| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf63e8d9e64abf0e5b2784ca051160e84 d15d17504ed5c584ba42145060cf745fdb41c1d0 652ee033c72bc8eadcf29c25a5387bc303bf86e6c57f262c576117f659f15eab
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "652EE033C72BC8EADCF29C25A5387BC303BF86E6C57F262C576117F659F15EAB"
Last-Modified: Fri, 05 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15484
Expires: Sun, 07 Jul 2024 21:18:11 GMT
Date: Sun, 07 Jul 2024 17:00:07 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashabec3934929082bd707108b7042796da 4f200b04ad1c6fcac9833107c492a59ebf36dc6e 8e27309b919c0dcb3b0736dd99dad8c7d3bc16b4816dd982e6af6b79d7ead9ed
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E27309B919C0DCB3B0736DD99DAD8C7D3BC16B4816DD982E6AF6B79D7EAD9ED"
Last-Modified: Sun, 07 Jul 2024 03:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7579
Expires: Sun, 07 Jul 2024 19:06:26 GMT
Date: Sun, 07 Jul 2024 17:00:07 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash41036a4c62e61466443bce27a927e029 39a2a8a258c5feaf020246696135700b0c30740d e38b3080a1752122f5a174604bd307c54be31c02e0cdb8e2d9354e2a04e1b50f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E38B3080A1752122F5A174604BD307C54BE31C02E0CDB8E2D9354E2A04E1B50F"
Last-Modified: Sun, 07 Jul 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5119
Expires: Sun, 07 Jul 2024 18:25:26 GMT
Date: Sun, 07 Jul 2024 17:00:07 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashc1f3573a71cfe2a8f30b3fbc7d2d3453 101371f5030c41e4dad4e1e6ac102342db020318 74180138e5609f4047b5a20bc58bfd360dea9bba200acf14fd43fc2d6b5da34b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "74180138E5609F4047B5A20BC58BFD360DEA9BBA200ACF14FD43FC2D6B5DA34B"
Last-Modified: Sun, 07 Jul 2024 04:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5518
Expires: Sun, 07 Jul 2024 18:32:05 GMT
Date: Sun, 07 Jul 2024 17:00:07 GMT
Connection: keep-alive
|
|
| wemaugeey.com/_next/static/chunks/7402-92a83bf987b88d37.js |  188.114.96.1 | 200 OK | 13 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/7402-92a83bf987b88d37.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (7673), with no line terminators Hashfc64eda3c77590449f0014ce8423bfdb e8e6c6eedb91b40a562f1ab4244e0b6d05c00a33 2907a833830d74f6d38f70668e681a38a9023c308950ea972eb3ff68ef56ab0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7402-92a83bf987b88d37.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-1df9"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sFWbB6tugbwXjbcmyscbK8H8XyryRKu4fyoUGTOWTGCdCNFs%2FW9JSx2smVDkAKYnOvMuZ%2BLVhzrU%2Fp62%2FMTw4qQgs2llnUKvtJftQv7I3qtX1sr0a5SYchjX%2Bk2yJH9Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998dc9b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/rain/dollars-3.webp | 188.114.96.1 | 200 OK | 5.9 kB |
URL GET HTTP/3wemaugeey.com/img/rain/dollars-3.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image Hash51ea76ff382bff8ef58a9943f7fd21d1 5c3d6ad6620fbde5ce3dddc88604e6d54621eba2 0240f30fc542fb5c2d532f33bc793b797199adaea75e22a7d9f04674b80d9a32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/dollars-3.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: image/webp
content-length: 5938
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-1732"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n7H%2FywxpRxxN8%2Fvmt%2BWvOD2aSZ8%2FTZApumwc2JGFWkVatApjzbIEtK%2B7od4GkUx%2BAvXZTQq6PynjKExH4LwgVjpKHgbmNydroTmLAZqjeYGOOXEJGoLdxTEokJTgvysk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639acfceb521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/rain/dollars-2.webp | 188.114.96.1 | 200 OK | 8.1 kB |
URL GET HTTP/3wemaugeey.com/img/rain/dollars-2.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image Hash8b4203d496c3f52b116af082a0cd4017 de5369e9459e240950bb7eb5261eaac1db26907f 8dd1f04088c25e20d15e1bc23129604830aab2b4d3d0a408a5f047f9768f39a4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/dollars-2.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: image/webp
content-length: 8140
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-1fcc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ttXNJlEExE8YaG6N3UW0b05RVJINQptr91QRP64WYXOiB8PDZn%2FvLI7ODCuZ3814KEmgx0ZTh3vyBYvFrOdNzBwjePySQjmPI8OdHFNIjA1PQ2OXZ1z3%2FPsH8luJsGk8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639acfc9b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/finance-survey/158?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} | 188.114.96.1 | 301 Moved Permanently | 659 B |
URL User Request GET HTTP/2wemaugeey.com/finance-survey/158?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} IP188.114.96.1:443
CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
Hash7ed308f86d019ef857a6f65c30dfb763 a04c73fc1fb44f77ef78e406a66ccaabd71862d7 858221b5364ee09922c68a5149a13a52aa32efa3c8dc1c5ee483577eea69b1cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /finance-survey/158?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: text/html
location: http://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest}
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vtyf5O4yyI4jQ1gtqSfc9Q9EJNzqBQOzd6y9438xnWRJNvrf5V9dNn%2BH%2BfRn2zhUr5jF12nqLRopwTywKIj3S6bnz3LtpY9qsL0p%2BQYWt96kmUMxYyR3v1rNUJvKtj2C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f96395f92356b4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wemaugeey.com/_next/static/chunks/8904.2e422cab2ab3367b.js | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/8904.2e422cab2ab3367b.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (3378), with no line terminators Hashc6c00168ba53bd528456ef7899c45d6e ba358717a5241ffac88380713af03c4a76de2324 99e58eca9b5d7141b5497bd151f257cf2e36a816b19c22df8cf4167cf4a77f76
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8904.2e422cab2ab3367b.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-d32"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ba9oWRNpuN5fg67FsGtx3shiAYsGeUzVYPjT%2FLwJUME%2B%2Fk49ZcKUZEU7zZw7sfE%2FIoJqBxLz4rdo3e4JrheOWhv9wkWMDLpjLPW%2B%2Fk9JlzngNDIS53Nd2xj9m6Ce1qDU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58b8b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/1987.26c0e0063d9b9477.js | 188.114.96.1 | 200 OK | 9.6 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/1987.26c0e0063d9b9477.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (4031), with no line terminators Hash69d6b145509507c35d17dab8f935e264 7ddf3ba8bb3c5b526d3c9e845cfdaebfacc72305 d7ae7f9f5de4fcf9b8a1afcd693261ac97e05efdf1f0209dc7e76e3184b3ffae
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1987.26c0e0063d9b9477.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-fbf"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ucl2HMvnQwLlPU68IUPUGuROhWJi7FHNqvdNhHtyXAzjO7DsOn%2Fg4EK3agI6jGxNxksdODrlpf8ukXGLmDQqbaNowP5dsK8ZT3W%2FumJLWSBdR5OJdSOG6k19%2FoZq9v8r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58b2b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| r11.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash75fbb10cf161c0af559820df35ea3cfc 12d39e25e31a152be4b1af372ae383eec96b3458 c162f1a1c1fe86dc252da39763eec6813a3eefb80848e28575ced30146669445
