| |  104.21.91.223 | 200 OK | 8.9 kB |
IP104.21.91.223:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (637), with CRLF, LF line terminators Hash6494cb72f83e2c9c57a8e084b60510c3 1c5f43e326039d454ef400b77b8e1c47c68847ba c30d7239687c8a807a5ca72d4a63ff0d8d0463374c64ae4170672694a56a31bb
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /umT0 HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Apr 2025 17:43:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sat, 12 Apr 2025 17:44:11 GMT
Cache-Control: max-age=60
X-FastCGI-Cache: MISS
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMV7%2Fq4jyKFGAvglWwTO7SNJm4a9ZETjkomjN3EF8op%2FJx5l01INIhOI4uGoZWWwenMC%2FjLmIzGhm19lAPdXFfh8AE6CxxvDslXBweADpHSS4pTzWshdZocy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 92f48646cd6d0b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=510&min_rtt=510&rtt_var=255&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=384&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| srv231043.hoster-test.ru/assets/favicon.ico |  31.28.24.131 | 403 Forbidden | 0 B |
URL GET srv231043.hoster-test.ru/assets/favicon.ico IP31.28.24.131:80 ASN#12616 Citytelecom LLC
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /assets/favicon.ico HTTP/1.1
Host: srv231043.hoster-test.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 12 Apr 2025 17:43:12 GMT
Server: Apache/2.2.15 (CentOS)
Content-Length: 310
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from t0.hoster.ru
X-Cache-Lookup: MISS from t0.hoster.ru:6666
Connection: keep-alive
|
|
| js.sentry-cdn.com/b8d75565b0d082f6981bdac725bf160a.min.js |  151.101.2.217 | 200 OK | 2.8 kB |
URL GET js.sentry-cdn.com/b8d75565b0d082f6981bdac725bf160a.min.js IP151.101.2.217:443
CertificateIssuerGlobalSign nv-sa Subject*.sentry-cdn.com Fingerprint00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25 ValidityMon, 07 Apr 2025 18:50:27 GMT - Sat, 09 May 2026 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (2844) Hash988f9602f4a7d1462967b97053125d98 ed6eca443ccc9b09053ba47b1b7eef0dd9bafa83 2732e80b7da59c89195fef90b5149a74a656073cb9b31508fc23da86d2f904dd
GET /b8d75565b0d082f6981bdac725bf160a.min.js HTTP/1.1
Host: js.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://urlz.fr
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
access-control-allow-origin: *
cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io sentry.io *.sentry.io s1.sentry-cdn.com o1.ingest.sentry.io api2.amplitude.com app.pendo.io data.pendo.io reload.getsentry.net t687h3m0nh65.statuspage.io sentry.zendesk.com ekr.zdassets.com maps.googleapis.com; frame-src app.pendo.io demo.arcade.software js.stripe.com sentry.io; worker-src blob:; script-src 'self' 'unsafe-inline' 'report-sample' s1.sentry-cdn.com js.sentry-cdn.com browser.sentry-cdn.com statuspage-production.s3.amazonaws.com static.zdassets.com aui-cdn.atlassian.com connect-cdn.atl-paas.net js.stripe.com 'strict-dynamic' cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634074999128064.storage.googleapis.com; base-uri 'none'; img-src * blob: data:; media-src *; object-src 'none'; font-src * data:; style-src * 'unsafe-inline'; default-src 'none'; frame-ancestors 'self' *.sentry.io; report-uri https://o1.ingest.sentry.io/api/54785/security/?sentry_key=f724a8a027db45f5b21507e7142ff78e&sentry_release=7b2789ce8e02343806f979aa5864127d663f9db5
x-envoy-upstream-service-time: 22
x-envoy-attempt-count: 1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 12 Apr 2025 17:43:14 GMT
age: 45
x-served-by: frontend-misc-78954d7644-rr88g, cache-chi-kigq8000029-CHI, cache-hel1410022-HEL
vary: Accept-Encoding
timing-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 1356
