| app.trckkkk.com/click?pid=2&offer_id=111&sub2=u69414&sub3=cl612063&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03 |  34.91.218.141 | 302 Found | 0 B |
URL User Request GET HTTP/2app.trckkkk.com/click?pid=2&offer_id=111&sub2=u69414&sub3=cl612063&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03 IP34.91.218.141:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerSectigo Limited Subjectapp.trckkkk.com Fingerprint26:FF:C4:CC:92:A3:EE:67:E8:EB:30:68:BE:A1:61:04:89:26:B1:2E ValidityWed, 22 Jan 2025 00:00:00 GMT - Thu, 22 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=2&offer_id=111&sub2=u69414&sub3=cl612063&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03 HTTP/1.1
Host: app.trckkkk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Mon, 27 Jan 2025 18:18:46 GMT
content-length: 0
location: https://app.trckkkk.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl612063&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03&sub14=111&sub13=trafficback
x-adjust-use-original-forwarded-for: 1
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| app.trckkkk.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl612063&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03&sub14=111&sub13=trafficback | 34.91.218.141 | 302 Found | 0 B |
URL User Request GET HTTP/2app.trckkkk.com/sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl612063&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03&sub14=111&sub13=trafficback IP34.91.218.141:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
CertificateIssuerSectigo Limited Subjectapp.trckkkk.com Fingerprint26:FF:C4:CC:92:A3:EE:67:E8:EB:30:68:BE:A1:61:04:89:26:B1:2E ValidityWed, 22 Jan 2025 00:00:00 GMT - Thu, 22 Jan 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=66fda0ddbb23f2139d89e989&pid=2&sub2=u69414&sub3=cl612063&sub4=&sub5=&sub6=&sub7=rfhttps://filegamez.com/&sub8=rdfilegamez.com&sub15=632767e46b03&sub14=111&sub13=trafficback HTTP/1.1
Host: app.trckkkk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 27 Jan 2025 18:18:46 GMT
content-length: 0
location: https://fly.wrensongmobi.com/click?pid=3554&offer_id=73981&sub2=6797ce066fad2d00015b53c7&sub5=u69414
x-adjust-use-original-forwarded-for: 1
set-cookie: afclick=6797ce066fad2d00015b53c7; expires=Tue, 27 Jan 2026 18:18:46 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| fly.wrensongmobi.com/click?pid=3554&offer_id=73981&sub2=6797ce066fad2d00015b53c7&sub5=u69414 |  104.21.33.247 | 302 Found | 0 B |
URL User Request GET HTTP/2fly.wrensongmobi.com/click?pid=3554&offer_id=73981&sub2=6797ce066fad2d00015b53c7&sub5=u69414 IP104.21.33.247:443
CertificateIssuerGoogle Trust Services Subjectwrensongmobi.com FingerprintF9:05:EF:DE:C2:23:0A:5E:D2:D8:6D:EF:46:C7:DD:57:70:CC:09:F9 ValidityMon, 13 Jan 2025 03:02:46 GMT - Sun, 13 Apr 2025 04:00:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?pid=3554&offer_id=73981&sub2=6797ce066fad2d00015b53c7&sub5=u69414 HTTP/1.1
Host: fly.wrensongmobi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 27 Jan 2025 18:18:46 GMT
content-length: 0
location: https://caiwheechous.com/link?z=4870721&var=3554_u69414&ymid=6797ce062ae99c00015155a2
x-adjust-use-original-forwarded-for: 1
referer:
referrer-policy: no-referrer
set-cookie: afclick=6797ce062ae99c00015155a2; expires=Tue, 27 Jan 2026 18:18:46 GMT; secure; SameSite=None
afoffers={"73981":1738001926}; expires=Tue, 27 Jan 2026 18:18:46 GMT; secure; SameSite=None
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=90I4v0UEchSucuOz788EoxTBeUVlI%2B8C5YQFnDnMj2upooYSHdjOqMv30IOdkGrdtE3vw4j4VqLDytwtNEAF9UNgUszF3M3Hyg8Y3UsDdzc6kMy2fjXR9Gac%2FNSKdVELRwzHV1RgQg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 908abf47cf620b65-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5564&min_rtt=476&rtt_var=10179&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3287&recv_bytes=1306&delivery_rate=6851735&cwnd=254&unsent_bytes=0&cid=006d3b4a20262abb&ts=103&x=0"
X-Firefox-Spdy: h2
|
|
| caiwheechous.com/link?z=4870721&var=3554_u69414&ymid=6797ce062ae99c00015155a2 | 172.64.146.197 | 302 Found | 0 B |
URL User Request GET HTTP/2caiwheechous.com/link?z=4870721&var=3554_u69414&ymid=6797ce062ae99c00015155a2 IP172.64.146.197:443
CertificateIssuerGoogle Trust Services Subjectcaiwheechous.com FingerprintEC:EB:CF:25:A5:C4:01:CC:B3:4D:31:A2:B7:9A:85:5A:8E:94:92:6E ValiditySat, 21 Dec 2024 15:07:47 GMT - Fri, 21 Mar 2025 16:07:40 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /link?z=4870721&var=3554_u69414&ymid=6797ce062ae99c00015155a2 HTTP/1.1
Host: caiwheechous.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 27 Jan 2025 18:18:46 GMT
content-length: 0
location: https://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://bouseegephe.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=04815eb8f34f4b81e0d9763d4ebe1bc9; expires=Tue, 27 Jan 2026 18:18:46 GMT
oaidts=1738001926; expires=Tue, 27 Jan 2026 18:18:46 GMT
OXCCLK=5284496.1; expires=Tue, 27 Jan 2026 18:18:46 GMT