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C162F1A1C1FE86DC252DA39763EEC6813A3EEFB80848E28575CED30146669445"
Last-Modified: Sat, 06 Jul 2024 20:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19974
Expires: Sun, 07 Jul 2024 22:33:03 GMT
Date: Sun, 07 Jul 2024 17:00:09 GMT
Connection: keep-alive
|
|
| wemaugeey.com/_next/static/chunks/3091.2c7a2a976b9f9ac4.js | 188.114.96.1 | 200 OK | 5.0 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/3091.2c7a2a976b9f9ac4.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2586), with no line terminators Hash1e1b830564113705ee1e39509788dc2e 152d8de8ad1197f6b562aed2af7fc5efa860274b b3dd0446f0a64db6b18ecdb23ecc13ca6d55536dc11912ef0312e33a1b54486b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3091.2c7a2a976b9f9ac4.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-a1a"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zcMVu04UPGzkdDAwGDb0gZoDlzu1yqolqxIN86t4mllPBk1IFBjyGXwv7I8XTwz%2Bqn9h1QdUYhaE4H127nxRm77M2ct%2BILrGafr6fGW3dzBcVt7FEdRhcXzR%2F6CKlHlp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58c5b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/comments/finance-survey-people/person-3.webp | 188.114.96.1 | 200 OK | 1.5 kB |
URL GET HTTP/3wemaugeey.com/img/comments/finance-survey-people/person-3.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hasha747d227c2e10b5178fd942484301d7a b3c5cf90dd5fd2c26c7b17dcb2d35b6dd47065be 9f4fb1281b7141b9dd48925953f7b039b6c411ea0e6e5b158d3e000d75316e9f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-3.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/webp
content-length: 1454
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-5ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qseL9XK%2BNMjDVP%2FCH8Nf7WvhGJb87ZnwPDWZYorz%2BiVqeZFZUJ7mZ1mYiejvJPDPgDf0VPvqF%2BiZc23HzsDWxhz41CDm9kd09OgZgP8bMTK8pm%2B1eGKOs9tnKUZBRMDQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639d2c97b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/ZeeBRKO78gAGEMfcsapV1/_buildManifest.js | 188.114.96.1 | 200 OK | 3.7 kB |
URL GET HTTP/3wemaugeey.com/_next/static/ZeeBRKO78gAGEMfcsapV1/_buildManifest.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeASCII text, with very long lines (1408), with no line terminators Hashd9483fea24668b46340628d615095f63 2a783ec36a97cdfdb2c0785fba1578fadfbcbe07 3cf70106fcc25e7cd6f6a6987c449bd79e7e68800a300f842f862b71fff6c2d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/ZeeBRKO78gAGEMfcsapV1/_buildManifest.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-580"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wKr9uTstoqW7RY1MwagRN%2F62Ohhd3QmHZ1cyvP4MkWSqlnNnXZOfj7%2BVCVtvPzq97ODdLNGiLZaklkGOWto8OQno%2BlJmzI8Sw27yYhRSQVGmLkVL063E%2FF1Eef16zr78"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998dcdb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/comments/finance-survey-people/person-2.webp | 188.114.96.1 | 200 OK | 2.2 kB |
URL GET HTTP/3wemaugeey.com/img/comments/finance-survey-people/person-2.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash8f8ffbb278de1342e5cf44cd0c677c23 1b4b4428e409479cc8a8acfce6f537c2aeea7556 ac4284ed6941963c4fa0db306537f42f3a0b1fa18710bc7b9e1e62188961d83a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-2.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/webp
content-length: 2220
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-8ac"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iW6zM87PH1kgcZXdreXjCJIsuf9hV6TrVoyFUXD5quqtrhe2W2lmyAz2LwYlSlnotEYQBWbnKLTs%2FbUKw1t8UAbU3pBZirUp8bKVEkhKNUI%2FP389I1OzGUsmMDNP7upy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639d3cafb521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/86.1605512c42332a2f.js | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/86.1605512c42332a2f.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2846), with no line terminators Hash4454dd8d20da57e5b4febc37bbc817c4 444023ea84fd9aaebd6126ddc692ef85dfd2b76b 67e0c13ad56e50a9388106a54d2e16a566b8aeba3e2b69b08c3accef0c522cd8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/86.1605512c42332a2f.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-b1e"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=meFMb1c5%2BDUR21TPYxxqgtJUE%2FWYf%2FeM9JnCjwnjDpEM%2B7gtfqahvdMFzl6JVwaQuqexvbqxzte7qQXvTVwopHhLNI7ulBftzbKjrtaNU4j8GkCWmO1EZzuajy9%2BZ7kO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58a7b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics |  139.45.197.248 | 200 OK | 17 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerLet's Encrypt Subjectarleavannya.com FingerprintE4:D4:9E:1D:AE:92:48:76:88:11:4C:36:B1:41:35:A8:55:C9:8E:9C ValidityWed, 26 Jun 2024 19:28:37 GMT - Tue, 24 Sep 2024 19:28:36 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 454
Origin: https://wemaugeey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 9ab92842206969bfb124379b12a57204
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wemaugeey.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| wemaugeey.com/img/comments/finance-survey-people/person-1.webp | 188.114.96.1 | 200 OK | 1.4 kB |
URL GET HTTP/3wemaugeey.com/img/comments/finance-survey-people/person-1.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hashc5da2ea294623650bae71fc84401cf60 f1f62ea011cf81953cefe28254c134e992453b91 09a846c5b1af2c6100ff3193789be1e0e21ba9fc45c268f76f2007c78f1e4ac1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-1.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/webp
content-length: 1402
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-57a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vjb2PWI%2FrzstW2WeUcmsBHhxJwjTpmFA95%2F6u2va6CWK5PPA9JFqPStxumDjY9WiTLNvbvcnLDeHfHa9jj8EG14iy%2BlmHBZUQFyNol2y1HH14JM0dXX0Z2pYJxtIP2dE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639e3eabb521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/comments/finance-survey-people/person-5.webp | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/3wemaugeey.com/img/comments/finance-survey-people/person-5.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash188dfcdf19da1d86ed162d54ed03536d 98b1baefbb803548b2894547091b4c7773406524 4f8251665e3cc796f127ea6cbdc00a9ec450adff16acb4ec74463c446b6f4ba6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-5.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/webp
content-length: 2384
