| stezassossert.net/_astro/a303fa4b-CMKjf3Ph.js |  172.67.205.20 | 200 OK | 1.4 kB |
URL GET stezassossert.net/_astro/a303fa4b-CMKjf3Ph.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (1402) Hash7266d411c0f4238a8e620dc1e907d8a3 f4682e36b2861c6125fb7914141a1b6b7fd91972 bb23325c90a7bb5a057c891d2ca29a9e89e4829749df74550dab7c28eb23539d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/a303fa4b-CMKjf3Ph.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hdx0sOVE8zNyCo91uS3nu0oVZeLDDH%2FIICaIQtmKIxV3aY2uNb%2BZPmXM548umTVIE7YiXWnghh%2FS1udC4rWstTZ9g42shw45oksNF3Q7ot1Ve4qXFZ1P9z9X8U39TPAYbVKIMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-57b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e890a385699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1836&min_rtt=606&rtt_var=759&sent=357&recv=435&lost=0&retrans=0&sent_bytes=84598&recv_bytes=27432&delivery_rate=29623&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=1077&x=16"
|
|
| stezassossert.net/_astro/c7fd63-BmLYHeM2.js | 172.67.205.20 | 200 OK | 286 B |
URL GET stezassossert.net/_astro/c7fd63-BmLYHeM2.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
Hashff980d50e29b46813625bc2cd7908a00 dc70ad6e4284c4bdf52d19d7c3bd706f5dbe2d09 c39b88e7f5b08e47e81931cafe44dbeff7f6d9c0f348882691355f0ed3541dee
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/c7fd63-BmLYHeM2.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YgVPA%2B%2BOtM0hGcnaIZeYAUHO%2B0P8VbwIrqftq%2F3KPufybPGtL5ZbZHv6lIVbo%2BpuXcrv9oyKoBIBw6kSfMN%2B91oItG9Qeof9b8HT4UcAhfiOuFcblAL00u7AC7dKX9KgDrJG3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-11e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e890a395699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1836&min_rtt=606&rtt_var=759&sent=356&recv=435&lost=0&retrans=0&sent_bytes=83780&recv_bytes=27432&delivery_rate=29623&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=1059&x=16"
|
|
| stezassossert.net/_astro/b28732827-D-7pfsMF.js | 172.67.205.20 | 200 OK | 2.8 kB |
URL GET stezassossert.net/_astro/b28732827-D-7pfsMF.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (2647) Hash889163c809e2562e6e298ec582df7613 8a317b50a71e5eab2201febffa6b118a3800b288 7f9f50693f3486754c9936957514895c6602edb8063c0c69d9ecbfab1984d0f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/b28732827-D-7pfsMF.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2F2lpp0te8aecK%2FA0AEIqhZSaJQ03Jg6nk8URnwTOUR%2Fq7Vs0j1Qgt%2F6DZqBmCr%2BKWR8%2B5IWSQJ95yapB4abrgKMQN3d5SqG0sFdsu5jN9L6BsZ0VGxeJkcoQXdZhNnZtwEaqw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-ae2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e890a3a5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1864&min_rtt=606&rtt_var=626&sent=360&recv=436&lost=0&retrans=0&sent_bytes=86019&recv_bytes=27478&delivery_rate=29483&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=1093&x=16"
|
|
| stezassossert.net/_astro/ceeb6d8a-Bm7tABT_.js | 172.67.205.20 | 200 OK | 73 B |
URL GET stezassossert.net/_astro/ceeb6d8a-Bm7tABT_.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeASCII text, with no line terminators Hash41782e192d6e714b886e20dfe76c1bc9 16edbb13768eab6c97619a38b7d15e161d0d88d8 4b58f84fb12e4acc744f9764edcdd40efc0df8ac1f516e7f3c508887736e5a95
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/ceeb6d8a-Bm7tABT_.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7jpAis%2BLYMS3Un1tfXLLu8PKvbDyKKDka2UDM7JcUIArHfhMp0Y8LE3DDOInQHhd%2BebBl5ypgqx9GoBce9LuT%2FCiOvD7MHDqV5WFgtcLuiLWgjbsoeYEcoT8EPo5uSGKoVbUeA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-49"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f25699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2195&min_rtt=606&rtt_var=1386&sent=287&recv=418&lost=0&retrans=0&sent_bytes=23855&recv_bytes=25471&delivery_rate=1131942&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=603&x=16"
|
|
| stezassossert.net/_astro/s22b7e8289-Btwc-9_j.js | 172.67.205.20 | 200 OK | 67 kB |
URL GET stezassossert.net/_astro/s22b7e8289-Btwc-9_j.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash567e0137df71c6255bb47eb67d48fb69 1c0714a2faeb72c30e294dcdf43af6c9f8f829d7 a43cc0ac43efd060f73478cfc43c0a913ccd2459fd75f89720d86ff376817843
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/s22b7e8289-Btwc-9_j.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FYD1%2BTH0fTtZA%2BMyKZ5IzLSVwZh3bUH3H1jO4ErIy7POibG2wQ%2FzwBqlYlD%2FwEXsUaBXnrfT2HAFioi7wejneSWbD5mZzmu32bEOQRldY4EqsX9GIDwlsqab31Eeejo76PXRwg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-106d0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f45699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1991&min_rtt=606&rtt_var=1140&sent=324&recv=426&lost=0&retrans=0&sent_bytes=56277&recv_bytes=25836&delivery_rate=111409&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=650&x=16"
|
|
| stezassossert.net/_astro/j9e12842-pzYzU8zL.js | 172.67.205.20 | 200 OK | 1.6 kB |
