GET www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png
200 OK 2.1 kB URL GET www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png
IP
Certificate IssuerGoogle Trust Services
Subjectdynadot.com
Fingerprint8F:F7:A7:EF:B8:D2:55:B6:5C:4E:D5:32:CB:76:F2:B6:AC:C1:BC:2F
ValiditySat, 19 Jul 2025 19:35:22 GMT - Fri, 17 Oct 2025 20:35:10 GMT
File type RIFF (little-endian) data, Web/P image
Hash cc766ccddd8dd6d09592cf7bc61e98fa
6611f72d68360af6cd3948419672fb29ce995025
9e701ce71ca43fb9ee9f9abe1ee9f4399b1ab1007bad445d6a2429101300d67d
GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1
Host: www.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 20 Jul 2025 22:20:09 GMT
content-type: image/webp
content-length: 2132
cf-ray: 9625d81e4c095688-OSL
cache-control: public, max-age=1209600
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4843
content-disposition: inline; filename="navbar-logo-dark-2023.webp"
etag: 1752856882423
expires: Sun, 03 Aug 2025 22:20:09 GMT
strict-transport-security: max-age=2592000
vary: Accept
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 192856
accept-ranges: bytes
access-control-allow-origin: *.mouseflow.com
server: cloudflare
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/adsense/domains/caf.js
200 OK 157 kB URL GET syndicatedsearch.goog/adsense/domains/caf.js
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F39468.sx%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.HFtMpg5qw_s9gBAMECTbfD0o2QZnQNqQqOrQ8XWIEH9Zq_9_XRwgrw.rK8chsVkvBanaCvxCVYT9w.k_p6u86IBapHubCTyp3X9SUPtirXEXGiO9-GeG45EBeuXLWhxbsugcFrOteYOYRo67DEHcH-6NDm1T76n3xlYCCCCpdsytJitU00qfiwK8rOEGO-IdF4zS7ZsCewYjjYdrQeGgdKP9oHdVctNBCqs1tLnraIeFZ87alxBTl3YKm8ULgRfmrSB3RhyBGnGykmoV9Apu1syPmoVc2sSX7hADUSGZ-GKQLQI9OWy-oZVb40oTkgrqEkOn49IEQBvGj9xtEYgB4MOyXTTH-RktGR9Raz1ho5ZwcV184SpVwcQ55edNnRRgXQUOw-44bIfUm3QYrx7kZW2dCucys1dVBoPIgosczLhi6nocqKBxv3SsA0jqRvJ2z5dYB4-G6QPJ5KFjLR9taz7QaTauhyrtdS773VrXCQZp-QYRR9I0xCwQfzPmUw4lihnnsn6W2oEJ_BUancWb9MmUVYuO62qUtUlowVyA5pGFv3t7VZ_jntTFF-ZUBdiwqh7nvAODwy4V9hzrBws2_wFT0TQMJh3Bwj7jvXaSbIbwOsl7e0qKyr8o32UuhR8Ac6bFcRiV9D7pK8rxVupKYmcRNsOcKH-70BWBHUFBIFa8sJR1CAerX6zgnbZrD5R5ezgBdYIg22wAOSusM0oJ7UdUfbHj7wVcgvyA.bHe9P-ylGSOf7SISn8WbOQ&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1691753050009765&num=0&output=afd_ads&domain_name=39468.sx&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1753050009767&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=782917150&rurl=https%3A%2F%2F39468.sx%2F
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89
ValidityMon, 23 Jun 2025 08:43:32 GMT - Mon, 15 Sep 2025 08:43:31 GMT
File type JavaScript source, ASCII text, with very long lines (2936)
Size 157 kB (156665 bytes)
Hash abfc047f883019e99af8bf30301e0f74
304a9a2c27b6dd209525ebe0545706c744784e20
b68614a875f607d95ed62623f48a5d24198aa5a89e9f412a4739f8a101307aa7
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sun, 20 Jul 2025 22:20:10 GMT
expires: Sun, 20 Jul 2025 22:20:10 GMT
cache-control: private, max-age=3600
etag: "368287486440129724"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
200 OK 200 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F39468.sx%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.HFtMpg5qw_s9gBAMECTbfD0o2QZnQNqQqOrQ8XWIEH9Zq_9_XRwgrw.rK8chsVkvBanaCvxCVYT9w.k_p6u86IBapHubCTyp3X9SUPtirXEXGiO9-GeG45EBeuXLWhxbsugcFrOteYOYRo67DEHcH-6NDm1T76n3xlYCCCCpdsytJitU00qfiwK8rOEGO-IdF4zS7ZsCewYjjYdrQeGgdKP9oHdVctNBCqs1tLnraIeFZ87alxBTl3YKm8ULgRfmrSB3RhyBGnGykmoV9Apu1syPmoVc2sSX7hADUSGZ-GKQLQI9OWy-oZVb40oTkgrqEkOn49IEQBvGj9xtEYgB4MOyXTTH-RktGR9Raz1ho5ZwcV184SpVwcQ55edNnRRgXQUOw-44bIfUm3QYrx7kZW2dCucys1dVBoPIgosczLhi6nocqKBxv3SsA0jqRvJ2z5dYB4-G6QPJ5KFjLR9taz7QaTauhyrtdS773VrXCQZp-QYRR9I0xCwQfzPmUw4lihnnsn6W2oEJ_BUancWb9MmUVYuO62qUtUlowVyA5pGFv3t7VZ_jntTFF-ZUBdiwqh7nvAODwy4V9hzrBws2_wFT0TQMJh3Bwj7jvXaSbIbwOsl7e0qKyr8o32UuhR8Ac6bFcRiV9D7pK8rxVupKYmcRNsOcKH-70BWBHUFBIFa8sJR1CAerX6zgnbZrD5R5ezgBdYIg22wAOSusM0oJ7UdUfbHj7wVcgvyA.bHe9P-ylGSOf7SISn8WbOQ&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1691753050009765&num=0&output=afd_ads&domain_name=39468.sx&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1753050009767&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=782917150&rurl=https%3A%2F%2F39468.sx%2F
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type SVG Scalable Vector Graphics image
Hash 11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 20 Jul 2025 03:10:40 GMT
expires: Mon, 21 Jul 2025 02:10:40 GMT
cache-control: public, max-age=82800
age: 68970
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1716
Origin: https://39468.sx
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://39468.sx
content-type: application/json
date: Sun, 20 Jul 2025 22:20:15 GMT
content-length: 0
X-Firefox-Spdy: h2
200 OK 19 kB IP
Certificate IssuerLet's Encrypt
Subject39468.sx
Fingerprint61:81:91:38:47:DA:4F:44:8A:B4:BB:A7:5F:3E:BE:37:15:B7:43:2E
ValiditySat, 19 Jul 2025 13:08:24 GMT - Fri, 17 Oct 2025 13:08:23 GMT
File type HTML document, ASCII text, with very long lines (9158)
Hash f5aec3442ed4daa19aa12f1867a76f80
80287de62bf6c4a84eff137b5e100d7aff589eb7
1aad0f7083549f044741fb15afdcd6f7fe001d0590859c3cdfc375593c3d4eb3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: 39468.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50545"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sun, 20 Jul 2025 22:20:08 GMT
server: nginx
vary: Accept-Encoding
via: 1.1 Caddy, 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_oJcK/hTN0JRRj/PgBfSuym4FyqmP3Mntk3FYgFrm6414yGxnFsmIp1SLsS8otV85j0/MU22Nu2jThL7ISQHemw==
x-buckets: bucket003,bucket077
x-domain: 39468.sx
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain:
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
GET euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
200 OK 115 kB URL GET euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
IP
Certificate IssuerAmazon
Subject*.youseasky.com
FingerprintF4:E4:C6:70:2D:8F:86:68:CF:5D:7A:6C:62:4B:B8:0B:CC:F2:4A:30
ValiditySun, 18 May 2025 00:00:00 GMT - Tue, 16 Jun 2026 23:59:59 GMT
Size 115 kB (115111 bytes)
Hash c383876451dbff230bddabf20fb700bf
4b7b4c3a0a4d30f119ba7049c3e2947b8ea1813e
de13ce81d0aba82ca95827eb57b3c61f73c21076a6d827b7b75956d06ba63375
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 42266
content-encoding: gzip
server: Caddy
date: Sun, 20 Jul 2025 13:29:59 GMT
cache-control: max-age=43200
expires: Mon, 21 Jul 2025 01:29:59 GMT
etag: "1c1a7-S3tMOgpNMPEZunBJw+KUe46hgT4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d84d4103926180da8f8abcb90515db0c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: j6tCabfONSatbLK_tNaswsnbu0dstLDk3N4P-Vcagu5CWA3A5XF0jg==