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-950"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M4Sg%2BMaqGEPSwA7n%2BfzJloGYzPhj0Kyc8cqabk%2FAE4AI9YNWMMWoq8wqJ1MVqeXMXd15Sj1qerXBd%2BtcOus7Sy1gqiasm0m4XQL%2BvbR2g%2F6Gl2Bt%2FQfAt%2F6uoDjNspn%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639e8f3cb521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/6875.da40281ab87144b7.js | 188.114.96.1 | 200 OK | 1.1 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/6875.da40281ab87144b7.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2389), with no line terminators Hash5c13cea0823bd822d7a35e34b2155b35 f492ade6c5ab21078ea3c46e277f7c59af709a47 64ee9ae428cc24b87fda7e207b93561ff29de06c9b0adcd1920ed99999eaece3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6875.da40281ab87144b7.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-955"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4536
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X5KUo0aMbKGhf45XNj0hV1Qdtw%2BAEJ2y7wXdsBcDPK%2B6Wh8YNnr%2Bd8ajeezwsp99g%2BfXO7Y28oqRkxPeUjg%2F6YLC3tjEcWxvDTZy7ZS4w1RKperrxVSdZHIGsQjWy%2FHi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639e9f80b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerLet's Encrypt Subjectarleavannya.com FingerprintE4:D4:9E:1D:AE:92:48:76:88:11:4C:36:B1:41:35:A8:55:C9:8E:9C ValidityWed, 26 Jun 2024 19:28:37 GMT - Tue, 24 Sep 2024 19:28:36 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 474
Origin: https://wemaugeey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: dfc6b1df04f1f69aa9d9596891049a2b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wemaugeey.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| wemaugeey.com/favicon.ico | 188.114.96.1 | 204 No Content | 0 B |
URL GET HTTP/3wemaugeey.com/favicon.ico IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Sun, 07 Jul 2024 17:00:09 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0n60qPvXUGuuTMnHKL3hYRkpgAycWrQSsLnncbAW%2FBK6ng47nNiT%2BAIxvMtezStvJ2Rs20tyTbzXkijyno4qEuVR4iGL4urnhS0BMTf%2FRAlIQG9mUMAiiyl9eCOShy0O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89f9639fb9e6b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/812.0103476ca26e4fb5.js | 188.114.96.1 | 200 OK | 2.9 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/812.0103476ca26e4fb5.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (16082), with no line terminators Hashc65946e8a8e7f9b73cb2521aa7715b57 88d6d76f989b7ea26c8420d2887abda22628b8a2 34e1c09b83c231d652166efacde450cbd4d6f4b4624871ade7ce18cc7798f64b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/812.0103476ca26e4fb5.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-3ed2"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 5512
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNSz3ptxOhQT6AJrDDgiMqLlwsdp1gDG1QVbMbzAHXFaMO4KG1LKqjJ1FUS5EcWuzRyLDVK5iiQdcsuOxTLUpQKYXkJAdv8WnjqkhJCYwwTmHuI1lPtKMsSb0nYT5ntX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d5fb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 179 B |
IP139.45.197.248:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerLet's Encrypt Subjectarleavannya.com FingerprintE4:D4:9E:1D:AE:92:48:76:88:11:4C:36:B1:41:35:A8:55:C9:8E:9C ValidityWed, 26 Jun 2024 19:28:37 GMT - Tue, 24 Sep 2024 19:28:36 GMT
Hash081142aa1c9267422ee7fd25ac457579 cf8a223610da412aab4cc9aec68f6f304258b3ce 58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 161
Origin: https://wemaugeey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 5910c307c30030521c0c38fe735dfe57
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wemaugeey.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} | 188.114.96.1 | 200 OK | 8.3 kB |
URL User Request GET HTTP/2wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} IP188.114.96.1:443
CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (22414) Hashb276c70d8af744e6c4fbf4fcbd193a11 7f5226dc292c2a883484dc812b5709f32845d2a9 1bf5bbd72d0bb66c00bb00824ec4116a4596916cafeb9dbab968c30266cc2564
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: text/html
last-modified: Thu, 04 Jul 2024 17:16:15 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D34Raq5dYeFtqz2Z3Qt4rr42QD1dHHueIwwCGZlZidwkO7UsHFgJhrOTXMVXd87abneTu95QS3DlVAcsk%2F9X8CE%2BmmoRpHyYFF356U%2Fy4%2BdWPLP7Zi6LJf4W0oBu0YsG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f96396aa4c56b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| wemaugeey.com/zone?&pub=0&zone_id=7509330&is_mobile=false&domain=wemaugeey.com&var=7669962&ymid=2abcjR1QnP&var_3=8195135&var_4=&dsig=&tg=1&sw=3.1.531&trace_id=fa689bf2-57cb-4385-8b3f-7b948a1c6a66&experiment=%7Babtest%7D&action=prerequest&drf= | 188.114.96.1 | 200 OK | 0 B |
URL POST HTTP/3wemaugeey.com/zone?&pub=0&zone_id=7509330&is_mobile=false&domain=wemaugeey.com&var=7669962&ymid=2abcjR1QnP&var_3=8195135&var_4=&dsig=&tg=1&sw=3.1.531&trace_id=fa689bf2-57cb-4385-8b3f-7b948a1c6a66&experiment=%7Babtest%7D&action=prerequest&drf= IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=7509330&is_mobile=false&domain=wemaugeey.com&var=7669962&ymid=2abcjR1QnP&var_3=8195135&var_4=&dsig=&tg=1&sw=3.1.531&trace_id=fa689bf2-57cb-4385-8b3f-7b948a1c6a66&experiment=%7Babtest%7D&action=prerequest&drf= HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-length: 0
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gvepK%2FrAs%2Bb4hAWfwmOJZRigjpsjMU91YH5TZxD0k5WgfpeOra%2Bhj16lzZ4659qp9Vfp9QxmtALGW2E46QHcqHxL%2FyiCHAuDXV%2BaGQjqpRyMH2crxwWub2v0F1WVpBr8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a1bdbfb521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| e5.o.lencr.org/ | 23.33.119.57 | | 345 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash1e66b6b6e353c785129eb0357cb993c5 63e866bad7acb80121df4226c183bc795a41477e f2610669f6f51bcf2e88bd45c43f6248347d1589a292ed7f6dde634390081119
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F2610669F6F51BCF2E88BD45C43F6248347D1589A292ED7F6DDE634390081119"
Last-Modified: Sat, 06 Jul 2024 08:46:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2363
Expires: Sun, 07 Jul 2024 17:39:32 GMT
Date: Sun, 07 Jul 2024 17:00:09 GMT
Connection: keep-alive
|
|
| e5.o.lencr.org/ | 23.33.119.27 | | 345 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash1e66b6b6e353c785129eb0357cb993c5 63e866bad7acb80121df4226c183bc795a41477e f2610669f6f51bcf2e88bd45c43f6248347d1589a292ed7f6dde634390081119
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F2610669F6F51BCF2E88BD45C43F6248347D1589A292ED7F6DDE634390081119"
Last-Modified: Sat, 06 Jul 2024 08:46:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12792
Expires: Sun, 07 Jul 2024 20:33:21 GMT
Date: Sun, 07 Jul 2024 17:00:09 GMT
Connection: keep-alive
|
|
| wemaugeey.com/_next/static/chunks/6578.ea60c510f6586cce.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/6578.ea60c510f6586cce.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (44865), with no line terminators Hash6fb2f36e0367dd6626e04991f63decb4 322345d4af82c0378e1612ea16ec33fe2109faf4 ce3766d1d074ed94fd89f1cf67bfa1325bd2b6d8e3a4a2c2ce3739c3e0647231