URL GET stezassossert.net/_astro/j9e12842-pzYzU8zL.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (1576) Hashe2cb06d3a0afb3d4c4fbe8d9f3c0b886 7a0d6400dad3216020146655d8ad7be2e3d0376c 9b11ad7aac39bf5621d242d3a5111ee3449c2b69987acedd20260c32339d8e84
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/j9e12842-pzYzU8zL.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SQ0TV3vY0mten6hpVSgymiiIgpt96VYPOOQOGKsEfYhfu53EwYog%2BFIDLhhyYcgEdgypZaPBb0kfrHhKeHA%2Fo%2FE6dia48xuOGSDQmz1oR9RGAykdiTHWxWJpt65CpaPBTcWkqw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-629"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e860a005699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2188&min_rtt=606&rtt_var=1053&sent=291&recv=419&lost=0&retrans=0&sent_bytes=26548&recv_bytes=25516&delivery_rate=2235486&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=608&x=16"
|
|
| cdntechone.com/stattag.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET cdntechone.com/stattag.js IP188.114.96.1:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectcdntechone.com Fingerprint97:E9:A0:32:A7:A0:07:E5:5E:9E:00:7A:0F:03:79:58:24:44:09:38 ValidityFri, 11 Apr 2025 06:42:40 GMT - Thu, 10 Jul 2025 07:40:25 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=YUFxq0NCeAGdhEt7hWC29v%2Bf1bzckuJ7QzYfim4pSvS63HzrHkFSLj8L9Eez646R5JTJOOBYdGaYbItQgMPE6n9oHc%2BqueSSXfPwL%2BYZPdDmOV7jTgl00SLP853f2IxZjg%3D%3D"}]}
age: 5568
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"668fb2b6-406a"
content-encoding: br
cf-ray: 93d88e87ec700b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 | 172.67.205.20 | 200 OK | 132 kB |
URL User Request GET stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 IP172.67.205.20:443
CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeHTML document, ASCII text, with very long lines (65536), with no line terminators Size132 kB (131687 bytes) Hashfb82e61e32eaa3c8cadf3c798bc26ee8 bdc1e2b1478c0703165b93aa4a8bda8fafcc0c43 91649fdfb13a4b559bdb4940cb9d064743868edd0c828d592232a5c3aedb0359
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:41 GMT
content-type: text/html
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:12 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vG0GwUY7ZiygQMZsoefDjZ9mwm1NazYsKVHcrcmK8SzR3OCX3vnCt8O8zouy8s6JG%2F3Mkd5kMbfl8GIrOHY%2FiMMUshz1RM97zZrmyszXkvXOFKcd6FGZH%2BWKFyCCz%2FLa%2F4BxGQ%3D%3D"}]}
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 93d88e81bccfb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/sync-metrics | 172.67.205.20 | 200 OK | 17 B |
URL POST stezassossert.net/sync-metrics IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /sync-metrics HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 885
Origin: https://stezassossert.net
DNT: 1
Connection: keep-alive
Referer: https://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/json; charset=utf-8
content-length: 17
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-trace-id: ac294bcdc191f78a9f3c5eed68c94622
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://stezassossert.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AIpPH4ZIvomijD76Wv751yJTX4fjqjpkG3zbABPoO67cC1lquUJcQgUxbjToi54%2FmCyalCWpPQWIsi0fgNz7G2GqA1aeV5bu1KPlpgpieyfZPC3s73HfJ8VnJxJj7KUbtZXWPg%3D%3D"}]}
cf-ray: 93d88e8509a6b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/b0c102e-DoPPJDci.js | 172.67.205.20 | 200 OK | 52 kB |
URL GET stezassossert.net/_astro/b0c102e-DoPPJDci.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (51515), with no line terminators Hash426d20ae5e5d86a478ad3434614fa23f 32acb8fe4554d0e5d07257dd65b6ee738bed0ac2 bf597bb503121fac91a94cd46b3feced27a60a32125c6844b3805f5211207da7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/b0c102e-DoPPJDci.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BS0muJfyugptTo0yOMjOavtTV4YJAsuGb3hN7ZvuNYYLBriB%2Fxa9mVECuQ%2BfZfL6vlmwu8uAN6zKvsmWt%2B1XAptFLrLHjUH%2F2H%2FxLP6ZfHfwltivioBLXvW5nyQ076BH38TH4w%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-c93b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f65699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=606&rtt_var=1571&sent=294&recv=420&lost=0&retrans=0&sent_bytes=28114&recv_bytes=25560&delivery_rate=4484334&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=609&x=16"
|
|
| stezassossert.net/_astro/b09ff6a48-BFbE1IXD.js | 172.67.205.20 | 200 OK | 1.8 kB |
URL GET stezassossert.net/_astro/b09ff6a48-BFbE1IXD.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeASCII text, with very long lines (1776), with no line terminators Hash9865449a93e1c79dcbfcd7aa691cd072 091d52d33f70b31878ee35a0e9bbe78acfe4a733 e93fc9bcfe9e47355a9ccbe18887a0d91c36334c71e05076371c78732721aaa8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/b09ff6a48-BFbE1IXD.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oR0wh1whWJb6GCYRwVXiTjoeOK2bKmZSlDszNtzZJaM8bjUhCd6llwAJMsFhPixL3tPWKUH81R5r4YhaddGj%2FDG%2FmzL4APl0aNveR%2FkuMDLsFsP0VEkpgMvkPbTFHQDKuyTxRw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-6f0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f35699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=606&rtt_var=1571&sent=294&recv=420&lost=0&retrans=0&sent_bytes=28114&recv_bytes=25560&delivery_rate=4484334&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=609&x=16"