X-Firefox-Spdy: h2
|
|
| browser.sentry-cdn.com/8.55.0/bundle.tracing.replay.min.js | 151.101.2.217 | 200 OK | 233 kB |
URL GET browser.sentry-cdn.com/8.55.0/bundle.tracing.replay.min.js IP151.101.2.217:443
CertificateIssuerGlobalSign nv-sa Subject*.sentry-cdn.com Fingerprint00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25 ValidityMon, 07 Apr 2025 18:50:27 GMT - Sat, 09 May 2026 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65411) Size233 kB (232625 bytes) Hashc067d74cad61d2170676e46802e0780e a62c3415529f3b3030dfc6373a895894c66d3810 38626d34bcf2227c9172259fc4969b8252148613cd1cf22ae1a652475b0cbe47
GET /8.55.0/bundle.tracing.replay.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://urlz.fr
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 12 Feb 2026 16:03:46 GMT
last-modified: Wed, 12 Feb 2025 15:17:05 GMT
etag: "c9503a8859a0defa39c6c0bd0acd6687"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 12 Apr 2025 17:43:14 GMT
age: 381418
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 75241
X-Firefox-Spdy: h2
|
|
| edge.hyth.io/js/v1/9e07627d-1585-4ca4-81eb-b59c498dee2f/azerion-edge.min.js | 54.240.174.55 | 403 Forbidden | 0 B |
URL GET edge.hyth.io/js/v1/9e07627d-1585-4ca4-81eb-b59c498dee2f/azerion-edge.min.js IP54.240.174.55:443
CertificateIssuerAmazon Subjectpublisher-audiences.hyth.io Fingerprint2C:EC:5D:E6:64:D0:53:E4:1F:FB:43:DF:5C:FE:D9:C3:DD:9E:86:52 ValidityTue, 21 Jan 2025 00:00:00 GMT - Thu, 19 Feb 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/v1/9e07627d-1585-4ca4-81eb-b59c498dee2f/azerion-edge.min.js HTTP/1.1
Host: edge.hyth.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: application/xml
server: AmazonS3
date: Sat, 12 Apr 2025 17:43:15 GMT
x-cache: Error from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hfWYCqh12zdjWFysX-f26zHHZxMM7393aGv8lR4td5WUHC9o9W2tNg==
X-Firefox-Spdy: h2
|
|
| urlz.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js | 104.21.91.223 | 200 OK | 12 kB |
URL GET urlz.fr/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js IP104.21.91.223:80
File typeJavaScript source, ASCII text, with very long lines (12331) Hash88a769d2fe35899fd45a332a0a032cc0 514c6c1d8475d17e412849a4c90159517d0fa10a ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/umT0
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 12 Apr 2025 17:43:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 Apr 2025 16:11:22 GMT
ETag: W/"67f004aa-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i9b%2BN0Ucmt81JDKyUyawpEnohZ2YALYDeqc5d1R3yjiEvtK7dcYnOqaDXBodkiTpOTKzoEXAqYzah0tJ8HAxvpwI2qfjvDxh9xIceVHV6EK1joDyN7xRPdwO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 92f4864aba580b4d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 14 Apr 2025 17:43:11 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
|
|
| onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1744479793723 |  51.89.9.254 | 308 Permanent Redirect | 0 B |
URL GET onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1744479793723 IP51.89.9.254:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=2a897e3f18e6769&cb=1744479793723 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://urlz.fr/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 308 Permanent Redirect
content-length: 0
location: https://onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1744479793723
|
|
| onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1744479793723 | 51.89.9.254 | 204 No Content | 0 B |
URL GET onetag-sys.com/usync/?pubId=2a897e3f18e6769&cb=1744479793723 IP51.89.9.254:443
