| GET www.pearlriverresort.com/d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650 |  104.17.182.58 | 404 Not Found | 0 B |
URL GET www.pearlriverresort.com/d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650 IP104.17.182.58:443
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ CertificateIssuerLet's Encrypt Subjectwww.pearlriverresort.com FingerprintF0:AE:9E:F5:1C:7A:64:A8:D0:E4:F7:3A:7C:B7:D4:CA:6D:E0:E4:CC ValidityWed, 25 Jun 2025 23:16:43 GMT - Tue, 23 Sep 2025 23:16:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650 HTTP/1.1
Host: www.pearlriverresort.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.group-images2.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
date: Thu, 10 Jul 2025 09:11:07 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
referrer-policy: no-referrer-when-downgrade
cache-control: no-cache
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 50a19afbefe1a01ca6a87078a2b119c2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 6GSB5OgYKJbohNOEMcdB6AUE5pm25dwaXxUiyzaujNCTLZ4et7bNvg==
cf-cache-status: EXPIRED
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 95ceee8e2fd77127-OSL
X-Firefox-Spdy: h2
|
|
| GET www.group-images2.com/wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-150x113-2.png |  82.127.54.170 | 200 OK | 7.4 kB |
URL GET www.group-images2.com/wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-150x113-2.png IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typePNG image data, 150 x 115, 8-bit/color RGBA, non-interlaced Hashdd89615f67803ed5647111150e54b93d d416fef3ef32a11070c995c42d70b7feeeb5ddf9 2c5b3e9f4bd1c73f2589194a3c2e01c9a8170d2ca2b8bd90b8c1369aaaf341dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-150x113-2.png HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Thu, 28 Jun 2018 13:31:05 GMT
ETag: "1cbd-56fb3be454975"
Accept-Ranges: bytes
Content-Length: 7357
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/wow/js/wow.min.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 8.2 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/wow/js/wow.min.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (8099) Hash21fe90eedcbaafb4ed529d78418d30bd a16375b80220d315151f57bab2d4ee03c9fe1d20 7852a22b72ead62cfc4a1b1ca32874b3e222f232a991a6d1432313572f534135
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/wow/js/wow.min.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "1fdb-56f9e2cbbb6c2"
Accept-Ranges: bytes
Content-Length: 8155
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/jquery.counterup.min.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 2.2 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/jquery.counterup.min.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (2181) Hash5b172bae8311e6a555130ed5c1f5d309 4a60e3f26cf36fad5f0877dc2c5f9fddacb1f5dd b8985337c167aa4e6e5296ffa6fd288e65bcd4e0da8f82439726f961f6f733da
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/jquery.counterup.min.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "886-56f9e2cc16d43"
Accept-Ranges: bytes
Content-Length: 2182
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/jquery.flexslider-min.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 22 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/jquery.flexslider-min.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (22239) Hash713a5d55fb669e19047d11696c912724 be1225831828975aec69f791de6cf118994c05ef 8b2c3d7393c0c588c830ba08b65816fd313fc7e0095948423aaa45205196f6bf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/jquery.flexslider-min.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "573e-56f9e2cc1aa33"
Accept-Ranges: bytes
Content-Length: 22334
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ | 82.127.54.170 | 200 OK | 42 kB |
URL User Request GET www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ IP82.127.54.170:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1871), with CRLF, LF line terminators Hash46f0c7bfc05d545a906c0647b2d7260b 494ad5ab5d8fcb787f97a58d4d25ba918a4d2a99 e5dc071e2d9e11016dfff8172bf4b9c96129e5e1609b465238a29ec202308fe7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 |
GET /2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:00 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
X-Pingback: http://www.group-images2.com/xmlrpc.php
Link: <http://www.group-images2.com/wp-json/>; rel="https://api.w.org/", <http://www.group-images2.com/?p=124595>; rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/wow/css/animate.min.css?ver=5.2.2 | 82.127.54.170 | 200 OK | 17 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/wow/css/animate.min.css?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeASCII text, with very long lines (16755) Hash7da1b41592f039eecd65d604482c10e1 e966ec2885d74306b80253ef057ea77546b2c149 0add8fcb5a583b1c16238fbe9d0de17c6272726b42be17fdcd9b4686ef5287d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/wow/css/animate.min.css?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "4238-56f9e2cbb3ce2"
Accept-Ranges: bytes
