| mk.vivaterse.de/i52/ |  212.80.216.118 | | 152 B |
IP212.80.216.118:0 ASN#50673 Serverius Holding B.V.
File typeHTML document, ASCII text, with CRLF line terminators Hash0f20dc882703ad613fa3e92f999bb665 fd60f4b6c36600ebdbb300f6abf432d37c24ab33 09f8c4b138fe52c1d70d962d9c5523c48ceb40f3359e4d116348db0453b41dcc
GET /i52/ HTTP/1.1
Host: mk.vivaterse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:46:11 GMT
content-type: text/html
content-length: 152
last-modified: Wed, 24 Apr 2024 10:59:12 GMT
etag: "6628e600-98"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| mk.vivaterse.de/favicon.ico | 212.80.216.118 | | 146 B |
URL mk.vivaterse.de/favicon.ico IP212.80.216.118:0 ASN#50673 Serverius Holding B.V.
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /favicon.ico HTTP/1.1
Host: mk.vivaterse.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mk.vivaterse.de/i52/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Wed, 24 Apr 2024 16:46:12 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/hero.png?1 |  104.18.30.102 | 200 OK | 274 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/product/images/hero.png?1 IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typePNG image data, 1706 x 1206, 8-bit colormap, non-interlaced Size274 kB (274241 bytes) Hash05c0a8ff9bb9926231a8be2f39534695 e3a901711001579158c93f2e3d203e0b47227227 747b0431e3404e80beefb7977307c6334720069e2e12031e65c02b9a82d7feaf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/hero.png?1 HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: image/png
content-length: 274241
last-modified: Fri, 29 Mar 2024 14:16:35 GMT
etag: "6606cd43-42f41"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 599325
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bd8e21bfa-OSL
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=UA-136786017-1&l=gaLayer |  142.250.74.168 | 200 OK | 74 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=UA-136786017-1&l=gaLayer IP142.250.74.168:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash7e2a93fade84d41b7a4b584c54f93b0a 7f7794b841ae71d73265b28c87cf16cad9701690 ae712bacb00a18203158161922d1f36328972196968ac24045e58f209fe41805
GET /gtag/js?id=UA-136786017-1&l=gaLayer HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 16:46:14 GMT
expires: Wed, 24 Apr 2024 16:46:14 GMT
cache-control: private, max-age=900
last-modified: Wed, 24 Apr 2024 16:05:37 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 73450
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| webtrack.chd01.com/uploads/2319/websites/1/e8a4cba6d92d87faeebe9c382e76992ef1ca85eb-v4.js | 34.120.255.81 | 200 OK | 2.7 kB |
URL GET HTTP/2webtrack.chd01.com/uploads/2319/websites/1/e8a4cba6d92d87faeebe9c382e76992ef1ca85eb-v4.js IP34.120.255.81:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoDaddy.com, Inc. Subject*.chd01.com Fingerprint30:00:82:F8:70:FE:10:93:D8:1D:F5:F9:CB:89:76:D8:D8:39:50:FE ValidityWed, 17 Apr 2024 09:30:37 GMT - Mon, 19 May 2025 09:30:37 GMT
File typeASCII text, with very long lines (2708), with no line terminators Hash8605c7cb4a7da4c4916337cdd7eebdbe fc97ec60e3bb7d69a6ad7d566702d564a0483ac0 c7801742baca7b5670d227356af21e15f06bb6673bc01449d35a25e672dcc93c
GET /uploads/2319/websites/1/e8a4cba6d92d87faeebe9c382e76992ef1ca85eb-v4.js HTTP/1.1
Host: webtrack.chd01.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-guploader-uploadid: ABPtcPozyxvoYHRXq_UwYMTTDOOAHauiBxyuC_LCS6N4O-SYsZELWFY_gqMcVCH0Mogin_flEigyGIf88g
x-goog-generation: 1661860364756309
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2708
x-goog-hash: crc32c=Oj6/FA==, md5=hgXHy0p9pMSRYzfN1+69vg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 2708
access-control-allow-origin: *
access-control-expose-headers: Content-Type
server: UploadServer
date: Wed, 24 Apr 2024 16:31:11 GMT
expires: Wed, 24 Apr 2024 17:31:11 GMT
cache-control: public, max-age=3600
age: 903
last-modified: Tue, 30 Aug 2022 11:52:44 GMT
etag: "8605c7cb4a7da4c4916337cdd7eebdbe"
content-type: application/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/bootstrap-265771b1.js | 104.18.30.102 | 200 OK | 26 kB |
URL GET HTTP/2get-huusk.com/build/assets/bootstrap-265771b1.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (42543) Hasha1469c8f650b6236eca6fd68ede34abd 2855b08f6f434f4f1787d858be197279b3efb1c7 6c5fe956b26db64eba76253741f8077e1d956744b7e0b630e01b16ed3078cbe8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/bootstrap-265771b1.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-14db4"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09e91bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/livewire.esm-4135611c.js | 104.18.30.102 | 200 OK | 56 kB |
URL GET HTTP/2get-huusk.com/build/assets/livewire.esm-4135611c.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (38618) Hash62e2258f8c13312f4861c36cc7997354 f83da253b14dc32ab7bc332af79c9934de89cadb 4732d82ed435e6c1a4416921018189c3a6fea81f6c7a2c8e3238ba7eaa7605c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/livewire.esm-4135611c.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-26459"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917cf9e01bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/index-9b5fec24.js | 104.18.30.102 | 200 OK | 36 kB |
URL GET HTTP/2get-huusk.com/build/assets/index-9b5fec24.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (3228) Hash0ab4686a02e95b38ea7d9883f66762c6 33d78dc297b0297f2020995a63a0226fdbb15950 d8a8c7c86fad0a7017278b129c19cf0558fabe48384d4d59be2144435db4afec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/index-9b5fec24.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-c9d"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917cf9e21bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/jquery-5fc13275.js | 104.18.30.102 | 200 OK | 66 kB |
URL GET HTTP/2get-huusk.com/build/assets/jquery-5fc13275.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65190) Hashd0bba38be8798dae69fcce25063d0f18 6724b91741c69e332e1d7f60ff3deeaa329cd29e 628a5b4c2eccbffd3fb63c7d1be4b9dc44b56992ea9d763a80f51e19331b15ce
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/jquery-5fc13275.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-1624c"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09ee1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.paypal.com/sdk/js?components=shopping&client-id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT | 151.101.1.21 | 200 OK | 55 kB |
URL GET HTTP/2www.paypal.com/sdk/js?components=shopping&client-id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT IP151.101.1.21:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerDigiCert Inc Subjectwww.paypal.com Fingerprint92:69:A1:00:8F:61:AA:60:17:06:FC:85:FD:47:D2:77:66:C0:F5:91 ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65476) Hash7fc9546896486053ac3c739cc0d1686d 441ac1f626b70551064bfd6f6c9830cf3a64522b 3ca98c80f6c93469dc7c9a191ee461c4f791ccb0268f2af8f52aedb4f2c69b11
GET /sdk/js?components=shopping&client-id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-UhZUmlfz/P0r8wTggfrtqmSfxlAi/V0fFSKt4HLWiG+8lIcj' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-UhZUmlfz/P0r8wTggfrtqmSfxlAi/V0fFSKt4HLWiG+8lIcj' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
disable-set-cookie: true
etag: W/"d656-TEhdHBq2cl3ilCAXKgQcw+wlB10"
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
p3p: true
paypal-debug-id: f899397fc951f
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
traceparent: 00-0000000000000000000f899397fc951f-e7e18eef4f5b6fae-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 6695
date: Wed, 24 Apr 2024 16:46:14 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230134-FRA, cache-hel1410031-HEL, cache-hel1410031-HEL
x-cache: HIT, HIT, MISS
x-cache-hits: 54, 0, 0
x-timer: S1713977175.800048,VS0,VE50
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f899397fc951f-3267e38603a7e7bf-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 54870
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/normalize-9fff1ed9.js | 104.18.30.102 | 200 OK | 35 kB |
URL GET HTTP/2get-huusk.com/build/assets/normalize-9fff1ed9.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (666) Hashbfc1e721cdd55c3a1fc01338aeff67d3 9a9ea16580b65aa6481de431beb0253782c29426 9ddd182d8e180048fde8f8422167e38192a5fe4605a82f8981959dd0c0756da4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/normalize-9fff1ed9.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-29b"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09ea1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/upsell-estimated-taxes-0ce68f15.js | 104.18.30.102 | 200 OK | 60 kB |
URL GET HTTP/2get-huusk.com/build/assets/upsell-estimated-taxes-0ce68f15.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (29058) Hash3230e4aa92d2821a9a6cf97aa13164f3 35c737a0097a340beed95d48d3523925ec183f4c f3c5a45ac0a8f7ef8ca5b305b129b9a1d719f15bd25a549cfa0ed13b8ee55722
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/upsell-estimated-taxes-0ce68f15.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-129a3"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917cf9e51bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/logo-huusk-white.svg | 104.18.30.102 | 200 OK | 39 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/product/images/logo-huusk-white.svg IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeSVG Scalable Vector Graphics image Hash877ccfeb8ffb008981cd060aeac8bde0 99259c429e91a26ef40e3d0047046d00061a0a52 1db13bee88ca50b158f2ada76fe945c131c70cce522415bb8c07f1686652ebad
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/logo-huusk-white.svg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: image/svg+xml
last-modified: Fri, 05 Apr 2024 10:57:21 GMT
etag: W/"660fd911-3008"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 599325
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bd8e01bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/about.jpg?1 | 104.18.30.102 | 200 OK | 100 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/product/images/about.jpg?1 IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 708x1000, components 3 Size100 kB (100045 bytes) Hashb333ec65e45a6577cd95b409eac9ba12 e8d65a28e860fcf63610a8921ccc7168920a9ba0 528a951d52fd3802061493d8f627b0bcbd5bdfb6f46c0c0c448718387a2dcbab
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/about.jpg?1 HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:15 GMT
content-type: image/jpeg
content-length: 100045
cache-control: public, max-age=2592000
cf-bgj: h2pri
etag: "660fd6cc-186cd"
expires: Fri, 24 May 2024 16:46:15 GMT
last-modified: Fri, 05 Apr 2024 10:47:40 GMT
via: 1.1 google
cf-cache-status: HIT
age: 115658
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87979180ecc01bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/sterilizex/product-2/images/stars-4@2x.png | 104.18.30.102 | 200 OK | 5.7 kB |
URL GET HTTP/2get-huusk.com/theme/sterilizex/product-2/images/stars-4@2x.png IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typePNG image data, 349 x 66, 8-bit colormap, non-interlaced Hasha6c8c20b57cefd6b86be5f36894b3710 1844a3309113f92881230f94f5b7c5af196423bc 110dc476ea90d94fc40ee4d3b46c34a230fd9080022c11ea3399aa057ba72873
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/sterilizex/product-2/images/stars-4@2x.png HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:15 GMT
content-type: image/png
content-length: 5678
last-modified: Fri, 15 Mar 2024 13:01:08 GMT
etag: "65f44694-162e"
expires: Fri, 24 May 2024 16:46:15 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 966876
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879791811cd61bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/about-2.jpg?1 | 104.18.30.102 | 200 OK | 58 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/product/images/about-2.jpg?1 IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 708x1000, components 3 Hash422bbe4afdb201f19236d4f159ea4c35 1171476ac67cb3a069ede61d895676e5e01a375a 18c7143aa916160a17d9f5c4c05b48966c567842019cc1b0ce44f7dff801728c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/about-2.jpg?1 HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:15 GMT
content-type: image/jpeg
content-length: 58493
cache-control: public, max-age=2592000
cf-bgj: h2pri
etag: "660fe16e-e47d"
expires: Fri, 24 May 2024 16:46:15 GMT
last-modified: Fri, 05 Apr 2024 11:33:02 GMT
via: 1.1 google
cf-cache-status: HIT
age: 286623
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879791811cd81bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/product-d9628b03.css | 104.18.30.102 | 200 OK | 2.5 MB |
URL GET HTTP/2get-huusk.com/build/assets/product-d9628b03.css IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size2.5 MB (2536842 bytes) Hash93c754734b73734e10a138c20d6e1dcf de4f7cb44a7415574dd00b05413790425ee69d18 d9628b036eba7b0db7ac2f8d15d55ebffd4ebf837cd05c80e421996300aeb118
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/product-d9628b03.css HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 07:53:05 GMT
vary: Accept-Encoding
etag: W/"6628ba61-38899"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 26555
server: cloudflare
cf-ray: 8797917bc8ca1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/bg-hero-black.jpg | 104.18.30.102 | 200 OK | 90 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/product/images/bg-hero-black.jpg IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2149x670, components 3 Hash7e95bc1fd35cfbc359a413bee12a3b4e f5d2141d2befe2d7a0361e91a030beb773ff165e 7bcd01a655125b1d08f5a4713da0c8837d18078e7fdd6bd27ae348daa6bbc571
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/bg-hero-black.jpg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:15 GMT
