GET lhcrecc.com/confirm/ar/lp3/img/sg6aihfjbtzynrdw94ok.png
200 OK 11 kB URL GET HTTP/3 lhcrecc.com/confirm/ar/lp3/img/sg6aihfjbtzynrdw94ok.png
IP
Requested by https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Certificate IssuerGoogle Trust Services LLC
Subjectlhcrecc.com
FingerprintAF:1B:20:0A:C1:C9:FE:43:7B:12:1D:A3:07:0F:4C:5D:B2:36:29:7F
ValiditySat, 23 Dec 2023 07:23:48 GMT - Fri, 22 Mar 2024 07:23:47 GMT
File type PNG image data, 140 x 131, 8-bit/color RGBA, non-interlaced
Hash 8a48c7f78206dae94c192349fe569322
6497f357bbd618be652968894542871c3f1b9e4f
169c8b788179213f0704266f8e234b4aec11200ffac1be72e7d81964b06fd3e7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /confirm/ar/lp3/img/sg6aihfjbtzynrdw94ok.png HTTP/1.1
Host: lhcrecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 26 Dec 2023 20:30:57 GMT
content-type: image/png
content-length: 11062
cache-control: public, max-age=31536000, must-revalidate
cache-status: "Netlify Edge"; hit
etag: "4d1cd72eb3e6050d5a36d7589e1b3b2a-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HJKX5HWS5PRYCE1XFGJCKX6H
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fx7rV74YBTzfrO9%2Fbq9xNJjPQUohIXlvpAgesXUui57ACwtzvvbz1pMVwV0n9ejYUw5XOTL82Capb3bPXpQw8uRYJqRsRwpyvcqSsK0C9qLxGtM%2BNMMkW0OMQuwZ0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83bc15abc9bdb4fd-OSL
alt-svc: h3=":443"; ma=86400
GET lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
200 OK 993 B URL User Request GET HTTP/2 lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
IP
Certificate IssuerGoogle Trust Services LLC
Subjectlhcrecc.com
FingerprintAF:1B:20:0A:C1:C9:FE:43:7B:12:1D:A3:07:0F:4C:5D:B2:36:29:7F
ValiditySat, 23 Dec 2023 07:23:48 GMT - Fri, 22 Mar 2024 07:23:47 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1155), with no line terminators
Hash 5f3123f40dd5769b7325eebace652b4b
9760f54614941e06881d3f545b1b1b359b7d825f
8cdf9f86c349f5b01d19bd67a0689237c6f0aa5b5fd6022758289af53ea4ff89
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low HTTP/1.1
Host: lhcrecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 26 Dec 2023 20:30:57 GMT
content-type: text/html; charset=UTF-8
age: 13496
cache-control: public,max-age=0,must-revalidate
cache-status: "Netlify Edge"; hit
strict-transport-security: max-age=31536000
x-nf-request-id: 01HJKX5HBV2QCYDVRTVWV41BSC
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=db5xORD0eo0LhqGHpdPKF0ELsJcj%2FbpW2FaibojNAjWmTpH0eqKBAv3aYyDLVXziqRqjsKg3OWJ8nvPL2vw4zsnOhKnJAxFJx%2B%2FmSrCZ08COnItieyzxi2CWsqaWvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83bc15a868db0b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET lhcrecc.com/confirm/ar/lp3/css/style.css
200 OK 4.9 kB URL GET HTTP/3 lhcrecc.com/confirm/ar/lp3/css/style.css
IP
Requested by https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Certificate IssuerGoogle Trust Services LLC
Subjectlhcrecc.com
FingerprintAF:1B:20:0A:C1:C9:FE:43:7B:12:1D:A3:07:0F:4C:5D:B2:36:29:7F
ValiditySat, 23 Dec 2023 07:23:48 GMT - Fri, 22 Mar 2024 07:23:47 GMT
File type ASCII text, with very long lines (5150), with no line terminators
Hash efdab3ed6030777b28c42b8aa18f5b79
4a23c4f5f62ab4ba8b7fbbda6f4278944fe260c9
64d7aebbd372c36ff170465286211d21a7da9e3d60d296812bcf2bbe488ba95e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /confirm/ar/lp3/css/style.css HTTP/1.1
