GET founoosonailed.com/_astro/a31e1109-CH-FrczB.js
200 OK 613 B URL GET founoosonailed.com/_astro/a31e1109-CH-FrczB.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (612)
Hash 54149d3e39120809c0037ae698d08abe
881c0b98ed08b814690d14c415dcbb20e47f22bd
11e275e195876aed92dea48a60a882bf68f5349bd25cb3cdf240bdce12c4b3ab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/a31e1109-CH-FrczB.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-265"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a40e08b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b5f114f5-DiHbOEyf.js
200 OK 1.6 kB URL GET founoosonailed.com/_astro/b5f114f5-DiHbOEyf.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (1557)
Hash a927f457fa4d35f7960bb81afd39f934
3410bdff78e58297e40c84f65e398bd618bfbbaa
6f3b169aaef6a4dd3732729ea69b50f97e5cb2ef81c8d83c7f7943541377ccce
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b5f114f5-DiHbOEyf.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-616"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a50f81b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/d06a8aeec5-DzlNttm9.js
200 OK 1.0 kB URL GET founoosonailed.com/_astro/d06a8aeec5-DzlNttm9.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, Unicode text, UTF-8 text, with very long lines (1000)
Hash f1bfbd50acf2abe1fcfde6e4cb340b2c
9476a91cbf751efd25b56b6fa20c74efce0e6723
3bb3c47f61d81b04f03d3f4bc0d07ff7e2a5130a682169517d974c11aaf730e7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/d06a8aeec5-DzlNttm9.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-3ea"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a7ab34b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f3213a55-WSbZKQsq.js
200 OK 367 B URL GET founoosonailed.com/_astro/f3213a55-WSbZKQsq.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (366)
Hash 3ebf711a7dde224af4d8ce2eba58876b
1960fafb26fa9558cca8895cf694378227af6a8a
a92f27d554a91f8ea7f8ce27817753b542274f8e1d9f154ec2eec36a13604ee5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f3213a55-WSbZKQsq.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-16f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a8ccdbb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/r3e35d2efd-DaDngKox.js
200 OK 104 B URL GET founoosonailed.com/_astro/r3e35d2efd-DaDngKox.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 8db76a62a51d55aee7345c9fe50eaf08
464ad550b100147c68604cc7bf72faf64f623207
3320c145db3a2df11961fd131dfaf266807f8f8ebda9f2676225ad87d28acdc1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/r3e35d2efd-DaDngKox.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-68"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1aa0ef3b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/o2babb6f-BtBIVxPd.webp
200 OK 1.1 kB URL GET founoosonailed.com/_astro/o2babb6f-BtBIVxPd.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash e97abf6f136d9497fc14cb9e72b2c636
51f062d0abe008f75f96ad377deea587d47c381c
b462d5f38bf4519ff8232bcaa8c7e7420ed95c2a5e0d180565013aa7f3437776
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/o2babb6f-BtBIVxPd.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 1074
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-432"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1aa7fabb512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e79afbea-CjfwSMRS.js
200 OK 1.9 kB URL GET founoosonailed.com/_astro/e79afbea-CjfwSMRS.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (1881)
Hash 9349a26f179bbd40a6a2c2df06506e3c
5f972308d4ff282e7985a63147de250792e38b7d
3923fa349d357142a7e89d0c15665a002dca70e796559ce19724a29f66294107
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e79afbea-CjfwSMRS.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-75a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a50f8bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/v3a0ba17f-Cm2p8XuL.js
200 OK 1.5 kB URL GET founoosonailed.com/_astro/v3a0ba17f-Cm2p8XuL.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (1489), with no line terminators
Hash 386d740d63bcd21f9a72b55d27e3a7fb
4bb4081d64bcfc7b297a41cb2df0d3150ade9131
9d12bfd3270dd5dd15ab87c4d72755bbc3c87c1a09805e72274dba558930bafa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/v3a0ba17f-Cm2p8XuL.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-5d1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a51f9ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/fee1e2-D3eCJlW5.js
200 OK 766 B URL GET founoosonailed.com/_astro/fee1e2-D3eCJlW5.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (765)
Hash af1ce6bce6c47d20a6a80fb05f681264
e9f70822dad967cc63b94aa0e7812b51f3deace9
095c6740db56aa52635d47bf026ec429d542605b5e3fa99957bedc34f40285d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/fee1e2-D3eCJlW5.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-2fe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a89c92b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f03e6bd-D-dMvkXf.js
200 OK 2.5 kB URL GET founoosonailed.com/_astro/f03e6bd-D-dMvkXf.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (2452)
Hash 85625df8b512da996325652f9d8c4268
6245327ee7253a45c00a1f1fde73849911435756
cd45614d9b98448836c451346debd1fd1397e5722dc05192d3fd57c1cb53e2ef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f03e6bd-D-dMvkXf.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-995"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ff8b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/c083a57e-QjupvvGN.js
200 OK 613 B URL GET founoosonailed.com/_astro/c083a57e-QjupvvGN.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (613), with no line terminators
Hash d6785d377941d71de04854e5b4d4cc44
d201df29266911e4dfcafa9b338f054173ae0e54
b076c3d90c4f7f650f6d373b9a9bde36108e5b6eb709c582f31163e8ea1108e3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/c083a57e-QjupvvGN.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-265"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a7ab1fb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/d3a82187-DmCEq1AU.webp
200 OK 3.0 kB URL GET founoosonailed.com/_astro/d3a82187-DmCEq1AU.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 1353b78ad749ed0ee2f8b0f8e17644ef
9c83e32d7de227cb7e55ee1b5fdaf97d23ba4fe1
0087a88c3cf4e916957d4eb2182309227c78f8b9096fa9adc77456a487135959
