track.effiliation.com/servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net
34.102.211.201302 Found 0 B URL User Request GET HTTP/2 track.effiliation.com/servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net
IP 34.102.211.201:443
Certificate IssuerLet's Encrypt
Subjectmastertag.effiliation.com
Fingerprint33:2F:7C:B2:63:9F:8F:6F:FA:A8:65:10:E0:28:BC:9A:75:30:D9:4E
ValidityThu, 23 Nov 2023 04:22:41 GMT - Wed, 21 Feb 2024 04:22:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net HTTP/1.1
Host: track.effiliation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 29 Nov 2023 07:29:14 GMT
content-length: 0
location: https://partner.boulanger.com/servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net
via: 1.1 google
strict-transport-security: max-age=31536000; includeSubdomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'; object-src 'none'
referrer-policy: no-referrer-when-downgrade
permissions-policy: accelerometer=(), geolocation=(), fullscreen=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=()
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
partner.boulanger.com/servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net
34.102.166.105302 Found 0 B URL User Request GET HTTP/2 partner.boulanger.com/servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net
IP 34.102.166.105:443
Certificate IssuerLet's Encrypt
Subjectpartner.design-market.fr
Fingerprint81:F7:07:EF:FB:A3:54:5A:C6:2B:33:0C:17:40:A1:B5:33:BD:08:E0
ValidityFri, 20 Oct 2023 09:58:57 GMT - Thu, 18 Jan 2024 09:58:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /servlet/effi.redir?id_compteur=22325637&url=ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&cfg=x@slurpmail.net HTTP/1.1
Host: partner.boulanger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 29 Nov 2023 07:29:14 GMT
content-length: 0
cache-control: no-store
pragma: no-store
expire: Wed, 31 Dec 1969 23:59:59 GMT
p3p: CP='ALL DSP COR IND PHY ONL UNI PUR COM NAV INT CNT PRE CUR ADM TAI PSA PSD IVAo IVDo CONo TELo OUR SAMo'
set-cookie: flw_clic660016958="ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3"; Max-Age=2592000; Path=/; Domain=partner.boulanger.com; Secure; HttpOnly; SameSite=None;
affi660016958="1200003459"; Max-Age=2592000; Path=/; Domain=partner.boulanger.com; Secure; HttpOnly; SameSite=None;
effi660016958="22325637"; Max-Age=2592000; Path=/; Domain=partner.boulanger.com; Secure; HttpOnly; SameSite=None;
date660016958="29/11/2023 08:29:14"; Max-Age=2592000; Path=/; Domain=partner.boulanger.com; Secure; HttpOnly; SameSite=None;
conversion660016958="22325637,"; Max-Age=2592000; Path=/; Domain=partner.boulanger.com; Secure; HttpOnly; SameSite=None;
location: http://ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&at_medium=affiliate&at_campaign=effinity&at_type=7&at_identifier=1200003459&eff_cpt=22325637&cfg=x@slurpmail.net
via: 1.1 google
strict-transport-security: max-age=31536000; includeSubdomains
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-frame-options: DENY
content-security-policy: frame-ancestors 'none'; object-src 'none'
referrer-policy: no-referrer-when-downgrade
permissions-policy: accelerometer=(), geolocation=(), fullscreen=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=()
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&at_medium=affiliate&at_campaign=effinity&at_type=7&at_identifier=1200003459&eff_cpt=22325637&cfg=x@slurpmail.net
209.94.90.1200 OK 5.8 kB URL User Request GET HTTP/1.1 ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&at_medium=affiliate&at_campaign=effinity&at_type=7&at_identifier=1200003459&eff_cpt=22325637&cfg=x@slurpmail.net
IP 209.94.90.1:80
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4454), with CRLF line terminators
Hash 5cfe82507f0107d2d3c9d39889a8e7e4
3f2558e81886d171b3692fa50db41abb78654d7c
259b2d948f7fc247950babfd7c297606c94307c4bd2870d9a266e1d8a356b82e
NIDS Severity Alert suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2
suricata low ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3
GET /ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&at_medium=affiliate&at_campaign=effinity&at_type=7&at_identifier=1200003459&eff_cpt=22325637&cfg=x@slurpmail.net HTTP/1.1
Host: ipfs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 29 Nov 2023 07:29:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Methods: GET, HEAD, OPTIONS, GET, POST, OPTIONS
Cache-Control: public, max-age=29030400, immutable
Content-Disposition: inline; filename="indexashm.html"; filename*=UTF-8''indexashm.html
Etag: W/"QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3"
X-Ipfs-Gateway-Host: ipfs-bank4-fr2
X-Ipfs-Path: /ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3
X-Ipfs-Roots: QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3
X-IPFS-POP: ipfs-bank4-fr2
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: X-Requested-With, Range, Content-Range, X-Chunked-Output, X-Stream-Output
Access-Control-Expose-Headers: Content-Range, X-Chunked-Output, X-Stream-Output
X-IPFS-LB-POP: gateway-bank3-fr2
X-Proxy-Cache: MISS
Content-Encoding: gzip
cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
104.17.25.14200 OK 28 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP 104.17.25.14:443
Requested by http://ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&at_medium=affiliate&at_campaign=effinity&at_type=7&at_identifier=1200003459&eff_cpt=22325637&cfg=x@slurpmail.net
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (65447)
Hash 8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ipfs.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 29 Nov 2023 07:29:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 27938
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "603e8adc-15d9d"
last-modified: Tue, 02 Mar 2021 18:58:36 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 350652
expires: Mon, 18 Nov 2024 07:29:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tgTq7ouJ584AO7EroeI%2FtKt7ECz4OiFPEXLltgXQvjOSs7vHXh7DmunQmF%2FvDIcUHDt8x3eyZ6exV3nNOAMqrUymfVMCNDP68R%2FFiaswitM8mgVHAjJCpq2PYP1F3k27RSJAjlG0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 82d923748a31b50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
bc1q6zd25jmkfh5x24ymp60tq99xdugpq.com/api/v3/auth
0.0.0.0 0 B URL OPTIONS bc1q6zd25jmkfh5x24ymp60tq99xdugpq.com/api/v3/auth
IP 0.0.0.0:0
Requested by http://ipfs.io/ipfs/QmafRtfDt6LnGT22sufQWYxqZUx6waBEu8EpM3ZcUatCQ3?filename=indexashm.html&at_medium=affiliate&at_campaign=effinity&at_type=7&at_identifier=1200003459&eff_cpt=22325637&cfg=x@slurpmail.net
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /api/v3/auth HTTP/1.1
Host: bc1q6zd25jmkfh5x24ymp60tq99xdugpq.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://ipfs.io/
Origin: http://ipfs.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache