Report - go.cuevana3.vip/?s=godzilla

Report Overview

Visited public
2023-12-25 22:51:37
Tags
URL
go.cuevana3.vip/?s=godzilla
Finishing URL
go.cuevana3.vip/?s=godzilla
IP / ASN
172.67.207.26
#13335 CLOUDFLARENET
Title
Has buscado godzilla |

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
go.cuevana3.vip	unknown	2021-09-12	2023-11-30 02:24:31	2023-12-10 19:22:33	8.1 kB	654 kB	104.21.15.212
gerbilshew.com	unknown	2022-07-14	2022-07-14 12:58:30	2023-10-22 08:24:55	844 B	2.9 kB	23.109.87.48
image.tmdb.org	17757	2009-09-15	2021-01-09 07:43:03	2023-12-25 02:23:50	4.7 kB	690 kB	89.187.169.39
go.cuevana3.vipwp-content	unknown	unknown	No data	No data	464 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-25	medium	gerbilshew.com	Sinkholed
2023-12-25	medium	gerbilshew.com	Sinkholed
2023-12-25	medium	go.cuevana3.vipwp-content	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	gerbilshew.com/rcKQ956xWQHL3/53547	ScriptElement	0 B	0001-01-01	2025-05-17
Pretty URL gerbilshew.com/rcKQ956xWQHL3/53547 IP 23.109.87.48 ASN #7979 SERVERS-COM Introduced by scriptElement Embedded in HTML false Observations First Seen0001-01-01 00:00 Last Seen2025-05-17 03:53 Times Seen4703354 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	unknown	ScriptElement	424 B	2023-07-22	2024-09-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 04:58 Last Seen2024-09-20 20:13 Times Seen39 Hash c5187ffa675e8eed747a79438d4af170 f4d1ecf2bff70c75a03072b3d438ac7412f6d920 debb179ea6db973c74bb679e755abfff23aba823126a56e04168eaf56b5fae2d Loading...

	go.cuevana3.vip/wp-content/themes/torofilm/public/js/jquery.js?ver=1620120640	ScriptElement	87 kB	2023-03-07	2025-05-16
Pretty URL go.cuevana3.vip/wp-content/themes/torofilm/public/js/jquery.js?ver=1620120640 IP 104.21.15.212 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:33 Last Seen2025-05-16 12:34 Times Seen290 Hash b72afe07a6f6f477120f3b0803d0a983 78ef8329a917d65f8bedf5e1336724c6f5b80404 f1a9c17b50d6278a694406d9e5dce160f81afd7a2683dfdf07f0651c38bdaa8e Loading...

	go.cuevana3.vip/wp-content/themes/torofilm/public/js/owl.carousel.min.js?ver=1620120640	ScriptElement	44 kB	2023-03-07	2025-04-19
Pretty URL go.cuevana3.vip/wp-content/themes/torofilm/public/js/owl.carousel.min.js?ver=1620120640 IP 104.21.15.212 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:33 Last Seen2025-04-19 17:58 Times Seen135 Hash 4e7af8b7170fecfe1bd8b5440eec1808 508aad34cf8cdfb6096bc6e52b2cdaffda450f8d 64bc5192dd76301d334fe7a0519c1b6a7acc2a3fcb835feafbcc070ea8516b5d Loading...

	unknown	ScriptElement	454 B	2024-08-20	2024-08-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 14:59 Last Seen2024-08-20 14:59 Times Seen1 Hash 5aa319e06e2ccbd6cb208951fede766b 0d928304d31cf6434b8bab05056d1b1662b712ed 507cc3a3ecd492b2382ff56cf5c36be8a6fd5516bf3c6d3b2fc3762c0de32d6f Loading...

	go.cuevana3.vip/wp-content/themes/torofilm/public/js/torofilm-public.js?ver=2.5.9	ScriptElement	19 kB	2023-03-07	2024-08-20
Pretty URL go.cuevana3.vip/wp-content/themes/torofilm/public/js/torofilm-public.js?ver=2.5.9 IP 104.21.15.212 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:33 Last Seen2024-08-20 21:50 Times Seen32 Hash 291540d816639a702746036b232c7329 bcc76b0af11254cce5ced62e41ab55b5f9297543 7b4d324ba92e080fb4b4ce0bb82b0d0abccd53ab0917cee45309aec722f3eb1b Loading...

	go.cuevana3.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	ScriptElement	12 kB	2023-03-07	2025-05-17
Pretty URL go.cuevana3.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP 104.21.15.212 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-17 03:33 Times Seen31482 Hash 88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142 Loading...