content-type: image/jpeg
content-length: 90139
cache-control: public, max-age=2592000
cf-bgj: h2pri
etag: "660419e9-1601b"
expires: Fri, 24 May 2024 16:46:15 GMT
last-modified: Wed, 27 Mar 2024 13:06:49 GMT
via: 1.1 google
cf-cache-status: HIT
age: 268270
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87979181cd581bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/intersection-observer-90e9e37b.js | 104.18.30.102 | 200 OK | 2.5 MB |
URL GET HTTP/2get-huusk.com/build/assets/intersection-observer-90e9e37b.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (8848) Size2.5 MB (2509819 bytes) Hashdf9e40a691030e934101f1208b7123ee f45cb4373a7fd51f8d66041abc038e428c721cc7 196c30a464aae5bedb9e8ab2298a30eb0cc8d1266fc27cfe43919cdaef82381e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/intersection-observer-90e9e37b.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-2291"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917cf9e41bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/main-fe03ab77.css | 104.18.30.102 | 200 OK | 2.5 MB |
URL GET HTTP/2get-huusk.com/build/assets/main-fe03ab77.css IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size2.5 MB (2516509 bytes) Hash4f629961b865433fccb94516d0014cab 9b4344c8b4eeab236d07951ecf8a3da30f7e0634 fe03ab771cdaa31aa916184ab55674b1b61c8d6aeb967fa1100662a1271aa858
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/main-fe03ab77.css HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 08:42:57 GMT
etag: W/"6614ff91-11160"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 1323402
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bc8cd1bfa-OSL
X-Firefox-Spdy: h2
|
|
| media.enence.com/theme/huusk/product/huusk.mp4 | 172.67.140.172 | 206 Partial Content | 49 kB |
URL GET HTTP/3media.enence.com/theme/huusk/product/huusk.mp4 IP172.67.140.172:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectenence.com Fingerprint85:D1:82:0C:D9:CA:26:59:E2:C8:9E:30:52:BF:44:9A:43:5B:D3:DF ValidityFri, 05 Apr 2024 11:57:33 GMT - Thu, 04 Jul 2024 11:57:32 GMT
Hash46355e9bd1dd4a2bd41beba491f3c24e 318c9fee7edb77f5d537ffadfcb4144f0a5b00e0 8731fbf50cb2aa3870e9afcf408bf705b95b34467a9f46bf382a0ede7d1e0208
GET /theme/huusk/product/huusk.mp4 HTTP/1.1
Host: media.enence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=22577152-
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Wed, 24 Apr 2024 16:46:16 GMT
content-type: video/mp4
content-length: 49041
x-guploader-uploadid: ABPtcPoncab9TaHt77ORLFnvD4IPLt0DLk7Q_bGU2wcbIAsojnMI2frAvFC07oKs2XunZgc9HNY
expires: Wed, 24 Apr 2024 16:51:01 GMT
cache-control: public, max-age=14400
last-modified: Wed, 20 Sep 2023 10:09:19 GMT
etag: "1989e2c933f3392dc6668f87d0d2b4ec"
x-goog-generation: 1695204559013642
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 22626193
x-goog-meta-goog-reserved-file-mtime: 1695204496
content-language: en
x-goog-hash: crc32c=NjOZ3w==, md5=GYniyTPzOS3GZo+H0NK07A==
x-goog-storage-class: STANDARD
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3315
content-range: bytes 22577152-22626192/22626193
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7DHw%2FGZ1Cjt%2FY%2BxYm0X99Y2CA8QQDspXTQikeLzhmnsXukJkqp2OfRcSzxKQIHAjNLlzh9bNCzqyuuPFDnA6LOpWcGRj3lBAD6OxOCkku%2FexaHACWs5WpOJ0yWOU%2FWl%2FPjKV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879791880d965685-OSL
|
|
| get-huusk.com/build/assets/ajax-loader-e7b44c86.gif | 104.18.30.102 | 200 OK | 4.2 kB |
URL GET HTTP/2get-huusk.com/build/assets/ajax-loader-e7b44c86.gif IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeGIF image data, version 89a, 32 x 32 Hashc5cd7f5300576ab4c88202b42f6ded62 7a1aa43614396382bb15e5fde574d9cdcd21698f e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/ajax-loader-e7b44c86.gif HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/slick-theme-f515108f.css
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:16 GMT
content-type: image/gif
content-length: 4178
last-modified: Fri, 05 Apr 2024 08:15:50 GMT
etag: "660fb336-1052"
expires: Fri, 24 May 2024 16:46:16 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 373802
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797918809c31bfa-OSL
X-Firefox-Spdy: h2
|
|
| www.dsw0trk.com/sdk/click?effp=4065323d44037d0c81333201f3fe1032&_ef_transaction_id=&oid=10&affid=259&__cc=&async=json&uid=1303&sub5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&__efckuq=82&ttclid=null&cjevent=null | 34.120.82.94 | 200 OK | 86 B |
URL GET HTTP/3www.dsw0trk.com/sdk/click?effp=4065323d44037d0c81333201f3fe1032&_ef_transaction_id=&oid=10&affid=259&__cc=&async=json&uid=1303&sub5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&__efckuq=82&ttclid=null&cjevent=null IP34.120.82.94:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerStarfield Technologies, Inc. Subjectdsw0trk.com FingerprintFE:DE:4D:9B:3E:F2:45:BD:8A:EF:51:51:97:F7:EF:F6:97:FD:A9:46 ValidityFri, 26 May 2023 21:25:49 GMT - Wed, 26 Jun 2024 21:25:49 GMT
Hash1b8d02d8697be67dc0f0076c55e84de8 28b7dffdbbeaccb1d277aa608b9673933e581cde cdefc40e9e41f43f3d46184edc1124b5ee4f8deb1d8994327f890272db385307
GET /sdk/click?effp=4065323d44037d0c81333201f3fe1032&_ef_transaction_id=&oid=10&affid=259&__cc=&async=json&uid=1303&sub5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&__efckuq=82&ttclid=null&cjevent=null HTTP/1.1
Host: www.dsw0trk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://get-huusk.com/
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:46:16 GMT
content-type: application/json; charset=utf-8
content-length: 86
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
access-control-allow-credentials: true
access-control-allow-origin: https://get-huusk.com
set-cookie: uniqueClick=ff7e8cef-8668-481b-94c1-1f96ab03d511:1713977176; Path=/; Expires=Fri, 26 Apr 2024 16:46:16 GMT; Secure; SameSite=None
transaction_id=cd4b87013a33413ab27315dac97d5e63; Path=/; Expires=Tue, 23 Jul 2024 16:46:16 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: aec4c848-f01c-4aa9-8fe9-906f86848837
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| media.enence.com/theme/components/recipe-book/left.mp4 | 172.67.140.172 | 206 Partial Content | 16 kB |
URL GET HTTP/2media.enence.com/theme/components/recipe-book/left.mp4 IP172.67.140.172:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectenence.com Fingerprint85:D1:82:0C:D9:CA:26:59:E2:C8:9E:30:52:BF:44:9A:43:5B:D3:DF ValidityFri, 05 Apr 2024 11:57:33 GMT - Thu, 04 Jul 2024 11:57:32 GMT
Hash3541251f8557c548d191cfd611e0a8f9 7adbdd42c2c665d42c9f6b5609fed626ca936b8e e4191b9022860e2b6622ffd6eaaed8639d1ed59c8fc086e76bc61457271639c4
GET /theme/components/recipe-book/left.mp4 HTTP/1.1
Host: media.enence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=2490368-
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Wed, 24 Apr 2024 16:46:16 GMT
content-type: video/mp4
content-length: 15989
x-guploader-uploadid: ABPtcPrHE7BBAf-XH_5wRA6UVojSOTGYOzL6yH9SfTrsENNNSh3GkG2hjjSnxLBS_pngIx34T9iG_nz-5A
x-goog-generation: 1695204545106940
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2506357
x-goog-meta-goog-reserved-file-mtime: 1695204496
content-language: en
x-goog-hash: crc32c=59a5Gg==, md5=hXdlbJ5QwvF5YEObzzozTA==
x-goog-storage-class: STANDARD
expires: Wed, 24 Apr 2024 16:51:01 GMT
cache-control: public, max-age=14400
age: 3315
last-modified: Wed, 20 Sep 2023 10:09:05 GMT
etag: "8577656c9e50c2f17960439bcf3a334c"
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
content-range: bytes 2490368-2506356/2506357
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jsSpjCFQY0W2Nujru1MerCN%2FKyz02N78NB885Cz%2FwLVQH46zUBGKgCMKPPKpmnnay1moql1YS6Bu9WcJr1k9f2dRnQxEYZX3cTNeSAs5CccYpthBdamiu%2FhQjbxmvRcc9XJY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879791880d975685-OSL
|
|
| www.googletagmanager.com/gtag/js?id=G-2DT0NCM1Q4&l=gaLayer&cx=c | 142.250.74.168 | 200 OK | 90 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-2DT0NCM1Q4&l=gaLayer&cx=c IP142.250.74.168:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hash0ad0edff296a2c1fff87e856b2ae643c 64fcef0868b39b561707691398db718922f84852 5fd227c39cb7b48c890e4be80af899940f6223c507242452f44e499c5cbcd069
GET /gtag/js?id=G-2DT0NCM1Q4&l=gaLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 16:46:16 GMT
expires: Wed, 24 Apr 2024 16:46:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89527
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-KWC7VCM80R&l=gaLayer&cx=c | 142.250.74.168 | 200 OK | 102 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-KWC7VCM80R&l=gaLayer&cx=c IP142.250.74.168:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size102 kB (101728 bytes) Hash8614d81a72decc2a4432753142511f1a 7b877cf4202d3d9a0e52a6184f36d29ec6408781 bdec632c1061eb4930fa5800e72c4c7587f1b3f1409ea4b773c846d4cd0ce4c1
GET /gtag/js?id=G-KWC7VCM80R&l=gaLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 16:46:16 GMT
expires: Wed, 24 Apr 2024 16:46:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101728
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-VYKE683B14&l=gaLayer&cx=c | 142.250.74.168 | 200 OK | 101 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-VYKE683B14&l=gaLayer&cx=c IP142.250.74.168:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Size101 kB (101024 bytes) Hashe7dbbde2a4f81aa978c50796b6b5d6ce 65697c83d1265daf049a698d69f60322c9080c4f 02cbc4ed4633690afc7a17264b9f2e91e85343a4179e6c4d4b76bae2a3009038
GET /gtag/js?id=G-VYKE683B14&l=gaLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 24 Apr 2024 16:46:16 GMT
expires: Wed, 24 Apr 2024 16:46:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101024
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| media.enence.com/theme/huusk/product/huusk.mp4 | 172.67.140.172 | 206 Partial Content | 2.4 MB |
URL GET HTTP/3media.enence.com/theme/huusk/product/huusk.mp4 IP172.67.140.172:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectenence.com Fingerprint85:D1:82:0C:D9:CA:26:59:E2:C8:9E:30:52:BF:44:9A:43:5B:D3:DF ValidityFri, 05 Apr 2024 11:57:33 GMT - Thu, 04 Jul 2024 11:57:32 GMT
File typeISO Media, MP4 Base Media v1 [ISO 14496-12:2003] Size2.4 MB (2375883 bytes) Hash87857a7828ba68b7cde4d8a4d1173500 1370750080e879d3b47393ea0ed68423981cfc4e 553bd79cc2ec63db09f03263ea7297adb4c7c7a3a297c22412dc75c668d042a7
GET /theme/huusk/product/huusk.mp4 HTTP/1.1
Host: media.enence.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: video/mp4
content-length: 22626193
x-guploader-uploadid: ABPtcPoncab9TaHt77ORLFnvD4IPLt0DLk7Q_bGU2wcbIAsojnMI2frAvFC07oKs2XunZgc9HNY
expires: Wed, 24 Apr 2024 16:51:01 GMT
cache-control: public, max-age=14400
last-modified: Wed, 20 Sep 2023 10:09:19 GMT
etag: "1989e2c933f3392dc6668f87d0d2b4ec"
x-goog-generation: 1695204559013642
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 22626193
x-goog-meta-goog-reserved-file-mtime: 1695204496
content-language: en
x-goog-hash: crc32c=NjOZ3w==, md5=GYniyTPzOS3GZo+H0NK07A==
x-goog-storage-class: STANDARD
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 3313
content-range: bytes 0-22626192/22626193
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hBvfhNDilGZFCBdhsTXPvYoaM1QJmbE%2BcWBqa0ewFEWYk9oy7nQRg%2FNbgrmupBkJv%2Fb4Dwkhh2aswYP6%2Bi7SiHUKwQgJvAKLI50O6XM95JSh2BScjzDvULNmu1Oaj%2BJEeTZ2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917ebdf6b518-OSL
X-Firefox-Spdy: h2
|
|
| www.paypal.com/muse/identity/v2/index.html | 151.101.1.21 | 200 OK | 249 B |
URL GET HTTP/2www.paypal.com/muse/identity/v2/index.html IP151.101.1.21:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerDigiCert Inc Subjectwww.paypal.com Fingerprint92:69:A1:00:8F:61:AA:60:17:06:FC:85:FD:47:D2:77:66:C0:F5:91 ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File typegzip compressed data, from Unix Hash5338d5c398f7a4f67335fce8abb45180 a10ea8d9633ec2284c26e0c19acb5b288c2c79d7 326a564f236f72e0a2b8b12b5fa38cb4a3c899652e239388147c6b276e819ce2
GET /muse/identity/v2/index.html HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/html; charset=UTF-8
etag: W/"124-18eed210520"
last-modified: Wed, 17 Apr 2024 17:35:48 GMT
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f1333110c7cf6
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Wed, 24 Apr 2024 17:16:15 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1808585175%26vteXpYrS%3D1713978975%26vr%3D11002da018f0a555b03650d6fd13744d%26vt%3D11002da018f0a555b03650d6fd13744c%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 24 Apr 2027 16:46:15 GMT; HttpOnly; Secure
ts_c=vr%3D11002da018f0a555b03650d6fd13744d%26vt%3D11002da018f0a555b03650d6fd13744c; Path=/; Domain=paypal.com; Expires=Sat, 24 Apr 2027 16:46:15 GMT; Secure
traceparent: 00-0000000000000000000f1333110c7cf6-7e81d791f9379569-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Wed, 24 Apr 2024 16:46:15 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230153-FRA, cache-hel1410031-HEL, cache-hel1410031-HEL
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1713977175.358967,VS0,VE187
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-KWC7VCM80R&cid=1967881760.1713977177>m=45je44m0v886285114za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1966581326 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-KWC7VCM80R&cid=1967881760.1713977177>m=45je44m0v886285114za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1966581326 IP142.250.74.163:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-KWC7VCM80R&cid=1967881760.1713977177>m=45je44m0v886285114za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1966581326 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-VYKE683B14&cid=1967881760.1713977177>m=45je44m0v9169435190za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=719114647 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/3www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-VYKE683B14&cid=1967881760.1713977177>m=45je44m0v9169435190za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=719114647 IP142.250.74.163:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-VYKE683B14&cid=1967881760.1713977177>m=45je44m0v9169435190za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=719114647 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.paypalobjects.com/muse/noop.js | 192.229.221.25 | 200 OK | 18 B |
URL GET HTTP/2www.paypalobjects.com/muse/noop.js IP192.229.221.25:443
Requested byhttps://www.paypal.com/muse/identity/v2/index.html CertificateIssuerDigiCert Inc Subjectwww.paypal.com Fingerprint4B:C0:E1:F0:16:B3:A4:B3:63:08:41:DF:F2:EF:8D:65:54:1D:30:B1 ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 31 Oct 2024 23:59:59 GMT
Hash1228a5187b0617b0a4e95505f01dae39 b66ed48843044830c12570f5a843786a3fc368fb 0739b17b1053de387d55795753300a79626787634f8c909277efff94d0e3f154
GET /muse/noop.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypal.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Wed, 24 Apr 2024 16:46:17 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "60271cd0-12"
expires: Wed, 24 Apr 2024 16:46:16 GMT
last-modified: Sat, 13 Feb 2021 00:26:56 GMT
paypal-debug-id: d02e3606dd2b9
server: ECAcc (dac/9C7D)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-0000000000000000000d02e3606dd2b9-30adab17f35f4695-01
vary: Accept-Encoding, Accept-Encoding
x-content-type-options: nosniff
content-length: 18
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/whoops-b9817266.js | 104.18.30.102 | 200 OK | 232 B |
URL GET HTTP/2get-huusk.com/build/assets/whoops-b9817266.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (448) Hash9e1736365119f4a3bccad7393bfcacaa 78dcb4a26c85db35a79bcf39430d26c72f3e793b 9a687815c9f37e46a7745f44833cdbb9b86d6f94b3f57676d0422790dd5f18ae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/whoops-b9817266.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-1c1"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09ec1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-2DT0NCM1Q4>m=45je44m0v873730972za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=553772474&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_s=2&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=3834 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-2DT0NCM1Q4>m=45je44m0v873730972za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=553772474&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_s=2&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=3834 IP216.239.32.36:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2DT0NCM1Q4>m=45je44m0v873730972za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=553772474&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_s=2&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=3834 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://get-huusk.com
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-KWC7VCM80R>m=45je44m0v886285114za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=1913160596&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAI&_s=1&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=3904 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-KWC7VCM80R>m=45je44m0v886285114za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=1913160596&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAI&_s=1&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=3904 IP216.239.32.36:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-KWC7VCM80R>m=45je44m0v886285114za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=1913160596&ul=en-us&sr=1280x1024&pscdl=noapi&_eu=AAAI&_s=1&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=3904 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://get-huusk.com
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-KWC7VCM80R>m=45je44m0v886285114za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=1913160596&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_eu=AAAI&_s=2&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_ss=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=3905 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-KWC7VCM80R>m=45je44m0v886285114za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=1913160596&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_eu=AAAI&_s=2&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_ss=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=3905 IP216.239.32.36:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-KWC7VCM80R>m=45je44m0v886285114za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=1913160596&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_eu=AAAI&_s=2&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_ss=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=3905 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
access-control-allow-origin: https://get-huusk.com
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-VYKE683B14>m=45je44m0v9169435190za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=393471531&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713977177&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=4051 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-VYKE683B14>m=45je44m0v9169435190za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=393471531&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713977177&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=4051 IP216.239.32.36:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VYKE683B14>m=45je44m0v9169435190za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=393471531&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713977177&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=4051 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://get-huusk.com
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-VYKE683B14>m=45je44m0v9169435190za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=393471531&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_s=2&sid=1713977177&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_ss=1&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=4051 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/3region1.analytics.google.com/g/collect?v=2&tid=G-VYKE683B14>m=45je44m0v9169435190za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=393471531&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_s=2&sid=1713977177&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_ss=1&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=4051 IP216.239.32.36:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-VYKE683B14>m=45je44m0v9169435190za200&_p=1713977174611&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=393471531&ul=en-us&sr=1280x1024&pscdl=noapi&ec_mode=a&_s=2&sid=1713977177&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=page_view&_fv=1&_ss=1&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&tfd=4051 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://get-huusk.com
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| wchat.freshchat.com/widget/css/widget.css?t=1713977180064 | 52.73.218.122 | 200 OK | 1.7 kB |
URL GET HTTP/2wchat.freshchat.com/widget/css/widget.css?t=1713977180064 IP52.73.218.122:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typeASCII text, with very long lines (8868) Hash117bc3ba8368174ccb449215e921ea53 c90cd71e1c719e4090471e36be4debf61acba8e9 1746b268addac39a01bc462c8e85434841637a136be1c0234b2eae14988e3d3c
GET /widget/css/widget.css?t=1713977180064 HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:20 GMT
content-type: text/css
server: fwe
last-modified: Thu, 18 Apr 2024 11:29:41 GMT
expires: Thu, 24 Apr 2025 16:46:20 GMT
cache-control: max-age=31536000,no-cache, no-store, must-revalidate, pre-check=0, post-check=0,public
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
x-server: kl45v
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-360dd29b1173a9e1301af57d7c03ef96-189534b450878918-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: af54e0b9-98cc-48eb-bf30-4c4d14d8478e
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/notif.da662fefc5060dabf2859ea199198b14.mp3 | 54.230.111.77 | 206 Partial Content | 4.3 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/notif.da662fefc5060dabf2859ea199198b14.mp3 IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeAudio file with ID3 version 2.4.0, contains:
- MPEG ADTS, layer III, v2, 56 kbps, 22.05 kHz, Monaural Hasha529450a7cfb4a60dea41ef294fa90dd 50eb9373dfa8c38ec6aebfa6e2a5f4494871aa37 eb2e3f703cf8ee0156a1d625e053c0968b0dfcff62ea4254ddd8ba9fece3ad32
GET /static/assets/notif.da662fefc5060dabf2859ea199198b14.mp3 HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
content-type: audio/mpeg
content-length: 4302
last-modified: Thu, 18 Apr 2024 11:29:36 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 16:42:38 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: "a529450a7cfb4a60dea41ef294fa90dd"
vary: Accept-Encoding
content-range: bytes 0-4301/4302
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vTvC5Ra1QTg0GiEdKBnPmXZMMQtl-z0vJMcOWuP6aLCNVS-bTI_H1g==
age: 228
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/chunk.53225951580d96ba885c.js | 54.230.111.77 | 200 OK | 1.9 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/chunk.53225951580d96ba885c.js IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4902), with no line terminators Hash16f166059cdfefcc4cccee6866835222 6bd4ce9508fab4ca155873ccc300b5fa7881c5b6 9037e86768130186d676f65444b051b348944719247563d521046bca6af241b4
GET /static/assets/chunk.53225951580d96ba885c.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:29:34 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 16:41:22 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"16f166059cdfefcc4cccee6866835222"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3OaVNyF-SWgpcG8nZFtiKGqmD1_aDKwJeiu9FZ-xBo6QtFgvBGGqEw==
age: 300
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/freshchat-line.7327fc2a43ff6a857c38e96ffa7e00f2.svg | 54.230.111.77 | 200 OK | 663 B |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/freshchat-line.7327fc2a43ff6a857c38e96ffa7e00f2.svg IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashcd452acf4efb05843ef7575e5a9de756 be8d842348dc19a58dcf46588cdfa8010616da05 2b82601133216ec29983087a0532e9b0af553f7f4a8b3b00ff9d7ffcc1142542
GET /static/assets/freshchat-line.7327fc2a43ff6a857c38e96ffa7e00f2.svg HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 663
last-modified: Thu, 18 Apr 2024 11:29:35 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 16:45:04 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: "cd452acf4efb05843ef7575e5a9de756"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WMPJ3XqTTB1KwCcNw2GyazvOoDjU2Wditkhdh8EkN3KvYPsstE1idA==
age: 80
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/chunk.7fcac1ecff39eef7a4de.js | 54.230.111.77 | 200 OK | 25 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/chunk.7fcac1ecff39eef7a4de.js IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash6f3459dfb7383d39c4b9db6b7f3396a5 933f35e651b8708312e20cc71602d72e86f40e7c fc682089a5ba20c33d9f55e220d1a67a6c0bb5615255917a181e6631c686a925
GET /static/assets/chunk.7fcac1ecff39eef7a4de.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:29:34 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 24 Apr 2024 16:43:13 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"68c07ac82ecc4ec6956e23c38601edb8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M8qLJYBAU3m3dheJU8yOtMpilOXlUpzmRlmd5lgEoCGqXP13mAyQBw==
age: 190
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/widget/js/co-browsing.js | 52.73.218.122 | 200 OK | 8.0 kB |
URL GET HTTP/2wchat.freshchat.com/widget/js/co-browsing.js IP52.73.218.122:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash7c4ec824a8a109b9244e942960986fb0 5251e8c1fdb093439abafe4c3246ddfb4218b3d6 ffe5c4ca65a397ee423f13d1d58a5d27c9d17c171536300ec38600e26478db91
GET /widget/js/co-browsing.js HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:21 GMT
content-type: application/javascript
server: fwe
last-modified: Thu, 18 Apr 2024 11:29:41 GMT
expires: Thu, 24 Apr 2025 16:46:21 GMT
cache-control: max-age=31536000,no-cache, no-store, must-revalidate, pre-check=0, post-check=0,public
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
x-server: 9zqxh
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-831e5e2392a45c67cb25186ab100fceb-4a3923b6d8d483c2-01
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 1bdd0825-361c-982d-818d-8c151382eea6
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/chunk.7be603f8fb2482fb972b.js | 54.230.111.77 | 200 OK | 4.5 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/chunk.7be603f8fb2482fb972b.js IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashc0af849b5937299d9ecb133820f38138 40cdaf8a72d2e1b001a45d6cd9f4f7eb14285ec4 249e5ce787bf4f81e2d23836e84ed4bf48d4bd06413bdec3a6fe8caf0c6956d2
GET /static/assets/chunk.7be603f8fb2482fb972b.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:29:34 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 24 Apr 2024 16:45:39 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"516f14e4be6e5d509f7f85c85054d45f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fL0NZo-7V-2nQHUyM-CwYg37D-GsBbHV2t7JJdnhXm9d8NgQTvhXlQ==
age: 60
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/freshchat_logo.f6e2dc08072c0bf69ca4c005e561b7dc.png | 54.230.111.77 | 200 OK | 5.0 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/freshchat_logo.f6e2dc08072c0bf69ca4c005e561b7dc.png IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typePNG image data, 293 x 293, 8-bit/color RGBA, non-interlaced Hash220df3cb357233c7db4db0b168d191ba 76931b059d8503b77a5aa55836199b9cb3bf9cb9 65844f2f98cb4ef7ee8eea8b791a403cd4c01ff6b638adfba3613738af7efeb6