age: 31810
X-Firefox-Spdy: h2
GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
200 OK 11 kB URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Sun, 20 Jul 2025 05:29:30 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 d84d4103926180da8f8abcb90515db0c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P1
x-amz-cf-id: I5KAyc3XDVvB54Z5aFJ970qwX1xy7qSaU_wmXhiQDCIp-KgKdMORQA==
age: 60639
X-Firefox-Spdy: h2
GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
200 OK 157 kB URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
IP
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73
ValidityMon, 23 Jun 2025 08:42:14 GMT - Mon, 15 Sep 2025 08:42:13 GMT
File type JavaScript source, ASCII text, with very long lines (2936)
Size 157 kB (156658 bytes)
Hash 847377a9619073b870dd4b43d8604b74
038c6df06dd9f31a267390283ff48ca30ded95bd
e7fb3f2ade3dd4f970b9d7de4253ff64b2b070bfdb497cf40d0b1325f463c4b2
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sun, 20 Jul 2025 22:20:09 GMT
expires: Sun, 20 Jul 2025 22:20:09 GMT
cache-control: private, max-age=3600
etag: "6515239805621498211"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F39468.sx%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.HFtMpg5qw_s9gBAMECTbfD0o2QZnQNqQqOrQ8XWIEH9Zq_9_XRwgrw.rK8chsVkvBanaCvxCVYT9w.k_p6u86IBapHubCTyp3X9SUPtirXEXGiO9-GeG45EBeuXLWhxbsugcFrOteYOYRo67DEHcH-6NDm1T76n3xlYCCCCpdsytJitU00qfiwK8rOEGO-IdF4zS7ZsCewYjjYdrQeGgdKP9oHdVctNBCqs1tLnraIeFZ87alxBTl3YKm8ULgRfmrSB3RhyBGnGykmoV9Apu1syPmoVc2sSX7hADUSGZ-GKQLQI9OWy-oZVb40oTkgrqEkOn49IEQBvGj9xtEYgB4MOyXTTH-RktGR9Raz1ho5ZwcV184SpVwcQ55edNnRRgXQUOw-44bIfUm3QYrx7kZW2dCucys1dVBoPIgosczLhi6nocqKBxv3SsA0jqRvJ2z5dYB4-G6QPJ5KFjLR9taz7QaTauhyrtdS773VrXCQZp-QYRR9I0xCwQfzPmUw4lihnnsn6W2oEJ_BUancWb9MmUVYuO62qUtUlowVyA5pGFv3t7VZ_jntTFF-ZUBdiwqh7nvAODwy4V9hzrBws2_wFT0TQMJh3Bwj7jvXaSbIbwOsl7e0qKyr8o32UuhR8Ac6bFcRiV9D7pK8rxVupKYmcRNsOcKH-70BWBHUFBIFa8sJR1CAerX6zgnbZrD5R5ezgBdYIg22wAOSusM0oJ7UdUfbHj7wVcgvyA.bHe9P-ylGSOf7SISn8WbOQ&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1691753050009765&num=0&output=afd_ads&domain_name=39468.sx&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1753050009767&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=782917150&rurl=https%3A%2F%2F39468.sx%2F
200 OK 16 kB URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F39468.sx%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.HFtMpg5qw_s9gBAMECTbfD0o2QZnQNqQqOrQ8XWIEH9Zq_9_XRwgrw.rK8chsVkvBanaCvxCVYT9w.k_p6u86IBapHubCTyp3X9SUPtirXEXGiO9-GeG45EBeuXLWhxbsugcFrOteYOYRo67DEHcH-6NDm1T76n3xlYCCCCpdsytJitU00qfiwK8rOEGO-IdF4zS7ZsCewYjjYdrQeGgdKP9oHdVctNBCqs1tLnraIeFZ87alxBTl3YKm8ULgRfmrSB3RhyBGnGykmoV9Apu1syPmoVc2sSX7hADUSGZ-GKQLQI9OWy-oZVb40oTkgrqEkOn49IEQBvGj9xtEYgB4MOyXTTH-RktGR9Raz1ho5ZwcV184SpVwcQ55edNnRRgXQUOw-44bIfUm3QYrx7kZW2dCucys1dVBoPIgosczLhi6nocqKBxv3SsA0jqRvJ2z5dYB4-G6QPJ5KFjLR9taz7QaTauhyrtdS773VrXCQZp-QYRR9I0xCwQfzPmUw4lihnnsn6W2oEJ_BUancWb9MmUVYuO62qUtUlowVyA5pGFv3t7VZ_jntTFF-ZUBdiwqh7nvAODwy4V9hzrBws2_wFT0TQMJh3Bwj7jvXaSbIbwOsl7e0qKyr8o32UuhR8Ac6bFcRiV9D7pK8rxVupKYmcRNsOcKH-70BWBHUFBIFa8sJR1CAerX6zgnbZrD5R5ezgBdYIg22wAOSusM0oJ7UdUfbHj7wVcgvyA.bHe9P-ylGSOf7SISn8WbOQ&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1691753050009765&num=0&output=afd_ads&domain_name=39468.sx&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1753050009767&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=782917150&rurl=https%3A%2F%2F39468.sx%2F