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6578.ea60c510f6586cce.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-af41"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Esqjzwm8B%2BWBIP9mITBjUsByPTAseu56QgPYNTMOAQaK5SDDEZtEcgksTlzcmHzd9ClV1mTgWcArsm9MshA9ucg85FaFYl3YdxPNzdMFi9NL07XAPmJXP2x6PncEjzkg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963997d90b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerLet's Encrypt Subjectamunfezanttor.com Fingerprint35:05:E9:62:1A:8D:04:BD:DA:84:F3:3F:9A:08:F4:0E:32:53:93:08 ValidityTue, 18 Jun 2024 19:23:47 GMT - Mon, 16 Sep 2024 19:23:46 GMT
Hash540c57b709030e0f069790774c5df8d2 b788e2c09bcc6f375670f8864415a0b8daaf1c1f fde565907fdad7d5a268e2a54e8284f4af11bebf798698b7ca5f27d973855e30
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2219
Origin: https://wemaugeey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 17:00:10 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://wemaugeey.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12387
Expires: Sun, 07 Jul 2024 20:26:37 GMT
Date: Sun, 07 Jul 2024 17:00:10 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.57 | | 504 B |
IP23.33.119.57:0 ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12387
Expires: Sun, 07 Jul 2024 20:26:37 GMT
Date: Sun, 07 Jul 2024 17:00:10 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.33.119.27 | | 504 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12348
Expires: Sun, 07 Jul 2024 20:25:58 GMT
Date: Sun, 07 Jul 2024 17:00:10 GMT
Connection: keep-alive
|
|
| wemaugeey.com/img/comments/finance-survey-people/person-4.webp | 188.114.96.1 | 200 OK | 1.8 kB |
URL GET HTTP/3wemaugeey.com/img/comments/finance-survey-people/person-4.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash5dc160f6b521dc8f6c670b140b354fed 22e15cda82b532067b99932ec28f86ea2cc1ecbc 09c6c6de57458ec0c4e7a3d2375e0c7b9c037de9366b63e3685cc0ca94d838b4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-4.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/webp
content-length: 1798
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-706"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qrS98qkTOuCHKKpDdR7FMaWkBn%2FfFOjmDWiBENK2jwBKZYLSI54hAT5BIbkpaL7h7oTmKDmWG0cc8GnE0Lf7ImVtPbqBBRVcJrxTerSg34ddT95otNWjOfAAXvaJOuCC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639d3ca3b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/839.4548ccf9766bf4c3.js | 188.114.96.1 | 200 OK | 7.2 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/839.4548ccf9766bf4c3.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (7403), with no line terminators Hash970877b8f93e34f449084711157da533 b10cc5bd2c67840c54c4a7d11b8d09286809cbce 14f29f37fb3528e0357a52a24fb09fb8ec701ef85a2dcb0fc50e497a646406dd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/839.4548ccf9766bf4c3.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-1c11"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E1drfikQlJ0MlQBmu6PF7vXDtIIkqUk7CNxkzzv0bAnSU1kPn5ajwdHk2BrKUlpU664MxA1BJpUqOoy9W1Gd0bYcHjhucnSeMf60wvLd41st8qvc9cqW3ErYmbFS7%2FzK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d59b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/ZeeBRKO78gAGEMfcsapV1/_ssgManifest.js | 188.114.96.1 | 200 OK | 134 B |
URL GET HTTP/3wemaugeey.com/_next/static/ZeeBRKO78gAGEMfcsapV1/_ssgManifest.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeASCII text, with no line terminators Hash8ffe0d99020b7535af6db34ba54a25cf c9e0b6379bdae795228998c3050d295d14e65669 1f5fd7652f124b236dc9ef40458fe6fbbd3b09ef521cd3e4f22602450525773c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/ZeeBRKO78gAGEMfcsapV1/_ssgManifest.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-86"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 5512
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HGUwm7h1mLMsXkYm7wL63k6Vv0kDGs5Z3di5Q%2BOrUQk9DjokxY9p6BXzKoQfEVcVWs3UQ3fkfQ%2FjtJTgxhXfgRmdYNdUJqvZ4VReqNgMiGMBDLjW%2BTyoeecdMcncnsUD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998dceb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/finance-survey/icon-survey.svg | 188.114.96.1 | 200 OK | 2.7 kB |
URL GET HTTP/3wemaugeey.com/finance-survey/icon-survey.svg IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeSVG Scalable Vector Graphics image Hasha000ba4d0e7570d810feafb22bc50bef af8fce44a683d3dfebe69cbe856e747739c9a666 9ae848c180201d8ae5c59ce118b0b7ef395a01295fb04d57e81cfe0566100679
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /finance-survey/icon-survey.svg HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/svg+xml
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: W/"6686d8d2-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BLvQQQkxG8ytPWlTCyNbvSJcBAnhp40ZuHPgGXOfWsMxbSxO9SgECF9w4xh25ztPPaPzxxWxgiS96zrt%2Bax61yMqGmkYVaDCPIAHiF%2FZSjxzeNrQ7mBcvSs1xZfATmUw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639d3cadb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/css/0bc0cde260d08b97.css | 188.114.96.1 | 200 OK | 1.8 kB |
URL GET HTTP/3wemaugeey.com/_next/static/css/0bc0cde260d08b97.css IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeASCII text, with very long lines (1841), with no line terminators Hashff1d3d5d24ca0172d59b02e7505ddaa1 41e83ee08e21f369886b0fdad0ba01d8b20897b6 939b17f98d9d3585510edafa70c73c6619ea20d9b401b4396041272bed67ecf6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1843
etag: W/"6686d8d2-733"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=84CseE8ODE44Pj%2BxayFMRNonaHOXbHB9QwZkUeg6E2NJUefo47lI2wveozkW5ve1OolqL5qUCUe7A8rmiSFy11g2WsVg4ETg3xbZjwozD8RgAwMQvTR3EMYwZ3xmcg6S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d51b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/framework-8940d626f3bfb7e9.js | 188.114.96.1 | 200 OK | 26 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/framework-8940d626f3bfb7e9.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (25995), with no line terminators Hash33a34c525e2bee14a166fe1289835308 4afb650772181930d19dca9a41490beea5087932 bebac61ce044debeb2025b1fbf1c95f1b9a4bc97d0702676dea22b0bb689b555
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-8940d626f3bfb7e9.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-658b"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a75pjbrQsyjjRtFSBTPKCNAKS22n5M2%2Fp59JeAl4wkLPA2bYHBEYfYdKS6AuYaC5r9eZOCpMNT0oEFHpUhVIdCv6O0x6VOicsk2VuihAvLVAQ8sWjKV8Vcxk6z1hAHbU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963997da5b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/8059.4ae38eaefd7e9526.js | 188.114.96.1 | 200 OK | 15 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/8059.4ae38eaefd7e9526.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (14567), with no line terminators Hash892dda47c6c62c58e7a5abace3e86a70 b18bd7b2e243f2997a7e4a160c45d53642857f80 5cbde231c5883b430bdec589b855bf56fb28da3b016c02336b8fba30aa2f3667