allcnt=1; expires=Tue, 27 Jan 2026 18:18:46 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 908abf48ac1fb527-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bouseegephe.com/_next/static/media/background.25a569f1.webp | 104.18.37.211 | 200 OK | 16 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/background.25a569f1.webp IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeRIFF (little-endian) data, Web/P image Hasheaa9ea01825c04d47b794e8a98dabdf6 eac969916e18b02916a5fe2e6128f6c584fb3dd6 3711bd390dfe3b30e1fd0cf103b4d7640550ba1eea5dad4e1321ec602cce1f42
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/background.25a569f1.webp HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/webp
content-length: 16176
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: "6797b8d6-3f30"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5025
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4c19f80b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/sync-metrics | 104.18.37.211 | 200 OK | 17 B |
URL POST HTTP/3bouseegephe.com/sync-metrics IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-metrics HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 490
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 25087af2fa865530d82ddb2fd6476ed9
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 908abf4d7b400b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/favicon.ico | 104.18.37.211 | 204 No Content | 0 B |
URL GET HTTP/3bouseegephe.com/favicon.ico IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Mon, 27 Jan 2025 18:18:47 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: MISS
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=6,i=?0
vary: Accept-Encoding
server: cloudflare
cf-ray: 908abf4e7c9f0b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/e349ffdbb65d6c93-1737996212518-660e5b7e2e3b7996.js | 104.18.37.211 | 200 OK | 16 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/e349ffdbb65d6c93-1737996212518-660e5b7e2e3b7996.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (10752), with no line terminators Hash35fee35b460cf851bdf3beecb8b35f5a f6af853cbdfb476165846933aada6cc3b1419022 8670480720bc1d26b090cc475660907e07d42ea2dd14cbb860ca04add28ce9cc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e349ffdbb65d6c93-1737996212518-660e5b7e2e3b7996.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-2a00"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba9830b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/media/person-6.e7cd6065.webp | 104.18.37.211 | 200 OK | 2.4 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/person-6.e7cd6065.webp IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash7be25941ac032fcec25b1bb4ede296d2 cfc4fb3733844326076b6d7632087204c0bea34d 0ff9d28c4ab7516d2790e8df4d325cf602bc8f9eb787a7cd9b6554edd9530e4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-6.e7cd6065.webp HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/webp
content-length: 2440
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: "6797b8d6-988"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1085
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4f5dac0b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/OPvSH8gIa0n0vaVrdkbaR/_buildManifest.js | 104.18.37.211 | 200 OK | 3.2 kB |
URL GET HTTP/3bouseegephe.com/_next/static/OPvSH8gIa0n0vaVrdkbaR/_buildManifest.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeASCII text, with very long lines (1253), with no line terminators Hasha9a19ed289578d3627794f1f5d24d41d 1c75c44c93f84632da52454f93bc145fea33d293 338ec8cf37a00d8b8186f3e3f041d2f7be0c3dc49ba69030eb21c0341a306a97
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/OPvSH8gIa0n0vaVrdkbaR/_buildManifest.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-4e5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba98a0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/media/person-1.90304dab.webp | 104.18.37.211 | 200 OK | 1.4 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/person-1.90304dab.webp IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hashc5da2ea294623650bae71fc84401cf60 f1f62ea011cf81953cefe28254c134e992453b91 09a846c5b1af2c6100ff3193789be1e0e21ba9fc45c268f76f2007c78f1e4ac1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-1.90304dab.webp HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/webp
content-length: 1402
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: "6797b8d6-57a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4f6db70b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/a2d9adef805ddfd7-1737996212518.5b9e2a7d5b7e6941.js | 104.18.37.211 | 200 OK | 12 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/a2d9adef805ddfd7-1737996212518.5b9e2a7d5b7e6941.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (6857), with no line terminators Hash8f0372459f00feefe34fa716dceebd0d 95e25545bc26599cc78641124c53840ceb9b3373 a669418e5d67b1ac551ce9f8b8ff2c57bda3f821d4c102a32ad205dda65c1abd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/a2d9adef805ddfd7-1737996212518.5b9e2a7d5b7e6941.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-1ac9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d6b370b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| forspearowor.com/sync-do | 104.18.37.211 | 200 OK | 0 B |
IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectforspearowor.com Fingerprint3A:8C:A8:07:D5:2D:D7:FE:61:57:D2:BF:09:1F:57:27:56:6E:48:54 ValidityWed, 25 Dec 2024 22:54:00 GMT - Tue, 25 Mar 2025 23:53:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
OPTIONS /sync-do HTTP/1.1
Host: forspearowor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://bouseegephe.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-length: 0
access-control-allow-origin: https://bouseegephe.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 908abf507e161bfa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=8efab22a-64f6-4983-ab0c-80597c7ae1fb | 37.48.68.71 | 200 OK | 12 B |
URL POST HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=8efab22a-64f6-4983-ab0c-80597c7ae1fb IP37.48.68.71:443 ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerSectigo Limited Subjectdatatechonert.com FingerprintED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72 ValidityWed, 11 Dec 2024 00:00:00 GMT - Tue, 23 Dec 2025 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=8efab22a-64f6-4983-ab0c-80597c7ae1fb HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1531
Origin: https://bouseegephe.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Mon, 27 Jan 2025 18:18:47 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://bouseegephe.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| forspearowor.com/sync-do | 104.18.37.211 | 200 OK | 8.7 kB |
IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectforspearowor.com Fingerprint3A:8C:A8:07:D5:2D:D7:FE:61:57:D2:BF:09:1F:57:27:56:6E:48:54 ValidityWed, 25 Dec 2024 22:54:00 GMT - Tue, 25 Mar 2025 23:53:47 GMT
Hash9a9a1beccab8c3527cb5c4e14b6d6a9d 2ba6c04cf27087c93cc1039815d0612e60ca8875 7506bfb86c4c09769b3d4c21a9c520a4e9b481bb7affc2f5de51e33111948690
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-do HTTP/1.1
Host: forspearowor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 243
Origin: https://bouseegephe.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-trace-id: 9befa3404ac46978413e731ae8f12200
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bouseegephe.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 908abf50eebdb523-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bouseegephe.com/_next/static/css/0bc0cde260d08b97.css | 104.18.37.211 | 200 OK | 1.8 kB |
URL GET HTTP/3bouseegephe.com/_next/static/css/0bc0cde260d08b97.css IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeASCII text, with very long lines (1843), with no line terminators Hash64b2b4fa42c7d558d735e2cd28ecf88a 03d6da6e55b1201b51689590520da495a9233d67 2fdb3ce9ccba8355040e5ba3dfb2283194acba81858943b5d88f70030dbb71ea
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/0bc0cde260d08b97.css HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: text/css
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-733"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=2,i=?0
server: cloudflare
cf-ray: 908abf4b99770b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/cfcb3400a6901b5e-1737996212518.4de6935d27498edc.js | 104.18.37.211 | 200 OK | 404 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/cfcb3400a6901b5e-1737996212518.4de6935d27498edc.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (410), with no line terminators Hash317d83f7b7a689deca8138270a2f7678 e0e0fdc09565359a90e6ab25d89aa8908787238b 6f149285773a0f41e8b3b098676b0728f5c9a2942276e8792e39cc3b59d28b97
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/cfcb3400a6901b5e-1737996212518.4de6935d27498edc.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-194"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d8b5b0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/media/person-2.f83cc68b.webp | 104.18.37.211 | 200 OK | 2.2 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/person-2.f83cc68b.webp IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash8f8ffbb278de1342e5cf44cd0c677c23 1b4b4428e409479cc8a8acfce6f537c2aeea7556 ac4284ed6941963c4fa0db306537f42f3a0b1fa18710bc7b9e1e62188961d83a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-2.f83cc68b.webp HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/webp
content-length: 2220
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: "6797b8d6-8ac"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4f5db00b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/3cacc58ea516fe6f-1737996212518.4d666b3ce7dcd66f.js | 104.18.37.211 | 200 OK | 30 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/3cacc58ea516fe6f-1737996212518.4d666b3ce7dcd66f.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (30035), with no line terminators Hash0e650c6fbdbaea01c64c59f71ecbe089 75d3aef97713ed867eb35e87cb91d4a6ad74ac3b 08800a958ef86e09d5001801f2f8645ae0a14002a8610f38a883b747e73cb544
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/3cacc58ea516fe6f-1737996212518.4d666b3ce7dcd66f.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-7553"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4b99780b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/ac5595402e335eea-1737996212518.3cfdc57f0372e5e9.js | 104.18.37.211 | 200 OK | 7.0 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/ac5595402e335eea-1737996212518.3cfdc57f0372e5e9.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (7133), with no line terminators Hash309061ab74ca638f460078aad0676d38 469e0bfe32600b6b32af0def65a0c2c0d7ec7fc3 95b40ce23cb442d3ed6f0ec23e0a460e294e130a98be2dc84a20a8220dbd97be
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/ac5595402e335eea-1737996212518.3cfdc57f0372e5e9.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-1b79"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ceabd0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/dbb80ba394719d25-1737996212518.0157f5525bb5ad80.js | 104.18.37.211 | 200 OK | 16 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/dbb80ba394719d25-1737996212518.0157f5525bb5ad80.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (15494), with no line terminators Hash246c62a01ca76c5e64b7879c01635219 faa25c8618c4adc07d9e2619aa386782d21e2c7a e0e4a9f620af9b0283ad84377bfedc59ec8091dbed06d8f32f37a59d0cb30721
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/dbb80ba394719d25-1737996212518.0157f5525bb5ad80.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-3c86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4cfaca0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/f47a9967b65997b4-1737996212518.6968f27ea0bcf339.js | 104.18.37.211 | 200 OK | 3.8 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/f47a9967b65997b4-1737996212518.6968f27ea0bcf339.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (3871), with no line terminators Hash32aa90afa32a5c20ee932e4097b914e8 6b6e5cfaa4efae7dd776aee725e60ba0f3e5e202 68e5f1f5f2f836d46118bb83ca7e3f8737f08b0d9a3bb3257cb270eb5eeef9c6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/f47a9967b65997b4-1737996212518.6968f27ea0bcf339.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-ed1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4cface0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/6b8904388d14de38-1737996212518.efebbde62e5056ee.js | 104.18.37.211 | 200 OK | 396 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/6b8904388d14de38-1737996212518.efebbde62e5056ee.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (402), with no line terminators Hashfcbcd8bee2270394e9da9cb4de7c037f 89e39d83119e4ba498e2eb3ef2f212ab18fa1702 c2d5184bbab9352105446179dcf803bbf958e6db18a6c6145872bbc870a10ee3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6b8904388d14de38-1737996212518.efebbde62e5056ee.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-18c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d9b670b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/49b74057f711731e-1737996212518.0bd4805e8053f183.js | 104.18.37.211 | 200 OK | 6.1 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/49b74057f711731e-1737996212518.0bd4805e8053f183.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (6214), with no line terminators Hash326fdca772c0acc7f0ad77e694d52f3b ff50d09ad57960475659fbaa86c1baebc09b1367 fa90804ed5c084ddc5cc1ad0bdd916164f566226debc9c5fa7bf10b47ee108e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/49b74057f711731e-1737996212518.0bd4805e8053f183.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-17df"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ceac00b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/224e2b1af3215490-1737996212518.ce5639997b4fe877.js | 104.18.37.211 | 200 OK | 380 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/224e2b1af3215490-1737996212518.ce5639997b4fe877.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (386), with no line terminators Hash52d5b8ce0f6f08a384d12b60d616fd64 0355ae825da20e394e9bc9e0d72c88f33cbdd0e4 bff4e1e67f6c68f76eab747047783a3d1293be8cd38a4fe020e8390c0a0e1820
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/224e2b1af3215490-1737996212518.ce5639997b4fe877.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-17c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4dab7c0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| cdntechone.com/stattag.js | 104.21.36.146 | 200 OK | 16 kB |
URL GET HTTP/2cdntechone.com/stattag.js IP104.21.36.146:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4778
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUxNkSO4fcGS4KQby681ZQHTl3NZu7ZNV6LfvY6MAt2HWWuu8V55IRj6R8APaVsE01XuQjYA8XeMtMpftuICENBrPHAtZr4jzLSdirWmSV0CZVySmknsU9dwrSIWsy5%2BzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908abf4dfbd10b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=575&min_rtt=515&rtt_var=187&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3206&recv_bytes=1037&delivery_rate=7362711&cwnd=253&unsent_bytes=0&cid=62b8d1b93c0f0ae0&ts=41&x=0"
X-Firefox-Spdy: h2
|
|
| bouseegephe.com/_next/static/media/person-5.7317ee2f.webp | 104.18.37.211 | 200 OK | 2.4 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/person-5.7317ee2f.webp IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hash188dfcdf19da1d86ed162d54ed03536d 98b1baefbb803548b2894547091b4c7773406524 4f8251665e3cc796f127ea6cbdc00a9ec450adff16acb4ec74463c446b6f4ba6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-5.7317ee2f.webp HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/webp
