| |  172.67.146.155 | 200 OK | 7.3 kB |
IP172.67.146.155:443
CertificateIssuerGoogle Trust Services Subjectpirlotv.pl Fingerprint55:CC:58:A1:03:2D:0D:31:A4:7E:12:4C:B5:CC:50:04:D7:D1:5F:0C ValidityWed, 02 Apr 2025 17:22:09 GMT - Tue, 01 Jul 2025 18:20:56 GMT
File typeHTML document, Unicode text, UTF-8 text, with CRLF line terminators Hash60be473dde6101c800e679d82deea5b0 4b268947de4a855ed1661417d8a48d9fa7814c9d 80c55b489ab6d3928a1c4ea09d4b610d8fc7a8bd995dea0298c8abca68fa6957
GET / HTTP/1.1
Host: www.pirlotv.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 22 Apr 2025 21:46:35 GMT
content-type: text/html
server: cloudflare
vary: Accept-Encoding
x-powered-by: PHP/5.4.16
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 9348508f491b56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| paupsoborofoow.net/tag.min.js | 104.21.50.180 | 200 OK | 103 kB |
URL GET paupsoborofoow.net/tag.min.js IP104.21.50.180:443
CertificateIssuerGoogle Trust Services Subjectpaupsoborofoow.net FingerprintBB:AB:82:1F:E9:CA:54:E5:11:30:EC:4D:A7:12:04:8F:33:BE:0C:B5 ValidityMon, 31 Mar 2025 22:57:38 GMT - Sun, 29 Jun 2025 23:55:55 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size103 kB (102573 bytes) Hash9ba2af4f7947da1ada318b9fd2e646e2 23426633a879bbc42e6fbc11b3f35fff92fa2200 348179be47c8627b515d7c76e96dc891146d669714c0541f234431ebbb68c954
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /tag.min.js HTTP/1.1
Host: paupsoborofoow.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 22 Apr 2025 21:46:36 GMT
content-type: application/javascript
server: cloudflare
x-trace-id: b6bad571fcd0c1b1031c5b9c7555d7ce
cache-control: public, max-age=600, s-maxage=1800
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 1299
last-modified: Tue, 22 Apr 2025 21:24:57 GMT
cf-ray: 93485098986956af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stokrureeb.net/5/9167804/?oo=1&js_build=iclick-v1.1127.0&dmn=paupsoborofoow.net&tt=2&ix=0 |  139.45.197.107 | 204 No Content | 0 B |
URL POST stokrureeb.net/5/9167804/?oo=1&js_build=iclick-v1.1127.0&dmn=paupsoborofoow.net&tt=2&ix=0 IP139.45.197.107:443
CertificateIssuerLet's Encrypt Subjectstokrureeb.net Fingerprint3C:35:EA:B9:F7:B0:1D:48:48:5C:B0:01:36:E7:76:F4:84:42:7E:51 ValidityMon, 21 Apr 2025 21:17:16 GMT - Sun, 20 Jul 2025 21:17:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /5/9167804/?oo=1&js_build=iclick-v1.1127.0&dmn=paupsoborofoow.net&tt=2&ix=0 HTTP/1.1
Host: stokrureeb.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2523
Origin: https://www.pirlotv.pl
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Tue, 22 Apr 2025 21:46:38 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://www.pirlotv.pl
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
timing-allow-origin: *
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| www.pirlotv.pl/layout0.css | 172.67.146.155 | 200 OK | 9.4 kB |
URL GET www.pirlotv.pl/layout0.css IP172.67.146.155:443
CertificateIssuerGoogle Trust Services Subjectpirlotv.pl Fingerprint55:CC:58:A1:03:2D:0D:31:A4:7E:12:4C:B5:CC:50:04:D7:D1:5F:0C ValidityWed, 02 Apr 2025 17:22:09 GMT - Tue, 01 Jul 2025 18:20:56 GMT
File typeUnicode text, UTF-8 text, with very long lines (7129), with CRLF line terminators Hash7ed8ab1f8a3a1156bef3b4c460379559 41b371d884dc213c59bfbc4406e219853b866c83 c5fc443e567980d417a733fd91eaa5ab743421ab9a14273251956e54f6e80bbf
GET /layout0.css HTTP/1.1
Host: www.pirlotv.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 22 Apr 2025 21:46:35 GMT
content-type: text/css
server: cloudflare
last-modified: Thu, 03 Apr 2025 14:57:46 GMT
vary: Accept-Encoding
etag: "67eea1ea-2486"
content-encoding: gzip
cache-control: max-age=2678400
cf-cache-status: HIT
cf-ray: 934850947d4e56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.pirlotv.pl/tiempo.js | 172.67.146.155 | 200 OK | 5.1 kB |
IP172.67.146.155:443
CertificateIssuerGoogle Trust Services Subjectpirlotv.pl Fingerprint55:CC:58:A1:03:2D:0D:31:A4:7E:12:4C:B5:CC:50:04:D7:D1:5F:0C ValidityWed, 02 Apr 2025 17:22:09 GMT - Tue, 01 Jul 2025 18:20:56 GMT
File typeASCII text, with very long lines (392), with CRLF line terminators Hash622cde3c9a5f55de79ce1b409f46ebc6 3a5346daa21a60effcdb47b3621d98f03202d082 c076e16f5798f33476b322383a9300e9cbbe1c58e00224465c47528a0cbd3e9b
GET /tiempo.js HTTP/1.1
Host: www.pirlotv.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 22 Apr 2025 21:46:35 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jun 2020 18:52:14 GMT
vary: Accept-Encoding
etag: W/"5ee27d5e-13dc"
content-encoding: gzip
cache-control: max-age=2678400
cf-cache-status: HIT
cf-ray: 934850948d5456c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js |  142.250.74.106 | 200 OK | 94 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js IP142.250.74.106:443
CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint7E:14:87:08:DF:BA:04:65:17:BA:3B:4F:BA:EA:BC:8C:3F:0A:A4:00 ValidityMon, 31 Mar 2025 08:55:43 GMT - Mon, 23 Jun 2025 08:55:42 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (32769) Hashddb84c1587287b2df08966081ef063bf 9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f 88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33333
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 17 Apr 2025 17:51:50 GMT
expires: Fri, 17 Apr 2026 17:51:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 446085
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.pirlotv.pl/logo.png | 172.67.146.155 | 200 OK | 1.1 kB |
IP172.67.146.155:443
CertificateIssuerGoogle Trust Services Subjectpirlotv.pl Fingerprint55:CC:58:A1:03:2D:0D:31:A4:7E:12:4C:B5:CC:50:04:D7:D1:5F:0C ValidityWed, 02 Apr 2025 17:22:09 GMT - Tue, 01 Jul 2025 18:20:56 GMT
File typePNG image data, 454 x 30, 4-bit colormap, non-interlaced Hash4cb3ff60c491ee013e76ffeafa2a4a82 010cc97401d7e6dfc1fa8dbc1b31a01888db3f31 71e3b31e2da2a3ca45ac4a177d21bb2847a809bf554f2ed71f83e073a4cc6021
GET /logo.png HTTP/1.1
Host: www.pirlotv.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 22 Apr 2025 21:46:35 GMT
content-type: image/png
server: cloudflare
last-modified: Wed, 02 Apr 2025 18:22:57 GMT
vary: Accept-Encoding
etag: W/"67ed8081-422"
content-encoding: gzip
cache-control: max-age=2678400
cf-cache-status: HIT
cf-ray: 934850948d5d56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-MR6NKCJ3C1 | 142.250.178.40 | 200 OK | 381 kB |
URL GET www.googletagmanager.com/gtag/js?id=G-MR6NKCJ3C1 IP142.250.178.40:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintE4:97:12:2A:2B:30:84:66:33:9D:D6:09:14:D3:8F:CE:3E:20:73:24 ValidityMon, 31 Mar 2025 08:54:37 GMT - Mon, 23 Jun 2025 08:54:36 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size381 kB (380844 bytes) Hash97f26403ac85bb833bba0e7abc3825b0 37456e21c90e6917cca7a85beaf0a7698da260eb 4c05225281e4561242cd7c93ef19d0a3852dcce7eef2f7d344ac959473427499
GET /gtag/js?id=G-MR6NKCJ3C1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 22 Apr 2025 21:46:35 GMT
expires: Tue, 22 Apr 2025 21:46:35 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1063:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1063:0
report-to: {"group":"ascgcycc:1063:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1063:0"}],}
server: Google Tag Manager
content-length: 126736
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.pirlotv.pl/spriteup1.png | 172.67.146.155 | 200 OK | 13 kB |
URL GET www.pirlotv.pl/spriteup1.png IP172.67.146.155:443
CertificateIssuerGoogle Trust Services Subjectpirlotv.pl Fingerprint55:CC:58:A1:03:2D:0D:31:A4:7E:12:4C:B5:CC:50:04:D7:D1:5F:0C ValidityWed, 02 Apr 2025 17:22:09 GMT - Tue, 01 Jul 2025 18:20:56 GMT
File typePNG image data, 114 x 790, 8-bit colormap, non-interlaced Hash10451bdce8354f3b4ea31e862c36bfc4 5385811897f73e206cc96d81d24e11aa56d71849 f87883cc29ef2a912e1eb397db8dd7388e488c20320ab6171d1bb1df9164706e
GET /spriteup1.png HTTP/1.1
Host: www.pirlotv.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/layout0.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 22 Apr 2025 21:46:36 GMT
content-type: image/png
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7cr1wq70d2197gpa8CNlKwDIVxX%2BdpBx0lq8ljWaFVaPBxatsAIr0vHEBdCbhBnhBY7LfQuVgVDwlmgUiQ1h6yjECuA4mnsKkW4VlxHalft6f%2FDORK8heOZaIvnoJ6EWGw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 22 Dec 2023 15:25:58 GMT
vary: Accept-Encoding
etag: W/"6585aa86-3440"
content-encoding: gzip
cache-control: max-age=2678400
cf-cache-status: HIT
cf-ray: 934850984b7656c9-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2335&min_rtt=655&rtt_var=2107&sent=171&recv=238&lost=0&retrans=0&sent_bytes=12456&recv_bytes=13193&delivery_rate=72181&cwnd=12000&unsent_bytes=0&cid=05f2282b9105cdf3&ts=1335&x=16"
|
|
| www.pirlotv.pl/favicon.ico | 172.67.146.155 | 200 OK | 305 B |
URL GET www.pirlotv.pl/favicon.ico IP172.67.146.155:443
CertificateIssuerGoogle Trust Services Subjectpirlotv.pl Fingerprint55:CC:58:A1:03:2D:0D:31:A4:7E:12:4C:B5:CC:50:04:D7:D1:5F:0C ValidityWed, 02 Apr 2025 17:22:09 GMT - Tue, 01 Jul 2025 18:20:56 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash98371d3d7edc35f4e11315c0475f4463 ff048128be66659bb4bde3fdf6a17d0f95fdb72f ea4a057839341f71cd012ac213e470ea1c98ace4dc80b3324f155c48b2efe79e
GET /favicon.ico HTTP/1.1
Host: www.pirlotv.pl
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.pirlotv.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 22 Apr 2025 21:46:36 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMyJ4UeA4YegbfnHpNruVtBB3HueBrzxgCFHDPMRubK8tQC%2Bnwnk0bzHmgtHKDllMHS6nmtn01iPBBj6I3C0tOnZkDObq2WVLV7yuXFd2iQJADjrqZpEmReWX6JzQxScmA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Thu, 11 Jun 2020 17:13:22 GMT
etag: W/"5ee26632-131"
cache-control: max-age=2678400
cf-cache-status: HIT
content-encoding: br
cf-ray: 93485099eb8056c9-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4477&min_rtt=655&rtt_var=5194&sent=184&recv=241&lost=0&retrans=0&sent_bytes=26851&recv_bytes=13561&delivery_rate=148606&cwnd=24000&unsent_bytes=0&cid=05f2282b9105cdf3&ts=1585&x=16"
|
|