| detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=[%22redirect%22]&refer=https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8:1:1 |  192.243.61.227 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/1.1detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=[%22redirect%22]&refer=https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8:1:1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectdetailedshuffleshadow.com Fingerprint8A:70:E6:97:1E:EE:EC:94:71:C4:7F:BA:63:78:4B:77:34:C3:D6:53 ValidityTue, 26 Mar 2024 12:24:11 GMT - Mon, 24 Jun 2024 12:24:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=[%22redirect%22]&refer=https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8:1:1 HTTP/1.1
Host: detailedshuffleshadow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 29 Mar 2024 02:02:03 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn
Access-Control-Allow-Origin: https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn
Access-Control-Allow-Credentials: true
Location: https://detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1
Set-Cookie: u_pl=17687299; expires=Sat, 30 Mar 2024 02:02:03 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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_dXJsPWFIUjBjSE02THk5dFpXZGhMbTU2TDJadmJHUmxjaTh3WVhSNVVXRkJXU00zU1RCb1RWOWhaRmh3Umswd1IzQjJSME5tT1dObiIsImFyIjpbXX19.UC0UocEhMvmQSoiI7M4uN4Tppq4-PoBZ8tiCDH61hTE; expires=Fri, 29 Mar 2024 02:03:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bd74f8ad5f89cc6ae8d5094af159b5cb
Strict-Transport-Security: max-age=0; includeSubdomains
|
| detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1 | 192.243.61.227 | 200 OK | 2.1 kB |
URL User Request GET HTTP/1.1detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectdetailedshuffleshadow.com Fingerprint8A:70:E6:97:1E:EE:EC:94:71:C4:7F:BA:63:78:4B:77:34:C3:D6:53 ValidityTue, 26 Mar 2024 12:24:11 GMT - Mon, 24 Jun 2024 12:24:10 GMT
File typeJavaScript source, ASCII text, with very long lines (2542) Hashcf1a6bdaebc59c17376481f99600c96e bb27e711c59602756947cc47c86549a95248fc6f 72da48b611d81cd3f24261588976d6606a0115069e7c5c4609793d99245cb492
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1 HTTP/1.1
Host: detailedshuffleshadow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=17687299; ain=eyJhbGciOiJIUzI1NiJ9.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_dXJsPWFIUjBjSE02THk5dFpXZGhMbTU2TDJadmJHUmxjaTh3WVhSNVVXRkJXU00zU1RCb1RWOWhaRmh3Umswd1IzQjJSME5tT1dObiIsImFyIjpbXX19.UC0UocEhMvmQSoiI7M4uN4Tppq4-PoBZ8tiCDH61hTE
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 29 Mar 2024 02:02:03 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn
Access-Control-Allow-Origin: https://comohoy.com/view/out.html?url=aHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=6872cb05-d76b-4068-82e4-5aaf26f186e8:1:1; expires=Fri, 05 Apr 2024 02:02:03 GMT; secure; SameSite=None
iprc055c57bd52ca6e6d6fd99bf7fdf0d983=4471816; expires=Sat, 30 Mar 2024 02:02:03 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 30 Mar 2024 02:02:03 GMT; secure; SameSite=None
uncs=1; expires=Sat, 30 Mar 2024 02:02:03 GMT; secure; SameSite=None
pdhtkv25=true; expires=Sat, 30 Mar 2024 02:02:03 GMT; secure; SameSite=None
uncs25=1; expires=Sat, 30 Mar 2024 02:02:03 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a2f2785d327a38119b829659e7cade89
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
| cdn.cloudimagesb.com/cti/51/1c/e3/511ce30cabda29e06667513544b13623/1711619445.jpg | 45.133.44.10 | 200 OK | 89 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/51/1c/e3/511ce30cabda29e06667513544b13623/1711619445.jpg IP45.133.44.10:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1 CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC6:F3:21:F0:21:7D:7E:96:0F:E8:46:7A:5E:C5:3F:D1:52:B0:67:B0 ValidityFri, 22 Mar 2024 03:01:35 GMT - Thu, 20 Jun 2024 03:01:34 GMT
File typeJPEG image data, baseline, precision 8, 160x600, components 3 Hasha3f27e088c10062fc6350d8ca5119dfd 8cd8f5628dd6e90d8922b4ec9fcc271d7c2de5a9 62f488d16a9aafca46455a09e862a7f24ddc35b3b7904bcc4ff2e1fe1e1eddb2
GET /cti/51/1c/e3/511ce30cabda29e06667513544b13623/1711619445.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detailedshuffleshadow.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 29 Mar 2024 02:02:03 GMT
content-type: image/jpeg
content-length: 89377
server: nginx/1.21.6
last-modified: Thu, 28 Mar 2024 09:50:53 GMT
etag: "66053d7d-15d21"
expires: Sun, 31 Mar 2024 02:02:03 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
| detailedshuffleshadow.com/favicon.ico | 192.243.61.227 | 200 OK | 0 B |
URL GET HTTP/1.1detailedshuffleshadow.com/favicon.ico IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1 CertificateIssuerLet's Encrypt Subjectdetailedshuffleshadow.com Fingerprint8A:70:E6:97:1E:EE:EC:94:71:C4:7F:BA:63:78:4B:77:34:C3:D6:53 ValidityTue, 26 Mar 2024 12:24:11 GMT - Mon, 24 Jun 2024 12:24:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: detailedshuffleshadow.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://detailedshuffleshadow.com/watch.722504877350.js?dev=r&key=67c3cf7e6f5c44da6b344d5a6c77b684&kw=%5B%22redirect%22%5D&pst=1711677783&refer=https%3A%2F%2Fcomohoy.com%2Fview%2Fout.html%3Furl%3DaHR0cHM6Ly9tZWdhLm56L2ZvbGRlci8wYXR5UWFBWSM3STBoTV9hZFhwRk0wR3B2R0NmOWNn&res=14.31&rmtc=t&shu=690c54324c2a39cefd93f8dda9b3b275ffc6aceff24dcc811b948b2a2072c0c540b5690877a939aed62ab4c659ead7f63fffb594a1b43962b5aba1b1dbe8341a4ea10e06bee1f6fbaaa7af1b61664eecc0343e1fe4bae84157cd7a56dc3dec&tz=-4&uuid=6872cb05-d76b-4068-82e4-5aaf26f186e8%3A1%3A1
Cookie: u_pl=17687299; ain=eyJhbGciOiJIUzI1NiJ9.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_dXJsPWFIUjBjSE02THk5dFpXZGhMbTU2TDJadmJHUmxjaTh3WVhSNVVXRkJXU00zU1RCb1RWOWhaRmh3Umswd1IzQjJSME5tT1dObiIsImFyIjpbXX19.UC0UocEhMvmQSoiI7M4uN4Tppq4-PoBZ8tiCDH61hTE; uid_id2=6872cb05-d76b-4068-82e4-5aaf26f186e8:1:1; iprc055c57bd52ca6e6d6fd99bf7fdf0d983=4471816; pdhtkv=true; uncs=1; pdhtkv25=true; uncs25=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 29 Mar 2024 02:02:03 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d90dcf21685a6b040ff4df7b9a49bf3f
Strict-Transport-Security: max-age=0; includeSubdomains
|