content-length: 2384
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: "6797b8d6-950"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3875
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4f5d9f0b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 | 104.18.37.211 | 200 OK | 89 kB |
URL User Request GET HTTP/2bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 IP104.18.37.211:443
CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: text/html
cf-ray: 908abf491a9a5695-OSL
cf-cache-status: HIT
age: 801
cache-control: public, max-age=3600
expires: Mon, 27 Jan 2025 19:18:46 GMT
last-modified: Mon, 27 Jan 2025 16:48:27 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bouseegephe.com/_next/static/chunks/cce078a36fb49fc2-1737996212518.a4de873c342c784d.js | 104.18.37.211 | 200 OK | 3.2 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/cce078a36fb49fc2-1737996212518.a4de873c342c784d.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (3246), with no line terminators Hash683176202fdbeb8424bd04d9509bbd0f 7f239bd98d1eae1ea63ff49336037e80a6e8b542 f1744878b7775462dfc1aafe3befbc2ac2221143816dec52d453d5910dd938f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/cce078a36fb49fc2-1737996212518.a4de873c342c784d.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-c68"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ceac40b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/544bb380be14db31-1737996212518.33c06f7fa0c1ba8f.js | 104.18.37.211 | 200 OK | 392 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/544bb380be14db31-1737996212518.33c06f7fa0c1ba8f.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (398), with no line terminators Hash5a5ddf5ef9239d6020840bc2b68778df 69020ea4696a6b98f48f5168e100779a0401221b 2ae90e27e0d719edddaaf4a8e1ba5e17efd038877ce5a7884058c1c38bdff5ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/544bb380be14db31-1737996212518.33c06f7fa0c1ba8f.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-188"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d7b480b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| my.rtmark.net/gid.js?userId=er1rzuykth4xtoakto4erh580teeq7ia | 104.18.41.22 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=er1rzuykth4xtoakto4erh580teeq7ia IP104.18.41.22:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectmy.rtmark.net Fingerprint56:7F:53:10:57:2F:C3:F4:06:8B:DB:2F:C1:F7:6A:1D:68:59:14:3F ValiditySat, 04 Jan 2025 10:02:11 GMT - Fri, 04 Apr 2025 11:00:33 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash71243deceb25567c2cc045f49a45187e 82ce37c0f627d5aab374198d225381cd64870e4b f9a033f21c7a03ba6fea7f03010c3f4684951ca209e1bb079a50fa9fcd8d2774
GET /gid.js?userId=er1rzuykth4xtoakto4erh580teeq7ia HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bouseegephe.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://bouseegephe.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
timing-allow-origin: *, *
set-cookie: ID=er1rzuykth4xtoakto4erh580teeq7ia; expires=Tue, 27 Jan 2026 18:18:47 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 908abf4d9ee456af-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| bouseegephe.com/_next/static/chunks/38df77a90405ae51-1737996212518-b1f27b5074d51ccc.js | 104.18.37.211 | 200 OK | 44 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/38df77a90405ae51-1737996212518-b1f27b5074d51ccc.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (43725), with no line terminators Hash8cde41b502745c04de4e18fe14ee5840 572978fc1cd9275b82cf181df6c9fbababe000fd 87c3e7fe2a88b6b227a1b33fcc93f9581b84a1ac3add9fe4965befb49db4e6bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/38df77a90405ae51-1737996212518-b1f27b5074d51ccc.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-aacd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba9820b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/OPvSH8gIa0n0vaVrdkbaR/_ssgManifest.js | 104.18.37.211 | 200 OK | 160 B |
URL GET HTTP/3bouseegephe.com/_next/static/OPvSH8gIa0n0vaVrdkbaR/_ssgManifest.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeASCII text, with no line terminators Hashec987e535717d417e4c20c3f19741a95 36c65d6370d55851e91e9f1ff1a76751a1140fed 409d2de41a27a5c819fc065c000aa9bdcbb56a5f69595a04fb0db8da10802d2c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/OPvSH8gIa0n0vaVrdkbaR/_ssgManifest.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-a0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5025