IP
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89
ValidityMon, 23 Jun 2025 08:43:32 GMT - Mon, 15 Sep 2025 08:43:31 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (15445)
Hash 215018488ed94cf0e88a62a1a0ffb4ab
f6f56ffbdbe82ccdff77bf57fff049e48d59cd65
6894329abeb002ea575401de5df62b500a97c1d48b0ad47d60117485f7f82610
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F39468.sx%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.HFtMpg5qw_s9gBAMECTbfD0o2QZnQNqQqOrQ8XWIEH9Zq_9_XRwgrw.rK8chsVkvBanaCvxCVYT9w.k_p6u86IBapHubCTyp3X9SUPtirXEXGiO9-GeG45EBeuXLWhxbsugcFrOteYOYRo67DEHcH-6NDm1T76n3xlYCCCCpdsytJitU00qfiwK8rOEGO-IdF4zS7ZsCewYjjYdrQeGgdKP9oHdVctNBCqs1tLnraIeFZ87alxBTl3YKm8ULgRfmrSB3RhyBGnGykmoV9Apu1syPmoVc2sSX7hADUSGZ-GKQLQI9OWy-oZVb40oTkgrqEkOn49IEQBvGj9xtEYgB4MOyXTTH-RktGR9Raz1ho5ZwcV184SpVwcQ55edNnRRgXQUOw-44bIfUm3QYrx7kZW2dCucys1dVBoPIgosczLhi6nocqKBxv3SsA0jqRvJ2z5dYB4-G6QPJ5KFjLR9taz7QaTauhyrtdS773VrXCQZp-QYRR9I0xCwQfzPmUw4lihnnsn6W2oEJ_BUancWb9MmUVYuO62qUtUlowVyA5pGFv3t7VZ_jntTFF-ZUBdiwqh7nvAODwy4V9hzrBws2_wFT0TQMJh3Bwj7jvXaSbIbwOsl7e0qKyr8o32UuhR8Ac6bFcRiV9D7pK8rxVupKYmcRNsOcKH-70BWBHUFBIFa8sJR1CAerX6zgnbZrD5R5ezgBdYIg22wAOSusM0oJ7UdUfbHj7wVcgvyA.bHe9P-ylGSOf7SISn8WbOQ&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1691753050009765&num=0&output=afd_ads&domain_name=39468.sx&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1753050009767&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=782917150&rurl=https%3A%2F%2F39468.sx%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sun, 20 Jul 2025 22:20:09 GMT
expires: Sun, 20 Jul 2025 22:20:09 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-lQAGtoHhOdK__MZiV9qNkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3525
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
200 OK 391 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F39468.sx%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.HFtMpg5qw_s9gBAMECTbfD0o2QZnQNqQqOrQ8XWIEH9Zq_9_XRwgrw.rK8chsVkvBanaCvxCVYT9w.k_p6u86IBapHubCTyp3X9SUPtirXEXGiO9-GeG45EBeuXLWhxbsugcFrOteYOYRo67DEHcH-6NDm1T76n3xlYCCCCpdsytJitU00qfiwK8rOEGO-IdF4zS7ZsCewYjjYdrQeGgdKP9oHdVctNBCqs1tLnraIeFZ87alxBTl3YKm8ULgRfmrSB3RhyBGnGykmoV9Apu1syPmoVc2sSX7hADUSGZ-GKQLQI9OWy-oZVb40oTkgrqEkOn49IEQBvGj9xtEYgB4MOyXTTH-RktGR9Raz1ho5ZwcV184SpVwcQ55edNnRRgXQUOw-44bIfUm3QYrx7kZW2dCucys1dVBoPIgosczLhi6nocqKBxv3SsA0jqRvJ2z5dYB4-G6QPJ5KFjLR9taz7QaTauhyrtdS773VrXCQZp-QYRR9I0xCwQfzPmUw4lihnnsn6W2oEJ_BUancWb9MmUVYuO62qUtUlowVyA5pGFv3t7VZ_jntTFF-ZUBdiwqh7nvAODwy4V9hzrBws2_wFT0TQMJh3Bwj7jvXaSbIbwOsl7e0qKyr8o32UuhR8Ac6bFcRiV9D7pK8rxVupKYmcRNsOcKH-70BWBHUFBIFa8sJR1CAerX6zgnbZrD5R5ezgBdYIg22wAOSusM0oJ7UdUfbHj7wVcgvyA.bHe9P-ylGSOf7SISn8WbOQ&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=1691753050009765&num=0&output=afd_ads&domain_name=39468.sx&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1753050009767&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=782917150&rurl=https%3A%2F%2F39468.sx%2F
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintF0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14
ValidityMon, 23 Jun 2025 08:41:22 GMT - Mon, 15 Sep 2025 08:41:21 GMT
File type SVG Scalable Vector Graphics image
Hash 8959ddcd9712196961d93f58064ed655
62ab1e38e7e9fbf58a04381b76c2d96a9c829f24
17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 20 Jul 2025 02:55:41 GMT
expires: Mon, 21 Jul 2025 01:55:41 GMT
cache-control: public, max-age=82800
age: 69869
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=7i7gu6e40uli&cd_fexp=72717108&aqid=mWt9aIf-ONuUiM0P8ZvtmA0&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=782917150&csala=8%7C0%7C360%7C83%7C106&lle=0&ifv=1&hpt=1
204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=7i7gu6e40uli&cd_fexp=72717108&aqid=mWt9aIf-ONuUiM0P8ZvtmA0&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=782917150&csala=8%7C0%7C360%7C83%7C106&lle=0&ifv=1&hpt=1
IP
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89
ValidityMon, 23 Jun 2025 08:43:32 GMT - Mon, 15 Sep 2025 08:43:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=7i7gu6e40uli&cd_fexp=72717108&aqid=mWt9aIf-ONuUiM0P8ZvtmA0&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=782917150&csala=8%7C0%7C360%7C83%7C106&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-_fj6xMGzBiXBntzcw3Wj9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sun, 20 Jul 2025 22:20:11 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET 39468.sx/favicon.ico
200 OK 0 B IP
Certificate IssuerLet's Encrypt
Subject39468.sx
Fingerprint61:81:91:38:47:DA:4F:44:8A:B4:BB:A7:5F:3E:BE:37:15:B7:43:2E
ValiditySat, 19 Jul 2025 13:08:24 GMT - Fri, 17 Oct 2025 13:08:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: 39468.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50545"; ma=2592000
content-type: image/x-icon
date: Sun, 20 Jul 2025 22:20:09 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: nginx
via: 1.1 Caddy
content-length: 0
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2504
Origin: https://39468.sx
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://39468.sx
content-type: application/json
date: Sun, 20 Jul 2025 22:20:11 GMT
content-length: 0
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=z6sk3d55h244&cd_fexp=72717108&aqid=mWt9aIf-ONuUiM0P8ZvtmA0&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=782917150&csala=8%7C0%7C360%7C83%7C106&lle=0&ifv=1&hpt=1
204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=z6sk3d55h244&cd_fexp=72717108&aqid=mWt9aIf-ONuUiM0P8ZvtmA0&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=782917150&csala=8%7C0%7C360%7C83%7C106&lle=0&ifv=1&hpt=1
IP
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89
ValidityMon, 23 Jun 2025 08:43:32 GMT - Mon, 15 Sep 2025 08:43:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=z6sk3d55h244&cd_fexp=72717108&aqid=mWt9aIf-ONuUiM0P8ZvtmA0&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=782917150&csala=8%7C0%7C360%7C83%7C106&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-5OWjIkNOH0lqEPlLMF8J_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sun, 20 Jul 2025 22:20:11 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST obseu.youseasky.com/mon
200 OK 0 B IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1716
Origin: https://39468.sx
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://39468.sx
content-type: application/json
date: Sun, 20 Jul 2025 22:20:13 GMT
content-length: 0
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1719
Origin: https://39468.sx
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://39468.sx
content-type: application/json
date: Sun, 20 Jul 2025 22:20:25 GMT
content-length: 0
X-Firefox-Spdy: h2
GET 39468.sx/munin/a/tr/browserjs?domain=39468.sx&toggle=browserjs&uid=MTc1MzA1MDAwOC45NzA5OjdiOTBkZTNkMDgzN2NhNjA4OTg5OGRhNWU3NTBmOWU2OWQ4ZDY4NTZmMGY4NjNhZmRkMzcyOWI0OTdmOGNlMzk6Njg3ZDZiOThlZDBiYQ%3D%3D
200 OK 0 B URL GET 39468.sx/munin/a/tr/browserjs?domain=39468.sx&toggle=browserjs&uid=MTc1MzA1MDAwOC45NzA5OjdiOTBkZTNkMDgzN2NhNjA4OTg5OGRhNWU3NTBmOWU2OWQ4ZDY4NTZmMGY4NjNhZmRkMzcyOWI0OTdmOGNlMzk6Njg3ZDZiOThlZDBiYQ%3D%3D
IP
Certificate IssuerLet's Encrypt
Subject39468.sx
Fingerprint61:81:91:38:47:DA:4F:44:8A:B4:BB:A7:5F:3E:BE:37:15:B7:43:2E
ValiditySat, 19 Jul 2025 13:08:24 GMT - Fri, 17 Oct 2025 13:08:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /munin/a/tr/browserjs?domain=39468.sx&toggle=browserjs&uid=MTc1MzA1MDAwOC45NzA5OjdiOTBkZTNkMDgzN2NhNjA4OTg5OGRhNWU3NTBmOWU2OWQ4ZDY4NTZmMGY4NjNhZmRkMzcyOWI0OTdmOGNlMzk6Njg3ZDZiOThlZDBiYQ%3D%3D HTTP/1.1
Host: 39468.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50545"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sun, 20 Jul 2025 22:20:09 GMT
server: nginx
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
GET 39468.sx/munin/a/ls?t=687d6b98&token=ab5bddfe22325df65e1681c035a23490065dd25f
201 Created 0 B URL GET 39468.sx/munin/a/ls?t=687d6b98&token=ab5bddfe22325df65e1681c035a23490065dd25f
IP
Certificate IssuerLet's Encrypt
Subject39468.sx
Fingerprint61:81:91:38:47:DA:4F:44:8A:B4:BB:A7:5F:3E:BE:37:15:B7:43:2E
ValiditySat, 19 Jul 2025 13:08:24 GMT - Fri, 17 Oct 2025 13:08:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /munin/a/ls?t=687d6b98&token=ab5bddfe22325df65e1681c035a23490065dd25f HTTP/1.1
Host: 39468.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50545"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Sun, 20 Jul 2025 22:20:09 GMT
server: nginx
status: 201 Created
via: 1.1 Caddy, 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_ZCJOrbt8phDnQyUgcG56vLunApQaNMa4DYRygltDmtEdTz8e9WG+z4F6BSdy6ZDN+jxUD+Xh/uiQTG0TtuB10A==
x-log-success: 687d6b99bb958a05de0c4dca
content-length: 0
X-Firefox-Spdy: h2
GET 39468.sx/munin/a/tr/answercheck/yes?domain=39468.sx&caf=1&toggle=answercheck&answer=yes&uid=MTc1MzA1MDAwOC45NzA5OjdiOTBkZTNkMDgzN2NhNjA4OTg5OGRhNWU3NTBmOWU2OWQ4ZDY4NTZmMGY4NjNhZmRkMzcyOWI0OTdmOGNlMzk6Njg3ZDZiOThlZDBiYQ%3D%3D
200 OK 0 B URL GET 39468.sx/munin/a/tr/answercheck/yes?domain=39468.sx&caf=1&toggle=answercheck&answer=yes&uid=MTc1MzA1MDAwOC45NzA5OjdiOTBkZTNkMDgzN2NhNjA4OTg5OGRhNWU3NTBmOWU2OWQ4ZDY4NTZmMGY4NjNhZmRkMzcyOWI0OTdmOGNlMzk6Njg3ZDZiOThlZDBiYQ%3D%3D
IP
Certificate IssuerLet's Encrypt
Subject39468.sx
Fingerprint61:81:91:38:47:DA:4F:44:8A:B4:BB:A7:5F:3E:BE:37:15:B7:43:2E
ValiditySat, 19 Jul 2025 13:08:24 GMT - Fri, 17 Oct 2025 13:08:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /munin/a/tr/answercheck/yes?domain=39468.sx&caf=1&toggle=answercheck&answer=yes&uid=MTc1MzA1MDAwOC45NzA5OjdiOTBkZTNkMDgzN2NhNjA4OTg5OGRhNWU3NTBmOWU2OWQ4ZDY4NTZmMGY4NjNhZmRkMzcyOWI0OTdmOGNlMzk6Njg3ZDZiOThlZDBiYQ%3D%3D HTTP/1.1
Host: 39468.sx