|
|
| stezassossert.net/_astro/t5aa9851cd-CwqNhwtB.js | 172.67.205.20 | 200 OK | 388 B |
URL GET stezassossert.net/_astro/t5aa9851cd-CwqNhwtB.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (387) Hash42c346f79afee1fcb94aadc8b80251eb 7016621a78e8ec207853dd0ad921c4cfcfca668f 65082079e43ea387976de6de2413e50300cb81af77272a283e60051e033caf49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/t5aa9851cd-CwqNhwtB.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RAFRlN8wSmopB5Vb%2BJGZB04XZAkUSzyPiKEk6saLKO8kMYLCcUwhVXxc%2BEf9DviBCFfVstwKPfwgVT88uwPjgrOtPlLubR4ZdHsxRN3YNOXztdkJSw0zoHHYJXVKbY0n5xg%2BOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-184"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f95699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=606&rtt_var=1571&sent=294&recv=420&lost=0&retrans=0&sent_bytes=28114&recv_bytes=25560&delivery_rate=4484334&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=609&x=16"
|
|
| stezassossert.net/_astro/d16bf50-Dt4mLzK6.js | 172.67.205.20 | 200 OK | 790 B |
URL GET stezassossert.net/_astro/d16bf50-Dt4mLzK6.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (789) Hash39c0606bb1bd88178c3458946853300c 4e123aca862d5b10bfbd013a5d5d4afb3a93c358 17147142fc4e0278656ac27665f0b608d8a22448a90d0fb8a7a084bf70712f98
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/d16bf50-Dt4mLzK6.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GTJ%2FrmT%2FnjyF6AfyUq%2FcaCJaOjhZgBGUEn8U%2Fcb8hSM87pW7MftHJ5NSwt2nwQ9nxsgA%2BbIvNs0iqtLmmm%2FwR5DWuEYH27rMXlz8c77ZtKujHvKMpH3LnyU8so9ffrYvf%2BHySg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-316"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e8609fc5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2352&min_rtt=606&rtt_var=1429&sent=283&recv=417&lost=0&retrans=0&sent_bytes=22649&recv_bytes=25427&delivery_rate=972125&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=602&x=16"
|
|
| stezassossert.net/_astro/b654f50-xGQi6Ltu.js | 172.67.205.20 | 200 OK | 1.0 kB |
URL GET stezassossert.net/_astro/b654f50-xGQi6Ltu.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeASCII text, with very long lines (1012), with no line terminators Hashc4a552a04a3e991694c5c93cc0bf2259 1f5af6ec7d2933c347b5f24df7708682171287bf fdbfef02ec95df9e40a25f5de10ca63b534c0af9a8a1b61d5aae71f754ee0757
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/b654f50-xGQi6Ltu.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5aS%2FKH6OAqG4VOhD5lpeUiMk76t2KMRmsUZO%2Bx5it7YujL9J2Lirco03cVEzxnXue8tqbFiVTLzk%2FMVsToKVOJKPOyVsLGQWMHxxuJscuu0%2BpTG%2FJWNacPOotGebA1%2FHQ6bzWw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-3f4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e8609ff5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=606&rtt_var=1571&sent=294&recv=420&lost=0&retrans=0&sent_bytes=28114&recv_bytes=25560&delivery_rate=4484334&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=609&x=16"
|
|
| stezassossert.net/_astro/de1f607-DWzQEPFq.js | 172.67.205.20 | 200 OK | 765 B |
URL GET stezassossert.net/_astro/de1f607-DWzQEPFq.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (764) Hashd63fc4d9501409ba4f5da62af75517ec 95603065c6ab8ff9c0c829067faa03eecd3fbfcc b6397c2d0161739be599296190535b0b40f5c11f68bbd44c2d18b66919946c85
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/de1f607-DWzQEPFq.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b3-2fd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=N%2BB%2FEzuXYkHyVctfcLaOXhJ1uBBzBlMWPoj9U7Tr%2F6OICYQqzj5pOv8SjaqfhQb24FNoo%2F8miGWGsojx3TgTT7%2B2rN%2F9qlzQQuI3DtndoSXTifMINfZHeXVGMAyevTRKWt4lPw%3D%3D"}]}
cf-ray: 93d88e8539e0b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/dc242109-CBOmVW4s.js | 172.67.205.20 | 200 OK | 312 B |
URL GET stezassossert.net/_astro/dc242109-CBOmVW4s.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (311) Hash44d1f4c3f21286f9caae1b76134e75a8 e605b0c8bc071705d52f30aa162beb4db0412324 1935bcfe4e0185c3e3da9ac33f69bfc3d9370b8cc4a4e66550cd5c75334c0848
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/dc242109-CBOmVW4s.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b3-138"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=VdclAA%2BkOaqKR8EHOd%2ByPwq22%2FJmDauS0uy2%2FDRlyrVi51eZEgpnOtY58SdqizYVw5%2BYGVapfy6gX%2BL2r6J8Jmn3t%2FMU4yozLQ1w3E8Y1pIls8gEUay8GBlzFRpBloAkr4i3fg%3D%3D"}]}
cf-ray: 93d88e8539ebb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/z14d4675b-C5NBajPU.js | 172.67.205.20 | 200 OK | 3.4 kB |