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba98d0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/74c8b5cb6c7b6141-1737996212518.5fb83dbc00ce11a5.js | 104.18.37.211 | 200 OK | 6.3 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/74c8b5cb6c7b6141-1737996212518.5fb83dbc00ce11a5.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (6389), with no line terminators Hash1fe3331add9cdf5d17396ecb811774da c2832aa44023ab1449979922f5590c7b82344f90 a1d2d4b0fc16693f02f69cce52ad5e88371cf270af9321528bbeaa91384a7e5a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/74c8b5cb6c7b6141-1737996212518.5fb83dbc00ce11a5.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-1891"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4cfacd0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/bf7348b0f0f41677-1737996212518.c33e54f82eec272e.js | 104.18.37.211 | 200 OK | 30 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/bf7348b0f0f41677-1737996212518.c33e54f82eec272e.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (30368), with no line terminators Hashf9cbc88f5215206ff9ec9be6a98a2218 91fb42703b2d90fe435d330d9aa8c0065aef4399 2f24f7abd7847fba1aab02b13701e6e12945c211d4d2bd1b849be05ea25bb06a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/bf7348b0f0f41677-1737996212518.c33e54f82eec272e.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-76a0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d1af40b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/e4c1872211b880d8-1737996212518.3a8d10721e636195.js | 104.18.37.211 | 200 OK | 373 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/e4c1872211b880d8-1737996212518.3a8d10721e636195.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (379), with no line terminators Hash0a68483d3608f268065d2e4fa07be9fb 300692d113441e5d4735fd42e1b699d87f803456 fd5c3ced8c2057b5f51adcf3038f780fc8eabb4a12236337e446e545ebffd099
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e4c1872211b880d8-1737996212518.3a8d10721e636195.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-175"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4dbb910b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/1c02c3e681ea9f6d-1737996212518-ebf163de3da5e125.js | 104.18.37.211 | 200 OK | 27 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/1c02c3e681ea9f6d-1737996212518-ebf163de3da5e125.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (26671), with no line terminators Hash46319da25b781d320119bb919f754f17 f469c209ac6ece789afc95873888de04b0268eea 99199d4c9b8e1653af1ea901b3f856fe9537a6ff869abad68ca5c5f8d253eda5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1c02c3e681ea9f6d-1737996212518-ebf163de3da5e125.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-682f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba9800b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/88ac6d5fde7e0c6b-1737996212518-02954ae341102b03.js | 104.18.37.211 | 200 OK | 59 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/88ac6d5fde7e0c6b-1737996212518-02954ae341102b03.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (59318), with no line terminators Hash4cb41772bc9eee5626d75959f43c664b 22da4d3e2b64b05b9fc9b209e1d652581bc75b42 42fc39a80ecf90f8df904610a4e18124a4a25d017a65b2265c1099c0f07df0cd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/88ac6d5fde7e0c6b-1737996212518-02954ae341102b03.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-e7b6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba9880b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/e1089e112ce107d3-1737996212518.0934def8a92fb0e8.js | 104.18.37.211 | 200 OK | 26 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/e1089e112ce107d3-1737996212518.0934def8a92fb0e8.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (25968), with no line terminators Hash7cafa95ae6101afa5473b0153d6b690a d99fcb15507624ca11c54ed534a8bf6292f1bfac f1a49699aa39f52c4fb53b892fa217e1ed66ca60d0b021581b154438925204f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e1089e112ce107d3-1737996212518.0934def8a92fb0e8.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-6570"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba97e0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/404d2bbadad21339-1737996212518.e75aa0f036ca2882.js | 104.18.37.211 | 200 OK | 399 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/404d2bbadad21339-1737996212518.e75aa0f036ca2882.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (405), with no line terminators Hashad8f89b4bb8ae61be39fefc2305c4e1d f8fc67ae22992d75cb5e13968c5922a1692e38f7 13d0d969a3ae59d4a7fea40e7aefbc0b6f56fd178d503a18cc824c779ec6c444
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/404d2bbadad21339-1737996212518.e75aa0f036ca2882.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-18f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4dbb8e0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/rotate?var=4870721&ymid=3554_u69414&b=12085198&campaignid=5284496&click_id=907808440425128368&rhd=1&oaid=er1rzuykth4xtoakto4erh580teeq7ia&btz=UTC&bto=0&zz=5436674%3B5436681%3B5436677%3B8477082%3B5618571&uid=er1rzuykth4xtoakto4erh580teeq7ia | 104.18.37.211 | 200 OK | 1.8 kB |
URL GET HTTP/3bouseegephe.com/rotate?var=4870721&ymid=3554_u69414&b=12085198&campaignid=5284496&click_id=907808440425128368&rhd=1&oaid=er1rzuykth4xtoakto4erh580teeq7ia&btz=UTC&bto=0&zz=5436674%3B5436681%3B5436677%3B8477082%3B5618571&uid=er1rzuykth4xtoakto4erh580teeq7ia IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (1863), with no line terminators Hashea2e1b9fb5e784e52daf28b862377f82 b4408001b8094c95c4152758a9b31919fb778bac 91d211d216b25c57db9fca4428665fc61f519557803377767dd19511ec3cd429