GET /static/assets/freshchat_logo.f6e2dc08072c0bf69ca4c005e561b7dc.png HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5034
last-modified: Thu, 18 Apr 2024 11:29:35 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 16:45:05 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: "220df3cb357233c7db4db0b168d191ba"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9MKjck7S44H7kGJHXahtWPRIntW3Rvj3gCScIcGvH1Y3tr91mfG6Fg==
age: 95
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/widget_info_v2?locales=en-US,en-US&platform=web | 52.73.218.122 | 200 OK | 18 kB |
URL GET HTTP/2wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/widget_info_v2?locales=en-US,en-US&platform=web IP52.73.218.122:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash91c79e99b53704481cc8cb76a60728d2 e7fd5527f5a2228f17a621fb91449f0083e0ff31 4661c9b46373fb8cc461bfab1adc00298a05d15195c803c0c3294289b1ac9eca
GET /app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/widget_info_v2?locales=en-US,en-US&platform=web HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:21 GMT
content-type: application/json;charset=UTF-8
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: c4b36f46-e823-4de7-8733-5591e023d77d
content-encoding: gzip
vary: accept-encoding
x-server: 3063
x-status: HIT
x-envoy-upstream-service-time: 0
x-trace-id: 00-a1fc2c70a710d0f2adc2ead3b0edbeff-7e3401d850f1685d-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2997
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/components/recipe-book/right.png | 104.18.30.102 | | 82 kB |
URL get-huusk.com/theme/components/recipe-book/right.png IP104.18.30.102:0
CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typePNG image data, 1151 x 187, 8-bit colormap, non-interlaced Hash7f37f99cc06caeb7cbee8ef585af3d10 66a77d36da2c7fa6b6186915d813912738ed95ae 04f1beef4006c95ccac0a6b45163f8fd470e122f2a000e5cd52ab1e1e27153ba
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/components/recipe-book/right.png HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0; ef_witness=1; ef_affid=259; ef_tid_c_o_10=cd4b87013a33413ab27315dac97d5e63; ef_tid_c_a_8=cd4b87013a33413ab27315dac97d5e63; transaction_id=cd4b87013a33413ab27315dac97d5e63; _ga_2DT0NCM1Q4=GS1.1.1713977176.1.0.1713977176.60.0.553772474; _ga=GA1.1.1967881760.1713977177; _ga_KWC7VCM80R=GS1.1.1713977176.1.0.1713977176.60.0.1913160596; _ga_VYKE683B14=GS1.1.1713977177.1.0.1713977177.60.0.393471531
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:39 GMT
content-type: image/png
content-length: 81934
last-modified: Mon, 25 Mar 2024 14:46:02 GMT
etag: "66018e2a-1400e"
expires: Fri, 24 May 2024 16:46:39 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 1363705
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87979216de051bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/components/recipe-book/bg.jpg | 104.18.30.102 | | 210 kB |
URL get-huusk.com/theme/components/recipe-book/bg.jpg IP104.18.30.102:0
CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x298, components 3 Size210 kB (209883 bytes) Hash598c93c99de17b2575c78ac03d4547df 411c56e74d55f24f47fd7cc71e7864ac006c7d12 a6df06ab47ce919f94f446f34374f18fd699aedd9809ec3d4135da90c595f6bb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/components/recipe-book/bg.jpg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0; ef_witness=1; ef_affid=259; ef_tid_c_o_10=cd4b87013a33413ab27315dac97d5e63; ef_tid_c_a_8=cd4b87013a33413ab27315dac97d5e63; transaction_id=cd4b87013a33413ab27315dac97d5e63; _ga_2DT0NCM1Q4=GS1.1.1713977176.1.0.1713977176.60.0.553772474; _ga=GA1.1.1967881760.1713977177; _ga_KWC7VCM80R=GS1.1.1713977176.1.0.1713977176.60.0.1913160596; _ga_VYKE683B14=GS1.1.1713977177.1.0.1713977177.60.0.393471531
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:39 GMT
content-type: image/jpeg
content-length: 209883
cache-control: public, max-age=2592000
cf-bgj: h2pri
etag: "660fd910-333db"
expires: Fri, 24 May 2024 16:46:39 GMT
last-modified: Fri, 05 Apr 2024 10:57:20 GMT
via: 1.1 google
cf-cache-status: HIT
age: 24536
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87979216ee0c1bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/properties-knife.jpg?1 | 104.18.30.102 | | 109 kB |
URL get-huusk.com/theme/huusk/product/images/properties-knife.jpg?1 IP104.18.30.102:0
CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3 Size109 kB (108592 bytes) Hashdb593b10634ad41ef78dcf2fad6d2955 74532222e55023d36ede4ff4042257f7987e78dc 9e11224d989d6d556b2e5bd906c763bb96675d39c68be9c7768217902fbe8f6b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/properties-knife.jpg?1 HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0; ef_witness=1; ef_affid=259; ef_tid_c_o_10=cd4b87013a33413ab27315dac97d5e63; ef_tid_c_a_8=cd4b87013a33413ab27315dac97d5e63; transaction_id=cd4b87013a33413ab27315dac97d5e63; _ga_2DT0NCM1Q4=GS1.1.1713977176.1.0.1713977176.60.0.553772474; _ga=GA1.1.1967881760.1713977177; _ga_KWC7VCM80R=GS1.1.1713977176.1.0.1713977176.60.0.1913160596; _ga_VYKE683B14=GS1.1.1713977177.1.0.1713977177.60.0.393471531
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:39 GMT
content-type: image/jpeg
content-length: 108592
cache-control: public, max-age=2592000
cf-bgj: h2pri
etag: "660422df-1a830"
expires: Fri, 24 May 2024 16:46:39 GMT
last-modified: Wed, 27 Mar 2024 13:45:03 GMT
via: 1.1 google
cf-cache-status: HIT
age: 966898
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 879792189f541bfa-OSL
X-Firefox-Spdy: h2
|
|
| tracktor.me/ | 188.114.97.1 | 200 OK | 19 kB |
IP188.114.97.1:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerLet's Encrypt Subjecttracktor.me Fingerprint8E:61:66:21:52:67:16:04:1C:1B:82:07:6C:1A:9D:3B:18:1E:B2:F4 ValidityTue, 26 Mar 2024 17:36:11 GMT - Mon, 24 Jun 2024 17:36:10 GMT
File typeHTML document, ASCII text, with very long lines (17922) Hash3644f930a6d009dc82652c3c4c8e6960 e5428b10381bf47494dfbf07d01e0b33552036c7 d4e4bd337d5429671a73d5bbb9804c93dae0e6032129c9c869f8d5b71b70d710
GET / HTTP/1.1
Host: tracktor.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:17 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: tracktor_session=eyJpdiI6ImdBb0MvOXptRzBkSit1c3NlaWVUM0E9PSIsInZhbHVlIjoiaTVVcUhicW1IN2s2NWQ3T0FPbHB5T012NGVtOVVPOHRCcjkrdDhma2xaRWo4RFloRVBvQ2hNTlAvNFBYczVPRCsrd1NyRzVyZ0NLc2dHNnZ0UW5OZ2RSWEVVTmFkQUY5WmdxblozZnYyZnBRS3JnMmpmOExpODVFd2JjNElINnQiLCJtYWMiOiIxN2E5MTQzOWQwZTk1MzIyNWViMGU0ZjVmYmY4NWJkZjdjMmU1Nzc4MzA2YTZhNWJmZjVlYjNjNTUwNWViMDljIiwidGFnIjoiIn0%3D; expires=Wed, 24 Apr 2024 18:46:17 GMT; Max-Age=7200; path=/; httponly; samesite=lax
via: 1.1 google, 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gI7HOFWSzUSEsP7rKO%2FwH8V98JdjnPg7LcvSknH3wMeP6jZcueTXNttnwPzZWPdPuF9L9fLCBX6Xn7gw6NFLDZPowvyBeF0TFl3Gd5xQXt2Evnie8mLFEUQU68R3iQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797918de9e756c7-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/theme-a3688be5.css | 104.18.30.102 | 200 OK | 234 kB |
URL GET HTTP/2get-huusk.com/build/assets/theme-a3688be5.css IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
Size234 kB (233711 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/theme-a3688be5.css HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 08:42:57 GMT
etag: W/"6614ff91-390ef"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 1323402
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bc8cc1bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/legacy-41783ffe.css | 104.18.30.102 | 200 OK | 21 kB |
URL GET HTTP/2get-huusk.com/build/assets/legacy-41783ffe.css IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (20948) Hash087c6ae8ab2cc73f892ac930adba98c6 ba06a5da228f7b9733212974a721a0e84a54a99e 41783ffe0078ad690dc2169198d580a71d3dd6bfe132b862247cdf174d0bcac8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/legacy-41783ffe.css HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/css
last-modified: Wed, 27 Mar 2024 11:48:20 GMT
etag: W/"66040784-51d5"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 2435873
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bc8d01bfa-OSL
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/vendor.d64d219ca4493f67a3970efc52d51c86.css | 54.230.111.77 | 200 OK | 24 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/vendor.d64d219ca4493f67a3970efc52d51c86.css IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (24045), with no line terminators Hashd64d219ca4493f67a3970efc52d51c86 1d141cc216eda9cb61cb6458896771967d85b13c f2154f49d7d4ed6c74a1ad1dc0e39ef3136fd859059986ed5bcd3050d59867b3
GET /static/assets/vendor.d64d219ca4493f67a3970efc52d51c86.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 18 Apr 2024 11:29:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 16:41:52 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"d64d219ca4493f67a3970efc52d51c86"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: l0z1p7Ko2GGBEeMbdomwY21OpvUO0BDc7EhawSu-4FMccbSFEB62YQ==
age: 269
X-Firefox-Spdy: h2
|
|
| i.ser.tashkent.su/?a=208185&c=275995&co=262827&mt=7 |  45.141.157.146 | 302 Found | 375 kB |
URL User Request GET HTTP/2i.ser.tashkent.su/?a=208185&c=275995&co=262827&mt=7 IP45.141.157.146:443
CertificateIssuerLet's Encrypt Subjecti.ser.tashkent.su Fingerprint2E:F3:7B:DD:09:79:17:FF:3B:65:39:4D:92:67:26:DA:CB:75:80:F1 ValidityTue, 16 Apr 2024 20:36:46 GMT - Mon, 15 Jul 2024 20:36:45 GMT
Size375 kB (374952 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?a=208185&c=275995&co=262827&mt=7 HTTP/1.1
Host: i.ser.tashkent.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 24 Apr 2024 16:46:13 GMT
content-type: text/html;charset=ISO-8859-1
location: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
set-cookie: gdm_suid_v2_1_001=HPfHs3OFxkaNOwO68jCjbQ==; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:12 GMT; Path=/; Secure; SameSite=None
gdm_suid_v1_1_001=HPfHs3OFxkaNOwO68jCjbQ==; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:13 GMT; Path=/
gdm_sid_v1_3_001=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; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:13 GMT; Path=/
gdm_uid_v2_1_001=1lbK4IgqRf5Kwvf5S6N9gUGilqLaxxnx6upFCMI6FcN4eeIqUnN/+AvHcHxFcxCb; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:12 GMT; Path=/; Secure; SameSite=None
gdm_sid_v2_3_001=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; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:13 GMT; Path=/; Secure; SameSite=None
gdm_uid_v1_1_001=1lbK4IgqRf5Kwvf5S6N9gUGilqLaxxnx6upFCMI6FcN4eeIqUnN/+AvHcHxFcxCb; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:13 GMT; Path=/
gdm_click_adv_freq_v1_1_001=aYzY3WQEjlGMaMmNgQ/XLigkYsgb9S6LBAgk/Btau/dlz4Dx6nI1RJ+osBT423l9; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:13 GMT; Path=/
gdm_click_freq_v2_1_001=vG5JRudjv3HbBeOF7b4ef5b9UyKg2wJV+kK7gfCEGD/BJdAKxMcnwagenVOp8zGh; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:12 GMT; Path=/; Secure; SameSite=None
gdm_click_adv_freq_v2_1_001=aYzY3WQEjlGMaMmNgQ/XLigkYsgb9S6LBAgk/Btau/dlz4Dx6nI1RJ+osBT423l9; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:12 GMT; Path=/; Secure; SameSite=None
gdm_click_freq_v1_1_001=vG5JRudjv3HbBeOF7b4ef5b9UyKg2wJV+kK7gfCEGD/BJdAKxMcnwagenVOp8zGh; Domain=.tashkent.su; Expires=Tue, 23-Jul-2024 16:46:13 GMT; Path=/
content-language: en-US
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,X-Auth,Pasha-Jlob
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2DT0NCM1Q4&cid=1967881760.1713977177>m=45je44m0v873730972za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1510899531 | 142.250.74.163 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2DT0NCM1Q4&cid=1967881760.1713977177>m=45je44m0v873730972za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1510899531 IP142.250.74.163:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google.no Fingerprint4E:BD:F9:72:97:67:A2:4B:EE:E4:B0:03:CD:C8:F3:30:53:27:53:1D ValidityMon, 18 Mar 2024 20:50:06 GMT - Mon, 10 Jun 2024 20:50:05 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-2DT0NCM1Q4&cid=1967881760.1713977177>m=45je44m0v873730972za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1510899531 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/alpine-a063cae0.js | 104.18.30.102 | 200 OK | 80 kB |
URL GET HTTP/2get-huusk.com/build/assets/alpine-a063cae0.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/alpine-a063cae0.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-13a1a"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917bc8d41bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/widget/css/cb.css?t=1713977181176 | 52.73.218.122 | 200 OK | 1.5 kB |
URL GET HTTP/2wchat.freshchat.com/widget/css/cb.css?t=1713977181176 IP52.73.218.122:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typeASCII text, with very long lines (1526), with no line terminators Hasha4fa092147cfb3ab4170d53db39e5e7b d33cd1e9d81dc41fb87f3081b998f72eb3cd98de 5a694ec024f71e8e02587e71dad9f072ef7fac8a35d37169b676fed518668ae7
GET /widget/css/cb.css?t=1713977181176 HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:21 GMT
content-type: text/css
server: fwe
last-modified: Thu, 18 Apr 2024 11:29:41 GMT
expires: Thu, 24 Apr 2025 16:46:21 GMT
cache-control: max-age=31536000,no-cache, no-store, must-revalidate, pre-check=0, post-check=0,public
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
x-server: kl45v
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-cca88e531c825c94a8a7bff4fbfbb5f0-419bfe6b6bae3f23-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 5343198a-d133-455e-b677-2bf1993fe14c
X-Firefox-Spdy: h2
|
|
| tracktor.me/record/session?uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&metadata[l]=nb&metadata[c]=nok&metadata[vndr]=evf&metadata[evf]=1&metadata[utm_source]=aff&metadata[utm_medium]=259&metadata[offid]=10&metadata[affiliate_id]=259&metadata[subid5]=d27ce167cd2c48ffb2f576d278c2d8831a17e&metadata[uuid]=018f1100-27c6-7b6b-9a67-ec84194c3282&metadata[pmt]=kl&metadata[hj]=1&metadata[nbsv]=2&metadata[oxlis]=2&metadata[esc]=1&metadata[ssb]=1&metadata[tos]=1&metadata[huuskv2]=1&metadata[eppss]=1&metadata[_]=5663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828&metadata[prk][0]=j7z6g&metadata[prk][1]=4kbvz&segments[0][key]=page_category&segments[0][value]=product&segments[1][key]=ip_country&segments[1][value]=NO&segments[2][key]=brand&segments[2][value]=huusk&segments[3][key]=locale&segments[3][value]=nb&segments[4][key]=vendor&segments[4][value]=evf&url=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D | 188.114.97.1 | 200 OK | 0 B |
URL POST HTTP/3tracktor.me/record/session?uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&metadata[l]=nb&metadata[c]=nok&metadata[vndr]=evf&metadata[evf]=1&metadata[utm_source]=aff&metadata[utm_medium]=259&metadata[offid]=10&metadata[affiliate_id]=259&metadata[subid5]=d27ce167cd2c48ffb2f576d278c2d8831a17e&metadata[uuid]=018f1100-27c6-7b6b-9a67-ec84194c3282&metadata[pmt]=kl&metadata[hj]=1&metadata[nbsv]=2&metadata[oxlis]=2&metadata[esc]=1&metadata[ssb]=1&metadata[tos]=1&metadata[huuskv2]=1&metadata[eppss]=1&metadata[_]=5663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828&metadata[prk][0]=j7z6g&metadata[prk][1]=4kbvz&segments[0][key]=page_category&segments[0][value]=product&segments[1][key]=ip_country&segments[1][value]=NO&segments[2][key]=brand&segments[2][value]=huusk&segments[3][key]=locale&segments[3][value]=nb&segments[4][key]=vendor&segments[4][value]=evf&url=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjecttracktor.me Fingerprint8E:61:66:21:52:67:16:04:1C:1B:82:07:6C:1A:9D:3B:18:1E:B2:F4 ValidityTue, 26 Mar 2024 17:36:11 GMT - Mon, 24 Jun 2024 17:36:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /record/session?uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&metadata[l]=nb&metadata[c]=nok&metadata[vndr]=evf&metadata[evf]=1&metadata[utm_source]=aff&metadata[utm_medium]=259&metadata[offid]=10&metadata[affiliate_id]=259&metadata[subid5]=d27ce167cd2c48ffb2f576d278c2d8831a17e&metadata[uuid]=018f1100-27c6-7b6b-9a67-ec84194c3282&metadata[pmt]=kl&metadata[hj]=1&metadata[nbsv]=2&metadata[oxlis]=2&metadata[esc]=1&metadata[ssb]=1&metadata[tos]=1&metadata[huuskv2]=1&metadata[eppss]=1&metadata[_]=5663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828&metadata[prk][0]=j7z6g&metadata[prk][1]=4kbvz&segments[0][key]=page_category&segments[0][value]=product&segments[1][key]=ip_country&segments[1][value]=NO&segments[2][key]=brand&segments[2][value]=huusk&segments[3][key]=locale&segments[3][value]=nb&segments[4][key]=vendor&segments[4][value]=evf&url=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D HTTP/1.1
Host: tracktor.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tracktor.me
DNT: 1
Connection: keep-alive
Referer: https://tracktor.me/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:46:17 GMT
content-type: text/html; charset=UTF-8
cache-control: no-cache, private
set-cookie: tracktor_session=eyJpdiI6IlJocE44MFBvU0tidGhWSEhDM3dQVnc9PSIsInZhbHVlIjoiY0dhYTN6ZEsyYVhZak1QZWtTNEF3b2ZvVkM1aURwQmxuV1NtY3ZkQlZGa2J3MUxmd0ZSN3Y2UUhsVmxleTdNM3hRMTk1MzRKbzhoako1Y1h4QllzRWg2UzZaYlcwVnNGcy9ON2pENVRKdXRlajhia3lTR2VRRnNnQXNFRDNNWTAiLCJtYWMiOiJmOWM1ZWIyYWM1MWJjODczYTk0OGUwODlhZTJkMzJhMjQyN2IzMGM5NmM1NDI3YTkxZjAwNzA1YzVhODczOGFjIiwidGFnIjoiIn0%3D; expires=Wed, 24 Apr 2024 18:46:17 GMT; Max-Age=7200; path=/; httponly; samesite=lax
via: 1.1 google, 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9N8HUNhK5V2tjSo5JeR7UlNlEwfZen99pHCVU02%2B2%2BDVovzCTWXO1%2Bg77jjy2AocwqHpKbAaYXh2Uy4bIDVOrXd98662hxSOTS2kdWX6ERzcH9EZ3126W7TbyzPcQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8797918f2c710b4d-OSL
content-encoding: br
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-2DT0NCM1Q4>m=45je44m0v873730972za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=553772474&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=3833 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-2DT0NCM1Q4>m=45je44m0v873730972za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=553772474&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=3833 IP216.239.32.36:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-2DT0NCM1Q4>m=45je44m0v873730972za200&_p=1713977174611&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1967881760.1713977177&ecid=553772474&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1713977176&sct=1&seg=0&dl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F%3Fl%3Dnb%26c%3Dnok%26vndr%3Devf%26evf%3D1%26utm_source%3Daff%26utm_medium%3D259%26uid%3D1303%26offid%3D10%26affiliate_id%3D259%26subid5%3Dd27ce167cd2c48ffb2f576d278c2d8831a17e%26source_id%3D208185_%26sub4%3D&dt=Huusk%20Kj%C3%B8kkenkniver%20begrenset%20tidskampanje%3A%2070%C2%A0%25%20rabatt%20%7C%20Huusk&en=split_test_view&_ee=1&ep.page=product&ep.page_category=product&ep.upsell_index=&ep.product_page_version=&epn.real_timestamp=1713977174611&epn.split_test_id=2726&ep.split_test_variation=5663_lower%20prices&ep.event_action=Viewed%202726&ep.event_label=5663_lower%20prices&ep.event_category=Split%20tests&up.uuid=018f1100-27c6-7b6b-9a67-ec84194c3282&up.locale=nb&up.currency=NOK&up.brand=huusk&up.country=NO&up.company=Everflow&up.subid1=&up.subid2=&up.subid3=&up.subid4=&up.subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&up.utm_campaign=&upn.real_timestamp=1713977174611&tfd=3833 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://get-huusk.com
date: Wed, 24 Apr 2024 16:46:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/211.js | 54.230.111.77 | 200 OK | 790 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/211.js IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Size790 kB (790447 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/211.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:29:33 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 16:44:37 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"47c822f8cee790a907c6e7dd37148e0b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UvjTSdjlaB8Mv8LLLbihDcJo8ZJqNM8jMNGAktA5ZJ24IRlxLm8vuA==
age: 107
X-Firefox-Spdy: h2
|
|
| www.paypal.com/targeting/graphql | 151.101.1.21 | 200 OK | 443 B |
URL POST HTTP/2www.paypal.com/targeting/graphql IP151.101.1.21:443
Requested byhttps://www.paypal.com/muse/identity/v2/index.html CertificateIssuerDigiCert Inc Subjectwww.paypal.com Fingerprint92:69:A1:00:8F:61:AA:60:17:06:FC:85:FD:47:D2:77:66:C0:F5:91 ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (502), with no line terminators Hashda4685883c2a38db725be73dff3cf30c 99490375b3a645d457d2ae09943f676e7fc230f9 2d72b54870b780e9b17944b0d2ab51e0144cb310fefa6a1fd1c9d8874e5bc75b
POST /targeting/graphql HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypal.com/muse/identity/v2/index.html
Content-Type: application/json
disable-set-cookie: true
Content-Length: 435
Origin: https://www.paypal.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-allow-credentials: true
access-control-allow-origin: https://www.paypal.com
access-control-expose-headers: Paypal-Debug-Id
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https:; script-src 'nonce-InBBmjKOpZWot5TkfcKdlUrbPF1/YOOlINl5opoaNc7Ce24R' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' ; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' ; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com;
content-type: application/json; charset=utf-8
disable-set-cookie: true
etag: W/"1bb-IOvZrZThUIRmW2twJNQyP6ZsGts"
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f676680bd93ec
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
traceparent: 00-0000000000000000000f676680bd93ec-1cb8268122624da0-01
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Wed, 24 Apr 2024 16:46:17 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230091-FRA, cache-hel1410031-HEL, cache-hel1410031-HEL
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1713977178.687495,VS0,VE300
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/user | 52.73.218.122 | 200 OK | 63 B |
URL GET HTTP/2wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/user IP52.73.218.122:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash8f847649c218fbc685174bbe7c9d2f33 1c274303ef52a06247d6eed863a53cce9bf4b239 f15ae0d9b64fc90c087c30f8b5f4da3c8b8c8cb524d716a333194004471c9409
GET /app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/user HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:21 GMT
content-type: application/json;charset=UTF-8
content-length: 63
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: 3cd14d55-557f-496b-933a-66b49ff688c0
x-server: 2601
x-envoy-upstream-service-time: 4
x-trace-id: 00-2ea7b8cf14e688e9827fb15b1c3c71a3-d0170268ac295824-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2998
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/theme-cd3f07d9.js | 104.18.30.102 | 200 OK | 2.8 kB |
URL GET HTTP/2get-huusk.com/build/assets/theme-cd3f07d9.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (2886), with no line terminators Hash5d94fce683b023ec5549c843537efd82 2130f6c0b5608472db97662a4eb4fb67e528fdb3 1bfb128602dff79b09c378ea0354be6e0df42467e0ebbe65b822d4262129251b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/theme-cd3f07d9.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-af3"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917bc8d31bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css | 54.230.111.77 | 200 OK | 0 B |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/hotline-web.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 0
last-modified: Thu, 18 Apr 2024 11:29:35 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Wed, 24 Apr 2024 16:45:59 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AK0PhOxeQ7pKb6MRbN50rchzd8eLTqWP0OHQZW0tnYJnz_TerizBng==
age: 23
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/fd-messaging.909320f11c97a8d3e529.js | 54.230.111.77 | 200 OK | 762 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/fd-messaging.909320f11c97a8d3e529.js IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Size762 kB (762139 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/fd-messaging.909320f11c97a8d3e529.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:29:35 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
date: Wed, 24 Apr 2024 16:44:44 GMT
cache-control: max-age=31536000, no-transform, public
expires: Fri, 18 Apr 2025 11:29:32 GMT
etag: W/"4a1902297de537d97c418481cf7c1ed6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QLeI_mLOKTPSI_Y5rTeiaHGPFIxNZ_4VTnIo9dwjoPjvS19XhNLU4g==
age: 99
X-Firefox-Spdy: h2
|
|
| get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= | 104.18.30.102 | 200 OK | 375 kB |
URL User Request GET HTTP/2get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= IP104.18.30.102:443
CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
Size375 kB (374952 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: no-cache, no-store, private
set-cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; expires=Wed, 24 Apr 2024 18:46:14 GMT; Max-Age=7200; path=/; secure
enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; expires=Wed, 24 Apr 2024 18:46:14 GMT; Max-Age=7200; path=/; httponly
cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; expires=Sat, 27 Apr 2024 16:46:14 GMT; Max-Age=259200; path=/; secure; httponly
rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; expires=Fri, 26 Apr 2024 16:46:14 GMT; Max-Age=172800; path=/; secure
srpp_9ed708b4=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%3D%3D; expires=Wed, 01 May 2024 16:46:14 GMT; Max-Age=604800; path=/; secure; httponly
GCLB=CKK5xJbAhNKmnwEQAw; path=/; HttpOnly; expires=Wed, 24-Apr-2024 16:51:13 GMT
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87979178bec91bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/text-wrapper-e2a1050a.js | 104.18.30.102 | 200 OK | 2.2 kB |
URL GET HTTP/2get-huusk.com/build/assets/text-wrapper-e2a1050a.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (2303), with no line terminators Hash4d06748fb504c40c9508991390ac0d0b 0c1b0202a6dc53dc1fc4eaed1f40df89ad4bce23 47f0ad18a2027a9478f56907664eb13071bf3ab3b44c83260cc3962d6e373db8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/text-wrapper-e2a1050a.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-8b0"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09f31bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/_commonjsHelpers-042e6b4d.js | 104.18.30.102 | 200 OK | 725 B |
URL GET HTTP/2get-huusk.com/build/assets/_commonjsHelpers-042e6b4d.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (740), with no line terminators Hashc56aef4219be6558af94982f54935da7 68be2cd57e9a9d040e2b463d50cbe5676388fdfc 86716fc79204535b158c2525dcd3c793bd215c600f9462c460582fe2f05ebeed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/_commonjsHelpers-042e6b4d.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-2d5"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09f21bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/user/ecee857c-5eaa-4111-9185-d6ab3eb3b6f5/activity?widgetInfoTraceId=50296513-e1fb-4fda-91a6-84435e303f65 | 52.73.218.122 | 200 OK | 17 B |
URL PUT HTTP/2wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/user/ecee857c-5eaa-4111-9185-d6ab3eb3b6f5/activity?widgetInfoTraceId=50296513-e1fb-4fda-91a6-84435e303f65 IP52.73.218.122:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash225f751e75610b98f8b287e79370be3a 9e29d2c966fb36f3d233dfb232be6eeeee8f1341 0b19f26f50f17771f6562e4cf8c7bead37ba5aeeeec7cbfaf2576a6647401569
PUT /app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/user/ecee857c-5eaa-4111-9185-d6ab3eb3b6f5/activity?widgetInfoTraceId=50296513-e1fb-4fda-91a6-84435e303f65 HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wchat.freshchat.com
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:21 GMT
content-type: application/json;charset=UTF-8
content-length: 17
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: 3e878a2c-bd62-97f0-9ce9-7df0337e58ea
x-server: 4082
x-envoy-upstream-service-time: 5
x-trace-id: 00-34d5110386d2fd70a5ded5159d24ab6a-b786582886678e2c-01
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2996
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/product/images/logo-huusk-black.svg | 104.18.30.102 | 200 OK | 12 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/product/images/logo-huusk-black.svg IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeSVG Scalable Vector Graphics image Hash8bbfd1a05f4b555befdb5811cb597459 68d9c6858c63132e32b3796dd2a1274619c0c36f 118f594a4de6bbb8c90a2090f810f65d3c0235fc9974e05395f73b8d76e6cb08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/product/images/logo-huusk-black.svg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: image/svg+xml
last-modified: Fri, 05 Apr 2024 10:47:40 GMT
etag: W/"660fd6cc-2ff3"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 814495
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bd8e41bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/emails-42831ea0.svg | 104.18.30.102 | 200 OK | 846 B |
URL GET HTTP/2get-huusk.com/build/assets/emails-42831ea0.svg IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeSVG Scalable Vector Graphics image Hash3d16544f1e513df5664b8fc65e0296e3 9cf76253801985ccf88ce23ddcd0819c11505bae 0bdf2019a693f160290f0a03df64cc2efdfb907c00e6e882cbf3680a06135741
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/emails-42831ea0.svg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/main-fe03ab77.css
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: image/svg+xml
last-modified: Fri, 12 Apr 2024 09:48:44 GMT
etag: W/"6619037c-34e"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 351418
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917e9b051bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/huusk/favicon_.png | 104.18.30.102 | 200 OK | 15 kB |
URL GET HTTP/2get-huusk.com/theme/huusk/favicon_.png IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel Hashee8c6db84e0c491ee96a430bc406e275 e999dd1a2fb44ab8288768520ab76c8fe3964c9e 075026ed226a556b420460667caca6cc8af6f67c1a2a55e7bca8b26a67232c53
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/huusk/favicon_.png HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0; ef_witness=1; ef_affid=259; ef_tid_c_o_10=cd4b87013a33413ab27315dac97d5e63; ef_tid_c_a_8=cd4b87013a33413ab27315dac97d5e63; transaction_id=cd4b87013a33413ab27315dac97d5e63; _ga_2DT0NCM1Q4=GS1.1.1713977176.1.0.1713977176.60.0.553772474; _ga=GA1.1.1967881760.1713977177
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:16 GMT
content-type: image/png
content-length: 15406
last-modified: Wed, 13 Mar 2024 15:42:45 GMT
etag: "65f1c975-3c2e"
expires: Fri, 24 May 2024 16:46:16 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 2536560
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797918becf41bfa-OSL
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true | 52.73.218.122 | 200 OK | 4.8 kB |
URL GET HTTP/2wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true IP52.73.218.122:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (4936), with no line terminators Hash5c627a7ac305e26e906c188a735214c5 95226043a3fe33f744a72eed924dcfc53b110ca9 8c6758572c68aa8101549bf3e9fe8f07609a96bd3b80ffb98bc615dadab6734f
GET /widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:20 GMT
content-type: text/html
server: fwe
last-modified: Thu, 18 Apr 2024 11:29:41 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
x-server: zfzf8
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-da3f910902a3eb5bc626a62af47465e8-9f126a1e765791d3-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 79ddce0f-e2d3-4d6c-922b-5fa3dc7dcd3b
X-Firefox-Spdy: h2
|
|
| www.dsw0trk.com/scripts/sdk/everflow.js | 34.120.82.94 | 200 OK | 61 kB |
URL GET HTTP/2www.dsw0trk.com/scripts/sdk/everflow.js IP34.120.82.94:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerStarfield Technologies, Inc. Subjectdsw0trk.com FingerprintFE:DE:4D:9B:3E:F2:45:BD:8A:EF:51:51:97:F7:EF:F6:97:FD:A9:46 ValidityFri, 26 May 2023 21:25:49 GMT - Wed, 26 Jun 2024 21:25:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.dsw0trk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/javascript
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: 238d9f74-4ea6-4d60-88ee-66c27de52426
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/debounce-b1b63336.js | 104.18.30.102 | 200 OK | 2.6 kB |
URL GET HTTP/2get-huusk.com/build/assets/debounce-b1b63336.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (2597), with no line terminators Hasha175097a63346a3f301438f18f9f281d 565844aa335e7886a1e276a5390352aac8511a4a 31d9caf5bcd616d8c89fa31d54da34c5bff43032ed9407615f1981a63039495c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/debounce-b1b63336.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-9fa"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09f41bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:02 GMT
expires: Fri, 18 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 569292
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/slick-1b709b3c.js | 104.18.30.102 | 200 OK | 43 kB |
URL GET HTTP/2get-huusk.com/build/assets/slick-1b709b3c.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (43312) Hash6a6105ea724499a3b9dbc1245d3d65c4 cd1731d2bebc51188466f9375399928c03e91822 2711db8a7a1a9a387a2c85940902e742de6e7616ab9543e74a594df9f3dc6cb3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/slick-1b709b3c.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-a931"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917bd8e71bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| rts-static-prod.freshworksapi.com/us/rts-min.js | 54.230.111.25 | 200 OK | 88 kB |
URL GET HTTP/2rts-static-prod.freshworksapi.com/us/rts-min.js IP54.230.111.25:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshworksapi.com Fingerprint39:A9:50:C8:57:63:5F:55:8F:32:96:7B:9B:B3:66:87:26:C1:CA:D6 ValidityMon, 08 Jan 2024 00:00:00 GMT - Tue, 04 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash787925a406ea53622d2a2f59f1dfbfaa d415846036d1301505807a3f369cb38e4e3b99ab 006cadbde5ca3173fed043e10ee27d6b5eb3aa1565bb53ed6cac6cafeb6e801f
GET /us/rts-min.js HTTP/1.1
Host: rts-static-prod.freshworksapi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
last-modified: Tue, 02 Apr 2024 06:16:46 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: BhliArv57RSNuOIG1_v3cbxfR5mbS4Xs
server: AmazonS3
content-encoding: gzip
date: Wed, 24 Apr 2024 16:46:18 GMT
cache-control: no-cache
etag: W/"787925a406ea53622d2a2f59f1dfbfaa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s6ZZ-CkbwAQuIW3RcfGyZEZjn1DfZp8mqp8h_hXRvjY9dvnpOKRWMw==
age: 3
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/slick-26726bac.woff | 104.18.30.102 | 200 OK | 1.4 kB |
URL GET HTTP/2get-huusk.com/build/assets/slick-26726bac.woff IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeWeb Open Font Format, CFF, length 1380, version 1.0 Hashb7c9e1e479de3b53f1e4e30ebac2403a af91c12f0f406a4f801aeb3b398768fe41d8f864 26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/slick-26726bac.woff HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/slick-theme-f515108f.css
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:16 GMT
content-type: font/woff
last-modified: Thu, 21 Mar 2024 13:22:14 GMT
etag: W/"65fc3486-564"
expires: Fri, 24 May 2024 16:46:16 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: HIT
age: 2533524
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797918809c21bfa-OSL
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/widget/config_iframe.html?host=https://wchat.freshchat.com&token=8f45d611-cca6-497c-b3db-a29cc93d7273&origin=https://get-huusk.com | 52.73.218.122 | 200 OK | 701 B |
URL GET HTTP/2wchat.freshchat.com/widget/config_iframe.html?host=https://wchat.freshchat.com&token=8f45d611-cca6-497c-b3db-a29cc93d7273&origin=https://get-huusk.com IP52.73.218.122:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typeHTML document, ASCII text, with very long lines (716), with no line terminators Hash7862e87a08f8d8e425dfbb878b0a5559 9cab99e9188c2ca08ef9bf912ffa7badae5c8a7b 25bb423dfa9c98cfef66709d63bf10413f9e3ca69c6ca6c439e213aebad393ad
GET /widget/config_iframe.html?host=https://wchat.freshchat.com&token=8f45d611-cca6-497c-b3db-a29cc93d7273&origin=https://get-huusk.com HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:19 GMT
content-type: text/html
server: fwe
last-modified: Thu, 18 Apr 2024 11:29:41 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0
x-server: 9zqxh
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-4e4ec48863c25e58de65931a55eef974-fac970d8652e5a1b-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: e8d82239-1a54-4a15-b270-de89f41e90f9
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/slick-26726bac.woff | 104.18.30.102 | 200 OK | 1.4 kB |
URL GET HTTP/2get-huusk.com/build/assets/slick-26726bac.woff IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeWeb Open Font Format, CFF, length 1380, version 1.0 Hashb7c9e1e479de3b53f1e4e30ebac2403a af91c12f0f406a4f801aeb3b398768fe41d8f864 26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/slick-26726bac.woff HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/slick-theme-f515108f.css
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw; apple_pay_supported=0; ef_witness=1; ef_affid=259; ef_tid_c_o_10=cd4b87013a33413ab27315dac97d5e63; ef_tid_c_a_8=cd4b87013a33413ab27315dac97d5e63; transaction_id=cd4b87013a33413ab27315dac97d5e63; _ga_2DT0NCM1Q4=GS1.1.1713977176.1.0.1713977176.60.0.553772474; _ga=GA1.1.1967881760.1713977177; _ga_KWC7VCM80R=GS1.1.1713977176.1.0.1713977176.60.0.1913160596; _ga_VYKE683B14=GS1.1.1713977177.1.0.1713977177.60.0.393471531
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:20 GMT
content-type: font/woff
last-modified: Thu, 21 Mar 2024 13:22:14 GMT
etag: W/"65fc3486-564"
expires: Fri, 24 May 2024 16:46:20 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: HIT
age: 2533528
vary: Accept-Encoding
server: cloudflare
cf-ray: 879791a04bba1bfa-OSL
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/fd-messaging.b06d3173a46f1f0dfdd0.css | 54.230.111.77 | 200 OK | 249 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/fd-messaging.b06d3173a46f1f0dfdd0.css IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Size249 kB (248820 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/fd-messaging.b06d3173a46f1f0dfdd0.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 18 Apr 2024 11:29:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 16:43:35 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"0c3847992b2924e739906f6d9095b16d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gneu9wN00QKBpBYMSrNT-pOSEpexTrxwTX3748dhnPIkNpT-IZFgdQ==
age: 169
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/choices-dd9eec53.js | 104.18.30.102 | 200 OK | 92 kB |
URL GET HTTP/2get-huusk.com/build/assets/choices-dd9eec53.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/choices-dd9eec53.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-16802"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09f11bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/slick-75081a39.css | 104.18.30.102 | 200 OK | 1.2 kB |
URL GET HTTP/2get-huusk.com/build/assets/slick-75081a39.css IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (1236), with no line terminators Hash58359b83db70d65ef4482b7bb90abf37 7e1e0095adfa6ebd885a5c2b89ec9a37a4c3bac1 9671468179e842b9af6ca7a1beba54fe1ccf362984782a15641efcd04abb027c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/slick-75081a39.css HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/css
last-modified: Fri, 29 Mar 2024 14:28:51 GMT
etag: W/"6606d023-4d1"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 293599
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bc8d61bfa-OSL
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:02 GMT
expires: Fri, 18 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 569292
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 IP216.58.207.227:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34288, version 1.0 Hash71221d6bf4204042b1bbc3902d08a81b 92a10d7982d33e1e216ee8e1aec79c3ae8bcb8b6 92443d06835a28423649bca60e6d755e4a1bd09638443196d58e0dd1f06c827f
GET /s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:57:06 GMT
expires: Fri, 18 Apr 2025 02:57:06 GMT
cache-control: public, max-age=31536000
age: 568148
last-modified: Wed, 13 Sep 2023 22:52:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/slick-theme-f515108f.css | 104.18.30.102 | 200 OK | 2.5 kB |
URL GET HTTP/2get-huusk.com/build/assets/slick-theme-f515108f.css IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeUnicode text, UTF-8 text, with very long lines (2473), with no line terminators Hash113bbb6a6ea629420c4a6ebf5f1b6096 fe0831c2b1a853cd50663b766a670c1299226902 bae83116b697a987119c985edb58117b9f80a9b1507190205085577993df2ddf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/slick-theme-f515108f.css HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: text/css
last-modified: Wed, 10 Apr 2024 10:26:33 GMT
etag: W/"66166959-99e"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 199700
