| app.trckkkk.com/click?pid=2&offer_id=6104&sub2=u536322&sub3=cl562481&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5 |  34.91.218.141 | 302 Found | 0 B |
URL User Request GET HTTP/2app.trckkkk.com/click?pid=2&offer_id=6104&sub2=u536322&sub3=cl562481&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5 IP34.91.218.141:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerSectigo Limited Subjectapp.trckkkk.com Fingerprint26:FF:C4:CC:92:A3:EE:67:E8:EB:30:68:BE:A1:61:04:89:26:B1:2E ValidityWed, 22 Jan 2025 00:00:00 GMT - Thu, 22 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=2&offer_id=6104&sub2=u536322&sub3=cl562481&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5 HTTP/1.1
Host: app.trckkkk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 30 Jan 2025 20:35:45 GMT
content-length: 0
location: https://app.trckkkk.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u536322&sub3=cl562481&sub4=&sub5=&sub6=&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5&sub14=6104&sub13=trafficback
x-adjust-use-original-forwarded-for: 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| app.trckkkk.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u536322&sub3=cl562481&sub4=&sub5=&sub6=&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5&sub14=6104&sub13=trafficback | 34.91.218.141 | 302 Found | 0 B |
URL User Request GET HTTP/2app.trckkkk.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u536322&sub3=cl562481&sub4=&sub5=&sub6=&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5&sub14=6104&sub13=trafficback IP34.91.218.141:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerSectigo Limited Subjectapp.trckkkk.com Fingerprint26:FF:C4:CC:92:A3:EE:67:E8:EB:30:68:BE:A1:61:04:89:26:B1:2E ValidityWed, 22 Jan 2025 00:00:00 GMT - Thu, 22 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u536322&sub3=cl562481&sub4=&sub5=&sub6=&sub7=rfhttps://medium.com/@tarmijankapling/chaturbate-tokens-injector-without-buying-d30f5a7b2531&sub8=rdmedium.com&sub15=df478aff72c5&sub14=6104&sub13=trafficback HTTP/1.1
Host: app.trckkkk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Thu, 30 Jan 2025 20:35:45 GMT
content-length: 0
location: https://go.fastorfar.com/click?pid=434&offer_id=25516&sub2=434_u536322&sub6=679be2a16bc5b90001cbadfe
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=679be2a16bc5b90001cbadfe; expires=Fri, 30 Jan 2026 20:35:45 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| go.fastorfar.com/click?pid=434&offer_id=25516&sub2=434_u536322&sub6=679be2a16bc5b90001cbadfe | 34.141.179.97 | 302 Found | 0 B |
URL User Request GET HTTP/2go.fastorfar.com/click?pid=434&offer_id=25516&sub2=434_u536322&sub6=679be2a16bc5b90001cbadfe IP34.141.179.97:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerSectigo Limited Subjectgo.fastorfar.com Fingerprint97:16:C8:81:57:11:8B:18:DA:C0:7C:A6:B1:A1:8B:D0:7F:49:C7:C9 ValidityFri, 27 Sep 2024 00:00:00 GMT - Sat, 27 Sep 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=434&offer_id=25516&sub2=434_u536322&sub6=679be2a16bc5b90001cbadfe HTTP/1.1
Host: go.fastorfar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 30 Jan 2025 20:35:45 GMT
content-length: 0
location: https://maugedarauy.net/link?z=8805346&var=434_u536322&ymid=679be2a123247a000133bbda
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=679be2a123247a000133bbda; expires=Fri, 30 Jan 2026 20:35:45 GMT; secure; SameSite=None
afoffers={"25516":1738269345}; expires=Fri, 30 Jan 2026 20:35:45 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| maugedarauy.net/link?z=8805346&var=434_u536322&ymid=679be2a123247a000133bbda |  172.64.146.197 | 302 Found | 0 B |
URL User Request GET HTTP/2maugedarauy.net/link?z=8805346&var=434_u536322&ymid=679be2a123247a000133bbda IP172.64.146.197:443
CertificateIssuerGoogle Trust Services Subjectmaugedarauy.net Fingerprint9B:A2:BB:E0:89:FC:47:82:BB:BD:6D:9E:40:E0:6F:63:53:0A:70:7F ValiditySat, 21 Dec 2024 15:09:10 GMT - Fri, 21 Mar 2025 16:09:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /link?z=8805346&var=434_u536322&ymid=679be2a123247a000133bbda HTTP/1.1
Host: maugedarauy.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 30 Jan 2025 20:35:45 GMT
content-length: 0
location: https://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://woastehiwour.net>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=048161fa29664bbbe67b71d2272a8c6f; expires=Fri, 30 Jan 2026 20:35:45 GMT
oaidts=1738269345; expires=Fri, 30 Jan 2026 20:35:45 GMT
OXCCLK=9051085.1; expires=Fri, 30 Jan 2026 20:35:45 GMT
allcnt=1; expires=Fri, 30 Jan 2026 20:35:45 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 90a44012e89f5688-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/c0f3edd3515d9c5f-1738250406916.188d10dcf199966c.js | 172.64.148.184 | 200 OK | 2.2 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/c0f3edd3515d9c5f-1738250406916.188d10dcf199966c.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashea901a7f2c7da781b87c9b3144090840 c412d79503eb25e157403ec3a499173330614451 9e85ed09f2ca4509fc5899c26c0af5c3528a80c3a64c690c2c70eadb6fa2c9f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/c0f3edd3515d9c5f-1738250406916.188d10dcf199966c.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-891"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161973b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/ab0326b830c94a6c-1738250406916-2e6429187728a842.js | 172.64.148.184 | 200 OK | 17 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/ab0326b830c94a6c-1738250406916-2e6429187728a842.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashe25a40e65d494cbaed9b1418595baac8 2bac21306d68b0f4e305a2428300d5e6a35b2155 dd516d15055db961583044f3f0817be93f9289a498a293cc367d66867ffa41f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/ab0326b830c94a6c-1738250406916-2e6429187728a842.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-e796"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016298eb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/a484baf3af761603-1738250406916.815c44f7e29f1420.js | 172.64.148.184 | 200 OK | 5.3 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/a484baf3af761603-1738250406916.815c44f7e29f1420.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashd6163a39ee554e3abf4c9a9e5bbbf6c8 ed1e334bbeb7075b0b514fb6f9242dc02683ee34 a815308c7069318cef8826c7b98966b642ce3b1930a8f6b9d45824ff2d85abd7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/a484baf3af761603-1738250406916.815c44f7e29f1420.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-601a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016196cb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/4YHX_gnUwFaGa3EVjKZD7/_buildManifest.js | 172.64.148.184 | 200 OK | 3.3 kB |
URL GET HTTP/2woastehiwour.net/_next/static/4YHX_gnUwFaGa3EVjKZD7/_buildManifest.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashb4cf80ed6becc688323241d1dc7cdd3d ec6a6c8576899e6a2248c367ade9a888ee1c4bbf 0c0baa67d4e4ad10382d559cf6645d38a809b96a2b735f95fe4d5da6fe97c526
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/4YHX_gnUwFaGa3EVjKZD7/_buildManifest.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-4e5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440162995b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/confetti-1.7ba08d11.webp | 172.64.148.184 | 200 OK | 12 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/confetti-1.7ba08d11.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hasheb224b5a86e8c9f478bd6f2a8c3c53ac 0bdc5a91bb1c87fe55b023ee6cef886edb64967e e910f36c92776b4e4a415316307a6cbb4d4f039bb8d66dd094c7b90d76f6fa1c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/confetti-1.7ba08d11.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 11774
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-2dfe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4944
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401a8947b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/confetti-3.22ce5e15.webp | 172.64.148.184 | 200 OK | 7.4 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/confetti-3.22ce5e15.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash6ffe537f32b7be06a870808ee94dadc5 598b8776ac199d0d8737969255c81da7c2cf16f2 e0ddaa01c812e3cdc7963b53edf9a53867a1930a7a566edeb872a0f36da94f7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/confetti-3.22ce5e15.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 7428
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-1d04"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4944
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401a8951b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/confetti-2.c36ea98d.webp | 172.64.148.184 | 200 OK | 4.3 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/confetti-2.c36ea98d.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash483d298f3477d9b9a9ed85e2997eb888 52e1956082c558621f102ba813e7bdcee3fcb31d 24763cff62c7e5d6aa028e7bc528010333a062aef7c5682c2dfdc7bfbcece822
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/confetti-2.c36ea98d.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 4258
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-10a2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4944
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401a894db51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-29.73effde7.webp | 172.64.148.184 | 200 OK | 3.3 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-29.73effde7.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashf056fca1ff4905abc7f176ac97a51b4e aa36ec73e22e130f0222d3403c590b7c1bf2a501 2f4095eedb5fad7a3d85414d111fc1578da4e3cd8377512b5d9eff81409e54ee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-29.73effde7.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 3282
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-cd2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 6132
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401a997fb51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-22.cbaa9850.webp | 172.64.148.184 | 200 OK | 3.2 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-22.cbaa9850.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash377c84ac3a10263b980eeed8ab2a73f7 ad73fc8367fc194d5e83ea5aa22822268eaf16e4 b9031957e3bd988575ea286e1da3a9dda53e4bcf133acc33fae1176208c48924
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-22.cbaa9850.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 3178
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-c6a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4658
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401aa990b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-25.ac4643c8.webp | 172.64.148.184 | 200 OK | 3.5 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-25.ac4643c8.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashdeb40bd76e48cd42768b79209e86a3e1 f1c245678ceb1c1b44a22fb00b200df9163f759f 50e6d80fe2e54da55690357d51c6dc8526bada04ec1cbb454ec6d5501170c5d2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-25.ac4643c8.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 3542
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-dd6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 867
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401aa9a2b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/499014fa8f42a28f-1738250406916.eba360e9ed195600.js | 172.64.148.184 | 200 OK | 27 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/499014fa8f42a28f-1738250406916.eba360e9ed195600.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashe78e33bd55598ea91c20710eb1c4cb4c 0a1b596a852a231fa0671744fab0225f2d358561 e3b7907439f28e30ccc6f87ab7a87c4d8e7b45850b50eb8fe0487ad79664f79e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/499014fa8f42a28f-1738250406916.eba360e9ed195600.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-166a4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161971b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-30.5b232ba9.webp | 172.64.148.184 | 200 OK | 3.8 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-30.5b232ba9.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash994b3a71a57969afe8d521fd99a21516 b1514932a55c1f324b7fb7796ed129af08d3e419 b5b6aded70b2da4c2e3a2245b6540765e9b9e89f425051523a060d1a6da4f28a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-30.5b232ba9.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 3816
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-ee8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 867
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401a9977b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-27.bce2c088.webp | 172.64.148.184 | 200 OK | 2.6 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-27.bce2c088.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash18ddd923ca7dcba65552e8acb3e1a6f4 a9ae6a64cd5346ffe09caa44cff68c83a423ac6b e2af5013cbd1a4d10232f2e6e702362461e611de2c4981e423b1e483e1ac74fc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-27.bce2c088.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:47 GMT