HTTP Transactions (28)

URL IP Response Size

go.cuevana3.vip/wp-content/uploads/2021/12/cropped-cuevana3.png

104.21.15.212

200 OK

4.6 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/uploads/2021/12/cropped-cuevana3.png
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
PNG image data, 240 x 60, 8-bit/color RGBA, non-interlaced
Size
4.6 kB (4552 bytes)
Hash
1376674570e17f475099abad60d2bcfc
017c5c5ce193c54ba21d2ce8ff65e0adf7489334
16f18c2e77c86429164e74800ae243a686eb293360e7def1863c16dd55f2d2ac

HTTP Headers

GET /wp-content/uploads/2021/12/cropped-cuevana3.png HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/png
content-length: 4552
last-modified: Sun, 26 Dec 2021 00:20:40 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4531
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DjSnI1o2ig%2B%2FXDSijNL8THY8SoBAIbAtbRE0USJFy05ncgA9Q8dudk9yZbEpvMD5fNC0Jfi30RJGBLfT2RJSiN4VT03%2BPO1UPVf7pi6%2B5W0xgkcBtxXJBE589KH8NfwGew4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83b4a5b8bf014c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-1.png

104.21.15.212

200 OK

107 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-1.png
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
PNG image data, 511 x 511, 8-bit/color RGBA, non-interlaced
Size
107 kB (106983 bytes)
Hash
084c7ba1acf81ddb194911731b571c59
d119ce67d4ed8829594f96d8d008533d2ceba419
5f7468fe453b1fff2363b9cc51a0dadcd862188586f9555a338392d6b916a1f2

HTTP Headers

GET /wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-1.png HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/png
content-length: 106983
last-modified: Sat, 18 Nov 2023 12:11:24 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4531
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u0g7hkVjkGi9dx8dRiwjd7wnfncHYYSSS4uz67ufr9c3gcEcDw8zH9IJQgOHqqoKIgYJHhT6PVwglvRmeHW2RYoUq%2B0C00sYE26IuYhJzqtNal4zXZhcp9QCZnTqWvMwO80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83b4a5b8bf054c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977.png

104.21.15.212

200 OK

111 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977.png
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
111 kB (111200 bytes)
Hash
636971fc446649622f84f0178d742f4d
22028691441ec451f10447c7ed95d883ffdc236d
c5950f67599a6cc8e5432f81db9257b928d5384f34202c06949c49a952d55677

HTTP Headers

GET /wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977.png HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/png
content-length: 111200
last-modified: Sat, 18 Nov 2023 12:11:16 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4531
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v4vpKKiYIiiNL0KWWjGs0Uw0S1wpVHoHkoMEr36sP2Frh7AbHxS9Cc6SSIrTAKTjMprXXMEhRwzHxH1e%2FT%2Faiy6PTCEj%2FWSUusiMMAYYFZ1Fl4%2FUKTZgHPZzOq%2F6df5i0GE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83b4a5b8df4d4c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824

104.21.15.212

200 OK

47 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
47 kB (46915 bytes)
Hash
be7453fd693d618a104617eafbb973b7
c55264e526e1265d042033381fa406b184bcbf2f
bfaf2fe5cfb73611a933703e42c2a51ba00c7ecd21bd2cfb72fb58a6a8b5539d

HTTP Headers

GET /wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=113978
last-modified: Sat, 11 Sep 2021 15:23:44 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 4532
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WvuNyNqxXF%2BJR0iVLHqU%2F0toGqTkmEseB0TKJ99%2BBwiZCr%2BDkrxtNINfTkoQt3WXyqtgf2dv3pT7ZV8S6rACfrg40uD4%2FZf4JRvoYOLMzUX02WW2Umk1ovTqlcXJCDQX5Xs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5b8befc4c7c-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/fa-solid-900.woff2