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8059.4ae38eaefd7e9526.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-38e7"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yg6e5%2BrntUEzKgkMrio4nEQRfmAP0TDx9DgfYBDTV5dPC8Nis0rNhtcz2lMpHrBASsI4D8lF6Sv5Bh3nDZtno44yrsf6%2FCysPRcJXrb6bjjLXHBu5VXEElVL5EsFZ6C1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d62b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/4569.c8de04c3d3cf71a5.js | 188.114.96.1 | 200 OK | 20 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/4569.c8de04c3d3cf71a5.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (19736), with no line terminators Hash77bd1542aab7ac2e44fdb2e1a944e353 6d219581f3671c8157990c65083f42ee649f7cf9 bbda39a07ab2cfef82ba342d38c1c479879caf26a310073cc01966d13d5723e8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4569.c8de04c3d3cf71a5.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-4d18"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C62eifos9ngqBbY9Pqyh1bDgkvKKThCqbXpk%2FfEKrWQieKQUHsY4nVe%2Bpuz2A1wQ8nMBZ17Xq%2B0rvhCw2fY9ShWYlv7DXs6mVtbfWZPp1Mz16HED249A3RKpS4MbQY2m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639bd9b1b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/8740.1aeedbc78c9afd75.js | 188.114.96.1 | 200 OK | 9.4 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/8740.1aeedbc78c9afd75.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (9596), with no line terminators Hashba1bc39062df56929070344a7f28693d d7d0202feec4fc7cbdcbea8c0d75f22d87f44ae6 2507a9f7c4a48dbdf2e6f3d86969b1377bf69ab5bf75aebd7ce236da3bc09504
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8740.1aeedbc78c9afd75.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-24c3"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3G73YUN5NvdKarsKQYTg1s8wgX6FMzdg88MIyS54YnQYDcHKPha69VbEQy0QnQDCuof8yWbC3Ls9e7Sq3GXjABfxjmmO521JA92XbDiK2BjAHc6Zaf1SDOGk5VEYVcKz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d5eb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/pages/_app-188737c4b499c1a8.js | 188.114.96.1 | 200 OK | 48 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/pages/_app-188737c4b499c1a8.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (47621), with no line terminators Hashea27574f0baa1314e15266cc98a084a0 94f2113562d541f79358f34de69f42aa49d54d3f 2d208b8702fd4eeefa6e6321787ea4f6cc2ec1bec86524cc1aa1f1ec9e3a9008
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-188737c4b499c1a8.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-ba05"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p7Htx%2FIOPawrqSl7Chhq8nlVvGWZhNKfMN1RWIQk6XYqePsCdxWb4JJHddgp%2FkDoOwMv0SwH8DM3Sv3UdKDhWU35kxqxKuXf1DRuTT9zAnZHURkghIq2pN%2FD5t%2B3Echm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998dc1b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/rain/dollars-1.webp | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3wemaugeey.com/img/rain/dollars-1.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image Hasha5bef813a0113d018592091106451c8b 59365e96c4abca5eb98a0c56db0af0bb5cbffebb 036beb7de9c9d450e1442d593ff70ad392ca4be6754e7feaec249c0009e1bd83
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/rain/dollars-1.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: image/webp
content-length: 10546
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-2932"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNx1s%2FKbmtQy1CP4vAt7iyTg4LkoL0nATlwJGlnPmf3s6fAQWa9MGFU42SMDTMi%2BQlSerryuPEx3KyvFREragK0oPqw9ETe2dTQ23kVNwlaIpRrrzc%2B7SKXeBPLodU24"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639abfc6b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/3896.6c4c6f5ed5d12a80.js | 188.114.96.1 | 200 OK | 7.8 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/3896.6c4c6f5ed5d12a80.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (7931), with no line terminators Hash0f36b20e4fc869cc52c3f875eabe727b 23d8954fd08e54b1497ee08f5117972b9de059d6 51c12ec44b7dc2219499be0f43624599e91c2fa1ec5e07e4e9141daf6f80923a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3896.6c4c6f5ed5d12a80.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-1e74"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bNFcbIlhtswDi8E4zGKKtjXKNUA11eAdYUJ7nKUAqHf468jgU0WUL0h9Bad0ZpEs1BhUDkZO2zb7%2BsbNH52Ua0uQxwrR6pQrmfdSwOc8istufE%2FWlM2ZAcYduotvUiAG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58a5b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=mbxsrbay0khd0n6p9lv5ws03qyixgyy9 | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=mbxsrbay0khd0n6p9lv5ws03qyixgyy9 IP139.45.195.8:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash42ef8b8bd083f1b95c952a22b285a142 eced3782d4e07e6902a22b2ee0646124dfcef9bb 9c853c373001e8bac6b8181d19dd5d50765051ecf86230656dde17f48f9aa2a7
GET /gid.js?userId=mbxsrbay0khd0n6p9lv5ws03qyixgyy9 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://wemaugeey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://wemaugeey.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; expires=Mon, 07 Jul 2025 17:00:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| cdntechone.com/stattag.js |  172.67.195.28 | 200 OK | 16 kB |
URL GET HTTP/2cdntechone.com/stattag.js IP172.67.195.28:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintEF:90:AA:1E:4B:1F:8C:2F:E9:37:DE:50:71:02:CF:D8:51:D4:AF:F7 ValidityThu, 20 Jun 2024 04:46:45 GMT - Wed, 18 Sep 2024 04:46:44 GMT
File typeJavaScript source, ASCII text, with very long lines (15782) Hashbec6dedf30a8fcd79c1120f1c0cfdb56 fcfb9b00f5d1f159d54237673eb5ed1e044f4f7e 5ae0d442d77ea9528a5c8162816db73c0ac35e6ebc0d6359b28645565cdac160
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/javascript
last-modified: Tue, 25 Jun 2024 13:48:28 GMT
etag: W/"667acaac-4030"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 755
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yme1g59iPJoZK%2FyOLeOF75VNTb8jaCxhk4APTWF8vRBZt6ZuObpkH25UAOwqngsjWZt0iuXpPMMMUsvpy5ajA3XayrLCTqCV%2BSw66%2BhxgmQpcwcksIdzWUyfGzsMD6OXAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89f9639c7af256be-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdntechone.com/stattag.js | 172.67.195.28 | 200 OK | 16 kB |
URL GET HTTP/3cdntechone.com/stattag.js IP172.67.195.28:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintEF:90:AA:1E:4B:1F:8C:2F:E9:37:DE:50:71:02:CF:D8:51:D4:AF:F7 ValidityThu, 20 Jun 2024 04:46:45 GMT - Wed, 18 Sep 2024 04:46:44 GMT
File typeJavaScript source, ASCII text, with very long lines (15782) Hashbec6dedf30a8fcd79c1120f1c0cfdb56 fcfb9b00f5d1f159d54237673eb5ed1e044f4f7e 5ae0d442d77ea9528a5c8162816db73c0ac35e6ebc0d6359b28645565cdac160
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/javascript
last-modified: Tue, 25 Jun 2024 13:48:28 GMT
etag: W/"667acaac-4030"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 755