Content-Length: 16952
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/flexslider-setting.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 1.6 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/flexslider-setting.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (1584), with no line terminators Hashe4f6a0ba661c186c9a5758d584c47da0 549bdcdd8fd18ae8160aa812f4eb2da85d23c09d be6d8c8922c4ccb1c2021f65954b8d068068ac2aced63d4b501127d1b3358a34
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/flexslider-setting.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "630-56f9e2cc16d43"
Accept-Ranges: bytes
Content-Length: 1584
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET serv3.group-images2.com/group-images2/httpdocs/wp-content/uploads/2018/08/novobitstart1gris.png | 82.127.54.170 | 200 OK | 929 kB |
URL GET serv3.group-images2.com/group-images2/httpdocs/wp-content/uploads/2018/08/novobitstart1gris.png IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typePNG image data, 1920 x 1280, 8-bit gray+alpha, non-interlaced Size929 kB (929099 bytes) Hash0c0131605265003bda5b8519e8b3e6ed be79c09b26a4ee8904ac9dc7fccf32d7fac2df3d 468adcc8b6bb535e4bb553be88686d06ba9832afa66ad7c9f8fd2b556de3a71f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /group-images2/httpdocs/wp-content/uploads/2018/08/novobitstart1gris.png HTTP/1.1
Host: serv3.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:02 GMT
Server: Apache
Last-Modified: Mon, 20 Aug 2018 11:05:42 GMT
ETag: "e2d4b-573dbe3e7f4c5"
Accept-Ranges: bytes
Content-Length: 929099
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/sticky/sticky-settings.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 204 B |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/sticky/sticky-settings.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with no line terminators Hash37e4fde6d346cc6eb94df280f8d4abcb 3ed2fb09377e71d65777888cff026214d9b5c490 78e1b27fb71f1da5a95851b434942b982fb1445c6e8faed230f0a2a0771b93f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/sticky/sticky-settings.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "cc-56f9e2cbac302"
Accept-Ranges: bytes
Content-Length: 204
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-includes/js/wp-embed.min.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 1.4 kB |
URL GET www.group-images2.com/wp-includes/js/wp-embed.min.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (1403), with no line terminators Hash2dce40d16f9ff6332d3cbb7ae488a2b9 0a8eca5975f21a9f1bc079d111ca1657009dbe8f 2152557cac69e2bd7d6debef5037a9f554f9209cc305b8141b3329acb10c42b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-embed.min.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Thu, 13 Dec 2018 03:27:05 GMT
ETag: "57b-57cdee38da266"
Accept-Ranges: bytes
Content-Length: 1403
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3 | 82.127.54.170 | 200 OK | 1.7 kB |
URL GET www.group-images2.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Hash5ad1cfa3f5175f627385651790ed0bbd 7a06ac744a748ce4c315c798614d6d0068596cc4 3ad2fcb328295f1199d593adaba909f3eea790f695554ac3c1da7aa009fc0e0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.3 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Thu, 18 Jul 2019 08:59:22 GMT
ETag: "695-58df0d375099f"
Accept-Ranges: bytes
Content-Length: 1685
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET www.pearlriverresort.com/d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650 | 104.17.182.58 | 301 Moved Permanently | 0 B |
URL GET www.pearlriverresort.com/d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650 IP104.17.182.58:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650 HTTP/1.1
Host: www.pearlriverresort.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Thu, 10 Jul 2025 09:11:06 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 10 Jul 2025 10:11:06 GMT
Location: https://www.pearlriverresort.com/d/pearlriverresort/images/jw_feature-box-simple_1.jpg?1423101650
Vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 95ceee8c8f3b0b06-OSL
alt-svc: h3=":443"; ma=86400
|
|
| GET www.group-images2.com/wp-includes/css/dist/block-library/style.min.css?ver=5.2.2 | 82.127.54.170 | 200 OK | 29 kB |
URL GET www.group-images2.com/wp-includes/css/dist/block-library/style.min.css?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeASCII text, with very long lines (29295), with no line terminators Hash375bd65d60ff3c8723fccc343afb1b9b b06ba18a307bdf4821dded9ebffd2489f7b01d6a 4b8fe5c3d0e5ef7a6582185cbf5c535b5d369c8df1da98c03ed69833e55f474d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Tue, 11 Jun 2019 16:32:36 GMT
ETag: "726f-58b0ed82fed36"
Accept-Ranges: bytes
Content-Length: 29295
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/style.css?ver=5.2.2 | 82.127.54.170 | 200 OK | 123 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/style.css?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeUnicode text, UTF-8 text, with very long lines (1475), with CRLF line terminators Size123 kB (123264 bytes) Hash89ec66b4befd6fa93b49dd760bf6ae68 7bc724b20078b5290643ce686b87eddca82b7e9f cb800fcdebdb0f3097401ff2c6e62b6fc38b713ac166bce2b6706d7fd8b2e61a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/style.css?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Fri, 28 Sep 2018 15:52:28 GMT