104.21.15.212

200 OK

74 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/fa-solid-900.woff2
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
Web Open Font Format (Version 2), TrueType, length 74328, version 329.-17695
Size
74 kB (74328 bytes)
Hash
64b3e814a66c2719b15abf8f7998bd73
fa5c5d34c7c375aa3e101f0b8104b6cdbcacd6a6
0fe6a4357505cb0d3ca8ba0671ad57df6b7410ca02cb8065eed58e2c0381e640

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/fa-solid-900.woff2 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: font/woff2
content-length: 74328
last-modified: Tue, 04 May 2021 09:30:40 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 5344
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jLFtQn3PvGDtoK7PothyB6Wte33m2oeqxTOg4vNR8GQTR7TeAXyYcZnSPIYdlAoRUQUNOF2q23TpDPU9kxqn7W5D%2Bjp4qQwsqxTjejGB9F8Pkz0oS3zbwQpuQUWx78dvcjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5b998814c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2

104.21.15.212

200 OK

24 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
Web Open Font Format (Version 2), TrueType, length 24452, version 1.0
Size
24 kB (24452 bytes)
Hash
539ed1a07cb8b137b6825efd1789c2f3
6a46045cbc0a5af52f68d8a65a40df4f5cc6ed6e
681a963b7e247c1376a6af7a6e439256600ac932521623f600faa57a59b4fcb7

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: font/woff2
content-length: 24452
last-modified: Tue, 04 May 2021 09:30:38 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 2764
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kHhUGuq4bRyxy4oR0DB%2BjSTfdgowlCHoSY62QzqtMHYmvw0DlSqUv%2B4AT1iadm3ApetWmYIsAcuYmwl%2Bc%2FZ9ul%2BERdzZUd7WvoT%2FVnAsxtUCz6gx40C9UvhclBmyZHDjSjU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5ba09584c7c-HEL
alt-svc: h3=":443"; ma=86400

gerbilshew.com/rmWXgMBNTXjnxH76m/64462

23.109.87.48

200 OK

20 B

URL GET HTTP/1.1
gerbilshew.com/rmWXgMBNTXjnxH76m/64462
IP
23.109.87.48:443
ASN
#7979 SERVERS-COM

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectgerbilshew.com
Fingerprint2F:05:21:1A:C4:8B:8A:9A:A4:30:02:0C:3A:C0:9B:8E:3F:D4:7E:A4
ValidityThu, 09 Nov 2023 23:19:22 GMT - Wed, 07 Feb 2024 23:19:21 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rmWXgMBNTXjnxH76m/64462 HTTP/1.1
Host: gerbilshew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 25 Dec 2023 22:51:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://go.cuevana3.vip
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Tue, 26-Dec-2023 22:51:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Tue, 26-Dec-2023 22:51:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

gerbilshew.com/rcKQ956xWQHL3/53547

23.109.87.48

200 OK

20 B

URL GET HTTP/1.1
gerbilshew.com/rcKQ956xWQHL3/53547
IP
23.109.87.48:443
ASN
#7979 SERVERS-COM

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectgerbilshew.com
Fingerprint2F:05:21:1A:C4:8B:8A:9A:A4:30:02:0C:3A:C0:9B:8E:3F:D4:7E:A4
ValidityThu, 09 Nov 2023 23:19:22 GMT - Wed, 07 Feb 2024 23:19:21 GMT

File type
gzip compressed data, from Unix
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /rcKQ956xWQHL3/53547 HTTP/1.1
Host: gerbilshew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 25 Dec 2023 22:51:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://go.cuevana3.vip
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9zV1OhDAcBHC%2BWXVBJ%2BEAHqFVQXz0Za%2FgIyntH6wL7aZU0NtLTPRtMvlNJgiCqLpFuGYp4k9R414NvJGs5fKhfmRNUz8JRkPfvvTtc8MFa3Gll86LfiKf4LDMwvnOrwmOIxlyWnbSKipwt6u%2F5mzsZhKkvRNGFUjnXUwF8t7ZbSFXxUiMmAn5STsa7NcuxId1iDmr96zNnkOGyC5VXF4jf9NG7cvyiIizsswC3Fwm4Qfr5k6rLEQ6OqEI4SsOUngarftGrmg5e3sB7KS6f%2F97HG%2BcIVO0aklIrX8n9wNBjE5s; expires=Tue, 26-Dec-2023 22:51:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViE0KgzAUBvMeJVAqhY96AE%2BQamsXbmuXRReewGopgZBIEvtz%2B%2BpiBmaEEJwmYD0hqQpV5ao8qeJSgl7gpgUPFrJx%2FtP%2FQB6cn8HeYtcG47LazTYuf8BmbZDG%2Fmr0N%2BucmaN2NoAXtnX%2FMM%2FjrbuDJkng6FaHMRWgtzz8AV7hHdE%3D; expires=Tue, 26-Dec-2023 22:51:12 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff

go.cuevana3.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js

104.21.15.212

200 OK

4.4 kB

URL GET HTTP/3
go.cuevana3.vip/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
gzip compressed data, from Unix
Size
4.4 kB (4389 bytes)
Hash
2db614f6ae5ad49cac1ba388b690ff47
7a42161727e199ca64732c367508d0fafd31da0f
cc9fcbb10236b8ff5223979f556efe080d7537fbf32af68260cdea354a92c41c

HTTP Headers

GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: application/javascript
last-modified: Tue, 19 Dec 2023 14:09:38 GMT
etag: W/"6581a422-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yv4ksIkZT7qwNWUfe%2BOfOdwUQryA0vHC2U16mr7kJIBmeEKa9RIVQtl1JTg6oS7wwp6sTcC9CSuBnOaKtWhdGsPUCVlBGvUf9uRDYfsAGiYGjM3xyN9l90cM53fvAlQolD4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83b4a5b8df564c7c-HEL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 27 Dec 2023 22:51:12 GMT
cache-control: max-age=172800, public
content-encoding: gzip

image.tmdb.org/t/p/w500/uhls3dFqMZyesWWrIHoaCvoIUQC.jpg

89.187.169.39

200 OK

47 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/uhls3dFqMZyesWWrIHoaCvoIUQC.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x712, components 3
Size
47 kB (46636 bytes)
Hash
930afb93ee317b345ddc438742bc4cd4
eed168ec9e0185781ed3fc6dfbe3fbc072b0777d
3127a860a92123288e646bff8c8f274e6890b80b5cfb288f5ab56292033f25b4

HTTP Headers

GET /t/p/w500/uhls3dFqMZyesWWrIHoaCvoIUQC.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 46636
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272bc2d-b62c"
last-modified: Wed, 04 May 2022 17:47:25 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 11/24/2023 23:48:41
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 4af715e5421813888cf54258b74b7a29
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/dvS4GnljywjqmmprxX16UeZab65.jpg

89.187.169.39

200 OK

49 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/dvS4GnljywjqmmprxX16UeZab65.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
49 kB (49124 bytes)
Hash
e2314824dd8f98fd0a8f506ded4c97a6
23b0ad93806e0b5344d41c78e87bf10449322da8
d3433b5e0cf954cc062a4fdc977bc7df32851acc8ffaf001009d42892d562a64

HTTP Headers

GET /t/p/w500/dvS4GnljywjqmmprxX16UeZab65.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 49124
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272b82a-bfe4"
last-modified: Wed, 04 May 2022 17:30:18 GMT
cdn-storageserver: NY-430
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 12/20/2023 21:45:42
cdn-edgestorageid: 1055
cdn-status: 200
cdn-requestid: bfd24fa3c09add6f0f6d90c8a01ee5d1
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/yJTk4eqQd9Yo5REpFbTSOMkbSgn.jpg

89.187.169.39

200 OK

50 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/yJTk4eqQd9Yo5REpFbTSOMkbSgn.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
50 kB (49498 bytes)
Hash
37d156f47b2e22f0ff31ea7d5956b116
1414ed85f22c400173fb65a8fcfe2d6f9cdac6ba
0e284ff7b298540e54102c9e4f16cc2261092de8b8180745bb7f5cc556f4277a