CertificateIssuerDigiCert Inc Subject*.onetag-sys.com Fingerprint26:2D:63:1A:A7:C6:41:9C:A2:F5:39:CB:C4:F2:77:55:75:D9:90:82 ValidityTue, 21 Jan 2025 00:00:00 GMT - Sat, 27 Dec 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/?pubId=2a897e3f18e6769&cb=1744479793723 HTTP/1.1
Host: onetag-sys.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://urlz.fr/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-store
strict-transport-security: max-age=15552000
alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900
X-Firefox-Spdy: h2
|
|
| browser.sentry-cdn.com/8.55.0/bundle.tracing.replay.min.js | 151.101.2.217 | 200 OK | 233 kB |
URL GET browser.sentry-cdn.com/8.55.0/bundle.tracing.replay.min.js IP151.101.2.217:443
CertificateIssuerGlobalSign nv-sa Subject*.sentry-cdn.com Fingerprint00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25 ValidityMon, 07 Apr 2025 18:50:27 GMT - Sat, 09 May 2026 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (65411) Size233 kB (232625 bytes) Hashc067d74cad61d2170676e46802e0780e a62c3415529f3b3030dfc6373a895894c66d3810 38626d34bcf2227c9172259fc4969b8252148613cd1cf22ae1a652475b0cbe47
GET /8.55.0/bundle.tracing.replay.min.js HTTP/1.1
Host: browser.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://urlz.fr
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=31536000
expires: Thu, 12 Feb 2026 16:03:46 GMT
last-modified: Wed, 12 Feb 2025 15:17:05 GMT
etag: "c9503a8859a0defa39c6c0bd0acd6687"
content-type: application/javascript; charset=utf-8
content-encoding: gzip
accept-ranges: bytes
date: Sat, 12 Apr 2025 17:43:14 GMT
age: 381418
vary: Accept-Encoding
access-control-allow-origin: *
server: Fastly
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 75241
X-Firefox-Spdy: h2
|
|
| o4504813552140288.ingest.us.sentry.io/api/4508721494818816/envelope/?sentry_version=7&sentry_key=b8d75565b0d082f6981bdac725bf160a&sentry_client=sentry.javascript.browser%2F8.55.0 | 34.120.195.249 | 429 Too Many Requests | 198 B |
URL POST o4504813552140288.ingest.us.sentry.io/api/4508721494818816/envelope/?sentry_version=7&sentry_key=b8d75565b0d082f6981bdac725bf160a&sentry_client=sentry.javascript.browser%2F8.55.0 IP34.120.195.249:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerDigiCert Inc Subjectingest.sentry.io FingerprintDA:99:47:C5:69:E9:81:CF:86:06:05:AA:4F:F5:39:06:4B:1A:F3:22 ValidityThu, 03 Oct 2024 00:00:00 GMT - Tue, 29 Jul 2025 23:59:59 GMT
Hash478b411c59eb87249bea32cf7c7be5d2 023907c62eb55758905bb3c0e640b5b204ae0652 bac10d17440dcd6f6c6c4e0bd7eca2e1a7eec030ef3b1143d4be3791dcf91263
POST /api/4508721494818816/envelope/?sentry_version=7&sentry_key=b8d75565b0d082f6981bdac725bf160a&sentry_client=sentry.javascript.browser%2F8.55.0 HTTP/1.1
Host: o4504813552140288.ingest.us.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://urlz.fr/
Content-Type: text/plain;charset=UTF-8
Content-Length: 36319
Origin: http://urlz.fr
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 429 Too Many Requests
server: nginx
date: Sat, 12 Apr 2025 17:43:16 GMT
content-type: application/json
retry-after: 60
x-sentry-rate-limits: 60:transaction;profile;span;span_indexed:organization:span_usage_exceeded
vary: origin, access-control-request-method, access-control-request-headers, accept-encoding
access-control-allow-origin: *
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
content-encoding: br
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| js.sentry-cdn.com/b8d75565b0d082f6981bdac725bf160a.min.js | 151.101.2.217 | 200 OK | 2.8 kB |
URL GET js.sentry-cdn.com/b8d75565b0d082f6981bdac725bf160a.min.js IP151.101.2.217:443
CertificateIssuerGlobalSign nv-sa Subject*.sentry-cdn.com Fingerprint00:4D:2B:16:F6:29:29:D8:2F:20:48:BD:32:13:96:5D:37:EB:F8:25 ValidityMon, 07 Apr 2025 18:50:27 GMT - Sat, 09 May 2026 18:50:26 GMT
File typeJavaScript source, ASCII text, with very long lines (2844) Hash988f9602f4a7d1462967b97053125d98 ed6eca443ccc9b09053ba47b1b7eef0dd9bafa83 2732e80b7da59c89195fef90b5149a74a656073cb9b31508fc23da86d2f904dd
GET /b8d75565b0d082f6981bdac725bf160a.min.js HTTP/1.1
Host: js.sentry-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://urlz.fr
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
access-control-allow-origin: *
cache-control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-security-policy: connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io sentry.io *.sentry.io s1.sentry-cdn.com o1.ingest.sentry.io api2.amplitude.com app.pendo.io data.pendo.io reload.getsentry.net t687h3m0nh65.statuspage.io sentry.zendesk.com ekr.zdassets.com maps.googleapis.com; frame-src app.pendo.io demo.arcade.software js.stripe.com sentry.io; worker-src blob:; script-src 'self' 'unsafe-inline' 'report-sample' s1.sentry-cdn.com js.sentry-cdn.com browser.sentry-cdn.com statuspage-production.s3.amazonaws.com static.zdassets.com aui-cdn.atlassian.com connect-cdn.atl-paas.net js.stripe.com 'strict-dynamic' cdn.pendo.io data.pendo.io pendo-io-static.storage.googleapis.com pendo-static-5634074999128064.storage.googleapis.com; base-uri 'none'; img-src * blob: data:; media-src *; object-src 'none'; font-src * data:; style-src * 'unsafe-inline'; default-src 'none'; frame-ancestors 'self' *.sentry.io; report-uri https://o1.ingest.sentry.io/api/54785/security/?sentry_key=f724a8a027db45f5b21507e7142ff78e&sentry_release=7b2789ce8e02343806f979aa5864127d663f9db5
x-envoy-upstream-service-time: 22
x-envoy-attempt-count: 1
content-encoding: gzip
accept-ranges: bytes
date: Sat, 12 Apr 2025 17:43:14 GMT
age: 45
x-served-by: frontend-misc-78954d7644-rr88g, cache-chi-kigq8000029-CHI, cache-hel1410022-HEL
vary: Accept-Encoding
timing-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains
content-length: 1356
X-Firefox-Spdy: h2
|
|
| srv231043.hoster-test.ru/p6 | 31.28.24.131 | 403 Forbidden | 294 B |
URL GET srv231043.hoster-test.ru/p6 IP31.28.24.131:80 ASN#12616 Citytelecom LLC
File typeHTML document, ASCII text Hashb956a1fbe524944e943966b3f8100efe df822ab25186b46c4757c0d0d3da1dddbbf861ef b983f882aa472e489673ab64d3cc1d78408b6f54508822189ec7aeec6dfbdc89
GET /p6 HTTP/1.1
Host: srv231043.hoster-test.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 12 Apr 2025 17:43:13 GMT
Server: Apache/2.2.15 (CentOS)
Content-Length: 294
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from t0.hoster.ru
X-Cache-Lookup: MISS from t0.hoster.ru:6666
Connection: keep-alive
|
|
| tmzr.themoneytizer.fr/v9.23.0u2.0.28/eb3c0e3fb1c0386f33f1e272089f2185/prebid.js | 104.21.32.1 | 200 OK | 451 kB |
URL GET tmzr.themoneytizer.fr/v9.23.0u2.0.28/eb3c0e3fb1c0386f33f1e272089f2185/prebid.js IP104.21.32.1:443
CertificateIssuerGoogle Trust Services Subjectthemoneytizer.fr Fingerprint12:FE:8C:16:81:42:97:36:63:D6:43:17:B1:B5:3D:A9:DD:6C:19:F9 ValiditySun, 16 Mar 2025 21:13:17 GMT - Sat, 14 Jun 2025 22:10:32 GMT
File typeJavaScript source, ASCII text, with very long lines (58660) Size451 kB (450797 bytes) Hash2879cedfa5aaa48418446ee2e8fbd4b9 6a2d8d95f28fb8cb1280c7d50f87aff9b7dd4c0f f577803aa72bce5aa719aff9523668d80667d40d127b70262a712fe1dd1b249b
GET /v9.23.0u2.0.28/eb3c0e3fb1c0386f33f1e272089f2185/prebid.js HTTP/1.1
Host: tmzr.themoneytizer.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 12 Apr 2025 17:43:14 GMT
content-type: application/javascript
x-amz-id-2: ATObNIuqgU0j+QqXoahiNliKxzPbOD5JjK8En3oyouwe1lmR23zQqCKRWyzxKcKS9ZixF3XVtir43GCRT0O1kA==
x-amz-request-id: 8HVT1ZGAX75Z8XHN