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917bc8d81bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/product-value-parser-3e44abe5.js | 104.18.30.102 | 200 OK | 471 B |
URL GET HTTP/2get-huusk.com/build/assets/product-value-parser-3e44abe5.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (472), with no line terminators Hash5da7dfaa1af7a281474693f5dfc8f14f f693bc1ffb073d3ce5d62a3b3afb85f5b31bbd57 7bbd73e97fd396d1e65e3c3e69c6276e65866ebea15ac35e2014be88286a9b98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/product-value-parser-3e44abe5.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-1d7"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09f01bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 IP216.58.207.227:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34288, version 1.0 Hash71221d6bf4204042b1bbc3902d08a81b 92a10d7982d33e1e216ee8e1aec79c3ae8bcb8b6 92443d06835a28423649bca60e6d755e4a1bd09638443196d58e0dd1f06c827f
GET /s/montserrat/v26/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34288
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:57:06 GMT
expires: Fri, 18 Apr 2025 02:57:06 GMT
cache-control: public, max-age=31536000
age: 568148
last-modified: Wed, 13 Sep 2023 22:52:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tracktor.me/build/assets/app-3c98611f.js | 188.114.97.1 | 200 OK | 30 kB |
URL GET HTTP/3tracktor.me/build/assets/app-3c98611f.js IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjecttracktor.me Fingerprint8E:61:66:21:52:67:16:04:1C:1B:82:07:6C:1A:9D:3B:18:1E:B2:F4 ValidityTue, 26 Mar 2024 17:36:11 GMT - Mon, 24 Jun 2024 17:36:10 GMT
File typeJavaScript source, ASCII text, with very long lines (14307) Hash374733e39d0dda45fe8d79065fea3986 965e24bc1274772ac1f1f613bced2d1a1f7ab0c5 cc1aed6a7316c5ec75127b0cc0bf1d46cc385a2980bbf49c4f50b9ee30b1d6fa
GET /build/assets/app-3c98611f.js HTTP/1.1
Host: tracktor.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tracktor.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 16:46:17 GMT
content-type: application/javascript
last-modified: Wed, 21 Feb 2024 11:54:04 GMT
etag: W/"65d5e45c-73d0"
expires: Mon, 06 May 2024 09:51:12 GMT
cache-control: public, max-age=2592000
x-cloud-trace-context: 18df26e2c4c91107e9619b22fc4d223d
via: 1.1 google, 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 1580105
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=raME3NfEMxczgiKyEgYCO606qySTlZldvIRWvMH67jaVc8m5mz1QOHZ2MuC2Q8R%2Ftexl2f1wGWahAh6uvFTN3Z9pStUzBedqswoEBea52%2FMx3WupIkiwLmnv0IeHxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797918edc4b0b4d-OSL
content-encoding: br
|
|
| www.paypal.com/muse/identity/v2/identity.js | 151.101.1.21 | 200 OK | 4.3 kB |
URL GET HTTP/2www.paypal.com/muse/identity/v2/identity.js IP151.101.1.21:443
Requested byhttps://www.paypal.com/muse/identity/v2/index.html CertificateIssuerDigiCert Inc Subjectwww.paypal.com Fingerprint92:69:A1:00:8F:61:AA:60:17:06:FC:85:FD:47:D2:77:66:C0:F5:91 ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (4438), with no line terminators Hash870dabec8e637e75e6d2823e841e8dc0 13d33c658c82eacc64b3bf5857ca79e0153434d1 78e055c09712ab097a0c849f04691245bd0e640637bcf9c82f7161b396cc5445
GET /muse/identity/v2/identity.js HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.paypal.com/muse/identity/v2/index.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
etag: W/"10ed-18eed210520"
last-modified: Wed, 17 Apr 2024 17:35:48 GMT
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f797014cc8b42
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Wed, 24 Apr 2024 17:16:17 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1808585177%26vteXpYrS%3D1713978977%26vr%3D110033dc18f0a552b8430a96fd140f35%26vt%3D110033dc18f0a552b8430a96fd140f34%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 24 Apr 2027 16:46:17 GMT; HttpOnly; Secure
ts_c=vr%3D110033dc18f0a552b8430a96fd140f35%26vt%3D110033dc18f0a552b8430a96fd140f34; Path=/; Domain=paypal.com; Expires=Sat, 24 Apr 2027 16:46:17 GMT; Secure
traceparent: 00-0000000000000000000f797014cc8b42-74781a3d553c8f3c-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Wed, 24 Apr 2024 16:46:17 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-etou8220045-FRA, cache-hel1410031-HEL, cache-hel1410031-HEL
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1713977177.956625,VS0,VE185
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/faq/category?platform=web&locales=en-US%2Cen-US&since=&lastLocaleId= | 52.73.218.122 | 200 OK | 209 B |
URL GET HTTP/2wchat.freshchat.com/app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/faq/category?platform=web&locales=en-US%2Cen-US&since=&lastLocaleId= IP52.73.218.122:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashf2cada0c64f2e4799764bc3f1ac3c5b9 20f5cbeae053bf2d5a22bd06be0d42637c00dd5f ba18059d6894d899ad8152314deccdf4e43f8740258c94e62da138d9bf054129
GET /app/services/app/webchat/8f45d611-cca6-497c-b3db-a29cc93d7273/faq/category?platform=web&locales=en-US%2Cen-US&since=&lastLocaleId= HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:21 GMT
content-type: application/json;charset=UTF-8
content-length: 209
server: fwe
access-control-allow-credentials: true
cache-control: no-store
content-security-policy: style-src 'unsafe-inline' *; font-src 'self' * data:; img-src 'self' * data:; connect-src 'self' *; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.freshchat.com https://*.freshworksapi.com; child-src 'self' * blob:; media-src 'self' https://*.freshchat.com; manifest-src 'self' https://*.freshchat.com; default-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains
x-xss-protection: 1; mode=block
x-request-id: 25d1ae10-6ec7-47d9-9278-ed9892c16dc9
x-server: 2601
x-envoy-upstream-service-time: 7
x-trace-id: 00-16b10f70432b9e314218ee8e0be0ee83-98f94701b5ef6b13-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: true
x-ratelimit-total: 3000
x-ratelimit-remaining: 2995
x-ratelimit-used-currentrequest: 1
x-ratelimit-limit: 3000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/will-be-removed-861b7b05.js | 104.18.30.102 | 200 OK | 249 B |
URL GET HTTP/2get-huusk.com/build/assets/will-be-removed-861b7b05.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with no line terminators Hasha2b72d672287c1cbdea5fe22462c46af 58114d26665e27d1f8471065a44a74f442941d4e f50bbff60a99bd59feeca1785f1e7d742fce310e74feea2a20d6527706847823
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/will-be-removed-861b7b05.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-f9"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917bc8d21bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/vendor.862630a2b93632e0d7bbae6d63246102.js | 54.230.111.77 | 200 OK | 701 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/vendor.862630a2b93632e0d7bbae6d63246102.js IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Size701 kB (700728 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/vendor.862630a2b93632e0d7bbae6d63246102.js HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 11:29:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 16:42:29 GMT
cache-control: max-age=31536000, no-transform, public
expires: Thu, 24 Apr 2025 09:56:00 GMT
etag: W/"862630a2b93632e0d7bbae6d63246102"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7Hzi0YFTNEA4F7IggGf5qM9L4WudAp7PK-PWJG8v4UvujDDU1r-pjw==
age: 233
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/track-visited-pages-a7c6edb5.js | 104.18.30.102 | 200 OK | 974 B |
URL GET HTTP/2get-huusk.com/build/assets/track-visited-pages-a7c6edb5.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (995), with no line terminators Hash38df6fa005f680844af3c8e4d30ad84d 1d3b832062c98c4e0ab7bbd00f9ca1d9644e00d8 a2d2dc25f56b9677d791b2f86913b69742ef23cd1616b8608a97f6c69e9dbf66
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/track-visited-pages-a7c6edb5.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/theme-cd3f07d9.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-3ce"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09ed1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/product-value-encoder-a8d89869.js | 104.18.30.102 | 200 OK | 463 B |
URL GET HTTP/2get-huusk.com/build/assets/product-value-encoder-a8d89869.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeASCII text, with very long lines (476), with no line terminators Hash1ecaa82b4ac68fdd101b4f3177f4a242 0b637d7ada32ac552581b97f0eb85a956ca98d23 39eb52514866b913bd9b33076df43119370d6e2341977cae9a8a2588a051ba49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/product-value-encoder-a8d89869.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/alpine-a063cae0.js
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=eyJpdiI6IjZ4WXp6c0g4bGNsT2dZYkIyK0I2MGc9PSIsInZhbHVlIjoiNVFCQ3M5dTRjTWFQUVQvVTZSZ1F3a013QnNrTEExd1ZjNHdicFZIVmZQZXFiaEZvUGM2dHc0Ym93RXBQNVp5S0hLNlg5Tjc3MERqZVZDQXNzSTBEVFllbFl6T0pZTzFrQ2NmSllvcUZYVnFwQm9wQlpQZWNSU0tTNmRPUWRKM1JkQmIyQUx5THdEdEdwWkh3UEs5R2JPWGtYUVRwZ0wyTnJPMVhzdmZLODVOcG5qQURlVTdqamdyd0VYL1B6azY0Z3Y4NnkydXAxMkFqYzhsTmZETFZ4TDl2b2ZrcHF1bjB5ZGtONDNtRWdWRGdQazZJbnpST1gyL2dUWGVxYnhSaE5UeVUvZGl6TGsxMFYwUERHRzVwQ0MvQkZVR21udkE4VUIwTU1WRWpDT3pzcTI1VEFzMGxpdVdDSEY1K2hCbDh4R0pNTmxzeXdLZExFaitERHBuQ3NMbkxJcnR5bERIUS9nZUVnV0REMEpwanEwb29hYUw0ai9tUnBHdkxhaGZBb3VzdjJSMHpOSjdlS05TN0xsbm93Vm1McFlERVZlQzJEaEJjOHYybFV2QWkvQ1dFZUFNRmdlT05mTWZNSVJ4dlJsSG5BVkpsWFNkTGdhajdkV2x5M3JvTnR4eU1lRGRkQzVFNWpvdytGRnMweng2U0tOMFpyOU1meEFGaytSVmR3VkVub3FaQTFJL0VVVGtKRkRxR0dkUHBoN0MzVFAvd29EYVBzMzJ1Q0wwUU9VU1B0akFYSGd2NzNCc1JHYnFFMkNlUUoxVUFXTGFMWDIydlIzZ1lRM21COU8wRy9ndUF2bWJMQy93RFFoTXBDVEU1ZEtuT0FLM25yNTFxS2ZUM3pWSG9ERjc5V1czM0prUStxa2NJNENGYzBYS3R1R0pQMWEwUDA1Wm9FdlcyYllGRFFvOFJqQ3FZQjM1QmlRVFd3S0QwY2grOFRIejQrUlZJNFdxcEJrYlBpUHFIMjZoRHBQaUVkbW5EVHJFNk1hOTJ2TW1hYlI0RkJiMFdFeDF2Zzd6cEJDbTdZZ3NVUjQ1a3k2TmE5b2VLVTZEbmc4SjBSSmkwVy9WK2M2cEhraVNsWWp6eTRJVDlsY1FrWkhmTW96K1pnbXVIeFBuRWxxTDlZSXBrUC8vdnpUWCtNUlhhQ3hqb1U1U0pseUVlbFo4UHZkRXF4K2ZRUmhkY3QyTHlhdGdVUW4wa1FXcVFMcmM3MCt6anVuL3huMUNkM3NyWHBJZ3RyOEExYWwrSGxYS3lrVVNYRW96K0lHSEtLdVUrd2NRdkhMcXVPVmNZOHdrUSs2N0hsTmYxRmx2V0JQNmxRRWhERmQxZHBpMWxXbjBPMHgzR0hqUXVFelROalFMSnFLaW5XbXBLQWsvMDJsdElPNytmTnJ2ZjlqdW9pbnY1R3RJbllsSUMra2lDUmRTZFlXcWJQUHFtV0RpamhUYnRDQjZpT2ZzL1Q0NDR4UnB6by9NZytHOXJPR2M1NDdOZWVuZzJ0ejFZUkp3QjRCR2FhUHBrRlJ2QlBpbzNBZmpHc2tkWXB5UnBOY1FPSmJXbXducFNqZjZkaWVwam5mYS95ZmkwYWptWlRTUHFWbWc4RVFkeFRnbUtXYUxhUmVaV2lmVUZhNW9pRzlUU0xXVHBmOFdQY0p2SHRLVW5HcWc5bjkxdXJ6TDdzNUR4Lzc3aVdldEU3Q3g3OUUyQTFwWDA4NitwSXA5VWQwR0dGTFlBU3ZoR29HdHR3ZHFtVnQxTmlKT05oWDQxemFBRXJnM2N2WE8yeE9PbkQ5aExtb2gvMENhL3ZNeVdpZ1FkbEFLWTJLYSt2cXJxeERZS1Z4dSt2bzNCcmM2Q1l1NzA2ZUFBaFV5MTNrZHdFSm9VTjlmeXE1dVp4cGtQek8zRytIc1hlYmwrc1BnVVl4TEpQQWFZZGd0dmhJUXJwQnViNnZoRUkyNGUxWTJoRlZwWHVxUXUvU0twRFB0STRaSW5hbTdnVEhoQVR5amVBZUl2Q1NoeGhQckJOTCtSdklNPSIsIm1hYyI6ImJlN2VjZjBkOWYzNWQ1NTJiNzU0NWRjZGJiMmJlZDhlMmJlMDA0MjY2ZWNmMmI3MDAzOTdlMjZjZjYwNDM2M2YiLCJ0YWciOiIifQ%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-1cf"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917d09f51bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/theme/images/flags-svg/countries/no.svg | 104.18.30.102 | 200 OK | 243 B |
URL GET HTTP/2get-huusk.com/theme/images/flags-svg/countries/no.svg IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeSVG Scalable Vector Graphics image Hash48c1fe042e2419546d587b84a61eacda 99cd3b67ea8971d0eaa2116dd1a9a69befb04219 fe2fcdf8a3c59ee2d3eaf17b68552418f08eddfb9ccd1305247eaa26d35a0837
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /theme/images/flags-svg/countries/no.svg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:15 GMT
content-type: image/svg+xml
last-modified: Fri, 05 Apr 2024 10:47:40 GMT
etag: W/"660fd6cc-f3"
expires: Fri, 24 May 2024 16:46:15 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
age: 293599
vary: Accept-Encoding
server: cloudflare
cf-ray: 87979180ecbf1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| t.paypal.com/ts?dh=1024&dw=1280&bh=1024&bw=1280&cd=24&sh=1024&sw=1280&dvis=Desktop&rosetta_language=en-US%2Cen&completeurl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F&unsc=0&identifier_used=IP&cust=ABKJTH6DGKVTN&item=dd20165f-c7df-4860-b028-7038ff7f7f3b&mrid=ZLWZ8MXFH64R4&client_id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT&event_name=page_view&sinfo=%22%7B%5C%22page_type%5C%22%3A%5C%22PRODUCT_PAGE_VIEW%5C%22%7D%22&page=ppshopping%3Apage_view&pgrp=ppshopping%3Apage_view&comp=tagmanagernodeweb&e=im&t=1713977177999&g=0&product=ppshopping_v2&flag_consume=yes | 151.101.65.35 | 200 OK | 42 B |
URL GET HTTP/2t.paypal.com/ts?dh=1024&dw=1280&bh=1024&bw=1280&cd=24&sh=1024&sw=1280&dvis=Desktop&rosetta_language=en-US%2Cen&completeurl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F&unsc=0&identifier_used=IP&cust=ABKJTH6DGKVTN&item=dd20165f-c7df-4860-b028-7038ff7f7f3b&mrid=ZLWZ8MXFH64R4&client_id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT&event_name=page_view&sinfo=%22%7B%5C%22page_type%5C%22%3A%5C%22PRODUCT_PAGE_VIEW%5C%22%7D%22&page=ppshopping%3Apage_view&pgrp=ppshopping%3Apage_view&comp=tagmanagernodeweb&e=im&t=1713977177999&g=0&product=ppshopping_v2&flag_consume=yes IP151.101.65.35:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerDigiCert Inc Subjectt.paypal.com Fingerprint2C:19:5A:DA:E0:E2:30:EA:33:0F:20:D7:46:DC:98:1B:3C:DD:E8:F5 ValidityThu, 21 Sep 2023 00:00:00 GMT - Mon, 21 Oct 2024 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashb4682377ddfbe4e7dabfddb2e543e842 328e472721a93345801ed5533240eac2d1f8498c 6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?dh=1024&dw=1280&bh=1024&bw=1280&cd=24&sh=1024&sw=1280&dvis=Desktop&rosetta_language=en-US%2Cen&completeurl=https%3A%2F%2Fget-huusk.com%2Fhuusk%2Fproduct%2F&unsc=0&identifier_used=IP&cust=ABKJTH6DGKVTN&item=dd20165f-c7df-4860-b028-7038ff7f7f3b&mrid=ZLWZ8MXFH64R4&client_id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT&event_name=page_view&sinfo=%22%7B%5C%22page_type%5C%22%3A%5C%22PRODUCT_PAGE_VIEW%5C%22%7D%22&page=ppshopping%3Apage_view&pgrp=ppshopping%3Apage_view&comp=tagmanagernodeweb&e=im&t=1713977177999&g=0&product=ppshopping_v2&flag_consume=yes HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