HTTP Headers

GET /t/p/w500/yJTk4eqQd9Yo5REpFbTSOMkbSgn.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 49498
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272bf1b-c15a"
last-modified: Wed, 04 May 2022 17:59:55 GMT
cdn-storageserver: NY-426
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/20/2022 23:57:23
cdn-edgestorageid: 860
cdn-status: 200
cdn-requestid: 347d04b3f05f5b1876b3bc60bad11430
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/yQ59NPwzHE2XlYwU2VwHF9Wb0IJ.jpg

89.187.169.39

200 OK

59 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/yQ59NPwzHE2XlYwU2VwHF9Wb0IJ.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
59 kB (59418 bytes)
Hash
c4d0d25ff4e0813c37f3657c06690b2c
a9465db88c71c3e449253e92776d6736a362ccfb
accce2298089b31a9ff0c886bb8dba8401fae0c222c916d88ad3ba4ec62e59c9

HTTP Headers

GET /t/p/w500/yQ59NPwzHE2XlYwU2VwHF9Wb0IJ.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 59418
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272bc56-e81a"
last-modified: Wed, 04 May 2022 17:48:06 GMT
cdn-storageserver: NY-427
cdn-requestpullsuccess: True
cdn-fileserver: 268
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 07/15/2023 22:22:07
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 5456aa6ca6c9488f02a078ca576d5cde
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/1t0FcqSsBs51PDhDkFd7EiEytU6.jpg

89.187.169.39

200 OK

76 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/1t0FcqSsBs51PDhDkFd7EiEytU6.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
76 kB (76445 bytes)
Hash
598c374757839ab7786155703be0308f
70dca3ff28883eda50630348d4d14143486b7b3e
924a7ed8c6d45a40db91e0680bb2de46c715c4d07823a45c7d27c6b9965f4aa4

HTTP Headers

GET /t/p/w500/1t0FcqSsBs51PDhDkFd7EiEytU6.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 76445
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272cf07-12a9d"
last-modified: Wed, 04 May 2022 19:07:51 GMT
cdn-storageserver: NY-267
cdn-requestpullsuccess: True
cdn-fileserver: 268
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 10/28/2023 05:18:39
cdn-edgestorageid: 1055
cdn-status: 200
cdn-requestid: 4254738e46d1e60e4d87028a5c6607eb
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/xFs3D8sRUgobpwwE46rt2pZHEgi.jpg

89.187.169.39

200 OK

61 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/xFs3D8sRUgobpwwE46rt2pZHEgi.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x712, components 3
Size
61 kB (60868 bytes)
Hash
587a7efc6d0b88ad273041b63aa60d9e
ce869de8c9b05bc4178d21893fef8fbfae070615
2ffb6d5e88287a4602a7cef1921fd8ff99ded0884f783a77620d2341da7440b8

HTTP Headers

GET /t/p/w500/xFs3D8sRUgobpwwE46rt2pZHEgi.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 60868
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "627303f3-edc4"
last-modified: Wed, 04 May 2022 22:53:39 GMT
cdn-storageserver: NY-268
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 10/26/2023 18:20:24
cdn-edgestorageid: 756
cdn-status: 200
cdn-requestid: dc4849df6d8d3544f83b0b63a7a33e70
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/nAF3vJb2iaVo3MnLzJpJCHui3uC.jpg

89.187.169.39

200 OK

78 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/nAF3vJb2iaVo3MnLzJpJCHui3uC.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
78 kB (78060 bytes)
Hash
beac77bb6e99aa8ee665ae8aff6556ce
c563c4b480eff401f2a6fc48ab2a20209abc90b6
deea637fd052541c4f4ee4c3984c9afd4af0cb3df3b19c85b51995d17eec42b8

HTTP Headers

GET /t/p/w500/nAF3vJb2iaVo3MnLzJpJCHui3uC.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 78060
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272bb70-130ec"
last-modified: Wed, 04 May 2022 17:44:16 GMT
cdn-storageserver: NY-266
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 01/04/2023 11:38:18
cdn-edgestorageid: 1076
cdn-status: 200
cdn-requestid: 954016211ff47ec51bae6021d30916ec
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/xnxbuFGnyFUmIuZhMgv1Ls8IWUv.jpg