ETag: "1e180-576f0714e043f"
Accept-Ranges: bytes
Content-Length: 123264
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/navigation.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 1.5 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/navigation.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeASCII text, with very long lines (1541), with no line terminators Hash0d9136fcfe55ac969b4cf5ed1325cfb7 274df14ad3958be8a3a2b2a537bbd8b75bc5640f 7288f38e4c2448497e5f11b19d115541ff911abba5065437043f83d4cb4be1fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/navigation.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "605-56f9e2cc1aa33"
Accept-Ranges: bytes
Content-Length: 1541
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 82.127.54.170 | 200 OK | 77 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/wp-content/themes/idyllic/assets/font-awesome/css/font-awesome.min.css?ver=5.2.2
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "12d68-56f9e2cb9cf42"
Accept-Ranges: bytes
Content-Length: 77160
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
|
|
| GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10dxCF8jA.woff2 |  142.250.74.35 | 200 OK | 14 kB |
URL GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10dxCF8jA.woff2 IP142.250.74.35:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeWeb Open Font Format (Version 2), TrueType, length 13464, version 1.0 Hashc3c999d86c40e0ae5cb9b11fe6f8f6b6 9cab579edc5bd3be99685babd077cc186edc366c 8b73730dac2513b137a7682f9abef928e2040491a2402babc255d05879c26b8f
GET /s/arimo/v34/P5sMzZCDf9_T_10dxCF8jA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.group-images2.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 13464
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 09 Jul 2025 19:22:13 GMT
Expires: Thu, 09 Jul 2026 19:22:13 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 29 May 2025 20:08:47 GMT
Content-Type: font/woff2
Age: 49734
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/number-counter.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 154 B |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/number-counter.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with no line terminators Hash81f4865fb7fd72e8343bc4bc86ad8cad 0ac2944064c76355f40b4c2eebf4b06bd9db60b0 d84acbcc179d00b42a88546052ea36dcf6b0d0262e7c30127ecdd2c57fe3d11a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/number-counter.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "9a-56f9e2cc1aa33"
Accept-Ranges: bytes
Content-Length: 154
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10XxCF8jA.woff2 | 142.250.74.35 | 200 OK | 99 kB |
URL GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10XxCF8jA.woff2 IP142.250.74.35:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeWeb Open Font Format (Version 2), TrueType, length 98564, version 1.0 Hashe2e5476b5eb7e8241038afb0234a425c c62ea34a30925ef7d481eecdbeb792d115829a68 86c4a19d6742fcd22c42db5891d1ab26292790607e15afe0d52674d10f9ce93d
GET /s/arimo/v34/P5sMzZCDf9_T_10XxCF8jA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.group-images2.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: font/woff2
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 98564
Date: Thu, 10 Jul 2025 09:11:07 GMT
Expires: Fri, 10 Jul 2026 09:11:07 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 29 May 2025 20:08:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
|
|
| GET www.group-images2.com/wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-512x392-3-192x192.jpg | 82.127.54.170 | 200 OK | 5.5 kB |
URL GET www.group-images2.com/wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-512x392-3-192x192.jpg IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82", baseline, precision 8, 192x192, components 3 Hashabb9e97af2225a37c40d08091e1daf4b ff185f8be3282244241bdc509b5e53e5b446c0c1 9e56cdc9cce532d907159319121c7e21385d0c911ff4d477920f8aa60be6a1bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-512x392-3-192x192.jpg HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:02 GMT
Server: Apache
Last-Modified: Thu, 28 Jun 2018 13:36:44 GMT
ETag: "1550-56fb3d278e3e8"
Accept-Ranges: bytes
Content-Length: 5456
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/font-awesome/css/font-awesome.min.css?ver=5.2.2 | 82.127.54.170 | 200 OK | 31 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/font-awesome/css/font-awesome.min.css?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/font-awesome/css/font-awesome.min.css?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "7918-56f9e2cb8db82"
Accept-Ranges: bytes
Content-Length: 31000
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/css/responsive.css?ver=5.2.2 | 82.127.54.170 | 200 OK | 14 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/css/responsive.css?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Hashf21176771c8eb8ffeb4f5c8aa98bffe9 99c4fc75ebfc364214fbe8b650f97c029d543efe b894fd51aa48ca2fed6ce3699104df6fcbe0405587a9899ff50a0c9e0843ff55
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/css/responsive.css?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "3684-56f9e2cbc30a2"
Accept-Ranges: bytes
Content-Length: 13956
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| GET www.group-images2.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp | 82.127.54.170 | 200 OK | 97 kB |
URL GET www.group-images2.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (31997) Hash49edccea2e7ba985cadc9ba0531cbed1 f8747f8ee704d9af31d0950015e01d3f9635b070 1db21d816296e6939ba1f42962496e4134ae2b0081e26970864c40c6d02bb1df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Tue, 11 Jun 2019 16:32:39 GMT
ETag: "17a69-58b0ed85e94fb"
Accept-Ranges: bytes
Content-Length: 96873
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.3 | 82.127.54.170 | 200 OK | 14 kB |
URL GET www.group-images2.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.3 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text Hash1534f06aa2b1b721a45372f8238e2461 86f7e7b926e1a88209d171b56dadbccc2c96f578 b7e17926b30342edecee8b3a93029ac51462e2b479277d8e077ba57173eb1900
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.3 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Thu, 18 Jul 2019 08:59:23 GMT
ETag: "3868-58df0d3798f70"
Accept-Ranges: bytes
Content-Length: 14440
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/sticky/jquery.sticky.min.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 4.3 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/sticky/jquery.sticky.min.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (4325), with no line terminators Hasheac8fbba198c36379b0432136f610807 3f1eaf7a0661eed8001c59395bea3e1e78f1cf94 9ea3f941d143f512c5b38e6727d3e99399637c241cee48125e249540a4e1032b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/sticky/jquery.sticky.min.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "10e5-56f9e2cba4922"
Accept-Ranges: bytes
Content-Length: 4325
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ | 0.0.0.0 | | 0 B |
URL User Request GET www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 |
GET /2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/ HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| GET www.group-images2.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 | 82.127.54.170 | 200 OK | 10 kB |
URL GET www.group-images2.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (9959) Hash7121994eec5320fbe6586463bf9651c2 90532aff6d4121954254cdf04994d834f7ec169b 48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Fri, 20 May 2016 04:11:28 GMT
ETag: "2748-5333e48ec7c00"
Accept-Ranges: bytes
Content-Length: 10056
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET fonts.gstatic.com/s/lustria/v13/9oRONYodvDEyjuhOnC8zMw.woff2 | 142.250.74.35 | 200 OK | 12 kB |
URL GET fonts.gstatic.com/s/lustria/v13/9oRONYodvDEyjuhOnC8zMw.woff2 IP142.250.74.35:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeWeb Open Font Format (Version 2), TrueType, length 11716, version 1.0 Hash0f76ba51473a2872823b37ef8cc1023b 79861442645b15d65562f38eaaf9ec4749003cb9 08e0a7e1c290b0d6d3f7c21866d6ddb921ea10afcd18abfbdd63875339e94c77
GET /s/lustria/v13/9oRONYodvDEyjuhOnC8zMw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.group-images2.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 11716
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 09 Jul 2025 17:07:51 GMT
Expires: Thu, 09 Jul 2026 17:07:51 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 26 Apr 2022 15:29:15 GMT
Content-Type: font/woff2
Age: 57796
|
|
| GET www.group-images2.com/wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-512x392-3-32x32.jpg | 82.127.54.170 | 200 OK | 1.1 kB |
URL GET www.group-images2.com/wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-512x392-3-32x32.jpg IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 82", baseline, precision 8, 32x32, components 3 Hashfac5bdc24746145ed63e570a7b32497f 54ddb078ef715b9b07d902a4c744b298b4d22241 8da5535867861704528fe74278bab3bbd9da0de9b1302154ea68d8e7e8d44f19
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2018/06/cropped-12039128_1075188572521556_8114585361841934984_o-512x392-3-32x32.jpg HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:02 GMT
Server: Apache
Last-Modified: Thu, 28 Jun 2018 13:36:44 GMT
ETag: "449-56fb3d2795dc8"
Accept-Ranges: bytes
Content-Length: 1097
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
|
|
| GET www.group-images2.com/2025/03/23/while-the-a-frontrunner-your-class-does-not-focus/ | 82.127.54.170 | 200 OK | 42 kB |