content-type: image/webp
content-length: 2586
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-a1a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1095
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401aa988b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/4YHX_gnUwFaGa3EVjKZD7/_ssgManifest.js | 172.64.148.184 | 200 OK | 3.5 kB |
URL GET HTTP/2woastehiwour.net/_next/static/4YHX_gnUwFaGa3EVjKZD7/_ssgManifest.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hash52ade8dd4cb3ce44d34074a78d6e3c04 af7547ced8f9636d5f23ab701d1a033eb2a869c2 df532dd925c64074b87fece80c574b261dffb1f124e0198aaa234dbaa1d2930c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/4YHX_gnUwFaGa3EVjKZD7/_ssgManifest.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-a0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016299cb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/1c02c3e681ea9f6d-1738250406916-ebf163de3da5e125.js | 172.64.148.184 | 200 OK | 14 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/1c02c3e681ea9f6d-1738250406916-ebf163de3da5e125.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashf550e09f58f387bb54ee696735c9b97f a1ef0519b74dd3fb56ed3b4d5e80020f3d8b8c01 b6ad4617fc1ade8df316bba9fb248133c7a70a9c7cf06da606a8c917a3a218fd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1c02c3e681ea9f6d-1738250406916-ebf163de3da5e125.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-682f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161986b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/8fc6f0c1ec74df4d-1738250406916.a6b08a46df5a07d6.js | 172.64.148.184 | 200 OK | 1.3 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/8fc6f0c1ec74df4d-1738250406916.a6b08a46df5a07d6.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typegzip compressed data, from Unix Hashc191b6db9bf7aa44e505e2c854499818 42cdc01ceea5a294bd5786a40655bc98f87be19f bf09ec5e3568e4edbee9c9d5e9cac9045f861dffbfe616e394c1b71d1340b190
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8fc6f0c1ec74df4d-1738250406916.a6b08a46df5a07d6.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44018bdc8b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdntechone.com/stattag.js | 172.67.195.28 | 200 OK | 15 kB |
URL GET HTTP/3cdntechone.com/stattag.js IP172.67.195.28:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5658
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RrHjW2%2Br0qYrWCn809hN4ROJ89JUvKY%2BuLi3ZAkILl3A4aEi5Zph%2BNSgER7eUA8cDV68JgEYMiX9ID5lZuq85jZWoTSqzRUQ%2FWltcvpVjqt4LcF75NachirDIYKlH0%2FeMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 90a44019dc74b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1258&min_rtt=502&rtt_var=1194&sent=15&recv=12&lost=0&retrans=0&sent_bytes=11619&recv_bytes=1245&delivery_rate=6561933&cwnd=254&unsent_bytes=0&cid=a99d4d91ad5b2907&ts=48&x=0"
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/favicon.ico | 172.64.148.184 | 204 No Content | 0 B |
URL GET HTTP/2woastehiwour.net/favicon.ico IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 30 Jan 2025 20:35:47 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: MISS
expires: Fri, 31 Jan 2025 00:35:47 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 90a4401b3a6db51d-OSL
X-Firefox-Spdy: h2
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=8d2be970-11ae-4547-ad16-7f4cdba065b3 |  139.45.195.253 | 200 OK | 12 B |
URL POST HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=8d2be970-11ae-4547-ad16-7f4cdba065b3 IP139.45.195.253:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerSectigo Limited Subjectdatatechonert.com FingerprintED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72 ValidityWed, 11 Dec 2024 00:00:00 GMT - Tue, 23 Dec 2025 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=8d2be970-11ae-4547-ad16-7f4cdba065b3 HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1553
Origin: https://woastehiwour.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Thu, 30 Jan 2025 20:35:47 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://woastehiwour.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| cdntechone.com/stattag.js | 172.67.195.28 | 200 OK | 16 kB |
URL GET HTTP/3cdntechone.com/stattag.js IP172.67.195.28:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 5658
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DnwYez%2BGoOoqWwr8XKm%2B2ZZxZdKJ1D7k9qT4Qn8BF5vAQz%2FoSVXhYD%2FDUmjfydvlKddeZVcbowNvf5jZQLS%2BH2%2FmKimLjccjz19meBiL70Jq7LV8PaPRPdLCBqDCHy%2B4Ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 90a44019dc6ab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=1134&min_rtt=502&rtt_var=1262&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3281&recv_bytes=1245&delivery_rate=6561933&cwnd=254&unsent_bytes=0&cid=a99d4d91ad5b2907&ts=40&x=0"
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/4a836005f8bcf7a4-1738250406916.fff493d2a43c55d5.js | 172.64.148.184 | 200 OK | 453 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/4a836005f8bcf7a4-1738250406916.fff493d2a43c55d5.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (459), with no line terminators Hash4ee9a52fa5b221544de592b9b9658c44 36a90b9107106989de9b10c9aec69c1d50d055de adb8d405568e5be15d68e01bd893732448cfc5e1aa1c047257d6b8258e556a90
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4a836005f8bcf7a4-1738250406916.fff493d2a43c55d5.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440198eedb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/af846a0375549403-1738250406916.0d49c7577f644722.js | 172.64.148.184 | 200 OK | 465 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/af846a0375549403-1738250406916.0d49c7577f644722.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (471), with no line terminators Hash077416798998a684ff40fb3863cbc0a0 3641e4f818e4b2be2175e64a1f4be13510d17084 ec079bf75e188a1175a464e4e542cfa4c5edfd0e4473476df1db3dbadf7218b2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/af846a0375549403-1738250406916.0d49c7577f644722.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1d1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440198ef8b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/2317b809a320dff8-1738250406916.d045a2102aa0b159.js | 172.64.148.184 | 200 OK | 15 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/2317b809a320dff8-1738250406916.d045a2102aa0b159.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (15197), with no line terminators Hash5262e8066290256e48e34fc0dcdd90ab 9306f0fbef9841dd7c58429e35b208ac26d441d2 aaa3b938be6558c8cbeba292d9db169dcf5f6efdef24e7cf86b7aa9726b243a2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2317b809a320dff8-1738250406916.d045a2102aa0b159.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-3b5d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016196db51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/487f0dfa3f35c6d7-1738250406916.5c257be8c5ba7f0e.js | 172.64.148.184 | 200 OK | 4.9 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/487f0dfa3f35c6d7-1738250406916.5c257be8c5ba7f0e.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (5133), with no line terminators Hashece69d2678bdfcab8f8971d48e7b3d40 781579af6c37d56498010bdf237fbf185f2836db c7c326b5127ef7e8aec0302f0efe1596ad04898bd4779c34062ed57b52856b92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/487f0dfa3f35c6d7-1738250406916.5c257be8c5ba7f0e.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1331"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161977b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/css/0bc0cde260d08b97.css | 172.64.148.184 | 200 OK | 1.8 kB |
URL GET HTTP/2woastehiwour.net/_next/static/css/0bc0cde260d08b97.css IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeASCII text, with very long lines (1843), with no line terminators Hash64b2b4fa42c7d558d735e2cd28ecf88a 03d6da6e55b1201b51689590520da495a9233d67 2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: text/css
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-733"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7089
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440160965b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/36a63dd96ac7edc0-1738250406916-e5484341148cb390.js | 172.64.148.184 | 200 OK | 29 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/36a63dd96ac7edc0-1738250406916-e5484341148cb390.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (29024), with no line terminators Hash9c2365a046b7261e19f4ad41b049e46e 711389fca5b00c0d8a4de7db998f005f75fac77b b7aca7b0be40a132fad77c62267b39cbcf13836fad4dd3b1caa6a770ac88eec6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/36a63dd96ac7edc0-1738250406916-e5484341148cb390.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-7160"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161985b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/heart.53f2cd83.webp | 172.64.148.184 | 200 OK | 866 B |
URL GET HTTP/2woastehiwour.net/_next/static/media/heart.53f2cd83.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash5ccd0e0b546c18b101aee4ddd519981d 9713e1200e35c8c3f682fa792fda89b898cf7aca b489e2b31ce3037d8e68aa8acb36df8d726f489ea28a0aa2bb107487cf371348
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/heart.53f2cd83.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 866
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-362"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4944
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a440171b8db51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/dbb80ba394719d25-1738250406916.0157f5525bb5ad80.js | 172.64.148.184 | 200 OK | 16 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/dbb80ba394719d25-1738250406916.0157f5525bb5ad80.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (15494), with no line terminators Hash246c62a01ca76c5e64b7879c01635219 faa25c8618c4adc07d9e2619aa386782d21e2c7a e0e4a9f620af9b0283ad84377bfedc59ec8091dbed06d8f32f37a59d0cb30721
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/dbb80ba394719d25-1738250406916.0157f5525bb5ad80.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-3c86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440178c0bb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/38dae10dbd075567-1738250406916.6d500431489e3107.js | 172.64.148.184 | 200 OK | 449 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/38dae10dbd075567-1738250406916.6d500431489e3107.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (455), with no line terminators Hashc3909e39f684d50598cd82eebdcaf59b 3e8002d90756209e1df519b7d3cfe4bc675f6e7b 4af3aada23b3341b12e82b280d69a8dc53c525af41fd4122244ed7bde42675dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/38dae10dbd075567-1738250406916.6d500431489e3107.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44018ad98b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/146d76bf3d5fb8b9-1738250406916.10f1a530b815df9e.js | 172.64.148.184 | 200 OK | 473 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/146d76bf3d5fb8b9-1738250406916.10f1a530b815df9e.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (479), with no line terminators Hashf86fc3501f2234d05f9f68e2694f8134 2dbd1c47b12f68fe9ebbc0e40398a140f7eb00d5 085e37417994fa7412bb575dcad10375f44069b136aaa4f2c34ac279a1e46f68
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/146d76bf3d5fb8b9-1738250406916.10f1a530b815df9e.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1d9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44018bdd0b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/e83ec6bde6d81160-1738250406916-a301ca28168413de.js | 172.64.148.184 | 200 OK | 44 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/e83ec6bde6d81160-1738250406916-a301ca28168413de.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (43733), with no line terminators Hash0b448524e094923f9605bfd0c9516441 29637399a05fb754b80b867517b57ce1e5763921 0f1c34293a04120fc22529b6bc8296dad5f0a8dd05a201192bf887564102dcc0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e83ec6bde6d81160-1738250406916-a301ca28168413de.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-aad5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016298ab51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/9f1c06aba0c14c68-1738250406916.ee78737e76521d31.js | 172.64.148.184 | 200 OK | 587 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/9f1c06aba0c14c68-1738250406916.ee78737e76521d31.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (589), with no line terminators Hash096555d98c4f0da2e09f51ba9bec3014 735e934b1fed83644d0de8f527a02a8ee307a3e1 98c72191b1149ecc2b9d5d619d9a42d541be82058ab9ca0aa6c2ca8fb7ee3030
