| cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/bootstrap-icons.css |  151.101.193.229 | 200 OK | 8.8 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/bootstrap-icons.css IP151.101.193.229:443
CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hashea83ae92c684331d2096c4d3306a04de 1865dddcbb7b67dcef4250e590cc9a9574aba673 3c325075337b768950583012228055ae392e384688d77ec5235e6ca88dcec6ef
GET /npm/bootstrap-icons@1.5.0/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.5.0
x-jsd-version-type: version
etag: W/"100a0-GGXd3Lt7Z9zvQlDlkMyalXSrpnM"
content-encoding: br
accept-ranges: bytes
date: Tue, 28 Nov 2023 13:19:26 GMT
age: 424773
x-served-by: cache-fra-eddf8230101-FRA, cache-bma1644-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 8770
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-latest.min.js | 151.101.130.137 | 200 OK | 33 kB |
URL GET HTTP/2code.jquery.com/jquery-latest.min.js IP151.101.130.137:443
CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeASCII text, with very long lines (32086) Hash8101d596b2b8fa35fe3a634ea342d7c3 d6c1f41972de07b09bfa63d2e50f9ab41ec372bd 540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441
GET /jquery-latest.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1762a"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 28 Nov 2023 13:19:26 GMT
age: 6375366
x-served-by: cache-lga21983-LGA, cache-bma1621-BMA
x-cache: HIT, HIT
x-cache-hits: 12, 309850
x-timer: S1701177567.848616,VS0,VE0
vary: Accept-Encoding
content-length: 33202
X-Firefox-Spdy: h2
|
|
| weqawyixaa.life/my-style/bootstrap.min.css |  188.114.96.1 | 400 Bad Request | 1.6 kB |
URL GET HTTP/3weqawyixaa.life/my-style/bootstrap.min.css IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
Hashfec8a209437daed58f9e3d27d94fe8bf 260e073a06dc260cd0090cc4fd3875dd2543dd23 bb2bd8f735d6bdf1a975daca2141c94cd2eb2cc4dcca45db7ab31885f7b4d8b6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /my-style/bootstrap.min.css HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8uqGp9YMOMvMLwoMGcoXO61V20tZE%2FmgWVIn3ZTQgAFFQVXlQA9ocucCsqtv%2FgoAG0C9ADazvgdma4J%2BucwBSZpCAmKeoPQ2XAROa94ZktjASwz48mgUUi2imIPtEmgBoLI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7108db056cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/1703062480.jpg | 188.114.96.1 | 200 OK | 57 kB |
URL GET HTTP/3weqawyixaa.life/1703062480.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 666x444, components 3\012- data Hashc7b2ed2ae4096f554b48817bcd04ca16 7421b98f75718cbb477eb2e075a184a434173a24 8a491f69a31abc0906aefadc707a8d9d8256ff4c82570728157bb9ce48d93c9c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1703062480.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: image/jpeg
content-length: 57022
etag: "64ff2186-debe"
last-modified: Mon, 11 Sep 2023 14:17:42 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p7DtnOexGgfTLBxvu7ohTpKcO02mjvUvgcVQJRLhTAI43vubPbkWpzITlh7JomhaM0YEVMbSTfce%2BlqSUqXSS8LDmcUN04J6Aqhd%2FNDU4WOI8%2B4wFQ5vuM6kAr88c%2BV1A8k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7109dc456cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/1700769088.webp | 188.114.96.1 | 200 OK | 90 kB |
URL GET HTTP/3weqawyixaa.life/1700769088.webp IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeRIFF (little-endian) data, Web/P image\012- data Hash959b87f1751aed3ae96cb32669c3b558 40098658499ff8ac9ff20ce4571a37c8ef4f2849 2101b50970bad813477c4a3f2c8af3b89418ae6d8643ed8a985c05edd6ab1ff3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1700769088.webp HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: image/webp
content-length: 90394
etag: "64ff2186-1611a"
last-modified: Mon, 11 Sep 2023 14:17:42 GMT
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gFJ4i%2Fp%2BvxRRxQu4yDq85TO02K6PFNH%2B5c%2BXs8tPu9%2BqkeksaCUC5egG4DMoGCL5QaRXWa%2FRu1zUnXkpx5ELY83TFFT1G1FmHPIYyYiC0Sw8tczZwDq9%2F1BKIEnRvPjpXHg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7109dc356cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap | 142.250.74.106 | 200 OK | 1.2 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typegzip compressed data, max compression\012- data Hash1f24528ad3af2b44c1141af6f140cd4d 849c666359ff28d717f168a3317ba2de7b0bece0 f2090fd81bbff6b50f7bada4e1e9c8f9059b0ed47baf8d26c5b6e34c67c7aa65
GET /css2?family=Open+Sans:wght@400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 28 Nov 2023 13:19:27 GMT
date: Tue, 28 Nov 2023 13:19:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/fonts/bootstrap-icons.woff2?856008caa5eb66df68595e734e59580d | 151.101.193.229 | 200 OK | 90 kB |
URL GET HTTP/3cdn.jsdelivr.net/npm/bootstrap-icons@1.5.0/font/fonts/bootstrap-icons.woff2?856008caa5eb66df68595e734e59580d IP151.101.193.229:443
CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 90528, version 1.0\012- data Hashe07b538aa51b6fa77f32828af21cb591 4649877868a0068ce50b105d0d2a235e8010c98f 76506e128f2b47b7179f5037bd885a1674455ffeb6b5093cdb4c7eefbf436ce8
GET /npm/bootstrap-icons@1.5.0/font/fonts/bootstrap-icons.woff2?856008caa5eb66df68595e734e59580d HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weqawyixaa.life
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-length: 90528
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
x-jsd-version: 1.5.0
x-jsd-version-type: version
etag: W/"161a0-RkmHeGigBozlCxBdDSojXoAQyY8"
accept-ranges: bytes
date: Tue, 28 Nov 2023 13:19:27 GMT
age: 4200267
x-served-by: cache-fra-eddf8230031-FRA, cache-bma1666-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
|
|
| weqawyixaa.life/script/bootstrap.min.js | 188.114.96.1 | 400 Bad Request | 49 kB |
URL GET HTTP/3weqawyixaa.life/script/bootstrap.min.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
Hashf0663197910fa202810e1c7c55927f0d 8cd737433d89c587665df361b20fbd085ee84916 93175eef29a78aed47a61a5ae0ed2531b532a2fce3800aa45179e54b5311c9c3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/bootstrap.min.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UML3iZN%2ByYdAin%2FT3AkPue658ZxXruB08Aij21O3J9iwzmveVYQ4ik29cIkp8U5fAuqFmSAHeQ%2Fbz761Jvg9sffH7OROFXgbLhuPAfUrtkN7I7YF%2B%2BvX%2ByUXjQlWy21K8jw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bdea56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.163 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weqawyixaa.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:47:53 GMT
expires: Fri, 22 Nov 2024 04:47:53 GMT
cache-control: public, max-age=31536000
age: 462694
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| weqawyixaa.life/gallery/2-gallery.jpg | 188.114.96.1 | 400 Bad Request | 622 B |
URL GET HTTP/3weqawyixaa.life/gallery/2-gallery.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
Hash84b2cf16d16d3a171b8a72469c06b7fa 6acd497a5ee961087b28ce6b5a56b4dd47b0db8c fed5ef2863e1936aa0793c105e6d3387c4919c997a7a6e23f1b17abb2d3bfbca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /gallery/2-gallery.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xZOaaMAO%2Ftg4JOJCXXc4oxXU1qmOy%2BSRfa7%2Bq%2B0sy3vynayAL39T3e%2FrL2g7NS8sq62WMXTq7G%2FrPLS5jkxtM50bL3vzTyW9W3nX5%2Bn51i1ygRLUFIwi9Kc1UwYiIGzbe50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e712f84d56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.163 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.163:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data Hashe2d74c5e631bc53a7240bbfe4be99c8f eb513857bb01cc4f7249067fc7e969bef415fc90 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://weqawyixaa.life
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 04:47:53 GMT
expires: Fri, 22 Nov 2024 04:47:53 GMT
cache-control: public, max-age=31536000
age: 462694
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| weqawyixaa.life/gallery/1-gallery.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/gallery/1-gallery.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /gallery/1-gallery.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IgDrlFIe6ByDOxc9VGs7vRSyoinorRSZuPTfBMpTi1m1Np5uWlE2CaK3tIOfAyQ1TVKqglYSYR8s5nBcO6EmGVgzKbw5Jq%2BBnoegXjmfblb5TFEUvGct3E1uX4m9ThY46dQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710adcb56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/avatar/w-0.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/avatar/w-0.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /avatar/w-0.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WYTNEf%2BOf3i7LphVYEbU0zEsqN8TUtUkl9cnaehUwlhsBvn23sLnIupy8Q%2FF6Byc57IkadUIOy7jo5ClPdE%2FhOFArqQOmqv5qfOGaqsaHpnqh%2BwSJNjaR9NiThGkyE%2BfsmI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bdde56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/gallery/0-gallery.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/gallery/0-gallery.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /gallery/0-gallery.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=12mZrog016xuwFDmcZdabnsTedFuAyYgytmxG81WuDIM5Cn8B1YBg51Rm%2BsZbQ2OJM8nJ0CU68dONrnrn3trSy3GUk2Y3laANn6uGQNA6TXg7lO%2FYVat3AN9uHGGWoUEYjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7109dc756cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/avatar/m-0.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/avatar/m-0.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /avatar/m-0.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f3YZPQ39wx33rJzxeI0cCP499hBvpUbO07eNCTYSJww5bTH270w87im6GndnYSCXQvtyB8tkufgdx0lOnoEwVdYZIeJB5Ml5as5GBXEEIL6Q7vFWtkvnA7PuWMyb443NFL8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e712f85256cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/script/main-scripts.js | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/script/main-scripts.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/main-scripts.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtgyhXJttIiu7YZAjFrkCf0ZELVxwiPLlLtWRccx1XGj2ghnA2tZY9AvGuFoldOluyYJw9qd0pIppmlibw%2BZnSVzRQj%2BnwhtbHxh25etP5MSGcsaClcX1H7i6VrQGEwXtyQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7153c4356cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Indie+Flower&display=swap | 142.250.74.106 | 200 OK | 427 B |
URL GET HTTP/2fonts.googleapis.com/css2?family=Indie+Flower&display=swap IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42 ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File typeASCII text, with very long lines (436), with no line terminators Hashbbe4144438f870f00f6b56e562e7f0a3 3c0c5d0835727c7e6abd9ea781e94f15f74bdafa b2fcdfe7297c331f46a07d5421f5532f014242f5880bd94f8a5241a143f84cda
GET /css2?family=Indie+Flower&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 28 Nov 2023 13:19:27 GMT
date: Tue, 28 Nov 2023 13:19:27 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| weqawyixaa.life/script/main-scripts.js | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/script/main-scripts.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/main-scripts.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pPzeKrBMSgFJP6z6dNPR6%2B7LUxk4q1qB0eUInaVTCuaDIkGtQB7Agtvl2bS0%2Bceamw93RIws1jkUr43pKS2D%2BKYqHmugr70mDnGrvOTqRf5iNheYbVzwnGX7eTzGmnpLeuo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bdf056cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/logotip.svg | 188.114.96.1 | 200 OK | 4.5 kB |
URL GET HTTP/3weqawyixaa.life/logotip.svg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeSVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4765), with no line terminators Hash29606bfe3d4b5cb9e0416a7d3df8b85a 304e677d29d56a30c39cf5ec730c4da78fee742c 77add820dbe0c2d2cf5283150487f63954bdf7771a93ec557f8443e7b8746b1d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /logotip.svg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: image/svg+xml
etag: W/"64ff2186-11a3"
last-modified: Mon, 11 Sep 2023 14:17:42 GMT
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JnC4qu1wn%2B%2BRjx3WY4ACyfWkYkhmfeqr4%2Fg6KyUZO35Hip3pRK0RKbbW19gid4uifWqsAQrgJNN9XqzzVZshrZ0oILJ6b5UCkHpgbehe9IndpA9yN3LLtCxTSg%2F4MMFkDOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e715dce856cb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/script/tinycolor.js | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/script/tinycolor.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/tinycolor.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m67F0l9YKrd7EtXNIhaZVApRXqSc4ffvEA07f86VbDvOqVM%2BKB1BYA2GHd9GttX1OLKTFe4XNaA4LF1go%2FCr4U%2Fl6pLR7%2BUUfPp0dnt60kShs6Ks8cdrqHDqa9vW4b89qoE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bdec56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/gallery/0-gallery.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/gallery/0-gallery.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /gallery/0-gallery.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eR9TeyPWSeMGESxtpy6SItNgTuZyq8stvzXz9RyKtgk9DB%2B9VLReTWF8pJJMddGW%2FB4j10keN3FPOVVoslnJEhnQcdaPORCel39IoixmZMpzg6wbNY%2BdJq4UjwFueIEdQq8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e712f83756cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js | 188.114.96.1 | 200 OK | 1.2 kB |
URL GET HTTP/3weqawyixaa.life/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document, ASCII text, with very long lines (1271), with no line terminators Hash40d981045a7516cdadd00e8dccc9c58d 8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3 71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: application/javascript
last-modified: Thu, 16 Nov 2023 21:55:48 GMT
etag: W/"65568fe4-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ykalm7GtSiwUXpBDD3ACO%2B0R4p6r85UtfrC65E0gsTLM9HeQIIbDfjUunIiGwMqMlKvCWV5YP9rWGPKpPLR4oVSxs5bLeFAoFPghfobtWbkS9SYri1Ylhp58x1qkmjJ3vOU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bde456cb-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 30 Nov 2023 13:19:26 GMT
cache-control: max-age=172800, public
content-encoding: gzip
|
|