last-modified: Tue, 18 Mar 2025 16:57:06 GMT
etag: W/"2879cedfa5aaa48418446ee2e8fbd4b9"
x-amz-server-side-encryption: AES256
cache-control: max-age=2678400
cf-cache-status: HIT
age: 15
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RRaHu1Bz0oSTvlqSMP9AUHq2saOPAp%2Bh64FSca4f%2BCINlUN%2FELSxGOXsEWS%2BC2i1Gusba7szJuTtcFceEZ9J7JJQdkHDNpa5B20V%2FlD2r1oUK%2BfFjNN89s%2BZLnnRI9%2FIjExDVHJqvcc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92f4865b48f41c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5607&min_rtt=416&rtt_var=10372&sent=7&recv=12&lost=0&retrans=0&sent_bytes=3214&recv_bytes=1090&delivery_rate=7063414&cwnd=254&unsent_bytes=0&cid=73470f8919b62bc3&ts=113&x=0"
X-Firefox-Spdy: h2
|
|
| | 104.21.91.223 | 301 Moved Permanently | 8.9 kB |
IP104.21.91.223:443
CertificateIssuerGoogle Trust Services Subjecturlz.fr Fingerprint3E:B8:D5:0C:23:AD:6D:58:D0:9E:D9:B4:06:DE:49:E0:95:8A:BE:56 ValidityWed, 19 Feb 2025 10:21:18 GMT - Tue, 20 May 2025 11:19:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| PhishTank | phishing | Other |
GET /umT0 HTTP/1.1
Host: urlz.fr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Sat, 12 Apr 2025 17:43:11 GMT
content-type: text/html; charset=UTF-8
location: http://urlz.fr/umT0
expires: Sat, 12 Apr 2025 17:44:11 GMT
cache-control: max-age=60
x-fastcgi-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QKmai2at5QUW6gPrY0owL6jyzG7JYFtKi5lEf9jtNFA5VOKAe%2B1IvkvneYlmGJloHOveX2GK60q6ZdfPjGrmgPbMNztlZSz%2Be2oQtGMFcw8myeFLlkBStJKJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 92f48645780656b9-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=670&min_rtt=516&rtt_var=292&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3263&recv_bytes=1235&delivery_rate=6397643&cwnd=254&unsent_bytes=0&cid=7046475dec80d8eb&ts=147&x=0"
X-Firefox-Spdy: h2
|
|
| srv231043.hoster-test.ru/p6 | 31.28.24.131 | 403 Forbidden | 294 B |
URL GET srv231043.hoster-test.ru/p6 IP31.28.24.131:80 ASN#12616 Citytelecom LLC
File typeHTML document, ASCII text Hashb956a1fbe524944e943966b3f8100efe df822ab25186b46c4757c0d0d3da1dddbbf861ef b983f882aa472e489673ab64d3cc1d78408b6f54508822189ec7aeec6dfbdc89
GET /p6 HTTP/1.1
Host: srv231043.hoster-test.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Date: Sat, 12 Apr 2025 17:43:11 GMT
Server: Apache/2.2.15 (CentOS)
Content-Length: 294
Content-Type: text/html; charset=iso-8859-1
X-Cache: MISS from t0.hoster.ru
X-Cache-Lookup: MISS from t0.hoster.ru:6666
Connection: keep-alive
|
|
| www.googletagmanager.com/gtag/js?id=UA-162669458-1 | 142.250.74.168 | 200 OK | 265 kB |
URL GET www.googletagmanager.com/gtag/js?id=UA-162669458-1 IP142.250.74.168:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint88:85:26:A3:0A:0B:44:C6:92:DD:7B:0B:D1:14:38:BA:26:B9:EF:D9 ValidityThu, 20 Mar 2025 11:18:39 GMT - Thu, 12 Jun 2025 11:18:38 GMT
File typeJavaScript source, ASCII text, with very long lines (5436) Size265 kB (265054 bytes) Hash7cb6845eae516f73ed62bf256a6a1ca7 3b147528e8eb3fad210be3dbfd129d050dd2c7f1 e7b2771e8001cdf965f3ee4a9a5fdc0e818d6312c83a4097ccc8fc50ed84776e
GET /gtag/js?id=UA-162669458-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://urlz.fr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 12 Apr 2025 17:43:12 GMT
expires: Sat, 12 Apr 2025 17:43:12 GMT
cache-control: private, max-age=900
last-modified: Sat, 12 Apr 2025 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1020:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1020:0
report-to: {"group":"ascgcycc:1020:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1020:0"}],}
server: Google Tag Manager
content-length: 93793
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
0.0.0.0