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ESYCWEDi6L6c9HRLpijekvljMalGpvZjMO23Qyl1x7lvMsQnfxjQwUY%2BqxnH8iXiwuS98PctOE2vaaOSJduCBnYGkhvPV6NquqsRTAKA014PUAWCYphbkB753ivVgdG82w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89f9639d1f9356bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/9133.beaf6c76bfbf7cbb.js | 188.114.96.1 | 200 OK | 11 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/9133.beaf6c76bfbf7cbb.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (10765), with no line terminators Hashcf0094f1323586080153efb53dc8d4ab 22a73b0d4c501229e769b25b52462859280e2cc4 4a2755e22ffc035eb8702201047e73c6014b41e6734933e5aabd2d3e0c35d4f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9133.beaf6c76bfbf7cbb.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-2a0d"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6521
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ZDuL7BrugPH8pt8AlsEhSxTzc2QetrEApag5Vg8BtKCvcLnwNEkvz6sF1kQPRMjHWpMKnLIkAgGrJF0Anrsp9oA1KLNmcRUklN8MuVbwrX%2BaO2sW00Hw4eq3u1dWgad"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d5bb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/9033.f7f66f1ac5cad747.js | 188.114.96.1 | 200 OK | 20 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/9033.f7f66f1ac5cad747.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (19616), with no line terminators Hash24b97e19ce8bc064eeade9d3ea89d39f 7883d721c238b4ba46aed496d694e1f818658cd6 3f5bf56ee1ee2c1aeeb6df2e0a9f0a1c16c6d1803ae29fb9d5079ced8cdf09b5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9033.f7f66f1ac5cad747.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-4ca0"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SH0XcnnWjPLaS%2FL2AHo%2F1Nt%2F2zTTmsk9OY6dRTyMtb9d9jPW2pV%2B3bs0T0MguLDJDHZsrsiRQTcXYgq6YVqNkRJ4gPFZIX2yYPJAYRwssCLX7YzsUTTLlSOU4bdG4on%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963997d7db521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=7669962&ymid=2abcjR1QnP&b=21018272&campaignid=8195135&click_id=833805479472803840&ab2r=%7Babtest%7D&rhd=1&var_3=8195135&oaid=mbxsrbay0khd0n6p9lv5ws03qyixgyy9&os_version=&btz=UTC&bto=0&z=7509330&cdn=1&domain=wemaugeey.com&ab2=%7Babtest%7D&ab2_ttl=5184000 | 188.114.96.1 | 200 OK | 39 kB |
URL GET HTTP/3wemaugeey.com/pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=7669962&ymid=2abcjR1QnP&b=21018272&campaignid=8195135&click_id=833805479472803840&ab2r=%7Babtest%7D&rhd=1&var_3=8195135&oaid=mbxsrbay0khd0n6p9lv5ws03qyixgyy9&os_version=&btz=UTC&bto=0&z=7509330&cdn=1&domain=wemaugeey.com&ab2=%7Babtest%7D&ab2_ttl=5184000 IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (39011), with no line terminators Hash8ca8d870f3c5c691a0fd4c7733ab4dad 7fd8c29b8c6bac7ddb898f95535697385e2f20aa ee1ef581f37ff14248e39b56bd71907ae8ded2dbe84981b099977ebeba77212e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pfe/current/micro.tag.min.js?sw=/sw/universal.js&var=7669962&ymid=2abcjR1QnP&b=21018272&campaignid=8195135&click_id=833805479472803840&ab2r=%7Babtest%7D&rhd=1&var_3=8195135&oaid=mbxsrbay0khd0n6p9lv5ws03qyixgyy9&os_version=&btz=UTC&bto=0&z=7509330&cdn=1&domain=wemaugeey.com&ab2=%7Babtest%7D&ab2_ttl=5184000 HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/javascript
last-modified: Wed, 03 Jul 2024 15:34:28 GMT
vary: Accept-Encoding
etag: W/"66856f84-9863"
access-control-allow-credentials: true
cache-control: max-age=1800
pragma: no-cache
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JkZOpU8QMCviR82VWNGD%2FT8pc%2BycWY94A%2BdTGCOrUdaubhGnfrCABbYRD8PVci2x%2FGFWxYqEkrOcIT6gwM%2B%2B0u4%2BeA5a3QnICUbhvr7GOK%2FJHU8yFDcVdEAAcvjiIItF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a02ae7b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/custom | 188.114.96.1 | 200 OK | 39 B |
IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc16023891530fbce40f0a1244c3af01c e15d9dff768d82673e5e797a8395d1fa7d9049b7 c7d0061f2d2b9eb7b65b547c4bdf03f5f332cf34021bc972f64b6ad58d3a121a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 481
Origin: null
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1KlO87ios0W5SD4xlXxdwwOFymgD7QXjl4zyUO1ftE5Dzt6A4qa0ZZvyHBdFzF8N7uURxrC5ZEwdar3lk6WS0Yl8YG9lgKPlSPugAoaWZ4ZrMlI0vrW3WBVN%2F4KdImWj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a19d84b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/4764.e6cd719e1bb1eee3.js | 188.114.96.1 | 200 OK | 2.9 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/4764.e6cd719e1bb1eee3.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (2989), with no line terminators Hash3e024725a9f414ac48be1b3e14e8ee35 3beb08a5a56222a0e414233ec69f134d739b9802 d43e014586de5d5d1c2ff407e3d4bbe60169d644af844cf5db3de25fd64cfb9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4764.e6cd719e1bb1eee3.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-b7f"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wBdRA6Pk5MwFnceO0Oa6Ioz6GfTOCW3hd93Rw6QTYV%2FNO3juMyu0WCVB9vn51bf2fgrmWc54Be3WZpn3W%2FYO7Ln5WVA1qUF1VMaeU0iUKew9IK6gIq%2Fmkxx6eHub47a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639bd9cbb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-b79f5b9b05b6b497.js | 188.114.96.1 | 200 OK | 31 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-b79f5b9b05b6b497.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (30634), with no line terminators Hash76567a90a8229dfa3c8deae78dc443a4 763d9c2ce98af4d997edd1f7ee3613d890815a24 1fc69f7bce1c42bfae61007d070dbb5cd62ef0560ac47b3f56773eacc74b4e85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/%5BlandingName%5D/%5BconfigId%5D/%5B%5B...slug%5D%5D-b79f5b9b05b6b497.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-77aa"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d9sizBPHY5MIumbMAVd2X1JEPUsAPlC1uuvUCFEn1Ks%2BJqQYsIfKEh7%2FMMxWUEXc99IKyd5TBBjpcqtC413i57aRBGdJQI4gbtb0woV4uXtcYEAZzawPILDXd0aXb8rM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998dccb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/5356.cd117ab77e87aa94.js | 188.114.96.1 | 200 OK | 1.3 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/5356.cd117ab77e87aa94.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (1340), with no line terminators Hash928a78a6ff2acfdfc2b133e09c23a898 80992f60be4eeaa5e9ee31c4912fc8fd15806007 af03ac8ae373bd61c0ac2106d2837e74bf0f3c2d02682c018909684f3e6af5bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5356.cd117ab77e87aa94.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-512"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6517
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2FKLhYcRM8k%2Fph0WriZ4zqXKS5f0cDtZDzZp6iQUBaDZnpY5fPM3RsO8aKKIbMKrid04LkXbDox05orMEwwg4%2F5B9cTnZwO3IbammmvMvfRfp2n9%2FCkA2BHOMmkwLTcn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b68cdb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=91b24276-b607-46b9-9b12-d06edf66a5ca | 185.49.145.45 | 200 OK | 12 B |
URL POST HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=91b24276-b607-46b9-9b12-d06edf66a5ca IP185.49.145.45:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerSectigo Limited Subjectdatatechonert.com Fingerprint3F:E1:50:2C:9F:FC:F9:37:03:E3:B6:34:00:06:89:69:01:E7:C3:27 ValiditySun, 10 Dec 2023 00:00:00 GMT - Mon, 23 Dec 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6949f52318584a4b51c719a9b84a7287 9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905 72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=91b24276-b607-46b9-9b12-d06edf66a5ca HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1541
Origin: https://wemaugeey.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sun, 07 Jul 2024 17:00:09 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://wemaugeey.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| wemaugeey.com/_next/static/chunks/6223.9d1b69e58adc2596.js | 188.114.96.1 | 200 OK | 6.7 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/6223.9d1b69e58adc2596.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (6804), with no line terminators Hash27f6ab67a10a948fc99ad8ca949dd280 be4f385a2d4711377210e8495a16bc2bd937e4f7 970f3a63c431ff3d396e58ea1e9f0916716bf546e5ffaa8b05b903761a7ca1eb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6223.9d1b69e58adc2596.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-1a28"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H0kSRom7AwaAoZ9unKnQq2csEkpe6jWoxud%2Fe3Ku0d4vy5ofX8pI3xHaVMttHunL0BJK8drGvH4m9G3lI5jjvq3HhqgF7POgd21PyXQZPacDLbtt4dBFmw5KOyHf6kLn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58beb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/rotate?zz=7509364%3B7509343%3B7509372%3B7509369%3B7509357%3B7509354%3B7509370%3B7509359&var=7669962&ymid=2abcjR1QnP&ab2r=%7Babtest%7D&var_3=8195135&var_4=&os_version=&uid=mbxsrbay0khd0n6p9lv5ws03qyixgyy9&random=5579942 | 188.114.96.1 | 200 OK | 4.4 kB |
URL GET HTTP/3wemaugeey.com/rotate?zz=7509364%3B7509343%3B7509372%3B7509369%3B7509357%3B7509354%3B7509370%3B7509359&var=7669962&ymid=2abcjR1QnP&ab2r=%7Babtest%7D&var_3=8195135&var_4=&os_version=&uid=mbxsrbay0khd0n6p9lv5ws03qyixgyy9&random=5579942 IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (4487), with no line terminators Hashe34481ea4797aea5466df8803364eefa 588984be7949569ffd6f0bd307f5863c5487fed5 3f11e952688ddb05ce0607cc5bbdfd8c23d58f79223f17f8f23d1fdcfb974e62
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotate?zz=7509364%3B7509343%3B7509372%3B7509369%3B7509357%3B7509354%3B7509370%3B7509359&var=7669962&ymid=2abcjR1QnP&ab2r=%7Babtest%7D&var_3=8195135&var_4=&os_version=&uid=mbxsrbay0khd0n6p9lv5ws03qyixgyy9&random=5579942 HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:10 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-trace-id: fa1774fcde8286b341841da75b1f2876
timing-allow-origin: *
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
access-control-allow-origin: https://wemaugeey.com/
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; expires=Mon, 07 Jul 2025 17:00:10 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FpCTlBevpwDHgxzS2cpfe2xeIprGT4PD0YSUfYc5ZMBet9IX%2FUWTH%2FRU%2FXIJzvV0iMRiIxeaBMeGaSHZ0E7V1SP4mvRN5ucMDbOWCXc3J0S7gJQrheN5r%2Bfgm%2F0aJEl%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a01ac4b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/810.3c72a34819c5d6b5.js | 188.114.96.1 | 200 OK | 10 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/810.3c72a34819c5d6b5.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (10228), with no line terminators Hashb0a5b28c0b843f5c1a351a073133eb8b aaa0d07b4ae93d1c4af450a51322b8fa20cfbced c1f2a100ea3a22ce50b3f5aec42fb535bd6ea233bf872c74105009b0dca92b2d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/810.3c72a34819c5d6b5.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-27f4"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bZmgb9dhtBHRk6Qb4sB1HNIC1jEAlQk2pYahPpBJOAoHr8W18a8mBNYAa6gvnEZ7sUbAdJIn9%2Fe%2FgiFKN7k%2FjdqUwvv2VAe5XWgfRMMPRmZwVny32Pu0IGKjJu%2B4It1k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b58aeb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/96.97efbfeff3af4235.js | 188.114.96.1 | 200 OK | 7.4 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/96.97efbfeff3af4235.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (7525), with no line terminators Hashcae6175bd33c3b8f49b43af1b726863a ac37f2eebd25a43f9ece19859d842a10805d236d ef05d3a9e2987ebc745d4a586e319812dee417f5a3210dfe4fcee80d99d3fa72
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/96.97efbfeff3af4235.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-1cdc"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tUhoZCqnuOZ8ZfzlwkYF8VSle19IZIesaoEQoKvMQyCOdkrG1vVme0%2Fg6g4mMeNDPqj399IdrrtdcdN0cAbWUuGI9n4VI7LFcC6oAG2yjO%2FD24%2FmM4Lx6pAlv9%2FCLFN5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d64b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdntechone.com/stattag.js | 172.67.195.28 | 200 OK | 16 kB |
URL GET HTTP/3cdntechone.com/stattag.js IP172.67.195.28:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintEF:90:AA:1E:4B:1F:8C:2F:E9:37:DE:50:71:02:CF:D8:51:D4:AF:F7 ValidityThu, 20 Jun 2024 04:46:45 GMT - Wed, 18 Sep 2024 04:46:44 GMT
File typeJavaScript source, ASCII text, with very long lines (15782) Hashbec6dedf30a8fcd79c1120f1c0cfdb56 fcfb9b00f5d1f159d54237673eb5ed1e044f4f7e 5ae0d442d77ea9528a5c8162816db73c0ac35e6ebc0d6359b28645565cdac160
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/javascript
last-modified: Tue, 25 Jun 2024 13:48:28 GMT
etag: W/"667acaac-4030"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 755
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vfgk52A9p0D2%2FV8c3%2BOGErXTuhYAaGx2bYvzQBhfDr0pxJUL%2BHrdhkLJpKvEBWc7hQLHW%2BoGy%2BH1tgpwiAafowo%2BBx%2FN6TFxckivrg89EmZvI11o5a%2BFsr1eAj5WpHgKLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 89f963a02c4d56bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/sw/universal.js?var=7669962&var_3=8195135&ymid=2abcjR1QnP&ab2=%257Babtest%257D&ab2_ttl=5184000&zoneId=7509330 | 188.114.96.1 | 200 OK | 1.4 kB |
URL GET HTTP/3wemaugeey.com/sw/universal.js?var=7669962&var_3=8195135&ymid=2abcjR1QnP&ab2=%257Babtest%257D&ab2_ttl=5184000&zoneId=7509330 IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeASCII text, with very long lines (1515), with no line terminators Hash422ad993943fb23429b7684bf9f27db3 90226fc9e56b9ec8c02d42e4caf820aa7bba5945 770d4d3ce80bafb24f2aee344031670ff0031b4ab24bde75b79384cbef0230fb
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sw/universal.js?var=7669962&var_3=8195135&ymid=2abcjR1QnP&ab2=%257Babtest%257D&ab2_ttl=5184000&zoneId=7509330 HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/javascript
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: W/"6686d8d2-599"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y4k72yndO%2FE%2FJ%2FYtkw67LNTZEly%2FW5HrljXf4SdgqmKksuncngyHIE2fKGHbcfs91jo3TkZ%2Fkrfjfc1G1xt1Udr%2BI2dCvfeCdJAHsEpdbIrHoItBoc2JZvBdkyXSex%2BR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a1adb8b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/custom | 188.114.96.1 | 200 OK | 39 B |
IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc16023891530fbce40f0a1244c3af01c e15d9dff768d82673e5e797a8395d1fa7d9049b7 c7d0061f2d2b9eb7b65b547c4bdf03f5f332cf34021bc972f64b6ad58d3a121a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 484
Origin: null
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q49W1TRCA3O8YVb8bDXsn%2BeUixJ4W69P0YfX7aQCYPOSTuznuRzA24Tb4gGsd7U9mYVNXXQHWbhyi%2Bfpchr4xfUo%2FlesLGaWHTxBhCRiff5%2B8cpTFjKxQEtvOMotIUhT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a1adbbb521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/main-beb6af9e60a8e042.js | 188.114.96.1 | 200 OK | 109 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/main-beb6af9e60a8e042.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size109 kB (108886 bytes) Hash49c6f57370e917bd37dc7d4d4d0bdb56 f5b56f5b9498f3500055c5614808903d85303991 0409ec519061477c75738733ce598796a11cd445e95df1cd3e72d0ef58136fd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-beb6af9e60a8e042.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=108887
etag: W/"6686d8d2-1a957"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rRkzcoBIz%2BR2gsTVb83HYg9HXiYAhBIem9DkP%2FhOLtR54%2FKc%2BRym1uLLE%2FG5xcr5JNFkPj8gE6X7CrqIBDCSkS3aPaHBOOWlz5hjk5rRjPDBGU11fqFOZgTSZJ%2Bl%2ByJE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998db9b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/custom | 188.114.96.1 | 200 OK | 39 B |
IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc16023891530fbce40f0a1244c3af01c e15d9dff768d82673e5e797a8395d1fa7d9049b7 c7d0061f2d2b9eb7b65b547c4bdf03f5f332cf34021bc972f64b6ad58d3a121a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /custom HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 483
Origin: null
DNT: 1
Connection: keep-alive
Cookie: OAID=mbxsrbay0khd0n6p9lv5ws03qyixgyy9; syncedCookie=true; oaidts=1720371609
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JIuXWxWOcxC%2B5RY3qc2kUXD5%2BZ3Xct33oSAj0UuO2d2c64zO%2BLkB2YM%2F7dk39jp6n7OVGaHrE8U69sPbafAofTe%2B72ilns%2F1gyAlXe0O3pEj7teUeCOc7ErLTRxnnH4Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963a1bdc6b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/2734.0ce0b4e0714ca90f.js | 188.114.96.1 | 200 OK | 4.3 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/2734.0ce0b4e0714ca90f.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (4388), with no line terminators Hash4c688361133f42844c8f4908f495bd84 6244637ffcf08c1b16cc1e60f29a66631083d04b eb82c76fd6b5408605ecd0576aaa44b51edd98215476b66aec4c3be8ba427833
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2734.0ce0b4e0714ca90f.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-10da"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4670
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lti1m2xnG7%2FytowQRjrAL3sfqXR5qWY1%2F9MrMdK6u5nvFgPSZaBG6Tf7csOdb4ySWv18%2B6A%2B%2FnSDzBRunozOaBVkpM5odsvcVS4fVejVgPpqdoWGs62%2FoJpcWQviXQcy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639b4898b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/img/comments/finance-survey-people/person-6.webp | 188.114.96.1 | 200 OK | 2.4 kB |
URL GET HTTP/3wemaugeey.com/img/comments/finance-survey-people/person-6.webp IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash7be25941ac032fcec25b1bb4ede296d2 cfc4fb3733844326076b6d7632087204c0bea34d 0ff9d28c4ab7516d2790e8df4d325cf602bc8f9eb787a7cd9b6554edd9530e4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /img/comments/finance-survey-people/person-6.webp HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:09 GMT
content-type: image/webp
content-length: 2440
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
vary: Accept-Encoding
etag: "6686d8d2-988"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3CY5s6TWWe5pbPDEdm1G%2Bo0i0UBMWUZlByj9mPVBH8n8uNFxUNhZ0khvsfJVL%2F7zAKpavOPskQF3DYlDlcxOXX31fxyLmRwmVmj4btQkxiBl8TM90ZKWy4R7307skCmM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f9639d3ca7b521-OSL
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/4981.2a332d38c95dc4f9.js | 188.114.96.1 | 200 OK | 20 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/4981.2a332d38c95dc4f9.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (19546), with no line terminators Hash223898374dd56eccf76322f878b326f7 dc004d92d8fb70e324e193f138f496b190164126 56c360551aebd13f55666a056edd4c681b39fd1b3832ce1233fc2dae7640ed46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4981.2a332d38c95dc4f9.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-4c5a"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6520
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3poo%2BdH0oQ8%2FSIT81KrSpQUAXAU4oP0E8Yodge0tyldIXKo6K6xbwq30UDat4Mgscgw6yB77H7it9O1B9tQmDU0rDlTwOmhDQD8TAeFRzgiI6k%2FlApg6NoHOYbLaQRZE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963996d72b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/webpack-f6acfd100646c98e.js | 188.114.96.1 | 200 OK | 6.1 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/webpack-f6acfd100646c98e.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (6434), with no line terminators Hash77042a439838c176a7beb6906ca9f6c3 b599b72eae6f7e19f162007a8b58a367154d9cad 21ec95706d23b26b698262757db8440fcf7b3cc42e74e94d9e51e32022e59e7d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-f6acfd100646c98e.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-1801"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YeAdJsi1D3GgpM8B91IRssq9d48i0DGFrhkYXVQA4ZaxUpO95kx8zwcp5ie%2B2q%2B0L0AzB9dKS91%2F%2B%2FcQJ3QKQGXluZL16dT6k84TkRWRBh0SlmVUIImOIPs6incQ1N9i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963997d9db521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| wemaugeey.com/_next/static/chunks/7903-dd238946c7924507.js | 188.114.96.1 | 200 OK | 32 kB |
URL GET HTTP/3wemaugeey.com/_next/static/chunks/7903-dd238946c7924507.js IP188.114.96.1:443
Requested byhttps://wemaugeey.com/finance-survey/158/?s=833805479472803840&z=7669962&var=2abcjR1QnP&campaignid=8195135&b=21018272&ymid=833805479472803840&designId=[1,2]&var_3=8195135&random=5579942&abtest={abtest} CertificateIssuerGoogle Trust Services Subjectwemaugeey.com FingerprintE5:03:E7:B7:76:97:33:24:6F:61:8A:47:8E:6C:31:8A:5E:EB:5C:9D ValidityWed, 26 Jun 2024 10:06:21 GMT - Tue, 24 Sep 2024 10:06:20 GMT
File typeJavaScript source, ASCII text, with very long lines (31896), with no line terminators Hashb5dd343db67bd22544d11da18268f5c3 069b5b221dd75af58d93192460778b3d07835e74 6347f1d4083f7a0a2ac3d8b12aae8832d9ea6914aa6e137d16a4d41869d14ea5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7903-dd238946c7924507.js HTTP/1.1
Host: wemaugeey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 07 Jul 2024 17:00:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6686d8d2-7c98"
last-modified: Thu, 04 Jul 2024 17:16:02 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 4672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Tvcfe8B7xXEOJR5C%2BXZEpMDwyUVyytwBnrW7l4KsiTG4D8KEWmdLPobFr8XxSG6%2Br%2BtL9H5KuQxz%2FFhO61h8F20UNuISbSLciy2SE2qw0K0viB1tPTKTQzrQ7cLquOB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 89f963998dc6b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|