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotate?var=4870721&ymid=3554_u69414&b=12085198&campaignid=5284496&click_id=907808440425128368&rhd=1&oaid=er1rzuykth4xtoakto4erh580teeq7ia&btz=UTC&bto=0&zz=5436674%3B5436681%3B5436677%3B8477082%3B5618571&uid=er1rzuykth4xtoakto4erh580teeq7ia HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=er1rzuykth4xtoakto4erh580teeq7ia; syncedCookie=true; oaidts=1738001927
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
vary: Accept-Encoding, Origin
x-trace-id: fd198ac7949c7522bf585839169d4904
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
timing-allow-origin: *
access-control-allow-origin: https://bouseegephe.com/
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=er1rzuykth4xtoakto4erh580teeq7ia; expires=Tue, 27 Jan 2026 18:18:47 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf504ed10b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/310b866cb8aab499-1737996212518.b418514bc8e3fdae.js | 104.18.37.211 | 200 OK | 14 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/310b866cb8aab499-1737996212518.b418514bc8e3fdae.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (14254), with no line terminators Hashbaa3d3802d96b3fcb4e7b25f3ae0aaa2 e35ba68c7c81aac45c7982f185629dd4724eec98 6466994e3c748af584c773ccd26efd57a6c13cc13726bc9272e6b91ab3d8fa81
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/310b866cb8aab499-1737996212518.b418514bc8e3fdae.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-37ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba9790b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/4d859cac5ba89327-1737996212518-7c9f685438bac6d8.js | 104.18.37.211 | 200 OK | 110 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/4d859cac5ba89327-1737996212518-7c9f685438bac6d8.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size110 kB (109702 bytes) Hashfa92e582b2c89be329fbc8ac7170c6ac bf03008752166780239d14094615f3d6f01d52ac fadd974a6921e24c69b0f37ad3cdc0f67424923522f2102b988fe11ec99a763f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4d859cac5ba89327-1737996212518-7c9f685438bac6d8.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-1ac86"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba9810b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/487f0dfa3f35c6d7-1737996212518.5c257be8c5ba7f0e.js | 104.18.37.211 | 200 OK | 4.9 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/487f0dfa3f35c6d7-1737996212518.5c257be8c5ba7f0e.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (5133), with no line terminators Hashece69d2678bdfcab8f8971d48e7b3d40 781579af6c37d56498010bdf237fbf185f2836db c7c326b5127ef7e8aec0302f0efe1596ad04898bd4779c34062ed57b52856b92
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/487f0dfa3f35c6d7-1737996212518.5c257be8c5ba7f0e.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-1331"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d1af60b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/284d4fec3e3e28bf-1737996212518.5e735978c844e249.js | 104.18.37.211 | 200 OK | 384 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/284d4fec3e3e28bf-1737996212518.5e735978c844e249.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (390), with no line terminators Hashf7118ae5f5e02232b02a43eba27439f2 b7f24a4f614c9344f65792cfe0ae3bc0851d6665 4c9686bfe3badbc24656f1c902ad524f7a74710ca98ccb1ade26388eb32efbee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/284d4fec3e3e28bf-1737996212518.5e735978c844e249.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-180"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d8b510b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| cdntechone.com/stattag.js | 104.21.36.146 | 200 OK | 16 kB |
URL GET HTTP/3cdntechone.com/stattag.js IP104.21.36.146:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4778
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Vk3NPgWj03ZX%2BBwCyVPxAtGVHWui4hAaE1nklZiIpKcZuhUOpQw2T1HNQV2yaT8ABPJrBqDLyErdbAGYR%2BjGOM5qip7gEDS%2BqIpsD6ITD9wSaJbl7hSI4f5QuBWyA8m7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908abf4e5d4db4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2974&min_rtt=1626&rtt_var=1572&sent=12&recv=6&lost=0&retrans=0&sent_bytes=4075&recv_bytes=1044&delivery_rate=362178&cwnd=12000&unsent_bytes=0&cid=92fe89ad748c3bed&ts=37&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdntechone.com/stattag.js | 104.21.36.146 | 200 OK | 16 kB |
URL GET HTTP/3cdntechone.com/stattag.js IP104.21.36.146:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectcdntechone.com FingerprintC4:4A:E2:16:14:70:A8:3C:39:84:67:A6:B3:07:BF:A2:33:7A:6C:EA ValiditySat, 14 Dec 2024 05:16:32 GMT - Fri, 14 Mar 2025 06:15:04 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
etag: W/"668fb2b6-406a"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4778