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/d3a82187-DmCEq1AU.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:59 GMT
content-type: image/webp
content-length: 2970
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-b9a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:59 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1ab793bb512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b4b2779a-B2NUxyIJ.js
200 OK 4.7 kB URL GET founoosonailed.com/_astro/b4b2779a-B2NUxyIJ.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (4697)
Hash 2fd8164ec23c334d6d8a005acfd7ee61
0ead6b60c1c5152ea63be2c45fb2a3b752d805a1
a96726fdd2610288d4bd8f373de25132fa4094817a2224c24bf7f936b0b18853
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b4b2779a-B2NUxyIJ.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-125a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ff4b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e0f199-BHdAp8bM.js
200 OK 787 B URL GET founoosonailed.com/_astro/e0f199-BHdAp8bM.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (787), with no line terminators
Hash 658c73e01c6d06009ed7a4ee3caaf81e
1729ff9c7d0e4d02377c1213aaa2ab1548d16806
8f4003d9f46b4b7bf313f7631d119bc310f602bf9295d65cf6dd841d389d61e3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e0f199-BHdAp8bM.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-313"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a87c65b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/n802b6ec-B42Dx7P5.js
200 OK 103 B URL GET founoosonailed.com/_astro/n802b6ec-B42Dx7P5.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 38dec63d225a652538f5da11e0140231
de7d3cc6753d2c9e800253bb201f452070ca886f
99a0cb6b7ce65bfedf6ad9c2b3f8e3fe409e5a50c85942713d0af7caef9bc71e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/n802b6ec-B42Dx7P5.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9de92b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/c6a9cf-DPNkE_2o.js
200 OK 2.7 kB URL GET founoosonailed.com/_astro/c6a9cf-DPNkE_2o.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (2676)
Hash cb33f896d869f9c2058da18122946502
ffda17b62b59525b2736a97f7e4bae5dceaa3d45
209a0eef098cd19bf7ec3380d26df3e94400ffc7b104e0522bb5a4244bf5308f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/c6a9cf-DPNkE_2o.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-a75"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54fd7b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/w113c2ffc-CWHUkeZ7.js
200 OK 2.8 kB URL GET founoosonailed.com/_astro/w113c2ffc-CWHUkeZ7.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (2648)
Hash ce250b1a8ca0fdc4c5013a2ae8156163
1374698403680499ab63be722614d6cba1716de3
606d51733335550dd76b1ab486ae3549d23d0109b60fe2fefd1a576bbe1153dc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/w113c2ffc-CWHUkeZ7.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-ae2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54800b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET cdntechone.com/stattag.js
200 OK 16 kB URL GET cdntechone.com/stattag.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectcdntechone.com
Fingerprint97:E9:A0:32:A7:A0:07:E5:5E:9E:00:7A:0F:03:79:58:24:44:09:38
ValidityFri, 11 Apr 2025 06:42:40 GMT - Thu, 10 Jul 2025 07:40:25 GMT
File type JavaScript source, ASCII text, with very long lines (15840)
Hash 80d7433dbc2b7708f2fa4e6a9943a116
350c6e2bb1cbd07de260856f918f4ececcd96894
54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6823
priority: u=3,i=?0
etag: W/"668fb2b6-406a"
content-encoding: br
cf-ray: 9314e1a9097d5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/q61e1e2a4-BcxLYXM1.webp
200 OK 866 B URL GET founoosonailed.com/_astro/q61e1e2a4-BcxLYXM1.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 5ccd0e0b546c18b101aee4ddd519981d
9713e1200e35c8c3f682fa792fda89b898cf7aca
b489e2b31ce3037d8e68aa8acb36df8d726f489ea28a0aa2bb107487cf371348
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/q61e1e2a4-BcxLYXM1.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 866
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-362"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1aa7fa0b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/i8f9e5649f-Bey6XMsF.webp
200 OK 2.7 kB URL GET founoosonailed.com/_astro/i8f9e5649f-Bey6XMsF.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash b74c9fa59f2d0405ec351240c503dcb8
6e9522c102f8b78f9fbd2ff8f81fd32e6f615a7b
a9af5e537bf204b98e8adb21c130e2bd71a30bb1808da53e043de6ae203fa979
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/i8f9e5649f-Bey6XMsF.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 2712
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-a98"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1ab6927b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
200 OK 150 kB URL User Request GET founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
IP
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Size 150 kB (149876 bytes)
Hash 2b2fa85bf8bde118ee233cac666cdb76
590da6617bacefc6b177db24c9015845ab171567
23dc7d7454f99419c3cfb5b40d714c90572608ddfb06ce7b4e36dfa9ca723942
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: text/html
cf-ray: 9314e1a148b556af-OSL
cf-cache-status: HIT
age: 4247
cache-control: public, max-age=3600
expires: Wed, 16 Apr 2025 16:57:57 GMT
last-modified: Wed, 16 Apr 2025 14:38:05 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
set-cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; path=/; expires=Wed, 16-Apr-25 16:27:57 GMT; domain=.founoosonailed.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET founoosonailed.com/_astro/v0fb73c0ae-CK0OH1qs.js
200 OK 105 B URL GET founoosonailed.com/_astro/v0fb73c0ae-CK0OH1qs.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash b455d0aa14e83a5abd108229fef3ec47
df4b19a33fd4099f7e7b3bdb7bdcd9530791dfb0
307a9aecf224629b502a85151d2af01cec64ca889a191959276932c61936a365
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/v0fb73c0ae-CK0OH1qs.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-69"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9ce75b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET save.svensnd.com/click?pid=434&offer_id=25706&sub2=434_u69414&sub6=67ffd384ef44fb0001a8d51c
302 Found 150 kB URL User Request GET save.svensnd.com/click?pid=434&offer_id=25706&sub2=434_u69414&sub6=67ffd384ef44fb0001a8d51c
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subjectsave.svensnd.com
FingerprintF9:34:8B:4C:20:2B:F9:CB:59:38:B9:2D:4D:C1:02:4E:D1:30:D3:7D
ValidityFri, 21 Feb 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
Size 150 kB (149876 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=434&offer_id=25706&sub2=434_u69414&sub6=67ffd384ef44fb0001a8d51c HTTP/1.1
Host: save.svensnd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 16 Apr 2025 15:57:57 GMT
content-length: 0
location: https://phumsowoubsoag.net/link?z=8805363&var=434_u69414&ymid=67ffd385046a7f0001eecc19
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=67ffd385046a7f0001eecc19; expires=Thu, 16 Apr 2026 15:57:57 GMT; secure; SameSite=None
afoffers={"25706":1744819077}; expires=Thu, 16 Apr 2026 15:57:57 GMT; secure; SameSite=None
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET founoosonailed.com/_astro/k924a22-0lt4x6w6.js
200 OK 7.1 kB URL GET founoosonailed.com/_astro/k924a22-0lt4x6w6.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, Unicode text, UTF-8 text, with very long lines (6583)
Hash 72128291219e2221b62811d87486d5a7
4dc9461e26cd6c37ac2ee926443e0fd18561769e
b53bfa428ecd9a943f60afc24ed7e8be17e246ea8802fde72a81c27384306fca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/k924a22-0lt4x6w6.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-1bcd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a41e25b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f64ee4-Djjzt3XX.js
200 OK 201 B URL GET founoosonailed.com/_astro/f64ee4-Djjzt3XX.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
Hash 57e91976c15a5828c36fb3de3a8dfdbc
71367e56b326088d7818c1cc45a28b048f67fa0f
5f92f2edde4637fbe0cd07e9c882e75bd1242ba4660cace161cc0a98ed1f8fc4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f64ee4-Djjzt3XX.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-c9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ff1b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/t79b6834a-ChFUbNN0.js
200 OK 103 B URL GET founoosonailed.com/_astro/t79b6834a-ChFUbNN0.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash db0b843b2a5544c63fbcf79089b6566f
bc79bd11f57704e618485dbc6bec06444f2e8476
e2525d436bc8d5ab274c53374e0a520b4eeba38e18192a4c573fbaf35ca8ce76
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/t79b6834a-ChFUbNN0.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9ae58b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/p679fc3e90-3_EH9QLj.js
200 OK 103 B URL GET founoosonailed.com/_astro/p679fc3e90-3_EH9QLj.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 6e5cc4273f9d70f5bdaff56ef098e070
ef4170f92e72dd7f316fa6f66628dd6e8269aea1
1bc80e43632ecce8f2181953bff22b914976c682dee56d1ca7c6ebcf1f3a5300
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/p679fc3e90-3_EH9QLj.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9eea0b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/o6da1be7ca-BiZc4OO6.webp
200 OK 770 B URL GET founoosonailed.com/_astro/o6da1be7ca-BiZc4OO6.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 66a5e8404b4514c579de67193ceae684
f41725c0b728ace6b8a7a328104ab25ae12eb778
71550ce5c0583f2db91a7644ae869cb122cbc76f5718915e789243d6297d5f89
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/o6da1be7ca-BiZc4OO6.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 770
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-302"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1aa7fa9b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/g7bba7c3-DOV-oVVk.webp
200 OK 3.0 kB URL GET founoosonailed.com/_astro/g7bba7c3-DOV-oVVk.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 14fd3e08f7a4f90f31fe1d6b25b468b1
f5023a6193b64492d48854a61fbb86fc75737a6e
b3c856ce0543be8165d13fd872f0041f575ab9aeb8feb321ebb6b1e79c1ea9f1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/g7bba7c3-DOV-oVVk.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 3030
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-bd6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1ab591ab512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/i3cbd7d501-Dh8-zslK.js
200 OK 823 B URL GET founoosonailed.com/_astro/i3cbd7d501-Dh8-zslK.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (822)
Hash eb5840e844906062ec9e6432c3c47a40
2457f5059dc75443a19dba5ee32de59e637ebb80
0c2943fe70c1306a576299d5fc6243f723edea3748808c14c1f9709928415dc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/i3cbd7d501-Dh8-zslK.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-337"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a3fdedb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e2c3c0c-xxdnrkSB.js
200 OK 311 B URL GET founoosonailed.com/_astro/e2c3c0c-xxdnrkSB.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (310)
Hash 56cfe4d33f9abc48ed9eebf21f4a94d5
cbfe1eddfafd124661dc7512fe5a99417ef33e22
07c155c1b11373a7a2d835bc21abf25eeba72ad93b062c3ac98686eac7da2c37
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e2c3c0c-xxdnrkSB.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-137"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a40e10b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/n67a17a708-g0C1jTks.js
200 OK 67 kB URL GET founoosonailed.com/_astro/n67a17a708-g0C1jTks.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 45d7f90c7f7beeaacc675c0eb3a04174
83ff1217c679ff47db9f929bb223dc3e17fae554
2abcdafe5348e79057bfa19ce7de6004f32c4edbaf6b55996e8969b0638b998c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/n67a17a708-g0C1jTks.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-106d2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a4ff71b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/n43d5699d-DXjaYdvO.js
200 OK 1.0 kB URL GET founoosonailed.com/_astro/n43d5699d-DXjaYdvO.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (1013), with no line terminators
Hash e2a0bd7c551820c89d42f942e5069c00
0d272f0f620bb2f820568356727d4f1ed4c15f65
3cde4e5a237328858c8fa60ea05cb689beccd89dd55ed296743f7e111243ed2c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/n43d5699d-DXjaYdvO.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-3f5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54feeb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e76b434c5-BqkTKWFf.js
200 OK 1.1 kB URL GET founoosonailed.com/_astro/e76b434c5-BqkTKWFf.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (1100)
Hash a9a3eb3f8848aed0e9541afb66f9372d
e534705e42712357bcc9b5e2f401d777b6716b63
c673fd250a9cd5b025a25fd9a517458a539807829ea35a1db081b02c5d110c40
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e76b434c5-BqkTKWFf.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-44d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a7bb3fb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/k01673b33-REgIkH7u.js
200 OK 105 B URL GET founoosonailed.com/_astro/k01673b33-REgIkH7u.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 6b736df164735a2834eb5a38a4a8d1dd
df4b51ab4d9a1193ac0e5fa029f37edf4e7d049e
fc6258856f13aa31e669ea4e2637d9d472327423c5fa2b804ba7203c991a43e2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/k01673b33-REgIkH7u.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-69"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9fec1b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e5bc80994-CRUkyHUa.js
200 OK 959 B URL GET founoosonailed.com/_astro/e5bc80994-CRUkyHUa.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (958)
Hash fa74aa26c0c9a91fc60c06e91a6e2556
b5427ebf066f739df8f63f78d438c6dea94df6e2
5378e2d5bc2f2b3551c7c77b687f986f6fc002ffa51f3b80d52e3eb06714a350
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e5bc80994-CRUkyHUa.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-3bf"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ff7b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/h912b4e-D3bFbJzW.js
200 OK 103 B URL GET founoosonailed.com/_astro/h912b4e-D3bFbJzW.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 3e75394938226b50e0d637728fc3b5ed
94c238439a302c7068a656ff689dc787f4aaeaa4
bcbe666f0f3a340be960c7795032b79a4be19b204e8bdc1d745a73909103bdc3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/h912b4e-D3bFbJzW.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9feccb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/i7d494392-B2MAfARs.js
200 OK 105 B URL GET founoosonailed.com/_astro/i7d494392-B2MAfARs.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash c0e9409d48d2450519282fad1ad67bb3
84864b830ab0f8aee9d8391b75e380b60de59147
e95666720f7087981643c4a23dd46fc478b5db1f05b71783c8dedcdccb761a61
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/i7d494392-B2MAfARs.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-69"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1aa0eefb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b1cc0fd-CH7FtTpD.js
200 OK 103 B URL GET founoosonailed.com/_astro/b1cc0fd-CH7FtTpD.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 877ea0747024a897a5e4a8488811f8cd
b39b38ec69649e3450afed3c29a76c1cb42e8655
017b81fe562ce4bb2277220c4856645e6b7c71a85ab61f8c92956a669381a641
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b1cc0fd-CH7FtTpD.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9febdb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/fd062f08-Akoqqf11.webp
200 OK 3.0 kB URL GET founoosonailed.com/_astro/fd062f08-Akoqqf11.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 1f78bc57129ea9b186a1e5188365a659
8ba65af5977878c8d3e73ea05530dc00fbe8cc96
76bf9c644dcfca01fa95f7a64d7338cb1088dc4ae45fbfc852718cc9bc9b226e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/fd062f08-Akoqqf11.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:59 GMT
content-type: image/webp
content-length: 2950
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-b86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:59 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1ab6937b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET phumsowoubsoag.net/link?z=8805363&var=434_u69414&ymid=67ffd385046a7f0001eecc19
302 Found 150 kB URL User Request GET phumsowoubsoag.net/link?z=8805363&var=434_u69414&ymid=67ffd385046a7f0001eecc19
IP
Certificate IssuerGoogle Trust Services
Subjectphumsowoubsoag.net
FingerprintFB:92:C4:A4:E4:08:EF:E6:79:24:0D:9C:1F:F0:48:5A:B8:C6:96:3E
ValidityWed, 05 Mar 2025 16:57:01 GMT - Tue, 03 Jun 2025 17:49:11 GMT
Size 150 kB (149876 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /link?z=8805363&var=434_u69414&ymid=67ffd385046a7f0001eecc19 HTTP/1.1
Host: phumsowoubsoag.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 16 Apr 2025 15:57:57 GMT
content-length: 0
location: https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
server: cloudflare
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://founoosonailed.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
set-cookie: OAID=0481ad8ca2894bdde1b97ac52d322481; Expires=Thu, 16 Apr 2026 15:57:57 GMT
oaidts=1744819077; Expires=Thu, 16 Apr 2026 15:57:57 GMT
OXCCLK=9051091.1; Expires=Thu, 16 Apr 2026 15:57:57 GMT
allcnt=1; Expires=Thu, 16 Apr 2026 15:57:57 GMT
cf-ray: 9314e1a04cb27127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET founoosonailed.com/_astro/b21fb67d-Bm7tABT_.js
200 OK 73 B URL GET founoosonailed.com/_astro/b21fb67d-Bm7tABT_.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 41782e192d6e714b886e20dfe76c1bc9
16edbb13768eab6c97619a38b7d15e161d0d88d8
4b58f84fb12e4acc744f9764edcdd40efc0df8ac1f516e7f3c508887736e5a95
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b21fb67d-Bm7tABT_.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-49"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a52fa2b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/a6b583a-Dh4qH5qI.js
200 OK 918 B URL GET founoosonailed.com/_astro/a6b583a-Dh4qH5qI.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (918), with no line terminators
Hash 7679a3bbac499559f520ed81c9484c48
9b37736196000b192d05ea141b06e36138e7eec5
151bbb4bac339d84317dd6a26eb77325d0063b974c4564caee71c592a5bd08aa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/a6b583a-Dh4qH5qI.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-396"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ffcb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/l3648370b2-Bnm9WV-t.js
200 OK 729 B URL GET founoosonailed.com/_astro/l3648370b2-Bnm9WV-t.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (728)
Hash 587d637b82330a12a49097091cf035b0
737e7c64ea3c3fb5d661e61d3e5b9289c565c1a5
7dca26f0a1bfa29b6b0ee1d68acd6a6eccd721d8db54a5109aec9a8672f90708
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/l3648370b2-Bnm9WV-t.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-2d9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54fffb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/favicon.svg
200 OK 644 B URL GET founoosonailed.com/favicon.svg
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type SVG Scalable Vector Graphics image
Hash b3c891342e3c1a3e169ecf83c62cfb02
fb259a9e1c8e43cb0d08c74f6fc3b623e15e95c3
c98ef972cd0a097ef32ad0f6d17e08d8e015a630a43b87be015e70d6d329dc32
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.svg HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/svg+xml
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-284"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=6,i=?0
server: cloudflare
cf-ray: 9314e1a63920b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=be8b5750-df93-4de5-b117-bb5a644f6fbb
200 OK 12 B URL POST datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=be8b5750-df93-4de5-b117-bb5a644f6fbb
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
FingerprintED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72
ValidityWed, 11 Dec 2024 00:00:00 GMT - Tue, 23 Dec 2025 23:59:59 GMT
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=be8b5750-df93-4de5-b117-bb5a644f6fbb HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1561
Origin: https://founoosonailed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Wed, 16 Apr 2025 15:57:58 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://founoosonailed.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
GET founoosonailed.com/_astro/f49862a1-D7Nzm79P.js
200 OK 101 B URL GET founoosonailed.com/_astro/f49862a1-D7Nzm79P.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash f8e7faec4ff10099ce8eeca15b9dd262
68e368e964d7017e16b3fbc9af1ad768383145d5
f35224e94ccefc5557add1291ece104fd397134ddb1e1272c1454b1df3572aca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f49862a1-D7Nzm79P.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9de90b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/d57c0f0-CDRFzLs0.js
200 OK 103 B URL GET founoosonailed.com/_astro/d57c0f0-CDRFzLs0.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 477716adee9819a25c942dd9969764dc
e5de48d71828870556c03afbbc429b31d9e37a86
dfb305b1d67c934abadf02772f1cfd6af6599e0f16c4aa3a528361542a8428fb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/d57c0f0-CDRFzLs0.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9feaab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/d3d559cf6-BkG5j7oq.js
200 OK 3.4 kB URL GET founoosonailed.com/_astro/d3d559cf6-BkG5j7oq.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (3417), with no line terminators
Hash 4df563838b376b33c92c2a6c2854c2dc
5149dfd594338a332cf9643ab9c96ecb46cedc3f
c7e7de488ee9c89c1489b83018f30e853fe1bec004e5cc4b78476f0cd034cfc8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/d3d559cf6-BkG5j7oq.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-d59"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a41e14b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b39fdfbc-CTYh9_0e.js
200 OK 49 kB URL GET founoosonailed.com/_astro/b39fdfbc-CTYh9_0e.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (49284), with no line terminators
Hash 21328259c436b1d8aff012fc17bc6f52
814d5a0b98e444afa9a6579fe5efa8738e8dd8d0
4dd0a7fa3869e5fa25907ee6136007a08de0caa02a20ccf3a3cea6d7ecf51cd4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b39fdfbc-CTYh9_0e.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-c084"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a50f7ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/r19a8bd-BPUh7Pbb.js
200 OK 1.4 kB URL GET founoosonailed.com/_astro/r19a8bd-BPUh7Pbb.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (1403)
Hash bbb92664c5b99f7b15ed3c7024341707
6b1c828c581c625c5d7d64732eaeeb0c0e3b4b91
f15cb668a6231c1edf8ab069a9465fdbeb359e91e55ad9ecd6784baccfa9ddef
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/r19a8bd-BPUh7Pbb.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-57c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54fd4b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/be7ccc6-BSldHgPK.js
200 OK 3.5 kB URL GET founoosonailed.com/_astro/be7ccc6-BSldHgPK.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (3468)
Hash ccd1cf5e15e09e43405d799fd7d3e3e6
d2d65b4be29605e4bd39d8136b35f7b701b440f7
044270038e7faee2d4b0ea21cfa5abb9213637a2236837e83ef6b7e324661f67
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/be7ccc6-BSldHgPK.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-d8d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a699a4b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/w1a82b259-T-4q8ZTu.js
200 OK 30 kB URL GET founoosonailed.com/_astro/w1a82b259-T-4q8ZTu.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (26804)
Hash 83a36a61e745bda04acb22132adb37db
6d278bacf8994726a9e953be06b1d43348526500
314092290a3f3960f380140770aa275c0f39f8992fb268348c41beb9399a0641
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/w1a82b259-T-4q8ZTu.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-74ef"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a7ab2db512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET cdntechone.com/stattag.js
200 OK 16 kB URL GET cdntechone.com/stattag.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectcdntechone.com
Fingerprint97:E9:A0:32:A7:A0:07:E5:5E:9E:00:7A:0F:03:79:58:24:44:09:38
ValidityFri, 11 Apr 2025 06:42:40 GMT - Thu, 10 Jul 2025 07:40:25 GMT
File type JavaScript source, ASCII text, with very long lines (15840)
Hash 80d7433dbc2b7708f2fa4e6a9943a116
350c6e2bb1cbd07de260856f918f4ececcd96894
54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6823
priority: u=3,i=?0
etag: W/"668fb2b6-406a"
content-encoding: br
cf-ray: 9314e1a7beef5690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/c2e188a3d-BcAJKdiU.js
200 OK 103 B URL GET founoosonailed.com/_astro/c2e188a3d-BcAJKdiU.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash bcd3bc8ead4ea0f200bacfd85a9ba8aa
b35d1bf75b8f6b862dd5b796fdbd166934b65071
7a697f75595781c3fb36fa95164cef9ac84e08fbc823b2cb8c9558ce5c579cf6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/c2e188a3d-BcAJKdiU.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-67"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9feb1b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/i26a788-DOW4vgMK.webp
200 OK 264 B URL GET founoosonailed.com/_astro/i26a788-DOW4vgMK.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 606085e7a74fd169da34f9fcb43ad12d
77226a50488fb48256d36f1810a136b69d635f74
df20f4c1d87cb10514a6d526dde70759334705d90a909df0e6cb130061ce1ea5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/i26a788-DOW4vgMK.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 264
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-108"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1aa7f9cb512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f88d18-D9xAGFl6.webp
200 OK 3.2 kB URL GET founoosonailed.com/_astro/f88d18-D9xAGFl6.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 377c84ac3a10263b980eeed8ab2a73f7
ad73fc8367fc194d5e83ea5aa22822268eaf16e4
b9031957e3bd988575ea286e1da3a9dda53e4bcf133acc33fae1176208c48924
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f88d18-D9xAGFl6.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 3178
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-c6a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1ab692eb512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/g66c186598-D7tDqOEQ.webp
200 OK 3.8 kB URL GET founoosonailed.com/_astro/g66c186598-D7tDqOEQ.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 994b3a71a57969afe8d521fd99a21516
b1514932a55c1f324b7fb7796ed129af08d3e419
b5b6aded70b2da4c2e3a2245b6540765e9b9e89f425051523a060d1a6da4f28a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/g66c186598-D7tDqOEQ.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: image/webp
content-length: 3816
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-ee8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4386
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1ab6934b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/p02d58f5-BC1XF2LR.js
200 OK 2.8 kB URL GET founoosonailed.com/_astro/p02d58f5-BC1XF2LR.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (2790)
Hash 83c2b031fbd7bccd17c0196ac307420b
a81b2f2af491c97227cab80ee366d36f3f2d509a
9b75a51d0f2691592a48cd8678d01f9e529306116677cf3295fc54873c254afd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/p02d58f5-BC1XF2LR.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-ae7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a4ff68b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e20d59d20-BdJv3mUk.js
200 OK 286 B URL GET founoosonailed.com/_astro/e20d59d20-BdJv3mUk.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
Hash d201ac47ab364345e077f691901ac58c
4d1c92ae4eea57d39ac86f5b446ba3bfbfbeed3d
f68711fdd0dd6cf1f22bda4bcfdb567d1724670a731c1a6e236ebf03fdb650e0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e20d59d20-BdJv3mUk.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-11e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a87c5fb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/t06f1a88-D4_-cOvh.js
200 OK 104 B URL GET founoosonailed.com/_astro/t06f1a88-D4_-cOvh.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash ea4a059f6f6b7b33a88b3a222caeb04b
1942e0e1ef306b0116747a7478647d325db61671
9f6c0915b2fde389a1c4b7d2efb5c462097a2c863d6241fc36da381177be3d02
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/t06f1a88-D4_-cOvh.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-68"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1aa0ee8b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f9fe4f5f6-Dt3xCBeJ.js
200 OK 2.1 kB URL GET founoosonailed.com/_astro/f9fe4f5f6-Dt3xCBeJ.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (2061), with no line terminators
Hash 5184da845c285bf9505088db7fea168a
52f10cf308f64c4f899df35a45b027d68f951c5b
94b0d5ee2dcfefdd250f2be83b7446a938dbec7e43cfd5c6be8ea1778f63cabd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f9fe4f5f6-Dt3xCBeJ.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-80d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a41e1ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/ff3159-B4hgvErr.js
200 OK 118 B URL GET founoosonailed.com/_astro/ff3159-B4hgvErr.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash 4e7b40449b6a6a64cf1b5fbd02fc5027
9b320effba942fd4a5f5166599833cfabe76a773
4244b65d97ef2d2721a8f4ad70e3336105c12d42ee7d906a2dfd056d8ba2db07
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/ff3159-B4hgvErr.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-76"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a50f7db512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET my.rtmark.net/gid.js?userId=2je4gfh7zaonbx0mvueb6tjxuq62ki2
200 OK 64 B URL GET my.rtmark.net/gid.js?userId=2je4gfh7zaonbx0mvueb6tjxuq62ki2
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectmy.rtmark.net
Fingerprint03:52:6A:BD:35:83:43:81:AF:25:BB:A3:26:97:D1:78:25:73:A4:C9
ValidityTue, 04 Mar 2025 10:39:32 GMT - Mon, 02 Jun 2025 11:39:29 GMT
Hash 85dcfad704dc7b6fd4016ff6d2f23546
d73da914d210c062df99236637bf221cfdfc47f1
7f7d0e6949a97ab218b4e32ffe3494b3dd03e7ad4fdad19174d7638c18a62ce2
GET /gid.js?userId=2je4gfh7zaonbx0mvueb6tjxuq62ki2 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://founoosonailed.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://founoosonailed.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; expires=Thu, 16 Apr 2026 15:57:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 9314e1a6a8f6b529-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdntechone.com/stattag.js
200 OK 16 kB URL GET cdntechone.com/stattag.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectcdntechone.com
Fingerprint97:E9:A0:32:A7:A0:07:E5:5E:9E:00:7A:0F:03:79:58:24:44:09:38
ValidityFri, 11 Apr 2025 06:42:40 GMT - Thu, 10 Jul 2025 07:40:25 GMT
File type JavaScript source, ASCII text, with very long lines (15840)
Hash 80d7433dbc2b7708f2fa4e6a9943a116
350c6e2bb1cbd07de260856f918f4ececcd96894
54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6823
etag: W/"668fb2b6-406a"
content-encoding: br
cf-ray: 9314e1a6b9ce1c0e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET founoosonailed.com/_astro/ec243620a-DsHF3BcQ.js
200 OK 104 B URL GET founoosonailed.com/_astro/ec243620a-DsHF3BcQ.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash d75ab40816da3cb5d06842c544202ba1
99c38d2df44288615d3fb186bf2ac3ad7d2685de
7e749d0ce908705d83bdca3e400eac0e8f93fa755486c99902807a3574d2512f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/ec243620a-DsHF3BcQ.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-68"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9feabb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/i1823907-CcG965RW.js
200 OK 102 B URL GET founoosonailed.com/_astro/i1823907-CcG965RW.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash c85c89cdb840b190870fec7f08e0c3ea
1b1e1705a07a010c41387ca1ab0a16d99d466c2e
c4dd54c8a0ef58d3bc5cab3378997ad9f5b786b2b0a2288ab83a3daa07dc7016
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/i1823907-CcG965RW.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-66"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9feb4b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/d263b986c6-CK3bZmlB.js
200 OK 478 B URL GET founoosonailed.com/_astro/d263b986c6-CK3bZmlB.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (477)
Hash ad080b1c4a5af83e47992b7bf176c433
49ff44565351537f0c7d050848588827c0f807eb
2eefb060db722317d95a2b8bb001224a84e1e79cc308ab110e0877ad4dc094d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/d263b986c6-CK3bZmlB.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-1de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a40dfeb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b47d24-CtHQVcrt.webp
200 OK 7.4 kB URL GET founoosonailed.com/_astro/b47d24-CtHQVcrt.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 6ffe537f32b7be06a870808ee94dadc5
598b8776ac199d0d8737969255c81da7c2cf16f2
e0ddaa01c812e3cdc7963b53edf9a53867a1930a7a566edeb872a0f36da94f7b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b47d24-CtHQVcrt.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: image/webp
content-length: 7428
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-1d04"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4385
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1a44e73b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/c6c5fece38-BUkk8_ai.js
200 OK 3.5 kB URL GET founoosonailed.com/_astro/c6c5fece38-BUkk8_ai.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type JavaScript source, ASCII text, with very long lines (3540), with no line terminators
Hash 6fb40283bd600d954f3a0448ad14308c
ecbabe5605f07ec2124f2e9be2f50e8cdd64b2ed
62ceb2e419a5f4f345541d4a9b107e1bba409aeb18beec26d125e63381c18f3c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/c6c5fece38-BUkk8_ai.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-dd4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a50f8ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/e51d49b56-9OH2n15G.js
200 OK 37 kB URL GET founoosonailed.com/_astro/e51d49b56-9OH2n15G.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (35884)
Hash 8adcf9d3c19cc63a0b9d7a754f4ac482
c3786e8fb5e8882b26b6ea4c6a324fc428c515b8
6efb82f9111e1482ae1c4de318b50cf2616f7f15cd14dba506836fbe4bcf0f2a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/e51d49b56-9OH2n15G.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-916a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54fd0b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f3ab76e-pVZHxhf0.js
200 OK 1.2 kB URL GET founoosonailed.com/_astro/f3ab76e-pVZHxhf0.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (1231), with no line terminators
Hash 1762fe50396c08b3a41fcada72e09e35
1f9d41da956f2c9483138f838de9f09bcb7e63a8
b665a2a263a13a15965f1024e19b646e529521616c564c2aba5f75e7741c3c5e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f3ab76e-pVZHxhf0.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-4cf"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ffbb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f04a4cdcff-CaUD6Ult.js
200 OK 2.8 kB URL GET founoosonailed.com/_astro/f04a4cdcff-CaUD6Ult.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Unicode text, UTF-8 text, with very long lines (2792), with no line terminators
Hash 414ab4ad8164b202c7b23d324cfe7bd4
7e672798cf557e1f2a78532c93869c9822e9d419
cb315166d62ab0fe521fb4b396868c8514237317b247f9725ea66bcc72d22409
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f04a4cdcff-CaUD6Ult.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-aed"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a8ccd7b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET fly.metozemoon.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl633735&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=afd5af2afe3b&sub14=927&sub13=trafficback
302 Found 150 kB URL User Request GET fly.metozemoon.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl633735&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=afd5af2afe3b&sub14=927&sub13=trafficback
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subjectmetozemoon.com
FingerprintCE:7A:79:16:46:B9:7F:C9:85:F1:3E:5C:9C:05:77:81:31:47:FC:0A
ValidityWed, 02 Apr 2025 00:00:00 GMT - Thu, 02 Apr 2026 23:59:59 GMT
Size 150 kB (149876 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl633735&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=afd5af2afe3b&sub14=927&sub13=trafficback HTTP/1.1
Host: fly.metozemoon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 16 Apr 2025 15:57:56 GMT
content-length: 0
location: https://save.svensnd.com/click?pid=434&offer_id=25706&sub2=434_u69414&sub6=67ffd384ef44fb0001a8d51c
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=67ffd384ef44fb0001a8d51c; expires=Thu, 16 Apr 2026 15:57:56 GMT; secure; SameSite=None
access-control-allow-credentials: true
X-Firefox-Spdy: h2
GET founoosonailed.com/_astro/a343e1be-CcVPJspU.webp
200 OK 12 kB URL GET founoosonailed.com/_astro/a343e1be-CcVPJspU.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash eb224b5a86e8c9f478bd6f2a8c3c53ac
0bdc5a91bb1c87fe55b023ee6cef886edb64967e
e910f36c92776b4e4a415316307a6cbb4d4f039bb8d66dd094c7b90d76f6fa1c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/a343e1be-CcVPJspU.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: image/webp
content-length: 11774
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-2dfe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4385
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1a44e6bb512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/cd0518d8-BqP7CAir.js