89.187.169.39

200 OK

76 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/xnxbuFGnyFUmIuZhMgv1Ls8IWUv.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
76 kB (76066 bytes)
Hash
fd51799e91a20ab11118c899b57ff21d
c6701fe9634ad3e537db14820ea69fe104e5ce0d
39e1928c4f0bc12ccc4637ead01926c505072359a1a0832b0b8a2f2c7d9eacde

HTTP Headers

GET /t/p/w500/xnxbuFGnyFUmIuZhMgv1Ls8IWUv.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 76066
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272cb2a-12922"
last-modified: Wed, 04 May 2022 18:51:22 GMT
cdn-storageserver: NY-427
cdn-requestpullsuccess: True
cdn-fileserver: 268
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 09/10/2023 19:51:32
cdn-edgestorageid: 752
cdn-status: 200
cdn-requestid: b1e3406e59a3c8e01c78d270964e2263
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/3PnNwGH1rbLfFmkJk2upoj5AsSD.jpg

89.187.169.39

200 OK

71 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/3PnNwGH1rbLfFmkJk2upoj5AsSD.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x712, components 3
Size
71 kB (71186 bytes)
Hash
b698e00d12f998823f9f29a3601d999e
2a929b423f4a7d9a1b3f7653ddf152e0c2618160
8cb7fea75af3b9747527797c1ce0dc4a70dfff7e01614c3a9db16210fe79093c

HTTP Headers

GET /t/p/w500/3PnNwGH1rbLfFmkJk2upoj5AsSD.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 71186
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "62733fe6-11612"
last-modified: Thu, 05 May 2022 03:09:26 GMT
cdn-storageserver: NY-430
cdn-requestpullsuccess: True
cdn-fileserver: 266
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 08/08/2023 15:51:43
cdn-edgestorageid: 865
cdn-status: 200
cdn-requestid: 0002062d788eddd9dc46f62f4c3ff068
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

image.tmdb.org/t/p/w500/sm5DUZ9tTd2zfA5tDNDArJxvXUh.jpg

89.187.169.39

200 OK

116 kB

URL GET HTTP/2
image.tmdb.org/t/p/w500/sm5DUZ9tTd2zfA5tDNDArJxvXUh.jpg
IP
89.187.169.39:443
ASN
#60068 Datacamp Limited

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerLet's Encrypt
Subjectimage.tmdb.org
FingerprintCF:B7:E8:C7:7D:07:EB:E8:16:FA:B8:1B:32:66:3E:29:66:0A:5D:01
ValidityThu, 30 Nov 2023 13:08:23 GMT - Wed, 28 Feb 2024 13:08:22 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x750, components 3
Size
116 kB (115959 bytes)
Hash
0ef563e3b85f53a8e0843009c4429466
3354c687c8d7ed6f3561ab1abc8d379e984b0b55
68937f033b0945da45c548eae0de50e0257aedb1ed0a28810abe1c8893696a8f

HTTP Headers

GET /t/p/w500/sm5DUZ9tTd2zfA5tDNDArJxvXUh.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/jpeg
content-length: 115959
server: BunnyCDN-DE1-755
cdn-pullzone: 775336
cdn-uid: 29af4e0e-bcbd-4fcb-8635-74ddc38a1ebf
cdn-requestcountrycode: NO
cache-control: public, max-age=31919000
etag: "6272d236-1c4f7"
last-modified: Wed, 04 May 2022 19:21:26 GMT
cdn-storageserver: NY-346
cdn-requestpullsuccess: True
cdn-fileserver: 341
perma-cache: HIT
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-cachedat: 09/06/2023 23:54:33
cdn-edgestorageid: 1053
cdn-status: 200
cdn-requestid: 8be3c40036215e285ef150b4241fc269
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-192x192.png

104.21.15.212

200 OK

22 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-192x192.png
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Size
22 kB (21483 bytes)
Hash
cf9986fcefafcf6b5704d3c3b6cdeefb
e03cb8af33a976f3094a9e37b644ba544637aa1e
d2d38b8693fa3a98d6ca0dc115c95b44fbb04b1149536453a5292887feda2005