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=236Uyft8NV2WL7KpjoZ6zYQkDf%2BrWNz%2FZU1dFGYPp%2F65NcD%2BHzPShh5vXMTQfYdZhvJqfHfTCiu0VvlYtGxel7j2x9CSC1ElzCGORfhyV8OTJYmVugNHkp2YGFJJmPeMYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 908abf505fdbb4f9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2835&min_rtt=1626&rtt_var=1456&sent=20&recv=8&lost=0&retrans=0&sent_bytes=12500&recv_bytes=1305&delivery_rate=362326&cwnd=12000&unsent_bytes=0&cid=92fe89ad748c3bed&ts=364&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| bouseegephe.com/_next/static/chunks/75615c1d45bf629c-1737996212518-e3b20d63c2275bda.js | 104.18.37.211 | 200 OK | 29 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/75615c1d45bf629c-1737996212518-e3b20d63c2275bda.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (29024), with no line terminators Hasheddd6b8f2ffc413fb6b0ac45a9dd71bc 1b88a5713df67e6e1feca3cc938e51a6371bf817 a2c1f5e6d89aa8e08a088c7e224f75ba59ff6b2854623a05dee2e325023f84e6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/75615c1d45bf629c-1737996212518-e3b20d63c2275bda.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-7160"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba97f0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/e19378f85e7acaa3-1737996212518.5fadedea83acab0b.js | 104.18.37.211 | 200 OK | 388 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/e19378f85e7acaa3-1737996212518.5fadedea83acab0b.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (394), with no line terminators Hash101d133643be1682a88ad9b90f86f28d 10128cfb5722677248116265ac4cf3df9c78f1f4 ccadcee82d152b126c161df5adf966152ec484e87c7bd1fe6f3ed1083bb2bf95
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/e19378f85e7acaa3-1737996212518.5fadedea83acab0b.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-184"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4d9b700b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/0de4966a2ae2574a-1737996212518.5ee34d5fbba227ef.js | 104.18.37.211 | 200 OK | 686 B |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/0de4966a2ae2574a-1737996212518.5ee34d5fbba227ef.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (713), with no line terminators Hash327610f5e002acea5b32558d70d5c7ea 97aab2f28f4ad478cf4e4b76fcea2656af83b5f6 c2d8071f5c2f3788ddc7ad1dd8c384a0f8643b14680ed760fd9df898c32dedb1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/0de4966a2ae2574a-1737996212518.5ee34d5fbba227ef.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-2ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4edd1c0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/chunks/acdd0b42a706605f-1737996212518.abf1236b986635ac.js | 104.18.37.211 | 200 OK | 43 kB |
URL GET HTTP/3bouseegephe.com/_next/static/chunks/acdd0b42a706605f-1737996212518.abf1236b986635ac.js IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeJavaScript source, ASCII text, with very long lines (43177), with no line terminators Hash9e38693d74b734cda8546a84a05b62b3 2ee7deddbd302bd95b2bf883a5dee4a5b70c6adf 524848871f9fb1f5362d40f12f533063dbcf80eab5ed3cf8835bf9301a9dc6af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/acdd0b42a706605f-1737996212518.abf1236b986635ac.js HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:46 GMT
content-type: application/javascript
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-a8a9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:46 GMT
cache-control: public, max-age=3600
priority: u=3,i=?0
server: cloudflare
cf-ray: 908abf4ba97b0b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/media/logo.984cb4ce.svg | 104.18.37.211 | 200 OK | 1.8 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/logo.984cb4ce.svg IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeSVG Scalable Vector Graphics image Hashc1f89de100b8cbfb8833da63ea65b8fb f4a675e7a4bbd81e6e91f6b1c8ddd7a0061bfcbe 99132fb0f631a0c0aa2b3fc5044d1a0e84e78b4949da0b651c2e24cf0cb7d5b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/logo.984cb4ce.svg HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/svg+xml
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: W/"6797b8d6-6dc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 5024
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4edd130b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| bouseegephe.com/_next/static/media/person-3.22d8dbb6.webp | 104.18.37.211 | 200 OK | 1.5 kB |
URL GET HTTP/3bouseegephe.com/_next/static/media/person-3.22d8dbb6.webp IP104.18.37.211:443
Requested byhttps://bouseegephe.com/security-survey/542/?s=907808440425128368&z=4870721&var=3554_u69414&campaignid=5284496&b=12085198&ymid=907808440425128368&svar=1738001926&ssk=5e3b25542ac2b11fb2a11f5b6ab29c07 CertificateIssuerGoogle Trust Services Subjectbouseegephe.com Fingerprint88:B3:64:D4:BF:88:B4:05:79:15:B2:87:03:F3:E5:90:C0:A1:22:B8 ValidityTue, 17 Dec 2024 09:54:22 GMT - Mon, 17 Mar 2025 10:54:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp Hasha747d227c2e10b5178fd942484301d7a b3c5cf90dd5fd2c26c7b17dcb2d35b6dd47065be 9f4fb1281b7141b9dd48925953f7b039b6c411ea0e6e5b158d3e000d75316e9f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/person-3.22d8dbb6.webp HTTP/1.1
Host: bouseegephe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 27 Jan 2025 18:18:47 GMT
content-type: image/webp
content-length: 1454
last-modified: Mon, 27 Jan 2025 16:48:22 GMT
vary: Accept-Encoding
etag: "6797b8d6-5ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3875
expires: Mon, 27 Jan 2025 19:18:47 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
priority: u=4,i=?0
server: cloudflare
cf-ray: 908abf4f5dad0b31-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|