URL GET stezassossert.net/_astro/z14d4675b-C5NBajPU.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (3362), with no line terminators Hash7a2081dd351e7a3a9ba2f49c6deb920a 4065bdf513c58e2defa8af1786c8055d83e8682a 743831467eca4118a021e80e7fc59d556202220f635708b6f01ffd63b0d4066d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/z14d4675b-C5NBajPU.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:08 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b4-d22"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=vTqjIMNZvVvsUtQDr8d7qIwuWotc4E02JXYXZWU9XA8H1fKrfj3rAK82GK%2BVFThQJ65fZo%2FIxF4gc0NEZvfnxNigocOdbSOta%2BTGsNn7%2BE4nosM3nurNFv7aD1xgl2JfZVNrTQ%3D%3D"}]}
cf-ray: 93d88e854a00b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdntechone.com/stattag.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET cdntechone.com/stattag.js IP188.114.96.1:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectcdntechone.com Fingerprint97:E9:A0:32:A7:A0:07:E5:5E:9E:00:7A:0F:03:79:58:24:44:09:38 ValidityFri, 11 Apr 2025 06:42:40 GMT - Thu, 10 Jul 2025 07:40:25 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
age: 5568
cache-control: max-age=14400
cf-cache-status: HIT
priority: u=3,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lC1NeSbgFtq4HYYIyT6k4tBmniTcW8heLyG7MmgdISvK4QzoSay40AXRdaEhpDSl%2BTlVr3QGmn3%2B12k1q4GcEejpTUnH6dzJXltd5euOpq8XJpQsbmV5MFcRNHwhR5HSEw%3D%3D"}]}
etag: W/"668fb2b6-406a"
content-encoding: br
cf-ray: 93d88e897ae756ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| stezassossert.net/_astro/e2314725b-D2HsSLhz.js | 172.67.205.20 | 200 OK | 7.1 kB |
URL GET stezassossert.net/_astro/e2314725b-D2HsSLhz.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, Unicode text, UTF-8 text, with very long lines (6534) Hash485a5429e60ba665255980ce934a3d9e 235fc751d2ad324578333ba9e2dc2a2a9b7f1e67 daf92a4bcd021973a2ee79c67134b1b97823096370f5620410b1683cbf90314e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/e2314725b-D2HsSLhz.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b3-1b96"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=JbFlO%2B1CBV2Xw5SJ2EokkPBM7vQHvu6NUgR7ejiebIDqueSccMOCm5G6AJ%2F676VtA3Ji02B0kGEyObx0uU7AudxJ83EKWvAXv2od0p3AZ7bTkhWuo1jN2F%2F4HDqJlNBMqU%2BYdQ%3D%3D"}]}
cf-ray: 93d88e854a12b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/d1aabde5a-C9zOW_9E.js | 172.67.205.20 | 200 OK | 982 B |
URL GET stezassossert.net/_astro/d1aabde5a-C9zOW_9E.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (981) Hashc2ea53a814b16f62a90afd3862ffb6a4 69660feb7be286acf1c162f964d0863d5f3c47c6 02a30db2212cc45135714834200287b3b565f67caf0fcd2a0f53cc200708aabe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/d1aabde5a-C9zOW_9E.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z3JxPp6B4upIAjFloXlb39vWu8vPXVBFq%2F9pzoinEHe6Yw69J9eMdHxZkVRBskWqZ%2FEA5mO9dcwi4HukmBSRvtVZ0E7o6NLxnM%2F2%2FgHFx4G3JRUN3I6l75Ucy0u5wzMlmU9NGg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e860a015699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=606&rtt_var=1571&sent=294&recv=420&lost=0&retrans=0&sent_bytes=28114&recv_bytes=25560&delivery_rate=4484334&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=609&x=16"
|
|
| cdntechone.com/stattag.js | 188.114.96.1 | 200 OK | 16 kB |
URL GET cdntechone.com/stattag.js IP188.114.96.1:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectcdntechone.com Fingerprint97:E9:A0:32:A7:A0:07:E5:5E:9E:00:7A:0F:03:79:58:24:44:09:38 ValidityFri, 11 Apr 2025 06:42:40 GMT - Thu, 10 Jul 2025 07:40:25 GMT
File typeJavaScript source, ASCII text, with very long lines (15840) Hash80d7433dbc2b7708f2fa4e6a9943a116 350c6e2bb1cbd07de260856f918f4ececcd96894 54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Thu, 11 Jul 2024 10:23:50 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mNo9hdiAAGh1XfDiAkcBL5tZcUPTPXSzwrKfqX%2FruoS%2FO8b55uh3Z3Es4Ermyo714OpIKHxBg8O3pjnE3JgrZcmwBEkSRVvJfxECuPqFx3mjpMUHXd2dqqeT0L3PhEDHdg%3D%3D"}]}
age: 5568
cache-control: max-age=14400
cf-cache-status: HIT
etag: W/"668fb2b6-406a"
content-encoding: br
cf-ray: 93d88e87ec610b51-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/e837ae54-J7k8Pu0m.js | 172.67.205.20 | 200 OK | 3.5 kB |
URL GET stezassossert.net/_astro/e837ae54-J7k8Pu0m.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (3465) Hash99591f5fe942da79a7a8ff0474cda5bd add402d4eb1f8f790ff04f0a6a167c39e4a8af37 f3abc953ec7b0e468b5d4fe0b31a59a59c1ff1d542a8c4c6714630f6b37dd55c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/e837ae54-J7k8Pu0m.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4yuKkmuVWyltYxrGgL9q7NAGWwWmV7VXjfqXZN8z7ScK4sBuG8VgVKQmMULYZ4d3o%2FvUv1Lg8%2ByGpwfuzn5OgndFXkaoImiyqUV%2FLFKfOjVaPIIgLfwG7QNjJMqUzAdcBqrzhg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-d8a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e879a1c5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1937&min_rtt=606&rtt_var=744&sent=348&recv=430&lost=0&retrans=0&sent_bytes=81200&recv_bytes=26429&delivery_rate=30426&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=854&x=16"
|
|
| stezassossert.net/_astro/y58a72940-B0FDfBPF.js | 172.67.205.20 | 200 OK | 1.3 kB |
URL GET stezassossert.net/_astro/y58a72940-B0FDfBPF.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (1258) Hash32d3fea6204f7b630339486a09ad4145 0ab083e0f006cc647ae0e6a9a16f0e790f88d147 2909fe9ace585db748cf75059a2b4a53ce6315d60601280c6bf9f31c576fdffd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/y58a72940-B0FDfBPF.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:08 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b4-4eb"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=d0XjzEiqSfHVBjgaHbe1msggazdSDUnLwvvUBbbeKy3pt0tAovhe5OFxP4Fg6LmlwAtWuDXTI6n8xr3D%2FEI%2B8kaCjr2XMZIdZF3LM0vIOFmHMPY4iWhTJ3a68rfAX3mjNIdkEA%3D%3D"}]}
cf-ray: 93d88e854a0fb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/c707da7a-1wyvicm_.js | 172.67.205.20 | 200 OK | 1.5 kB |
URL GET stezassossert.net/_astro/c707da7a-1wyvicm_.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (1489), with no line terminators Hash7cb2ae50f63a319407175544fe72ff32 c7b0a5dd550f05779175142c635790f4bf2dd849 831208a09f6599e2a763cfe4fd6e40fe46a757ae18faf1f3e1a5c33ebd819c08
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/c707da7a-1wyvicm_.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y23Tef8xV%2Fb8cOD5OK46nm9e2S%2FjJJ%2FWnh3dyquzwmGk4uteDdQs522NtfpkxdeFkshjpXrs8BM1YJAwmmzxU9a4uACvgqSVXZ%2FfTDsyEC4mTjgvcMEAh%2FafYbfdiq4seAPD8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-5d1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9fb5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2322&min_rtt=606&rtt_var=1303&sent=304&recv=422&lost=0&retrans=0&sent_bytes=40085&recv_bytes=25650&delivery_rate=219139&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=611&x=16"
|
|
| stezassossert.net/favicon.svg | 172.67.205.20 | 200 OK | 644 B |
URL GET stezassossert.net/favicon.svg IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeSVG Scalable Vector Graphics image Hashb3c891342e3c1a3e169ecf83c62cfb02 fb259a9e1c8e43cb0d08c74f6fc3b623e15e95c3 c98ef972cd0a097ef32ad0f6d17e08d8e015a630a43b87be015e70d6d329dc32
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.svg HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: image/svg+xml
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3VgZG3rdhMUrxsG%2F4GzOKOBdwTaUFJL0z%2FL588VHiFASyyeeRSR0%2FXe7tL5pgJ3s4s0vWdeYr%2BppHQXeikhAy4V99ykqSFFRoABQmq3QsGKczTiCTCrPneqdLqxcLfA4eCaqw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-284"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 3441
content-encoding: br
cf-ray: 93d88e86da105699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1931&min_rtt=606&rtt_var=976&sent=346&recv=428&lost=0&retrans=0&sent_bytes=80088&recv_bytes=26144&delivery_rate=12020239&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=673&x=16"
|
|
| stezassossert.net/_astro/o4fe57b-iw0m4ao4.js | 172.67.205.20 | 200 OK | 4.0 kB |
URL GET stezassossert.net/_astro/o4fe57b-iw0m4ao4.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (3957) Hash2d54843ee09b001037069df2c15f425c b6b0853f08fad932101b9917b9cce5bba73741d8 79a2a81ce5464c40b83bc692e6b0e7d1f761d8fa76215086792879bf9c20b2f3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/o4fe57b-iw0m4ao4.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=40FKF2nPTGCXfD14hqJOumt7J%2BMuZBVvE8nyMNDaSoeliF6g0cE7oukbMOgBt4YnU4kkeiDW0JISBqxXDDml%2F4zTxPtZUVyU9GvPcfIeZvEBu6A%2BVi7DQIALb2Cve4UNe7BiHw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-f76"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e8609fd5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2578&min_rtt=606&rtt_var=1571&sent=294&recv=420&lost=0&retrans=0&sent_bytes=28114&recv_bytes=25560&delivery_rate=4484334&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=609&x=16"
|
|
| s.optvz.com/cimp.php?data=TVRjME5qZzFOVFEyT0h3d05qbGlPRE5pWVdZeFpETm1PR0ZoTXpabE1EbGpOVEJqTnprM01qY3hOZy0tfGh0dHBzOi8vdXRsMTkuY29tL253dHJjaz9nZW89SVJOJnltaWQ9NzQ5MDAwNCZ2YXJfMz1vcmRiUEhOYkxIUFROSFhNN3NnSFZVUzF6VlV1bW1vdW9ucm1uZEs1MVUwenFablR1bW1kVlc2ZDExa3JxSzZyWnBhcFhTdWxkSzZaMHJwWFN1bGRNNlYwcnBuVmJjVFZVMnpiVWFiUzBYWjI2YWI4YVU4VTEwWFUxNTBPMDBwbHR0c3VwbHJwcjMybDMyejFwdHEycW1ybTNycXNkVlZYTlE3ZG41eTk2eDlrYzUxZExwWFN1bGRLNlYwcnBYU3Vtc3BydHFxcHJ0YzUwcnBYU3VsZEs2VjBycFhTdWxkTTZWMDdpRzBqM1VIWDd2WDJQVVA3bk9kbm5UcFBScGRkdnBQbnRYVnByZFJWeFZ4TlBkUHZ2eHU0UHNBLSZ2YXI9NTMwNjE1NCZ6PTg5ODI1NTd8aHR0cHN8ODIuMTgwLjI0MS42MXxJUk58NDF8a2FkYW0uY29tfDg0MTk2MHw4NTI3MTZ8OTk4MDI0fDUzMDYxNTR8NTExfDc0OTAwMDR8MTEzOTMyNjEyfDExfDJ8NTZ8OTcwfDM2NTgxMDUwfDU1NjEzfDIzLjc1NDQ4fDcwfFVTRHxVU0R8MXwxfDIyfHwxfElSTnx8NjR8OHwxfHw1ZGYxNTQ4MWQzYmQwMzlhOGJiZWZiNGY0NjM5NDZhM3xiYjQwODg3OTQwNjQ2ZWQwZWRhYzQ4NWQ1MTYxZTY1N3wxfDB8ZXptdXNpYy5pcnwwfDB8MHwwLjAxfDF8MnxleGNoYW5nZV9saW5rfDB8MHwwfC0xfDB8MHx8fDF8MTA4MHx8MHwwfDB8MHwwfDB8MXwwfHw4fDF8TW96aWxsYS81LjAgKExpbnV4OyBBbmRyb2lkIDEwOyBLKSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM2LjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2fHwyNHw3fDB8MXwwfHx8MHwwfDB8MHwwfDB8MHwwfDB8MHwwfDAuNjA2ODk2NTV8MC4xOTk0ODg5MTJ8MC4xfDAuMjM3NTQ0OHwxfDJ8MHxydGIuZXhvY2xpY2suY29tfHx8fE9LfDNkN2IwN2ZhMjliYjA3MmMyZmI3NWVmOWE2YjU2MjNi |  95.211.229.245 | 302 Found | 132 kB |
URL User Request GET s.optvz.com/cimp.php?data=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 IP95.211.229.245:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectoptvz.com FingerprintFD:78:F4:5D:F9:BF:D6:97:F7:35:39:54:A8:24:79:F5:C6:BC:4A:83 ValiditySun, 06 Apr 2025 13:39:50 GMT - Sat, 05 Jul 2025 13:39:49 GMT
Size132 kB (131687 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cimp.php?data=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 HTTP/1.1
Host: s.optvz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 10 May 2025 09:54:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%221c6cc94cae75d2dbc0e2ffd22265c1b1%22%3B%7D; expires=Mon, 10 May 2027 09:54:41 GMT; path=; domain=.optvz.com; Secure; SameSite=none
Location: https://utl19.com/nwtrck?geo=IRN&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&var=5306154&z=8982557
X-Robots-Tag: noindex, follow
|
|
| utl19.com/nwtrck?geo=IRN&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&var=5306154&z=8982557 | 104.18.33.160 | 302 Found | 132 kB |
URL User Request GET utl19.com/nwtrck?geo=IRN&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&var=5306154&z=8982557 IP104.18.33.160:443
CertificateIssuerGoogle Trust Services Subjectutl19.com Fingerprint52:8B:33:47:01:12:66:DB:71:6A:0C:61:D5:BA:74:9B:86:79:0B:45 ValidityWed, 16 Apr 2025 10:36:25 GMT - Tue, 15 Jul 2025 11:36:21 GMT
Size132 kB (131687 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /nwtrck?geo=IRN&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&var=5306154&z=8982557 HTTP/1.1
Host: utl19.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sat, 10 May 2025 09:54:41 GMT
content-length: 0
location: https://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://stezassossert.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *, *
set-cookie: OAID=f05f06df75584792bd855a183b042737; expires=Sun, 10 May 2026 09:54:41 GMT; path=/; secure; SameSite=None
oaidts=1746870881; expires=Sun, 10 May 2026 09:54:41 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 93d88e80cb5656cb-OSL
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/bba7be1ab-Cihv2Xzs.js | 172.67.205.20 | 200 OK | 2.8 kB |
URL GET stezassossert.net/_astro/bba7be1ab-Cihv2Xzs.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (2790) Hashcad9df812df1a6c78b5eef306211e4a6 7f4feb18f147556ca6c5ab9f62591e874987855e ed57cf0606b57c3d01302f7004a2f076c8d228155dd1ca18e4ce092bd0b4f032
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/bba7be1ab-Cihv2Xzs.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2FrG2GCVhTsRVPOq6JahCJnahJLLMLF5czxiQhyO9K2JtOaMpHhTImZ5lZO7WoI7Ltkny6pad00QWPrDMlRcmRwnrW34IovRFYGaFEs5xoOUdDbkW9lACz8btpIJ0%2B7arzVN4g%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-ae7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f55699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2352&min_rtt=606&rtt_var=1429&sent=278&recv=417&lost=0&retrans=0&sent_bytes=19468&recv_bytes=25427&delivery_rate=972125&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=600&x=16"
|
|
| stezassossert.net/_astro/e0d1574ac-DtjJktEE.js | 172.67.205.20 | 200 OK | 692 B |
URL GET stezassossert.net/_astro/e0d1574ac-DtjJktEE.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeASCII text, with very long lines (692), with no line terminators Hash56fb9283bcfa860ec67a0258a3bd18e6 dfa971e17a69322cf8e473874045df0ff8a9a004 29f1908362ff3fe0dbfccbce6e7d4bddaa0e54c0d44f52257904809f981424de
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/e0d1574ac-DtjJktEE.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r2j1f%2B5djvMswu8rQBH08Z6QY%2F5hB96KA80Rwp3waKZhh4teRDKCyJik%2BY497PLDzD95I%2Bd78F1ezOkqvbNOpe0wNAPzRYCIwCpA%2B1pjetUQ0qYEfHgU6e9pP%2F4SRtkhI5102w%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-2b4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e8609fe5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2314&min_rtt=606&rtt_var=1015&sent=320&recv=424&lost=0&retrans=0&sent_bytes=53493&recv_bytes=25743&delivery_rate=2961563&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=632&x=16"
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=49af9989-6efb-457a-bcb0-b475df9b73be | 185.49.145.45 | 200 OK | 12 B |
URL POST datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=49af9989-6efb-457a-bcb0-b475df9b73be IP185.49.145.45:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerSectigo Limited Subjectdatatechonert.com FingerprintED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72 ValidityWed, 11 Dec 2024 00:00:00 GMT - Tue, 23 Dec 2025 23:59:59 GMT
Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=49af9989-6efb-457a-bcb0-b475df9b73be HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1832
Origin: https://stezassossert.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.25.5
Date: Sat, 10 May 2025 09:54:42 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://stezassossert.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| stezassossert.net/_astro/dd5c331f6-0nlquXL9.js | 172.67.205.20 | 200 OK | 961 B |
URL GET stezassossert.net/_astro/dd5c331f6-0nlquXL9.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (960) Hashc0b5eec28e28dc343b31451f633840eb 270bf378553633205136f058a2f2970d2c75e658 de35edd7b8f07716b3d57caa8f1bf90edc35bfec1eb47f9be66b91516d8d82f6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/dd5c331f6-0nlquXL9.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b3-3c1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=r8GX39pcOloVkoy%2BbbC%2B5%2BwDM7LWe%2BXi8F9EijGvWkh0qp07nHrNOvLiMq0PZvAcUQHApXAle1UOgD%2FDw4y3XilZaKqAnwkRukUalalA%2BSnuSpAzSaj%2F2m1W4%2F19nUF7B3etyg%3D%3D"}]}
cf-ray: 93d88e8529d9b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/g164c8846f-PEPijoCL.js | 172.67.205.20 | 200 OK | 117 B |
URL GET stezassossert.net/_astro/g164c8846f-PEPijoCL.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeASCII text, with no line terminators Hash4d6cfe999315b8109061a92a460f1d3f f78e94e397889de8b2c5e67e683addaa05c994b1 f508274a6d4f522ae5c7f08c380be4f309b467d1151b676c000f8d37b5d70fc6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/g164c8846f-PEPijoCL.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dBu%2B9ou3XhsEOB0PoO8d%2B0VJfuuAS%2FdMMStMvHeIcZb2F%2F6f5gSaxkCnU1eKKDwEpHWhLcO9IlyUCYIZp3nPN%2FH60MDrZlxdy2%2FXFTTw48nIsyesEAJ33j7AZ9g3YKtzFIkOVA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-75"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f85699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2314&min_rtt=606&rtt_var=1015&sent=319&recv=424&lost=0&retrans=0&sent_bytes=52728&recv_bytes=25743&delivery_rate=2961563&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=618&x=16"
|
|
| stezassossert.net/_astro/z670ea8-DCLWTw-H.js | 172.67.205.20 | 200 OK | 3.6 kB |
URL GET stezassossert.net/_astro/z670ea8-DCLWTw-H.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJavaScript source, ASCII text, with very long lines (3609), with no line terminators Hash68cab22e7bb569cc241c125830999d5d 67d3831013b5cdd2f41be257331351799b5af154 5c5c0030fc2a3302ab6c7a3c7a23a5f6b7afacff9c6cd6963bb3d3d7a4a93eed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/z670ea8-DCLWTw-H.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLjUZXm58hGOe2Kn0O0d3tovUJNGvVMjAuEG%2Bl41bh4GXVhnMpvy73H3lyWSGkx2QIfG%2FAFDoNnco%2Bx%2FL%2FsLhgUMeMO42TX0lMUBS6pOkyj4ljgzwQBKTcAUXfikOpAQED%2Favw%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:08 GMT
vary: Accept-Encoding
etag: W/"681e09b4-e19"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9fa5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2195&min_rtt=606&rtt_var=1386&sent=287&recv=418&lost=0&retrans=0&sent_bytes=23855&recv_bytes=25471&delivery_rate=1131942&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=603&x=16"
|
|
| stezassossert.net/_astro/l8971bc3e-BDrUkwzx.js | 172.67.205.20 | 200 OK | 2.5 kB |
URL GET stezassossert.net/_astro/l8971bc3e-BDrUkwzx.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (2539) Hash7a6d4fbb608ad4c0bfafb2dad6522024 435caa0a97dfbc2226cad1610adbf9830464afec dd40e9fefd3927cc38104c10a25150475a0cb4ea952b3943cb9f94a6ed1d7a43
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/l8971bc3e-BDrUkwzx.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vXIHEr1VSj46Aj3pO8E1sr5ERtcpBNX1OG4%2F4dMIArSITjK38wIkzVwDY4PPeC5dS7sxbpCXIH%2F64PQMN1UPW%2BqAVGZl1HIWSZU8zYO1JN7saLhCUWNqnfpQP510dX0G7iFJLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-9ec"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e860a025699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2352&min_rtt=606&rtt_var=1429&sent=281&recv=417&lost=0&retrans=0&sent_bytes=21178&recv_bytes=25427&delivery_rate=972125&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=602&x=16"
|
|
| my.rtmark.net/gid.js?userId=ys6fcyb21joczammrfk2mxjk1pxdsn7 | 104.18.41.22 | 200 OK | 64 B |
URL GET my.rtmark.net/gid.js?userId=ys6fcyb21joczammrfk2mxjk1pxdsn7 IP104.18.41.22:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectmy.rtmark.net Fingerprint61:93:FB:BF:25:C3:CE:7B:CB:69:5D:87:04:AA:ED:1B:35:8D:44:82 ValidityFri, 02 May 2025 11:10:51 GMT - Thu, 31 Jul 2025 12:10:47 GMT
Hash58056778772b892346a5eb72bfb32c5a 4e0a7014ac96337090d14317e3357f2f0e528a16 71e284a488f58d18902fbba2b532bee756566cef3e11c60fd33ce5bf135e3a4d