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9f1c06aba0c14c68-1738250406916.ee78737e76521d31.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-24b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440184d19b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/87d4f301da90027c-1738250406916.6c924336fe91d465.js | 172.64.148.184 | 200 OK | 469 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/87d4f301da90027c-1738250406916.6c924336fe91d465.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (475), with no line terminators Hasha076bf21751bc141e97406fbb584fac5 8064e789e206492b6038a0ee3756f6c2d384df7b 9ae20e9dcbb6a5533157562cd1834a3d304dcd6b77d3788b113ad86ad9daafe5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/87d4f301da90027c-1738250406916.6c924336fe91d465.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1d5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440195eacb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/rotate?var=8805346&ymid=434_u536322&b=22951561&campaignid=9051085&click_id=908930076104733005&rhd=1&oaid=2v6d2zemm7jh0dszmqqbzsso0xvg6dw&btz=UTC&bto=0&zz=8566134%3B8570140%3B8566117%3B8566072%3B8566088%3B8565967%3B8565998&uid=2v6d2zemm7jh0dszmqqbzsso0xvg6dw | 172.64.148.184 | 200 OK | 3.0 kB |
URL GET HTTP/2woastehiwour.net/rotate?var=8805346&ymid=434_u536322&b=22951561&campaignid=9051085&click_id=908930076104733005&rhd=1&oaid=2v6d2zemm7jh0dszmqqbzsso0xvg6dw&btz=UTC&bto=0&zz=8566134%3B8570140%3B8566117%3B8566072%3B8566088%3B8565967%3B8565998&uid=2v6d2zemm7jh0dszmqqbzsso0xvg6dw IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3009), with no line terminators Hashc63490083e997e8f4cac5aca80b02c6f 78e019b5190e6f48e3c50bffa02b84ec5042e89b a2312b0772221688f38211b059368315dbd95ce5e25550570d14c4df963ae332
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotate?var=8805346&ymid=434_u536322&b=22951561&campaignid=9051085&click_id=908930076104733005&rhd=1&oaid=2v6d2zemm7jh0dszmqqbzsso0xvg6dw&btz=UTC&bto=0&zz=8566134%3B8570140%3B8566117%3B8566072%3B8566088%3B8565967%3B8565998&uid=2v6d2zemm7jh0dszmqqbzsso0xvg6dw HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=2v6d2zemm7jh0dszmqqbzsso0xvg6dw; syncedCookie=true; oaidts=1738269347
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:47 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-trace-id: 1bc5922c3d0d52886c99a4e284afb9ff
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
timing-allow-origin: *
access-control-allow-origin: https://woastehiwour.net/
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=2v6d2zemm7jh0dszmqqbzsso0xvg6dw; expires=Fri, 30 Jan 2026 20:35:47 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 90a4401c5c0eb51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/ac5595402e335eea-1738250406916.3cfdc57f0372e5e9.js | 172.64.148.184 | 200 OK | 7.0 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/ac5595402e335eea-1738250406916.3cfdc57f0372e5e9.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (7133), with no line terminators Hash309061ab74ca638f460078aad0676d38 469e0bfe32600b6b32af0def65a0c2c0d7ec7fc3 95b40ce23cb442d3ed6f0ec23e0a460e294e130a98be2dc84a20a8220dbd97be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/ac5595402e335eea-1738250406916.3cfdc57f0372e5e9.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1b79"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440177be8b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/2bdd4d62f9c07d78-1738250406916.c58aa1c95e09907f.js | 172.64.148.184 | 200 OK | 449 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/2bdd4d62f9c07d78-1738250406916.c58aa1c95e09907f.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (455), with no line terminators Hash6856d9e4ade1e8756d20ff3f000e4011 a5ebe7acede23f1bbdb5c868112ef51b767a0277 7ebec28980bdf99f4a5571ed93ee10d8a3739ef067a084c4ccf40c434187fa33
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2bdd4d62f9c07d78-1738250406916.c58aa1c95e09907f.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440189d7cb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/127efc6b078804ef-1738250406916.836af60a55ea3e5d.js | 172.64.148.184 | 200 OK | 461 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/127efc6b078804ef-1738250406916.836af60a55ea3e5d.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (467), with no line terminators Hashb614b0376e5f81de8cdce6303de0841e 3db3b10e3e48dd1dcd0c1cfa14e482b460137c34 9e03ab4cb6ab1ff090e69771327a534dffee7b9322cb3e9e8cf7e1bdfdf88823
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/127efc6b078804ef-1738250406916.836af60a55ea3e5d.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1cd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440189d80b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/242ad9848e8ece8a-1738250406916.b1943e20729c92aa.js | 172.64.148.184 | 200 OK | 457 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/242ad9848e8ece8a-1738250406916.b1943e20729c92aa.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (463), with no line terminators Hash4143f6c793bb98263870ac8c849f4970 7ba56dcc28f306b6c41971f84c2eb6f98bf11d00 2562831b622957f9c72ee7c215709c63a5c14ab92260a591f7cb6ebe78726b82
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/242ad9848e8ece8a-1738250406916.b1943e20729c92aa.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440197ee2b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/16642289520928c9-1738250406916.cce7c766f8de695c.js | 172.64.148.184 | 200 OK | 385 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/16642289520928c9-1738250406916.cce7c766f8de695c.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (391), with no line terminators Hash4f4cca3bbbc43c9202524018cf7d8620 d9512e432b82a98e62d5f27d1373d9ff973c002f 0d6847aef607b198a1ee240473114614a93ada5936a1167594481d769f76f6d6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/16642289520928c9-1738250406916.cce7c766f8de695c.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-181"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440199f0db51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/3cacc58ea516fe6f-1738250406916.4d666b3ce7dcd66f.js | 172.64.148.184 | 200 OK | 30 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/3cacc58ea516fe6f-1738250406916.4d666b3ce7dcd66f.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (30035), with no line terminators Hash0e650c6fbdbaea01c64c59f71ecbe089 75d3aef97713ed867eb35e87cb91d4a6ad74ac3b 08800a958ef86e09d5001801f2f8645ae0a14002a8610f38a883b747e73cb544