HTTP Headers

GET /wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-192x192.png HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/png
content-length: 21483
last-modified: Sat, 18 Nov 2023 12:11:16 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4679
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2F9%2FK1cjCZami4BUiVlf%2Fgk4uLEfh5OPIXIOKOmulu%2BhsgQclqca41KNzAECf8nuZHDodb77KyrxqzGTH6pQFfDpd8uMs4Mymt2pZ%2F%2BRBQy2qvVFk2HmanBhPmB4hH9lO7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83b4a5bd3ee04c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-32x32.png

104.21.15.212

200 OK

1.2 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-32x32.png
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
1.2 kB (1171 bytes)
Hash
65d2b392e9f5200ffdb2cda14b30c21f
65bdf0f68666dc130d66b741831045709cf6fc69
01c592e5fb81b8fe5760399f695ffa07ee9a0669735d4face7d687421ac8b0b7

HTTP Headers

GET /wp-content/uploads/2022/04/cropped-cropped-cropped-cropped-cropped-cropped-cuevana3-io-favicon-5689c977-32x32.png HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: image/png
content-length: 1171
last-modified: Sat, 18 Nov 2023 12:11:16 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 4527
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=roLkJPgpiMih7MH7cAFSUwIKWR5uHGZ0jXCji3NDOnMkPlaDJWz48XVXg9NlVsgrdvxueME4TVGUDQn7gJauhf43pgQTIH8skkpZnCA3ZjMrXou2SU9RzUHMxELuVzbIdDw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83b4a5bd3ee74c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2

104.21.15.212

200 OK

22 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
Web Open Font Format (Version 2), TrueType, length 22488, version 1.0
Size
22 kB (22488 bytes)
Hash
238c66f0f32567f8b025fa462b139235
a27f5e36161c6194a6f8a135e9e0056028bf3128
29a23ea4b518625595ed555e8edc2e32119a305df5bfecacc1ac38df8a384f9e

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-regular.woff2 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: font/woff2
content-length: 22488
last-modified: Tue, 04 May 2021 09:30:38 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 2764
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1SN4e8P24UJQz14eOiiGW5w5mz1uxNzrqnhkySMQJTEGqkatQmMS2l1FxR7SvW%2BOMAJtL%2BdJ%2BOd3ec5rfX3SyoZ%2F8ssjZ7u7GsZrw3BF4KLjMaQ6YrNFt9Q%2FSvrM6kZ3Er0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5bdbff34c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2

104.21.15.212

200 OK

24 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
Web Open Font Format (Version 2), TrueType, length 24452, version 1.0
Size
24 kB (24452 bytes)
Hash
539ed1a07cb8b137b6825efd1789c2f3
6a46045cbc0a5af52f68d8a65a40df4f5cc6ed6e
681a963b7e247c1376a6af7a6e439256600ac932521623f600faa57a59b4fcb7

HTTP Headers

GET /wp-content/themes/torofilm/public/fonts/work-sans-v4-latin-700.woff2 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/wp-content/themes/torofilm/public/css/torofilm-public.css?ver=1631373824
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: font/woff2
content-length: 24452
last-modified: Tue, 04 May 2021 09:30:38 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 2764
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2F1wiP%2Bj%2FTshIVo4kcKxnTZpps%2FkkbdI8kUWggBNstYxrfiAoHDWmzw72ypPbz6Azxr4Ok7cZ2S6iZoku63ZhQEct%2BaGV948OlGQB0uUn%2FNE0TwAee4xf4MlpaQVfkpucoo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5bdcffa4c7c-HEL
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/wp-content/themes/torofilm/public/js/torofilm-public.js?ver=2.5.9

104.21.15.212

200 OK

19 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/js/torofilm-public.js?ver=2.5.9
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type

Size
19 kB (18802 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/themes/torofilm/public/js/torofilm-public.js?ver=2.5.9 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=29308
last-modified: Sun, 25 Jul 2021 15:22:56 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 4281
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2BcV0NLOLpUvYB%2BOTtcv40%2F%2FpJLHdhrHqtdwPzlYEqXh4wEwVsom2fDPeOnkqFoalajWKeMgYoedHwsm26d98ttc10f2vDCOvUsbLFSEnohOOt2F5Su%2FJkHUHpxHsXE4zDM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5ba59c94c7c-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400

go.cuevana3.vipwp-content/uploads/2022/06/sdklsdlsd.png

0.0.0.0

0 B

URL GET
go.cuevana3.vipwp-content/uploads/2022/06/sdklsdlsd.png
IP
0.0.0.0:0
ASN
#0