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50545"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sun, 20 Jul 2025 22:20:10 GMT
server: nginx
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
GET obseu.youseasky.com/ct?id=80705&url=https%3A%2F%2F39468.sx%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=ab5bddfe22325df65e1681c035a23490065dd25f&tsf=0&tsfmi=&tsfu=&cb=1753050010357&hl=2&op=0&ag=2881387774&rand=5492679255892291629066700500576667811001025102667286902602910711855578779096104056115962&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=XqycNbQ9zK&pto=2129&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1753050010.euvtw5W03hmz1vMi&suid=1.1753050010.lFCcgwOHHyPwBSzz&tuid=1.1753050010.UJhu7aTqmvOusU1F&fbc=->m=-&it=12%2C1026%2C145&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
200 OK 3.3 kB URL GET obseu.youseasky.com/ct?id=80705&url=https%3A%2F%2F39468.sx%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=ab5bddfe22325df65e1681c035a23490065dd25f&tsf=0&tsfmi=&tsfu=&cb=1753050010357&hl=2&op=0&ag=2881387774&rand=5492679255892291629066700500576667811001025102667286902602910711855578779096104056115962&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=XqycNbQ9zK&pto=2129&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1753050010.euvtw5W03hmz1vMi&suid=1.1753050010.lFCcgwOHHyPwBSzz&tuid=1.1753050010.UJhu7aTqmvOusU1F&fbc=->m=-&it=12%2C1026%2C145&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3337), with no line terminators
Hash 503997113257e4fe6bf55959816302c5
06e24539a2e0b40bbed3d12bad3c850a2ed52a84
5d7ee28692f1ae08186448c7bc3b63724e56f69c1fa9bf7aa07258e3f15a9f10
GET /ct?id=80705&url=https%3A%2F%2F39468.sx%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=ab5bddfe22325df65e1681c035a23490065dd25f&tsf=0&tsfmi=&tsfu=&cb=1753050010357&hl=2&op=0&ag=2881387774&rand=5492679255892291629066700500576667811001025102667286902602910711855578779096104056115962&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=XqycNbQ9zK&pto=2129&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1753050010.euvtw5W03hmz1vMi&suid=1.1753050010.lFCcgwOHHyPwBSzz&tuid=1.1753050010.UJhu7aTqmvOusU1F&fbc=->m=-&it=12%2C1026%2C145&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sun, 20 Jul 2025 22:20:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505; Max-Age=29030400; Path=/; Expires=Sun, 21 Jun 2026 22:20:10 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://39468.sx
content-length: 1143
X-Firefox-Spdy: h2
GET obseu.youseasky.com/tracker/tc_imp.gif?e=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&cri=XqycNbQ9zK&ts=402&cb=1753050010759
200 OK 43 B URL GET obseu.youseasky.com/tracker/tc_imp.gif?e=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&cri=XqycNbQ9zK&ts=402&cb=1753050010759
IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=XqycNbQ9zK&ts=402&cb=1753050010759 HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sun, 20 Jul 2025 22:20:10 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1719
Origin: https://39468.sx
DNT: 1
Connection: keep-alive
Referer: https://39468.sx/
Cookie: cg_uuid=1966258821a9f3f78a5973bdabf5c505
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://39468.sx
content-type: application/json
date: Sun, 20 Jul 2025 22:20:20 GMT
content-length: 0
X-Firefox-Spdy: h2
75.2.18.233
104.16.153.132
34.251.101.162