| faith.is-a-qt.wtf/2024/12/chrome_8ryBBxEn3u.png |  188.114.97.1 | 200 OK | 7.6 kB |
URL User Request GET HTTP/2faith.is-a-qt.wtf/2024/12/chrome_8ryBBxEn3u.png IP188.114.97.1:443
CertificateIssuerGoogle Trust Services Subjectis-a-qt.wtf FingerprintA0:9B:80:A1:FC:75:4D:C1:19:66:73:7D:16:34:80:C3:C1:C1:98:2A ValidityFri, 15 Nov 2024 06:52:14 GMT - Thu, 13 Feb 2025 06:52:13 GMT
File typePNG image data, 746 x 75, 8-bit/color RGBA, non-interlaced Hashd678179cbb596c39689e7e8a81609663 2432ab70806c7fc1fce7e45ec6322d8a58acb075 fd249de603d43b929c7d2e1db747589dc29b55f25d9be53db89d5316797d2827
GET /2024/12/chrome_8ryBBxEn3u.png HTTP/1.1
Host: faith.is-a-qt.wtf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 21 Dec 2024 16:22:08 GMT
content-type: image/png
content-length: 7564
cf-ray: 8f59358b0f9d0b69-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: public, max-age=14400
etag: "d678179cbb596c39689e7e8a81609663"
expires: Sat, 21 Dec 2024 17:22:08 GMT
last-modified: Sat, 21 Dec 2024 16:21:58 GMT
vary: Accept-Encoding
x-goog-generation: 1734798118689272
x-goog-hash: crc32c=DX7K+w==, md5=1ngXnLtZbDlonn6KgWCWYw==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7564
x-guploader-uploadid: AFiumC63jeete6JkqFGUU0jIB7HBKmf_ep6XxlMSK99UDCksCmiIKPgXEmSvasn45t_DVH7q
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YvR0Fglr0oBuFJTiWBrmA3HzDLg7yc2c9NxnUMZV76u6ysshQTTCHsbUZWPMZp6DzCoINOPB5clujGlB8LqYcGWxM2e6Zbq6D6Xt52c%2F9vT6Btc9oP3OTNZMAMWCDThC6vA04A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=6903&min_rtt=565&rtt_var=11728&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3272&recv_bytes=1270&delivery_rate=7438356&cwnd=254&unsent_bytes=0&cid=5d60875819a7e4f9&ts=293&x=0"
X-Firefox-Spdy: h2
|
| faith.is-a-qt.wtf/favicon.ico | 188.114.97.1 | 403 Forbidden | 111 B |
URL GET HTTP/3faith.is-a-qt.wtf/favicon.ico IP188.114.97.1:443
Requested byhttps://faith.is-a-qt.wtf/2024/12/chrome_8ryBBxEn3u.png CertificateIssuerGoogle Trust Services Subjectis-a-qt.wtf FingerprintA0:9B:80:A1:FC:75:4D:C1:19:66:73:7D:16:34:80:C3:C1:C1:98:2A ValidityFri, 15 Nov 2024 06:52:14 GMT - Thu, 13 Feb 2025 06:52:13 GMT
File typeXML 1.0 document, ASCII text, with no line terminators Hashe7a9350210b4dba641f6020447c96045 581accef4a8b7fbed97291fe7dd4e113f794ec80 08142330655deb1526dcc56795c92eb5c13012f75b599d5ac68db4027953ed80
| Analyzer | Verdict | Alert |
|---|
| ClamAV | malicious | Win.Malware.Agent3100026061/CRDF-1 |
GET /favicon.ico HTTP/1.1
Host: faith.is-a-qt.wtf
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://faith.is-a-qt.wtf/2024/12/chrome_8ryBBxEn3u.png
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
date: Sat, 21 Dec 2024 16:22:09 GMT
content-type: application/xml; charset=UTF-8
cf-ray: 8f593592df97b50c-OSL
cf-cache-status: BYPASS
cache-control: private, max-age=0
expires: Sat, 21 Dec 2024 16:22:09 GMT
vary: Accept-Encoding
x-guploader-uploadid: AFiumC6tf2AUY272TRO7GJhEC7HTMEepo6OtLxxG6TDCS_3ucy5y02m6Gr_6l1lKDMnInvOn
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w6PZI%2BjG%2FdlOtz4IArN4dLfXFmNWqiPOOZ4KCNO6PlPntLok0SgdpLBeXKGt3Uy56y86sOBVMvt2rY0oWc3nQiUqrHIZyBSCmf9x3Ro1gNEgqoRxD5Vj3SZzH%2FFyMGeKOOPi%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4343&min_rtt=2784&rtt_var=2158&sent=15&recv=10&lost=0&retrans=0&sent_bytes=4221&recv_bytes=1318&delivery_rate=211525&cwnd=12000&unsent_bytes=0&cid=cce2ed1f768b15b0&ts=1122&x=1", cfExtPri, cfHdrFlush;dur=0
|
![Share reporttesting](/search?q=http.url.addr:"faith.is-a-qt.wtf/2024/12/chrome_8ryBBxEn3u.png"){kind=link}
104.21.45.240