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3cacc58ea516fe6f-1738250406916.4d666b3ce7dcd66f.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-7553"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440160967b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/4d859cac5ba89327-1738250406916-7c9f685438bac6d8.js | 172.64.148.184 | 200 OK | 110 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/4d859cac5ba89327-1738250406916-7c9f685438bac6d8.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size110 kB (109702 bytes) Hashfa92e582b2c89be329fbc8ac7170c6ac bf03008752166780239d14094615f3d6f01d52ac fadd974a6921e24c69b0f37ad3cdc0f67424923522f2102b988fe11ec99a763f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4d859cac5ba89327-1738250406916-7c9f685438bac6d8.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1ac86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161989b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/e349ffdbb65d6c93-1738250406916-660e5b7e2e3b7996.js | 172.64.148.184 | 200 OK | 11 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/e349ffdbb65d6c93-1738250406916-660e5b7e2e3b7996.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (10752), with no line terminators Hash35fee35b460cf851bdf3beecb8b35f5a f6af853cbdfb476165846933aada6cc3b1419022 8670480720bc1d26b090cc475660907e07d42ea2dd14cbb860ca04add28ce9cc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e349ffdbb65d6c93-1738250406916-660e5b7e2e3b7996.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-2a00"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016298cb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/cce078a36fb49fc2-1738250406916.a4de873c342c784d.js | 172.64.148.184 | 200 OK | 3.2 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/cce078a36fb49fc2-1738250406916.a4de873c342c784d.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (3246), with no line terminators Hash683176202fdbeb8424bd04d9509bbd0f 7f239bd98d1eae1ea63ff49336037e80a6e8b542 f1744878b7775462dfc1aafe3befbc2ac2221143816dec52d453d5910dd938f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/cce078a36fb49fc2-1738250406916.a4de873c342c784d.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-c68"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440178bf8b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/f47a9967b65997b4-1738250406916.6968f27ea0bcf339.js | 172.64.148.184 | 200 OK | 3.8 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/f47a9967b65997b4-1738250406916.6968f27ea0bcf339.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (3871), with no line terminators Hash32aa90afa32a5c20ee932e4097b914e8 6b6e5cfaa4efae7dd776aee725e60ba0f3e5e202 68e5f1f5f2f836d46118bb83ca7e3f8737f08b0d9a3bb3257cb270eb5eeef9c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/f47a9967b65997b4-1738250406916.6968f27ea0bcf339.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-ed1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440179c1ab51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/13c65fd13463b31b-1738250406916.d14fb864611e4790.js | 172.64.148.184 | 200 OK | 445 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/13c65fd13463b31b-1738250406916.d14fb864611e4790.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (451), with no line terminators Hash661d21f3a41e56a53cb44ddb62369251 0f70f2195b6db85f669894fce7c33740b7de1d0f 81fbf2c2174c4f07a9f0a6b4d53b3c6bc0d068e2a92017e52f6727d2ab932228
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/13c65fd13463b31b-1738250406916.d14fb864611e4790.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1bd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440198ef3b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/c360d44ead919d7f-1738250406916.8e64f8e332b18007.js | 172.64.148.184 | 200 OK | 5.7 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/c360d44ead919d7f-1738250406916.8e64f8e332b18007.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (5934), with no line terminators Hash6b6a9d08009d0ddcdcec758ccc0ee017 5a9b7858ce61763201c49f2dbc635a9353b3f84c fa09e7d78cec3d2dd327370fde513d80f0f65bd26d5c00ba8f87a4af5e755135
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/c360d44ead919d7f-1738250406916.8e64f8e332b18007.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1670"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161983b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/6c6f40314822b7bc-1738250406916.4efce0441b8579a1.js | 172.64.148.184 | 200 OK | 3.4 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/6c6f40314822b7bc-1738250406916.4efce0441b8579a1.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (3545), with no line terminators Hash388170b8a956ca09e3d2840fee805a2b 37c1e70206b0433ad9d8aba17b2f59f8ba928c1a 44284f63a7924f7e4300c0a1fd15ade737156b31603d7d2b70e2171f62df3eca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6c6f40314822b7bc-1738250406916.4efce0441b8579a1.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-d72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44017cc70b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/d6bae2fb8d6a34c3-1738250406916.c0db0e3a6b59783d.js | 172.64.148.184 | 200 OK | 457 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/d6bae2fb8d6a34c3-1738250406916.c0db0e3a6b59783d.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (463), with no line terminators Hashb78106ee1be6d0d8070e800b49763a13 40e4d16723a86d128d23bb87cdb322a33482df4f 1bd2926c524c586552e6e35f6df241b7dfbc8889664a73aea410cdeb00f5a191
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/d6bae2fb8d6a34c3-1738250406916.c0db0e3a6b59783d.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440199f10b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-28.384b019d.webp | 172.64.148.184 | 200 OK | 2.8 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-28.384b019d.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash92f52185fbc77ce09c20007c4ac9e1d5 c6e1b2d98b2a1ebbcde91939dcc429c096ed562a 3a53dce3130d0ad7622466ffa9d9537e33f77c8c45bd27a2b69b1e818177de9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-28.384b019d.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 2770
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-ad2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 6132
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401aa994b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/sync-metrics | 172.64.148.184 | 200 OK | 17 B |
URL POST HTTP/2woastehiwour.net/sync-metrics IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash225f751e75610b98f8b287e79370be3a 9e29d2c966fb36f3d233dfb232be6eeeee8f1341 0b19f26f50f17771f6562e4cf8c7bead37ba5aeeeec7cbfaf2576a6647401569
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-metrics HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 500
