/26387fa4f5b1e3f7b6217b27d79bf264.png
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
510 B (510 bytes)
Hash
a08601304054e3409f9fc2d56f047239
4fd1100bf2089d421e98ee5aee7cb09d9e7b6d0f
6d940a6772e63dc97be1833ee94180527ffce95b6f690fcc7f7b8179f7113e5a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /26387fa4f5b1e3f7b6217b27d79bf264.png HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/png
content-length: 510
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce954c86712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/725b756a69a7d4c235070e51acd85560.png

103.169.142.0

200 OK

6.2 kB

URL GET HTTP/3
yosmiugc.com/725b756a69a7d4c235070e51acd85560.png
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
6.2 kB (6245 bytes)
Hash
908fbe8d7a9e1928713dddf727bd6d6c
fe23d0c538cab44e249923936c6f4ddcb431069c
1d78d90d7d2c168594a2fd7998ca68d5dc72c0c60f3ebe45ff4b7fb3a74a72e1

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /725b756a69a7d4c235070e51acd85560.png HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/png
content-length: 6245
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce954c82712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/images/096bd2561b8379cb058fcf3681a07893.jpg

103.169.142.0

200 OK

309 kB

URL GET HTTP/3
yosmiugc.com/images/096bd2561b8379cb058fcf3681a07893.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 718x1077, components 3
Size
309 kB (309130 bytes)
Hash
bb40b00afa06e5a7c11fb56593590568
8e5ded3a713c8b6bcc1c9f517708fc2cf59c1f8a
4559fd1add6d1222c4bff5bccbb07743b9f3eca4a750f9873d2a31764b8ec777

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/096bd2561b8379cb058fcf3681a07893.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/jpeg
content-length: 309130
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce922a41712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/js/939898b427480d700449229ff00dbb8a6f9f77442b532f697866e6914ab8843a.js

103.169.142.0

200 OK

221 B

URL GET HTTP/3
yosmiugc.com/js/939898b427480d700449229ff00dbb8a6f9f77442b532f697866e6914ab8843a.js
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
ASCII text, with no line terminators
Size
221 B (221 bytes)
Hash
bf26daaa5e1258613eccb842c7b4abdd
d0c19109274c49184f1fe91ade8a829c63330cd7
7768b2ee71f59cb1afd412416ce643f9d9b277debfa9d45d469223d3f191557d

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/939898b427480d700449229ff00dbb8a6f9f77442b532f697866e6914ab8843a.js HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: application/javascript
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce902f40712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

yosmiugc.com/images/747a886c62e6fde8aa3617205f240354.svg

103.169.142.0

200 OK

1.6 kB

URL GET HTTP/3
yosmiugc.com/images/747a886c62e6fde8aa3617205f240354.svg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
SVG Scalable Vector Graphics image
Size
1.6 kB (1601 bytes)
Hash
16b2c448f0dcf9b671285b7a06675eaa
dd1b6fafd6cd8729c3aaaf8178a629ddefcb9527
1d920515254585fde89f826daa480c7ae2b6cb8301c447d21abe791e3fd04989

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/747a886c62e6fde8aa3617205f240354.svg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce921a2e712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

yosmiugc.com/images/355d1dd9da480f818deb17050a1dcf0e.jpg

103.169.142.0

200 OK

449 kB

URL GET HTTP/3
yosmiugc.com/images/355d1dd9da480f818deb17050a1dcf0e.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, baseline, precision 8, 826x1238, components 3
Size
449 kB (448719 bytes)
Hash
64bde96ab653dbf88fb4464629d747be
9d598917dcfac5ec150892a2df135ae5e760c25e
fda90de863f9048197bd633beff4aa604232ec177ffec76817a7b44e50b89e92

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/355d1dd9da480f818deb17050a1dcf0e.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/jpeg
content-length: 448719
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce922a3b712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/videos/5a43ea0bb50e1a292ec80ebca2e94c69.jpg

103.169.142.0

200 OK

25 kB

URL GET HTTP/3
yosmiugc.com/videos/5a43ea0bb50e1a292ec80ebca2e94c69.jpg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 405x406, segment length 16, comment: "Lavc58.91.100", baseline, precision 8, 406x720, components 3
Size
25 kB (25120 bytes)
Hash
cd2bfcd11c820c721965113db655bf6e
9a1e23c2d2c8fc01e75e6f71b84eb4c6fef7b223
f18899986e3b92d416a64fe304c05497aea65a866f1e1f69514431bae56d93d7

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /videos/5a43ea0bb50e1a292ec80ebca2e94c69.jpg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:07 GMT
content-type: image/jpeg
content-length: 25120
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce901f33712e-OSL
alt-svc: h3=":443"; ma=86400

yosmiugc.com/images/86357282599cae648d755085c6982e8a.svg

103.169.142.0

200 OK

1.2 kB

URL GET HTTP/3
yosmiugc.com/images/86357282599cae648d755085c6982e8a.svg
IP
103.169.142.0:443
ASN
#209242 Cloudflare London, LLC

Requested by
https://yosmiugc.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectyosmiugc.com
Fingerprint85:A2:B7:21:8E:D4:63:A8:2F:A3:6F:C2:B7:1A:EF:5C:9D:DE:8C:57
ValidityTue, 02 Apr 2024 06:01:09 GMT - Mon, 01 Jul 2024 06:01:08 GMT

File type
SVG Scalable Vector Graphics image
Size
1.2 kB (1223 bytes)
Hash
9907a90a061c5088228802b44f306f00
dd8b715c1612399f70a3e3441e29add337a3f6f9
44f72ae8bea285c037887c4972ad0fdf44dc516c75cea472a69e16f74fce3870

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /images/86357282599cae648d755085c6982e8a.svg HTTP/1.1
Host: yosmiugc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://yosmiugc.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 23:03:08 GMT
content-type: image/svg+xml
cache-control: public, max-age=604800, immutable
strict-transport-security: max-age=31536000
x-deployment-id: 359a8a15f7d2e20c4cdcbb4874da408c2b1d8070eff33b0cbe1c097774cf9711
x-robots-tag: none
vary: Accept-Encoding
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 8757ce921a2f712e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (30)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by