Requested by
https://go.cuevana3.vip/?s=godzilla

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /uploads/2022/06/sdklsdlsd.png HTTP/1.1
Host: go.cuevana3.vipwp-content
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

go.cuevana3.vip/wp-content/themes/torofilm/public/js/owl.carousel.min.js?ver=1620120640

104.21.15.212

200 OK

44 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/js/owl.carousel.min.js?ver=1620120640
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
ASCII text, with very long lines (31997), with CR line terminators
Size
44 kB (44342 bytes)
Hash
4e7af8b7170fecfe1bd8b5440eec1808
508aad34cf8cdfb6096bc6e52b2cdaffda450f8d
64bc5192dd76301d334fe7a0519c1b6a7acc2a3fcb835feafbcc070ea8516b5d

HTTP Headers

GET /wp-content/themes/torofilm/public/js/owl.carousel.min.js?ver=1620120640 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: text/javascript
last-modified: Tue, 04 May 2021 09:30:40 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 4281
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2r45%2F%2B6i7zjxsMMieqFr4w241F%2BwJfDvaKEA%2BNqtBuF3J6iRCpIHMFZ33RW0yCpEEUnpVAmpmrlqT1g1dr3Eya05ou2PY52NMfi4TUFRLCmOS1cWplrlCxXssHC1Upy9t74%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5ba59cb4c7c-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400

go.cuevana3.vip/?s=godzilla

104.21.15.212

200 OK

51 kB

URL User Request GET HTTP/2
go.cuevana3.vip/?s=godzilla
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type

Size
51 kB (50897 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /?s=godzilla HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 25 Dec 2023 22:51:11 GMT
content-type: text/html; charset=UTF-8
link: <https://go.cuevana3.vip/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wCek%2BRjS1M6SeLF84p%2BcGUBoEI1G4gSPTzyHEZ28XZSF%2FqLMFtvZqM1cHMCZyZBhBUtjwQDJSj5NK7vtzNLopP%2BatyzGAFjjRPNe9bAxizyqJK0Vnfp2S0K3DL2vDyhrVJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5b0cf32d922-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

go.cuevana3.vip/wp-content/themes/torofilm/public/js/jquery.js?ver=1620120640

104.21.15.212

200 OK

87 kB

URL GET HTTP/3
go.cuevana3.vip/wp-content/themes/torofilm/public/js/jquery.js?ver=1620120640
IP
104.21.15.212:443
ASN
#13335 CLOUDFLARENET

Requested by
https://go.cuevana3.vip/?s=godzilla
Certificate
IssuerGoogle Trust Services LLC
Subjectcuevana3.vip
Fingerprint6C:99:F7:02:8F:9C:AB:4C:40:09:49:AC:83:D3:23:DF:43:C6:64:56
ValiditySat, 28 Oct 2023 17:31:08 GMT - Fri, 26 Jan 2024 17:31:07 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
87 kB (86923 bytes)
Hash
b72afe07a6f6f477120f3b0803d0a983
78ef8329a917d65f8bedf5e1336724c6f5b80404
f1a9c17b50d6278a694406d9e5dce160f81afd7a2683dfdf07f0651c38bdaa8e

HTTP Headers

GET /wp-content/themes/torofilm/public/js/jquery.js?ver=1620120640 HTTP/1.1
Host: go.cuevana3.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://go.cuevana3.vip/?s=godzilla
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 25 Dec 2023 22:51:12 GMT
content-type: text/javascript
cf-bgj: minify
cf-polished: origSize=86926
last-modified: Tue, 04 May 2021 09:30:40 GMT
vary: Accept-Encoding,User-Agent
cache-control: max-age=14400
cf-cache-status: HIT
age: 4281
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MtkIfZwcd4g9xdJ1g3jl13cGUpnfaF9FBmkPozQyf13Kq2pSMjpOfpAP6cUAvouAM05L7K6%2FqZ4UmRfsTp8Ga7JZeduflelGOMf5AHdiOg4tPvYxqV6d4g0AerQRogfTPpA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83b4a5ba59cf4c7c-HEL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (28)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate