| somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=[%22imgtraffic%22,%22-%22,%22image%22,%22viewer%22,%22page%22]&refer=https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html&res=14.31&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d:2:1 |  172.240.253.132 | | 0 B |
URL somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=[%22imgtraffic%22,%22-%22,%22image%22,%22viewer%22,%22page%22]&refer=https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html&res=14.31&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d:2:1 IP172.240.253.132:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=[%22imgtraffic%22,%22-%22,%22image%22,%22viewer%22,%22page%22]&refer=https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html&res=14.31&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d:2:1 HTTP/1.1
Host: somehowlighter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Thu, 29 Feb 2024 00:21:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html
Access-Control-Allow-Origin: https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html
Access-Control-Allow-Credentials: true
Location: https://somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=%5B%22imgtraffic%22%2C%22-%22%2C%22image%22%2C%22viewer%22%2C%22page%22%5D&pst=1709166172&refer=https%3A%2F%2Fimgtraffic.com%2Fa-1%2F2024%2F02%2F28%2F65df9a0a7dd1e.jpeg.html&res=14.31&rmtc=t&shu=2c572cf4840ab5f3f2675d879488a96c32ab633cc369510218c645f2b76d3ad6934eda9045af7a6b7aeb0bafa7b99755880341267358636a5dd76d28744afa268bf2c9b49139f3abd8cb59fba86e5f9d18fe6135056d09afa41d1e433d17&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d%3A2%3A1
Set-Cookie: u_pl=21497191; expires=Fri, 01 Mar 2024 00:21:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.1YfWN27QoTEaoNJA8jX7ukV6-ckd8lUcEhJghQvlHcA; expires=Thu, 29 Feb 2024 00:22:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2f03fba80d23520596ae1e7b8a3898c6
Strict-Transport-Security: max-age=0; includeSubdomains
|
| somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=%5B%22imgtraffic%22%2C%22-%22%2C%22image%22%2C%22viewer%22%2C%22page%22%5D&pst=1709166172&refer=https%3A%2F%2Fimgtraffic.com%2Fa-1%2F2024%2F02%2F28%2F65df9a0a7dd1e.jpeg.html&res=14.31&rmtc=t&shu=2c572cf4840ab5f3f2675d879488a96c32ab633cc369510218c645f2b76d3ad6934eda9045af7a6b7aeb0bafa7b99755880341267358636a5dd76d28744afa268bf2c9b49139f3abd8cb59fba86e5f9d18fe6135056d09afa41d1e433d17&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d%3A2%3A1 | 172.240.253.132 | 200 OK | 2.4 kB |
URL User Request GET HTTP/1.1somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=%5B%22imgtraffic%22%2C%22-%22%2C%22image%22%2C%22viewer%22%2C%22page%22%5D&pst=1709166172&refer=https%3A%2F%2Fimgtraffic.com%2Fa-1%2F2024%2F02%2F28%2F65df9a0a7dd1e.jpeg.html&res=14.31&rmtc=t&shu=2c572cf4840ab5f3f2675d879488a96c32ab633cc369510218c645f2b76d3ad6934eda9045af7a6b7aeb0bafa7b99755880341267358636a5dd76d28744afa268bf2c9b49139f3abd8cb59fba86e5f9d18fe6135056d09afa41d1e433d17&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d%3A2%3A1 IP172.240.253.132:443
CertificateIssuerLet's Encrypt Subjectsomehowlighter.com Fingerprint96:3F:20:02:1B:48:92:EC:F5:3B:F7:19:44:A4:E4:9E:04:7B:13:35 ValidityThu, 22 Feb 2024 13:13:08 GMT - Wed, 22 May 2024 13:13:07 GMT
File typeJavaScript source, ASCII text, with very long lines (2924) Hashbcec340e528b9cfdfc50f984932288df dbcef191997081be4c361d6cb433f0e9f60695a7 1cf771ebb23315ef4435b38f61b374cece6e1df0c90f0efcb4a3587b18592276
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=%5B%22imgtraffic%22%2C%22-%22%2C%22image%22%2C%22viewer%22%2C%22page%22%5D&pst=1709166172&refer=https%3A%2F%2Fimgtraffic.com%2Fa-1%2F2024%2F02%2F28%2F65df9a0a7dd1e.jpeg.html&res=14.31&rmtc=t&shu=2c572cf4840ab5f3f2675d879488a96c32ab633cc369510218c645f2b76d3ad6934eda9045af7a6b7aeb0bafa7b99755880341267358636a5dd76d28744afa268bf2c9b49139f3abd8cb59fba86e5f9d18fe6135056d09afa41d1e433d17&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d%3A2%3A1 HTTP/1.1
Host: somehowlighter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=21497191; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyMTQ5NzE5MSwiayI6IjhkZDMzNGIyYTE5MzM1MGZlZGY2NTY3ZjZhYTFhZjRkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozMjc0NTYwLCJwaWQiOjM4OTksImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6NSwicHQiOjQsInBrIjoicXVpbndkY3lqYiIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo3OTk1NDE5NiwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjE4MTEwLCJvbiI6IkxpbnV4Iiwib3YiOiJVbmtub3duIiwiYmlkIjoxMTY2NzAsImJuIjoiRmlyZWZveCIsImJ2IjoiOTYuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9pbWd0cmFmZmljLmNvbS9hLTEvMjAyNC8wMi8yOC82NWRmOWEwYTdkZDFlLmpwZWcuaHRtbCIsImFyIjpbXX19.1YfWN27QoTEaoNJA8jX7ukV6-ckd8lUcEhJghQvlHcA
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 29 Feb 2024 00:21:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html
Access-Control-Allow-Origin: https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=a61a33ad-23a6-4d7a-b628-2a92da7dc18d:2:1; expires=Thu, 07 Mar 2024 00:21:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 01 Mar 2024 00:21:52 GMT; secure; SameSite=None
uncs=1; expires=Fri, 01 Mar 2024 00:21:52 GMT; secure; SameSite=None
pdhtkv5=true; expires=Fri, 01 Mar 2024 00:21:52 GMT; secure; SameSite=None
uncs5=1; expires=Fri, 01 Mar 2024 00:21:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4fa0fcc8283ab7b260cf6feaedb26e83
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
| somehowlighter.com/favicon.ico | 172.240.253.132 | | 0 B |
URL somehowlighter.com/favicon.ico IP172.240.253.132:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: somehowlighter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=%5B%22imgtraffic%22%2C%22-%22%2C%22image%22%2C%22viewer%22%2C%22page%22%5D&pst=1709166172&refer=https%3A%2F%2Fimgtraffic.com%2Fa-1%2F2024%2F02%2F28%2F65df9a0a7dd1e.jpeg.html&res=14.31&rmtc=t&shu=2c572cf4840ab5f3f2675d879488a96c32ab633cc369510218c645f2b76d3ad6934eda9045af7a6b7aeb0bafa7b99755880341267358636a5dd76d28744afa268bf2c9b49139f3abd8cb59fba86e5f9d18fe6135056d09afa41d1e433d17&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d%3A2%3A1
Cookie: u_pl=21497191; ain=eyJhbGciOiJIUzI1NiJ9.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.1YfWN27QoTEaoNJA8jX7ukV6-ckd8lUcEhJghQvlHcA; uid_id2=a61a33ad-23a6-4d7a-b628-2a92da7dc18d:2:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 29 Feb 2024 00:21:53 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bc98d1d0040a81c0fd19bfbcb7b9b3d6
Strict-Transport-Security: max-age=0; includeSubdomains
|
| cdn.cloudimagesb.com/cti/67/92/1c/67921c464714da676e531aa5489deec8/1627979085.png | 45.133.44.9 | | 145 kB |
URL cdn.cloudimagesb.com/cti/67/92/1c/67921c464714da676e531aa5489deec8/1627979085.png IP45.133.44.9:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced Size145 kB (145012 bytes) Hash620dee7dda3ab0a55fef5e66735e48e1 c03458e7950bed758e4352ec7a78bb434a3164b1 8552142726040854ba6a1d57037aa513e8cb424e3e5b96f017fb742f7c9255c3
GET /cti/67/92/1c/67921c464714da676e531aa5489deec8/1627979085.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://somehowlighter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 29 Feb 2024 00:21:53 GMT
content-type: image/png
content-length: 145012
server: nginx/1.21.6
last-modified: Tue, 03 Aug 2021 08:24:53 GMT
etag: "6108fd55-23674"
expires: Sat, 02 Mar 2024 00:21:53 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
![Share reporttesting](/search?q=http.url.addr:"somehowlighter.com/watch.1322342418021.js?dev=r&key=8dd334b2a193350fedf6567f6aa1af4d&kw=["imgtraffic","-","image","viewer","page"]&refer=https://imgtraffic.com/a-1/2024/02/28/65df9a0a7dd1e.jpeg.html&res=14.31&tz=1&uuid=a61a33ad-23a6-4d7a-b628-2a92da7dc18d:2:1"){kind=link}