Host: lhcrecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Dec 2023 20:30:57 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"36782d1f9092acf3fa69aa91babb66ec-ssl-df"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HJKX5HWWM6WATTF3EMRWC7WC
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FSqSiJisbWYne0pinoiD%2FDu6xa7UcMKEZ04jN65zmXa6%2BxAtR52RwVN%2F0NTSFpCX5r41BX%2BTj5b09EQd2Lc9uS9cLx8ediO9fHMN8TwVSX8SbrFT%2Fjg5pZLrWjcV6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83bc15abc9bcb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET lhcrecc.com/assets/link.js
200 OK 605 B URL GET HTTP/3 lhcrecc.com/assets/link.js
IP
Requested by https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Certificate IssuerGoogle Trust Services LLC
Subjectlhcrecc.com
FingerprintAF:1B:20:0A:C1:C9:FE:43:7B:12:1D:A3:07:0F:4C:5D:B2:36:29:7F
ValiditySat, 23 Dec 2023 07:23:48 GMT - Fri, 22 Mar 2024 07:23:47 GMT
File type ASCII text, with very long lines (656), with no line terminators
Hash c4d4bfd809d704aeb56bc4fa6843b8e1
8d5f5247a5edf10c84e19b1029ceb0b46d67e57c
5b0ba0b247f90a07dc23a27678a6382ff25531d3374cc42bac9101a761afd4b1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/link.js HTTP/1.1
Host: lhcrecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 26 Dec 2023 20:30:57 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, must-revalidate
cache-status: "Netlify Edge"; hit
etag: W/"fd1dbeff60eed22ddafd8deec55ff57c-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01HJ65NPYGH38DCR72VSR1DCDG
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nxr9EAHqOh%2B%2FPkyTu2dOTN0mTgGkGtyK4mZad41%2Fsq43ToiQ2lkvAorVi9lhWGRzX2Sh1PsYpCBLig0ZAfbj2f%2BYJGTRMYH%2FRmoVUe7vBoUQHV43VMXkSn85nVJFwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 83bc15abc9beb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET lhcrecc.com/favicon.ico
404 Not Found 3.1 kB IP
Requested by https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Certificate IssuerGoogle Trust Services LLC
Subjectlhcrecc.com
FingerprintAF:1B:20:0A:C1:C9:FE:43:7B:12:1D:A3:07:0F:4C:5D:B2:36:29:7F
ValiditySat, 23 Dec 2023 07:23:48 GMT - Fri, 22 Mar 2024 07:23:47 GMT
File type HTML document, ASCII text, with very long lines (3234), with no line terminators
Hash 983ad7ad3b11851a568dac1033e352b7
b97321d9a14c18bc49a2029cae02a7c6fae9e2a3
7037defc36dc79e60caa283cf5443f489b9daa5be1dee869404a3b0b95f687e6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: lhcrecc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lhcrecc.com/confirm/ar/lp3/index.html?mcdata=c=d8341e23-0d39-4d28-be1e-e83c56971b73..d=1-0-0..m=01hjkx4x9qg0gqmtyymvde1sz6..l=17036226368..e=763608584129880064..t1=5473273..t2=7779138..t3=other..t4=chrome..t5=android..t6=unspecified_android..t7=EG..t8=ar..t9=vodafonegermany..t10=low
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 26 Dec 2023 20:30:58 GMT
content-type: text/html; charset=utf-8
cache-control: public, max-age=31536000, must-revalidate
cache-status: "Netlify Edge"; hit
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01HJKX5J5MKSBZ876YK0KQ0MKE
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l3rvOPX%2Fu1LfG4f7rhpGYM5ddKrwcEyMzwdeEC%2F48a%2FjkJSCLlD%2FD%2BZJRmADhgnF6tZgrsnb24Oz3isn9VOzWPvQq7OQThmIDGosL0mG7C6gWZREVWuVDNIZ520WZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 83bc15ad8c2fb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1