correlation-id: f34f0bbc92a20
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Wed, 24 Apr 2024 16:46:18 GMT
p3p: CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: f34f0bbc92a20
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1808585178%26vteXpYrS%3D1713978978%26vr%3D1100388218f0a568cc64f8dbe8275879%26vt%3D1100388218f0a568cc64f8dbe8275878;Expires=Sat, 24 Apr 2027 16:46:18 GMT;domain=.paypal.com;path=/;secure;HttpOnly;
ts_c=vr%3D1100388218f0a568cc64f8dbe8275879%26vt%3D1100388218f0a568cc64f8dbe8275878;Expires=Sat, 24 Apr 2027 16:46:18 GMT;domain=.paypal.com;path=/;secure;
traceparent: 00-0000000000000000000f34f0bbc92a20-a771a95b23d320f9-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Wed, 24 Apr 2024 16:46:18 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230026-FRA, cache-hel1410020-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1713977178.143091,VS0,VE189
vary: Accept-Encoding
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL GET HTTP/2fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP216.58.207.227:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintF5:5C:D9:68:C6:5F:A3:33:5A:73:C3:79:B6:83:FE:44:2E:A4:83:74 ValidityMon, 18 Mar 2024 20:34:25 GMT - Mon, 10 Jun 2024 20:34:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 33092, version 1.0 Hash057478083c1d55ea0c2182b24f6dd72f caf557cd276a76992084efc4c8857b66791a6b7f bb2f90081933c0f2475883ca2c5cfee94e96d7314a09433fffc42e37f4cffd3b
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33092
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:38:02 GMT
expires: Fri, 18 Apr 2025 02:38:02 GMT
cache-control: public, max-age=31536000
age: 569292
last-modified: Wed, 13 Sep 2023 22:51:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/phone-735dc9f7.svg | 104.18.30.102 | 200 OK | 1.2 kB |
URL GET HTTP/2get-huusk.com/build/assets/phone-735dc9f7.svg IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeSVG Scalable Vector Graphics image Hashf9428b65cc06536c14d659448556c996 cdfbe8b605a208cb84a4d092aaa5cd107e599ce3 4d486118941852d98344485b8eba64a0f73e2a8d63642f6e0013e8a6b818e1cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/phone-735dc9f7.svg HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/build/assets/main-fe03ab77.css
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: image/svg+xml
last-modified: Fri, 12 Apr 2024 09:48:44 GMT
etag: W/"6619037c-487"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
content-encoding: br
via: 1.1 google
cf-cache-status: HIT
age: 351418
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797917e9b081bfa-OSL
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/lazyload-b45a339c.js | 104.18.30.102 | 200 OK | 3.7 kB |
URL GET HTTP/2get-huusk.com/build/assets/lazyload-b45a339c.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (3778), with no line terminators Hashfed9a3cc936f0cc73eff7a85c9cdc28d 13c4e0e50668269f7633e44886fc1be633524049 59365791638a4476473c83e22bb1f3027a15aca52c9c877d2823873f34f7085c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/lazyload-b45a339c.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-e71"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917bc8d11bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| get-huusk.com/build/assets/tracktor-16e5af44.js | 104.18.30.102 | 200 OK | 2.3 kB |
URL GET HTTP/2get-huusk.com/build/assets/tracktor-16e5af44.js IP104.18.30.102:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectget-huusk.com Fingerprint5C:6F:99:F0:F7:34:6E:0D:12:D5:4B:72:34:18:20:BE:1D:E2:3E:67 ValiditySun, 24 Mar 2024 03:29:53 GMT - Sat, 22 Jun 2024 03:29:52 GMT
File typeJavaScript source, ASCII text, with very long lines (2403), with no line terminators Hashed8b400b9242b8ebf9402d488b6ef264 a9f9e69b341bc82e7272309f7cd38c9295ce888a b49d8a9d6b9c33fd77158321cf433370f575bdeb47474549954d65390a763b53
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /build/assets/tracktor-16e5af44.js HTTP/1.1
Host: get-huusk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4=
Cookie: XSRF-TOKEN=eyJpdiI6IlJUalUrUzB2M3FDdVpRRlRhVVhlMlE9PSIsInZhbHVlIjoiUWlSdzRSK2NmemR5WFp5Z2pRcmIwVkd6RFFwNERDVU0vU2ZHci9ydlowcUdYT3Yxb3hXMmxSdmNwVEQrdzkzSG53MEtOeCtlYW9ENXdiUEREaE1TSThlSGFIT3FLV0JDeDZZb2IzV0lhaEorUkJjOXRacjM3aENvd1JBVUhKaWsiLCJtYWMiOiI2MGVlNmE5ODQ3Njk0NmM2MmE3OTY3NjlhNDAxNmM1MmExNDVkOWI5ZTZjNDFkMjViOTVmZDg5Mzg4MGQyYjBhIiwidGFnIjoiIn0%3D; enence_session=eyJpdiI6InB1QkZQUmxwcDYweGZ0WmhnNUJUMmc9PSIsInZhbHVlIjoibzhSbXdTcGZ1THo5djBQa2xzNCsvT0dGMHU5OE8xR1ZGRlk4cElXZlMvbEpYQ29wbnM4bENvb3dGUFNpTVNqMU4vVUxTOW9SeHpDaTFveFBUbi94KzJXbHlKVUZNWWxmRXV1SUZkdXdRRW5QUEQ4Qmh1VE1NK0NtVmdqSmlvdWgiLCJtYWMiOiI2ZGQ3ZGFmZmM5YmNmNGUzYzQyMDg3ZDBjMTUxZjc2OWI3NGYwOWE0YmY2MzQ0NTI2NmQ3MTIyNTU1ZWI1ZTRmIiwidGFnIjoiIn0%3D; cart=eyJpdiI6Ik9hYkk1bmNEenU2SWJPdU1UUTk2L2c9PSIsInZhbHVlIjoiblVIb3FjTjE5VDBVQWZGbllYRW96dlpTd1dUZzgvaldBNzloTW1vUUhEVWlnNWlqQnIrYnZsZHBPUG50TDcrZzN1d2tIZWFNbDllN3BDWElMYTN6OVJXQUpIL28ybURZbXh3S2ppT3kyUVE9IiwibWFjIjoiZDI1MGZmNzg5NDYzOWJiYzU3N2U2MjQ3NmNmNzJlMDkxY2M3ZDdlYzU1N2MzZmRlNjNjM2IyNjJiZjI4ZDEzZCIsInRhZyI6IiJ9; rpp=%7B%22params%22%3A%7B%22l%22%3A%22nb%22%2C%22c%22%3A%22nok%22%2C%22vndr%22%3A%22evf%22%2C%22evf%22%3A%221%22%2C%22utm_source%22%3A%22aff%22%2C%22utm_medium%22%3A%22259%22%2C%22offid%22%3A%2210%22%2C%22affiliate_id%22%3A%22259%22%2C%22subid5%22%3A%22d27ce167cd2c48ffb2f576d278c2d8831a17e%22%2C%22uuid%22%3A%22018f1100-27c6-7b6b-9a67-ec84194c3282%22%2C%22pmt%22%3A%22kl%22%2C%22hj%22%3A%221%22%2C%22nbsv%22%3A%222%22%2C%22oxlis%22%3A%222%22%2C%22esc%22%3A%221%22%2C%22ssb%22%3A%221%22%2C%22tos%22%3A%221%22%2C%22huuskv2%22%3A%221%22%2C%22eppss%22%3A%221%22%2C%22_%22%3A%225663%2C2482%2C3092%2C3211%2C3559%2C4216%2C4878%2C5828%22%2C%22prk%22%3A%5B%22j7z6g%22%2C%224kbvz%22%5D%7D%7D; srpp_9ed708b4=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%3D%3D; GCLB=CKK5xJbAhNKmnwEQAw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:14 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 14:16:53 GMT
vary: Accept-Encoding
etag: W/"66291455-920"
expires: Fri, 24 May 2024 16:46:14 GMT
cache-control: public, max-age=2592000
via: 1.1 google
cf-cache-status: HIT
server: cloudflare
cf-ray: 8797917bd8df1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| www.paypal.com/tagmanager/containers/xo?client_id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT&url=https%3A%2F%2Fget-huusk.com&jlAccessToken=true&disableSetCookie=true | 151.101.1.21 | 200 OK | 2.8 kB |
URL GET HTTP/2www.paypal.com/tagmanager/containers/xo?client_id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT&url=https%3A%2F%2Fget-huusk.com&jlAccessToken=true&disableSetCookie=true IP151.101.1.21:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerDigiCert Inc Subjectwww.paypal.com Fingerprint92:69:A1:00:8F:61:AA:60:17:06:FC:85:FD:47:D2:77:66:C0:F5:91 ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 08 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3085), with no line terminators Hash86bd2bda38a2df7e4b919b69f3e1307f 94166904b2f644b7b69c7e232f9abe39d1d89aa4 058a2d224f4726773c4fcf4b61c6a5c35a113f2874a6a81daeb225f71f1a5404
GET /tagmanager/containers/xo?client_id=AU7kkFMn3BFZcexbHND2uDWokuqqYIm3RRTNDgKKMxTn5yWzDcnvcFE6rew0P65pqHFRmXTgDC7AGSVT&url=https%3A%2F%2Fget-huusk.com&jlAccessToken=true&disableSetCookie=true HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://get-huusk.com/
Origin: https://get-huusk.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: sec-ch-ua-full, sec-ch-ua-arch, sec-ch-ua-model, sec-ch-ua-platform-version, sec-ch-ua-full-version, sec-ch-ua-full-version-list, sec-ch-ua-bitness, sec-ch-ua-wow64
access-control-allow-origin: *
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-N6i2OeQQOpMeMw0yFFljYyHJZw7ZCvft4/HxjrSd7bMadjNk' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/json; charset=utf-8
etag: W/"b0b-xjXbvZJ6YWgSBMPpSwGfYGtp6Zs"
origin-trial: AlIogV3KFtnbfVCyl9Z2NprE7FD8PYCt+TQiYdE3ppeJjJ0xJKcthYwOxXpRCNopxVWdOIENMcNSvQCGAmj0fw0AAAB2eyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlNlbmRGdWxsVXNlckFnZW50QWZ0ZXJSZWR1Y3Rpb24iLCJleHBpcnkiOjE2ODQ4ODYzOTksImlzU3ViZG9tYWluIjp0cnVlfQ==
paypal-debug-id: f82084948dbec
permissions-policy: ch-ua-platform-version=(self "https://c.paypal.com"),ch-ua-arch=(self "https://c.paypal.com"),ch-ua-wow64=(self "https://c.paypal.com"),ch-ua-model=(self "https://c.paypal.com"),ch-ua-bitness=(self "https://c.paypal.com"),ch-ua-full-version=(self "https://c.paypal.com"),ch-ua-full-version-list=(self "https://c.paypal.com")
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Thu, 24 Apr 2025 16:46:16 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 25 Apr 2024 01:32:12 GMT; HttpOnly; Secure
tsrce=tagmanagernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Sat, 27 Apr 2024 16:46:15 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTcxMzk3NzE3NjA5MSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
nsid=s%3AfD13ccC3DBj7PCyn0oVuBfIaZR2apeOJ.b%2BHVn2Xrq8UQ3o6Uz%2BzpQYkuh1lqo%2B%2FltSUsn7DkcUQ; Path=/; HttpOnly; Secure
l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Wed, 24 Apr 2024 17:16:16 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1808585175%26vteXpYrS%3D1713978975%26vr%3D11002f7a18f0aa3064514fcefd1760a1%26vt%3D11002f7a18f0aa3064514fcefd1760a0%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sat, 24 Apr 2027 16:46:16 GMT; HttpOnly; Secure
ts_c=vr%3D11002f7a18f0aa3064514fcefd1760a1%26vt%3D11002f7a18f0aa3064514fcefd1760a0; Path=/; Domain=paypal.com; Expires=Sat, 24 Apr 2027 16:46:16 GMT; Secure
traceparent: 00-0000000000000000000f82084948dbec-df66b5622b443f06-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
date: Wed, 24 Apr 2024 16:46:16 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230047-FRA, cache-hel1410031-HEL, cache-hel1410031-HEL
x-cache: MISS, MISS, MISS
x-cache-hits: 0, 0, 0
x-timer: S1713977176.839681,VS0,VE349
vary: Accept-Encoding
server-timing: content-encoding;desc="gzip",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap | 142.250.74.106 | 200 OK | 33 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap IP142.250.74.106:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint15:CB:F7:AC:18:3F:DC:1E:F9:4E:94:D1:98:40:40:61:53:17:28:F2 ValidityMon, 18 Mar 2024 20:35:28 GMT - Mon, 10 Jun 2024 20:35:27 GMT
Hasha7c1149b624e8b1baca2d519a62c6267 c84ccb9b2a262ea9eb48345a86605d9401d40a04 51698055502813cd29205292dfcb7517bd803cf9deb22e21d06bd24fb3bcdf4b
GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 24 Apr 2024 16:46:14 GMT
date: Wed, 24 Apr 2024 16:46:14 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| wchat.freshchat.com/js/widget.js | 52.73.218.122 | 200 OK | 69 kB |
URL GET HTTP/2wchat.freshchat.com/js/widget.js IP52.73.218.122:443
Requested byhttps://get-huusk.com/huusk/product/?l=nb&c=nok&vndr=evf&evf=1&utm_source=aff&utm_medium=259&uid=1303&offid=10&affiliate_id=259&subid5=d27ce167cd2c48ffb2f576d278c2d8831a17e&source_id=208185_&sub4= CertificateIssuerAmazon Subject*.freshchat.com FingerprintE4:4D:D7:CB:FA:27:50:47:E1:70:E6:2E:58:41:14:C2:17:75:AF:59 ValidityMon, 22 Jan 2024 00:00:00 GMT - Tue, 18 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hashcb2a933191537929d9e8f4a7f151f676 33ac56fe30cb13c257287ddb8b594318b63d29db 87d1d3eff67f2586e9039d705d502f782613f87dac4850653e10973940ffb7c0
GET /js/widget.js HTTP/1.1
Host: wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get-huusk.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:46:19 GMT
content-type: application/javascript
server: fwe
last-modified: Thu, 18 Apr 2024 11:29:41 GMT
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
cache-control: max-age=900, must-revalidate
x-server: zl4b7
content-encoding: gzip
x-envoy-upstream-service-time: 1
x-trace-id: 00-786c093221750f191c830f00434edbfc-19f9b034d38b3cb3-00
nel: { "report_to": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true}
report-to: { "group": "nel-endpoint-freshchat", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshchat"}]}
x-fw-ratelimiting-managed: false
x-request-id: 336b6a91-c4c6-4fea-8edb-4f60dda73e91
X-Firefox-Spdy: h2
|
|
| assetscdn-wchat.freshchat.com/static/assets/chunk.675c515d181d5e71ad47.css | 54.230.111.77 | 200 OK | 249 kB |
URL GET HTTP/2assetscdn-wchat.freshchat.com/static/assets/chunk.675c515d181d5e71ad47.css IP54.230.111.77:443
Requested byhttps://wchat.freshchat.com/widget/?token=8f45d611-cca6-497c-b3db-a29cc93d7273&referrer=aHR0cHM6Ly9nZXQtaHV1c2suY29t&eagerLoad=true CertificateIssuerAmazon Subjectfreshchat.com Fingerprint2A:82:9F:12:2C:EC:8C:DB:76:8B:85:4D:9B:34:C6:47:C6:1D:68:47 ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 01 Aug 2024 23:59:59 GMT
Size249 kB (248820 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/assets/chunk.675c515d181d5e71ad47.css HTTP/1.1
Host: assetscdn-wchat.freshchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wchat.freshchat.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 18 Apr 2024 11:29:34 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Wed, 24 Apr 2024 16:44:49 GMT
cache-control: max-age=31536000, no-transform, public
expires: Fri, 18 Apr 2025 11:29:32 GMT
etag: W/"0c3847992b2924e739906f6d9095b16d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TRS36HaTKoeX5YvBbMgGjP03rEzWGPxnlzAi67sUGDs58-M7Dy6c3g==
age: 96
X-Firefox-Spdy: h2
|
|
0.0.0.0