200 OK 5.0 kB URL GET founoosonailed.com/_astro/cd0518d8-BqP7CAir.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (4806)
Hash 61ec19c00750765afada83d203027eaa
2b282d4d59a31d0c3b69ee534abbbc14549e1f7c
6c9e65ece9fce08091eecb5a5388953e0c6475fc1a458e291e3348ea6456f07e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/cd0518d8-BqP7CAir.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-138f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a7ab22b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/r4eb789-0dUH-AsY.js
200 OK 1.5 kB URL GET founoosonailed.com/_astro/r4eb789-0dUH-AsY.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (1533), with no line terminators
Hash 2631c13f674208dc64dff9bb6675e951
ebaeb60691365835bf26703966adad4371baf87b
dad2768aec57591f55415cc555ac43e493ec9808939c83894b10bd664629dfc6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/r4eb789-0dUH-AsY.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-5fd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a8bcb7b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/c27257ab-B8Ex7PY1.js
200 OK 105 B URL GET founoosonailed.com/_astro/c27257ab-B8Ex7PY1.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with no line terminators
Hash d6b01a72e306bd245853739268c6ab4d
45f53b4ed983d27ccd5ff23ca97649a1c1a6a894
829bbbdb049dc4f01d09307c9bc211bb2f9487a9601ab23f15eb127244a8a83d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/c27257ab-B8Ex7PY1.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64; OAID=2je4gfh7zaonbx0mvueb6tjxuq62ki2; syncedCookie=true; oaidts=1744819078
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-69"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a9be69b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/m5d1e4b41-CA5sDC8y.js
200 OK 175 B URL GET founoosonailed.com/_astro/m5d1e4b41-CA5sDC8y.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
Hash 22bce45f2050260b4ef8bfd9976bd275
439538a046b0edead66039e22c96a22523a453d5
04533820553c75002e78ab4228b0b14cbe681105cd7ec044be2ca870dd43ba15
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/m5d1e4b41-CA5sDC8y.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-af"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a40df6b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/h92817b-jdTvYVC5.js
200 OK 269 B URL GET founoosonailed.com/_astro/h92817b-jdTvYVC5.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
Hash 7f5641d26bc83f1ecf6804905da2f417
808e8bd4e849ec534ecdc7154793454693c86c65
cf863537f0b77526a145f2bce663ffbaf209187b80f8503b551bdfe0825fd3f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/h92817b-jdTvYVC5.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-10d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a40e03b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/x4704a7-CK2KmKGn.js
200 OK 1.3 kB URL GET founoosonailed.com/_astro/x4704a7-CK2KmKGn.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (1262)
Hash c968fe6f37bf4b58458433f329032a32
b1f554c2c9024a8668c8d642a0482b93f12113a0
79ec9d728c387a20ec4ab94fc7c35d08c685cb2fdc5c8cde59d41405afac6fa9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/x4704a7-CK2KmKGn.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-4ef"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a41e21b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/f5e0282-CFX5WsIv.webp
200 OK 4.3 kB URL GET founoosonailed.com/_astro/f5e0282-CFX5WsIv.webp
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type RIFF (little-endian) data, Web/P image
Hash 483d298f3477d9b9a9ed85e2997eb888
52e1956082c558621f102ba813e7bdcee3fcb31d
24763cff62c7e5d6aa028e7bc528010333a062aef7c5682c2dfdc7bfbcece822
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/f5e0282-CFX5WsIv.webp HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:57 GMT
content-type: image/webp
content-length: 4258
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: "67ffc0c6-10a2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 4385
expires: Wed, 16 Apr 2025 16:57:57 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 9314e1a44e70b512-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b90d59-7lTqJvs2.js
200 OK 332 B URL GET founoosonailed.com/_astro/b90d59-7lTqJvs2.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type ASCII text, with very long lines (332), with no line terminators
Hash d43ef1b1200e67344ef0e920d19af411
13d6fec3bcdb6fb053f8d409cea660f847ba6116
4024dc680d6727f2fa0c90bb86ec3857d1c0d8a0feaee9f8da0b0cc6e8a2d597
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b90d59-7lTqJvs2.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-14c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a54ffab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET founoosonailed.com/_astro/b4a2fd26-DglTEIWd.js
200 OK 5.6 kB URL GET founoosonailed.com/_astro/b4a2fd26-DglTEIWd.js
IP
Requested by https://founoosonailed.com/sweeps-survey/1383/?s=936401623018902188&z=8805363&var=434_u69414&campaignid=9051091&b=22951569&ymid=936401623018902188&city=oslo&svar=1744819077&ssk=760b1375af233ea60fe97574e3ffaabe
Certificate IssuerGoogle Trust Services
Subjectfounoosonailed.com
FingerprintE5:B1:80:22:F4:2B:7D:99:23:7E:FB:D0:D1:28:51:B4:B9:D0:7A:24
ValidityMon, 10 Mar 2025 14:19:35 GMT - Sun, 08 Jun 2025 15:19:33 GMT
File type Java source, ASCII text, with very long lines (5622)
Hash ec2d7269c25e8459bdb1eb31d147dbdf
1b930f1b167302b13bba06b88a8f2baa9383fea0
63d80fcf5217715365b1e666dce7815d4062a6deaf1ead75091cfff5603c4982
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /_astro/b4a2fd26-DglTEIWd.js HTTP/1.1
Host: founoosonailed.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: __cf_bm=9bzhn4JqTolyHGAo.ZwaaPL_CH8DjpWY49uFzyAT7lk-1744819077-1.0.1.1-RbZwyXUtq1qbyM5AjwRQ.bgNzJYAaUoze_p4IBxYfv44GYbe7CKz4EUjfGr5ux.DgUc0wGIgQqbkKf9mr5iOWrL59bgCPRRCfprcRs8mj64
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 16 Apr 2025 15:57:58 GMT
content-type: application/javascript
last-modified: Wed, 16 Apr 2025 14:37:58 GMT
vary: Accept-Encoding
etag: W/"67ffc0c6-15f7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
expires: Wed, 16 Apr 2025 16:57:58 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 9314e1a7bb3bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
35.204.100.195
139.45.195.253
104.18.41.22