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: a1d07156a1db6488e348c931f44d2ad4
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 90a440187d5cb51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/5f80e97b59861eae-1738250406916.d796ee7b26b320ae.js | 172.64.148.184 | 200 OK | 485 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/5f80e97b59861eae-1738250406916.d796ee7b26b320ae.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (491), with no line terminators Hashdfda463ac50781d113391d36396e4a2b 7d7cfd8b7e8455fc1af3e1423a6ccd3236035e4c 33f6f13e47fccc038f1978972d4a70bd2febf340b05ab713c13e726509e30b49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5f80e97b59861eae-1738250406916.d796ee7b26b320ae.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1e5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440199f0ab51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-33.3f172195.webp | 172.64.148.184 | 200 OK | 3.0 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-33.3f172195.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash14fd3e08f7a4f90f31fe1d6b25b468b1 f5023a6193b64492d48854a61fbb86fc75737a6e b3c856ce0543be8165d13fd872f0041f575ab9aeb8feb321ebb6b1e79c1ea9f1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-33.3f172195.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:47 GMT
content-type: image/webp
content-length: 3030
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-bd6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 6133
expires: Fri, 31 Jan 2025 00:35:47 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401aa9a5b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/bf7348b0f0f41677-1738250406916.c33e54f82eec272e.js | 172.64.148.184 | 200 OK | 30 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/bf7348b0f0f41677-1738250406916.c33e54f82eec272e.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (30368), with no line terminators Hashf9cbc88f5215206ff9ec9be6a98a2218 91fb42703b2d90fe435d330d9aa8c0065aef4399 2f24f7abd7847fba1aab02b13701e6e12945c211d4d2bd1b849be05ea25bb06a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/bf7348b0f0f41677-1738250406916.c33e54f82eec272e.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-76a0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161975b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/views.3ac91604.webp | 172.64.148.184 | 200 OK | 1.1 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/views.3ac91604.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hashe97abf6f136d9497fc14cb9e72b2c636 51f062d0abe008f75f96ad377deea587d47c381c b462d5f38bf4519ff8232bcaa8c7e7420ed95c2a5e0d180565013aa7f3437776
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/views.3ac91604.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 1074
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-432"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4944
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a440172b90b51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/9f54be63ab9007e7-1738250406916.cdeb6a4dd8d7e5fc.js | 172.64.148.184 | 200 OK | 6.9 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/9f54be63ab9007e7-1738250406916.cdeb6a4dd8d7e5fc.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (7158), with no line terminators Hash135e1e4772ae84a007775ddb1718a491 26f98774987d3e87daf68bb5b2fe7b34172f294c 3d84489582e5329dc88dd99fe1258d62db5bd3687ebec7b30ef3ca75c9a0c96f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9f54be63ab9007e7-1738250406916.cdeb6a4dd8d7e5fc.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1ac9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440184d1cb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/d7439aca7a8b9941-1738250406916.8c1253f2c9c376e0.js | 172.64.148.184 | 200 OK | 465 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/d7439aca7a8b9941-1738250406916.8c1253f2c9c376e0.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (471), with no line terminators Hash5070444a5a78ee0ece4f94b7160645fa 16c99c4e57dd99a6e8deded831fb6da7eebfa485 aced97608de9880d8279a915c52c7a22772d9abeb88130166f5a5d19ea32e546
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/d7439aca7a8b9941-1738250406916.8c1253f2c9c376e0.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1d1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44018bdceb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/acdd0b42a706605f-1738250406916.abf1236b986635ac.js | 172.64.148.184 | 200 OK | 43 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/acdd0b42a706605f-1738250406916.abf1236b986635ac.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (43177), with no line terminators Hash9e38693d74b734cda8546a84a05b62b3 2ee7deddbd302bd95b2bf883a5dee4a5b70c6adf 524848871f9fb1f5362d40f12f533063dbcf80eab5ed3cf8835bf9301a9dc6af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/acdd0b42a706605f-1738250406916.abf1236b986635ac.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-a8a9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016197db51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/megaphone.ab784acd.webp | 172.64.148.184 | 200 OK | 770 B |
URL GET HTTP/2woastehiwour.net/_next/static/media/megaphone.ab784acd.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash66a5e8404b4514c579de67193ceae684 f41725c0b728ace6b8a7a328104ab25ae12eb778 71550ce5c0583f2db91a7644ae869cb122cbc76f5718915e789243d6297d5f89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/megaphone.ab784acd.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: image/webp
content-length: 770
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-302"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4944
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a440171b8fb51d-OSL
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/3c56943bad654b4d-1738250406916.9a7fc97fdc6c3974.js | 172.64.148.184 | 200 OK | 449 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/3c56943bad654b4d-1738250406916.9a7fc97fdc6c3974.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (455), with no line terminators Hashfa05ba44235dbda2b264298db0cc6c79 0af61b59314f2e84e0d57b480a4d520ed5c2cad2 f7666b5ee4bef26bef8ad075329c87253f7448ec4aeb54a1a984c7dd0878424a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3c56943bad654b4d-1738250406916.9a7fc97fdc6c3974.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440195ebbb51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/e10becfeb7726007-1738250406916.a1147d09b2c72a4b.js | 172.64.148.184 | 200 OK | 7.0 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/e10becfeb7726007-1738250406916.a1147d09b2c72a4b.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (7135), with no line terminators Hash9006f66a07b850e51629ff428be32905 5073c1f9e34c4e596b44aa04b1291e8069771cdf ca4894b7870eee321adb37eda8343a225153c0a5fab2fb241a1ac98251196dde