URL GET www.group-images2.com/2025/03/23/while-the-a-frontrunner-your-class-does-not-focus/ IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2037), with CRLF, LF line terminators Hashaaa8a4d63214a15a3a5295432305568e b65b04ffb1d2178e7a7c3fc8d5708f0d9a511a99 6877eeaaca83343c2d6e584b2ba6ff8fbc87ca42d52b254ee14a3387696fe4e1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
| NIDS | Severity | Alert |
|---|
| suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 |
GET /2025/03/23/while-the-a-frontrunner-your-class-does-not-focus/ HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:02 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
X-Pingback: http://www.group-images2.com/xmlrpc.php
Link: <http://www.group-images2.com/wp-json/>; rel="https://api.w.org/", <http://www.group-images2.com/?p=124605>; rel=shortlink
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
|
|
| GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 | 142.250.74.35 | 200 OK | 20 kB |
URL GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 IP142.250.74.35:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeWeb Open Font Format (Version 2), TrueType, length 20472, version 1.0 Hashff7c31ab8498bb2f3201ff222390a037 6bb23ed30c097b0a73569f9b79241911f7db6b54 cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e
GET /s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.group-images2.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20472
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 03 Jul 2025 11:17:55 GMT
Expires: Fri, 03 Jul 2026 11:17:55 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 29 May 2025 20:13:45 GMT
Content-Type: font/woff2
Age: 597192
|
|
| GET fonts.googleapis.com/css?family=Arimo%3A400%2C400i%2C700%7CLustria&ver=5.2.2 | 142.250.74.10 | 200 OK | 7.9 kB |
URL GET fonts.googleapis.com/css?family=Arimo%3A400%2C400i%2C700%7CLustria&ver=5.2.2 IP142.250.74.10:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Hashe7d827dc1a0e1c41af78a8af2aded6a3 7d64392c2fb582deb87d7ab8cda0aad6c167ba67 801d167bad5a1b039918608aaa4aee24ee147bcd586e8634a438071d7386a65f
GET /css?family=Arimo%3A400%2C400i%2C700%7CLustria&ver=5.2.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 10 Jul 2025 09:11:06 GMT
Date: Thu, 10 Jul 2025 09:11:06 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/idyllic-main.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 1.6 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/idyllic-main.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, ASCII text, with very long lines (1593), with no line terminators Hasha41261a0b17f7c706e3a284d6abad70d 46d4227993d1159d6c1cf15076041de68e497249 f816cf154d6dbe46cecdab4955f3930817c70a3f266d67a7dea8f22e6125dfe4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/idyllic-main.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "639-56f9e2cc16d43"
Accept-Ranges: bytes
Content-Length: 1593
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/assets/wow/js/wow-settings.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 115 B |
URL GET www.group-images2.com/wp-content/themes/idyllic/assets/wow/js/wow-settings.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Hash823e1c87ea9a7e7cb5396043713ca296 de7f8ba244916ee99308635937bb70df5da7ba14 cd9b11c971d55942bf1ce87a997c250e245cfe9bdf17f08f97d0073924adcdc7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/assets/wow/js/wow-settings.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "73-56f9e2cbb79d2"
Accept-Ranges: bytes
Content-Length: 115
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET www.group-images2.com/wp-content/themes/idyllic/js/jquery.waypoints.min.js?ver=5.2.2 | 82.127.54.170 | 200 OK | 9.0 kB |
URL GET www.group-images2.com/wp-content/themes/idyllic/js/jquery.waypoints.min.js?ver=5.2.2 IP82.127.54.170:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (8863) Hash7d05f92297dede9ecfe3706efb95677a 56bdb149d9baf64474a4c24ae66445769a28254e 368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/idyllic/js/jquery.waypoints.min.js?ver=5.2.2 HTTP/1.1
Host: www.group-images2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 10 Jul 2025 09:11:01 GMT
Server: Apache
Last-Modified: Wed, 27 Jun 2018 11:47:09 GMT
ETag: "2344-56f9e2cc1aa33"
Accept-Ranges: bytes
Content-Length: 9028
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 | 142.250.74.35 | 200 OK | 20 kB |
URL GET fonts.gstatic.com/s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 IP142.250.74.35:80
Requested byhttp://www.group-images2.com/2025/03/23/vulkan-vegas-bonusy-owo-wiele-roznych-opcji-do-odwiedzenia-zespolenia/
File typeWeb Open Font Format (Version 2), TrueType, length 20472, version 1.0 Hashff7c31ab8498bb2f3201ff222390a037 6bb23ed30c097b0a73569f9b79241911f7db6b54 cceb75629f2a32e4698d087f1bb0c6c4cdc1eb9b19cd416a54cfd7323356db7e
GET /s/arimo/v34/P5sMzZCDf9_T_10ZxCE.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.group-images2.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20472
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 03 Jul 2025 11:17:55 GMT
Expires: Fri, 03 Jul 2026 11:17:55 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 29 May 2025 20:13:45 GMT
Content-Type: font/woff2
Age: 597192
|
|