GET /gid.js?userId=ys6fcyb21joczammrfk2mxjk1pxdsn7 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://stezassossert.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: https://stezassossert.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=ys6fcyb21joczammrfk2mxjk1pxdsn7; expires=Sun, 10 May 2026 09:54:42 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 93d88e87fdb91bfe-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/d005afe-BHdAp8bM.js | 172.67.205.20 | 200 OK | 787 B |
URL GET stezassossert.net/_astro/d005afe-BHdAp8bM.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeASCII text, with very long lines (787), with no line terminators Hash658c73e01c6d06009ed7a4ee3caaf81e 1729ff9c7d0e4d02377c1213aaa2ab1548d16806 8f4003d9f46b4b7bf313f7631d119bc310f602bf9295d65cf6dd841d389d61e3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/d005afe-BHdAp8bM.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fd%2F7MNkNmnP3mIw%2FE1cGxMSl7LgquQPSqAjdTdoVxBCFmZDFxHRwT16SqFY4h1IyM23dzn5lFM2u7B999Jdja9M2rMgnLhQ3Ozd47ZdD1pIR5lJHNTq86nRlWrq8Xxpd6bKwkg%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-313"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e891a3c5699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1864&min_rtt=606&rtt_var=626&sent=362&recv=436&lost=0&retrans=0&sent_bytes=88000&recv_bytes=27478&delivery_rate=29483&cwnd=24000&unsent_bytes=0&cid=5a574c494550fbdd&ts=1094&x=16"
|
|
| stezassossert.net/_astro/c6dc29-B8ekM5Mm.js | 172.67.205.20 | 200 OK | 175 B |
URL GET stezassossert.net/_astro/c6dc29-B8ekM5Mm.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
Hashe194850be5a30e65bb7c9e3d29ae48f9 d0a14cfeca84830c4c1c07c49d07a7008315da9a 95d1050af6c3724e9611f1164d33428272ba835bea5f180152ab692750cf8280
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/c6dc29-B8ekM5Mm.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b3-af"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iX6zv4hhQP1c1RM%2FGf5YXwmETkYcRDbIFSJKJYmpwG0JOdC%2F2Va%2BxbB7vm4rs6%2BjKrcj0Z4ctxaQHanbBBIDWYv5QO9MGzqesp0KyDEz86sVTqas3gkycbgsbjGVK4ytJ0Uu2A%3D%3D"}]}
cf-ray: 93d88e8529dbb4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/i3ed170af-Z5Pb2pUL.js | 172.67.205.20 | 200 OK | 268 B |
URL GET stezassossert.net/_astro/i3ed170af-Z5Pb2pUL.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
Hash5952364b44722cb30af1f110d441fe69 8e2f71a5af64424399fd6f8ec4903fb20266e4ea 384e0f19bfaaad3b19d5050c29b425218dc3400dafcb8182db25f4a0c85a1372
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/i3ed170af-Z5Pb2pUL.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
server: cloudflare
last-modified: Fri, 09 May 2025 13:57:07 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
etag: W/"681e09b3-10c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RIpaMS5BLBH%2F7%2FmEGLGOaVktxCIvCvRCyXLuzpvXqz3yzyYkN3t%2Fdyx2Ngw%2F4CdK2%2FdjLYbdTrCkflksrHhMMFU9qz7fNrWYSsdqA2Lqc%2BiSlOFxBfEDEwBfJw%2BDD%2FTZJp%2Fumw%3D%3D"}]}
cf-ray: 93d88e8539e6b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| stezassossert.net/_astro/d99714-CtuzMNU4.js | 172.67.205.20 | 200 OK | 1.9 kB |
URL GET stezassossert.net/_astro/d99714-CtuzMNU4.js IP172.67.205.20:443
Requested byhttps://stezassossert.net/single-page/1215/?z=8982557&svar=1746870881&ssk=1f6bfed5c41d132bd1bd36d1ce6262ec&ssk2=68edb4d50b662349c750b6562896836d&s=945007548064338686&var=5306154&ymid=7490004&var_3=ordbPHNbLHPTNHXM7sgHVUS1zVUummouonrmndK51U0zqZnTummdVW6d11krqK6rZpapXSuldK6Z0rpXSuldM6V0rpnVbcTVU2zbUabS0XZ26ab8aU8U10XU150O00plttsuplrpr32l32z1ptq2qmrm3rqsdVVXNQ7dn5y96x9kc51dLpXSuldK6V0rpXSumsprtqqprtc50rpXSuldK6V0rpXSuldM6V07iG0j3UHX7vX2PUP7nOdnnTpPRpddvpPntXVprdRVxVxNPdPvvxu4PsA-&rdk=rk3 CertificateIssuerGoogle Trust Services Subjectstezassossert.net FingerprintE1:EE:85:88:2D:24:4D:A0:92:6F:58:23:36:AF:58:33:57:5B:5C:10 ValidityTue, 18 Mar 2025 21:32:23 GMT - Mon, 16 Jun 2025 22:30:39 GMT
File typeJava source, ASCII text, with very long lines (1892) Hasha41d6a1d5dc792e67fabcdd4cec396b4 18ed4938cfc520a7c182c66216119789de0f0b77 093fc4c4aa1ec5087f3d118c981de57628fdc730f0b031cdb44005518be56142
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_astro/d99714-CtuzMNU4.js HTTP/1.1
Host: stezassossert.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sat, 10 May 2025 09:54:42 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5wTRxqCTbtvuGjWndTanbk7sVyCvpJAMk7DmT6opbxr1ysrxL5UTg4u666tmSvpVfdt9qHSBpw8zC6LKanNRXVX6YYjG6u64AMf1p6372hSUSQSqga%2BkOm2P%2BEU3y%2FUvanhSLA%3D%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 09 May 2025 13:57:07 GMT
vary: Accept-Encoding
etag: W/"681e09b3-765"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 93d88e85f9f75699-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2507&min_rtt=606&rtt_var=1494&sent=276&recv=416&lost=0&retrans=0&sent_bytes=17781&recv_bytes=25383&delivery_rate=2240&cwnd=12000&unsent_bytes=0&cid=5a574c494550fbdd&ts=571&x=16"
|
|