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e10becfeb7726007-1738250406916.a1147d09b2c72a4b.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1b80"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440161970b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/e5f78f6f8e725c3d-1738250406916.b91bf7e15b6154bb.js | 172.64.148.184 | 200 OK | 453 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/e5f78f6f8e725c3d-1738250406916.b91bf7e15b6154bb.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (459), with no line terminators Hash33014746e0401d5b543e8023042ee62f 599d33cf6fe6eb0b555145b2af56136cc278e83b 0c0f1e65045edffc1ef8bdda1eea4e92646327fdc3d4b2653f7100cf346edd55
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e5f78f6f8e725c3d-1738250406916.b91bf7e15b6154bb.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1c5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440192e72b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b | 172.64.148.184 | 200 OK | 114 kB |
URL User Request GET HTTP/2woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b IP172.64.148.184:443
CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
Size114 kB (113574 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:45 GMT
content-type: text/html
cf-ray: 90a440137d95b51d-OSL
cf-cache-status: DYNAMIC
last-modified: Thu, 30 Jan 2025 15:25:20 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/be671505a1f5445c-1738250406916.1b068d9f23ae722c.js | 172.64.148.184 | 200 OK | 14 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/be671505a1f5445c-1738250406916.1b068d9f23ae722c.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (14301), with no line terminators Hashd851cfa7275adb6dae69b0d1a6d6c9e3 42802c269b72f3fb17b42515576ce1d1c3a4416b 0eb5326102bc614bcca850ca009f1e624750fea4c9ff760cfa7ed89527d0cc81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/be671505a1f5445c-1738250406916.1b068d9f23ae722c.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-37dd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a44016096ab51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/74c8b5cb6c7b6141-1738250406916.5fb83dbc00ce11a5.js | 172.64.148.184 | 200 OK | 6.3 kB |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/74c8b5cb6c7b6141-1738250406916.5fb83dbc00ce11a5.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeJavaScript source, ASCII text, with very long lines (6389), with no line terminators Hash1fe3331add9cdf5d17396ecb811774da c2832aa44023ab1449979922f5590c7b82344f90 a1d2d4b0fc16693f02f69cce52ad5e88371cf270af9321528bbeaa91384a7e5a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/74c8b5cb6c7b6141-1738250406916.5fb83dbc00ce11a5.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-1891"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440178c15b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/gid.js?userId=2v6d2zemm7jh0dszmqqbzsso0xvg6dw | 172.64.146.234 | 200 OK | 64 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=2v6d2zemm7jh0dszmqqbzsso0xvg6dw IP172.64.146.234:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectmy.rtmark.net Fingerprint56:7F:53:10:57:2F:C3:F4:06:8B:DB:2F:C1:F7:6A:1D:68:59:14:3F ValiditySat, 04 Jan 2025 10:02:11 GMT - Fri, 04 Apr 2025 11:00:33 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashe1a03b9b12794eb21049c83a2b395030 aaf578cfa0a25abb1adc845b79846a9f5f04d273 c4962fdb02510cea215e85e6628468d1b21e822300f86276bf97215250dbbe61
GET /gid.js?userId=2v6d2zemm7jh0dszmqqbzsso0xvg6dw HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://woastehiwour.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://woastehiwour.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=2v6d2zemm7jh0dszmqqbzsso0xvg6dw; expires=Fri, 30 Jan 2026 20:35:46 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 90a44018896f5685-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/chunks/624f56eeee3114bf-1738250406916.26e21342eb44f646.js | 172.64.148.184 | 200 OK | 654 B |
URL GET HTTP/2woastehiwour.net/_next/static/chunks/624f56eeee3114bf-1738250406916.26e21342eb44f646.js IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (681), with no line terminators Hash0d5d89266b8ecdf6ae599c7039c0afae 771b53f584040ae6aed3ce105915024990db3fd8 78dfe025bb7e494cfe67ab43354579ba1f6cda33342dff5e85928a9307288899
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/624f56eeee3114bf-1738250406916.26e21342eb44f646.js HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:46 GMT
content-type: application/javascript
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: W/"679b99d7-28e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3946
expires: Fri, 31 Jan 2025 00:35:46 GMT
cache-control: public, max-age=14400
server: cloudflare
cf-ray: 90a440188d74b51d-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| woastehiwour.net/_next/static/media/person-24.d744f92b.webp | 172.64.148.184 | 200 OK | 2.7 kB |
URL GET HTTP/2woastehiwour.net/_next/static/media/person-24.d744f92b.webp IP172.64.148.184:443
Requested byhttps://woastehiwour.net/sweeps-survey/1383/?s=908930076104733005&z=8805346&var=434_u536322&campaignid=9051085&b=22951561&ymid=908930076104733005&city=oslo&svar=1738269345&ssk=66b9cc9e1638205aef2f8fcb81b7702b CertificateIssuerGoogle Trust Services Subjectwoastehiwour.net Fingerprint40:CC:CE:D0:AE:FE:C8:A0:77:33:D9:DF:38:76:A2:01:92:51:7C:6B ValidityFri, 10 Jan 2025 16:01:29 GMT - Thu, 10 Apr 2025 17:01:25 GMT
File typeRIFF (little-endian) data, Web/P image Hash588ec8375786f1eca8d929945e56ce3c 776a27723c235d2ae8d59985c8c9e679effe6498 94e7731534edf0b837ca2d0df13c89976d94cf63e4b603396f08128962c6e90e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-24.d744f92b.webp HTTP/1.1
Host: woastehiwour.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 30 Jan 2025 20:35:47 GMT
content-type: image/webp
content-length: 2650
last-modified: Thu, 30 Jan 2025 15:25:11 GMT
vary: Accept-Encoding
etag: "679b99d7-a5a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 2174
expires: Fri, 31 Jan 2025 00:35:47 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 90a4401aa9b1b51d-OSL
X-Firefox-Spdy: h2
|
|