| weqawyixaa.life/gallery/1-gallery.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/gallery/1-gallery.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /gallery/1-gallery.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xfe%2Bpv6n32aAEKi5b8yllgmHgPYTxJHBzLGZc353eAM7e%2BA8QmDh3nxXsfwwYE%2FV%2BUh1xgFlgCrYtmEkb8Sau9kufBPJQqXoNdSDvkSiS%2FIqQi3ka1MQkidrO9%2FTwNzUu%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e712f84856cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/avatar/w-0.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/avatar/w-0.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /avatar/w-0.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qPoljj0g7cavnoVgsVcTXhYYkaT4Bshcxi6Ig6JuV6tNtuGnMIbdCI7rtyr7nWcS3VJveqzr7E6TP3%2FVoVDq0aEkqgSoVNA75JAPCLpjcpKTA58tKP7PhW87ikqwyb02tSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e712f84e56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/script/pack.js | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/script/pack.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/pack.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SbKfpuHuE5u4eDcBY%2ByH3nPQwLewv2MhOPXKdBB5210ad95VIErnFvCkvEJ44JuXbjl5XlGEOXmQcP%2FQWJuL7xqBoUkDadwO8UOR9Z2n9x8bO6qg11ufatqBGo4GD%2BiHzs4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7149b6956cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.96.1 | 200 OK | 54 kB |
URL User Request GET HTTP/2IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html; charset=UTF-8
cache-control: no-store, no-cache, must-revalidate
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6kNn%2BRcchcrKWOlgop63I1H08IDS0nsLrrWYSnmwgbHgdmuPNORdU9ZYDL3vZs53LMtUeX3eMk9cgat6pXcPql0m74pxP5wL%2FPvtlumhmuONJuNS5O2oTVNhsTkLuhwnw6Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d2e70d994156b4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| weqawyixaa.life/my-style/bootstrap.min.css.map | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/my-style/bootstrap.min.css.map IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /my-style/bootstrap.min.css.map HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BWHXRp4RMjkJWJFdriWwVqTVJWXmaCRVJIIQrHlyL%2Bnff0gRuu%2F2T%2B2%2Bj02fQWQKEBg4lbanaC9qb3CbdYHWntRh6tyikxTFI795qrESBFwmqML8tYxsVUQL4i%2B8BKSWWrg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82d2e7109db556cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/avatar/m-0.jpg | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/avatar/m-0.jpg IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /avatar/m-0.jpg HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wUUEkCGJomwDnwWSSpINppkOYD4dKLhwyYw7Ab3RPIF4a6z9Ri2vVj0Bccix75cL2M30PZY1gByS0zgzTTnQz8pp85m6GignBhWfoajfiWVybWuGkj9wf1WlEtjcu4%2Frc%2FI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bde156cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/script/tinycolor.js | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/script/tinycolor.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/tinycolor.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:27 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cmw1d1mJgvz8O5CHu7QQ6YxdTPDeJNL7yKx7QWcXQqM3Z6uHZYl4gqh3OJn%2BdJvGxJOrw9ogxSEKQmybuFSpctUwj906vKEZNz%2FsqpCTCwRqf4JOY83tW78a1Jh85Dem8kM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e713ea5456cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/my-style/fancyboxx.css | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/my-style/fancyboxx.css IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /my-style/fancyboxx.css HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Q7sSgs6iYJVUAq4mQrB2TrhwyCftSZWYSpJp%2BqgYefMhn4HUsS6DapQc1jhnAd3%2FiJ1SJr1Ly0QbxGUWTSPfa%2B48tWRKcVh8yn6cNqz%2FArfPYddTKytQajElQJBrnTIZEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e7109db956cb-OSL
alt-svc: h3=":443"; ma=86400
|
|
| weqawyixaa.life/script/pack.js | 188.114.96.1 | 400 Bad Request | 150 B |
URL GET HTTP/3weqawyixaa.life/script/pack.js IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectweqawyixaa.life Fingerprint63:44:AF:45:BD:4D:09:43:C3:D6:AE:B7:AA:EE:EA:88:28:DA:35:4E ValidityMon, 02 Oct 2023 15:51:26 GMT - Sun, 31 Dec 2023 15:51:25 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash5bee7066f7e028cf5cec82960f8d0afc 4c59ad33d9e44cdb9b700ca07618b679208dbe34 1396b26ec77778b85a2ebd96914f6788f28f0110e8939c540f1e041942abdbb4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /script/pack.js HTTP/1.1
Host: weqawyixaa.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://weqawyixaa.life/
Cookie: PHPSESSID=9847cb324e2738c2cbca4a078830847f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 400 Bad Request
date: Tue, 28 Nov 2023 13:19:26 GMT
content-type: text/html
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OXAhWYcd6QHAYScaovmuTrwi3griZjoweGJKvAzLwKtwqV1bMWBq0%2Bhfevr1uPiP%2BXuPzrEbhKZAYkI4UolKIOi82kxvOu5eSZ4HYmFrChcUbmNNMQlenUqfURfvCFwDu9I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d2e710bdee56cb-OSL
alt-svc: h3=":443"; ma=86400
|
|