Report - usolan.com/track.php?key=i60n5yduzzqllcgex78g&SUBID=867614939299188736&cost=0.005500&zoneid=5982826&os=android&device=other&browser=chrome&browser_lang={browser_lang}&connection_type={connection_type}&carrier=ipko-rs&bannerid=104281534&cohort={cohort}&geo=RS&campaignid=103124018&state={state}&city=&pn_type={pn_type}&os

Report Overview

Visited public
2024-10-08 20:25:35
Tags
URL
usolan.com/track.php?key=i60n5yduzzqllcgex78g&SUBID=867614939299188736&cost=0.005500&zoneid=5982826&os=android&device=other&browser=chrome&browser_lang={browser_lang}&connection_type={connection_type}&carrier=ipko-rs&bannerid=104281534&cohort={cohort}&geo=RS&campaignid=103124018&state={state}&city=&pn_type={pn_type}&os_version=android14
Finishing URL
updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
IP / ASN
104.21.64.73
#13335 CLOUDFLARENET
Title
Skann enheten din

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
updatenow.pro	unknown	2024-08-13	2017-02-23 11:20:26	2024-10-07 16:29:51	18 kB	422 kB	104.21.86.92
threatdetect.org	unknown	2022-01-28	2022-01-28 15:40:10	2024-10-07 16:29:51	1.9 kB	662 B	78.129.252.31
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-10-07 19:37:44	327 B	887 B	23.36.76.242
theirsneedful.com	unknown	2022-09-08	2022-09-08 03:49:41	2024-09-26 13:25:42	2.4 kB	4.5 kB	192.243.61.227
appnowsite.appnow.site	unknown	2023-08-21	2023-08-21 10:42:37	2024-10-07 16:29:50	845 B	2.6 kB	54.240.174.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-10-08	medium	appnow.site	Sinkholed

ThreatFox

No alerts detected

JavaScript (7)

	URL	From	Size	First Seen	Last Seen
	updatenow.pro/assets/jquery.js	ScriptElement	292 kB	2023-03-29	2025-05-13
Pretty URL updatenow.pro/assets/jquery.js IP 104.21.86.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-29 22:35 Last Seen2025-05-13 16:32 Times Seen331 Hash 0208b96062ba59d07c4495115d2b42ce 611b7f56ab2146e1277e9258f15c55d50034dcef 6bd8c1051ca05f5061e65b7c1998d70f3c8e07e6d6bdef4488eeed44e52d8ff1 Loading...

	updatenow.pro/scanning-your-device/js/interactive.js	ScriptElement	8.4 kB	2024-09-20	2024-10-11
Pretty URL updatenow.pro/scanning-your-device/js/interactive.js IP 104.21.86.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-20 06:28 Last Seen2024-10-11 09:18 Times Seen113 Hash f8ec56059bfeb5e9b59dbdd995032ccf 4991f8ffaaa2d27b512f70f05c3b31020e937dff 5b7dc32c68a709b8b2ac305d837f17265ce1b804c6598768862497288a951178 Loading...

	updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2	ScriptElement	0 B	0001-01-01	2025-05-14
Pretty URL updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2 IP 104.21.86.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-14 04:47 Times Seen4677344 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	updatenow.pro/scanning-your-device/js/trans.js?v=2409192	ScriptElement	11 kB	2024-09-20	2024-10-11
Pretty URL updatenow.pro/scanning-your-device/js/trans.js?v=2409192 IP 104.21.86.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-20 06:28 Last Seen2024-10-11 09:18 Times Seen113 Hash aa659399ca31ca82df5596d2f4764fda 7ab938f8dbdcbbe2419d4f30a96fa2adf73b5a8c 039db4c99a9b526e3dccb6d1889c9fc9ba6fe2930621c1083d2f3249e1674481 Loading...

	updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2	ScriptElement	0 B	0001-01-01	2025-05-14
Pretty URL updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2 IP 104.21.86.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-14 04:47 Times Seen4677344 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	updatenow.pro/assets/link.js	ScriptElement	658 B	2024-09-20	2024-10-11
Pretty URL updatenow.pro/assets/link.js IP 104.21.86.92 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-09-20 06:28 Last Seen2024-10-11 09:18 Times Seen113 Hash 4d159b1ec5f50990ad43083d9ed760e2 520bbe744726840e3b4b7c6f80942e165616362f ef817bf39179a7fc0e005cc59650fb1cfefc89306aedf2059525a84332f80e14 Loading...

		Size	First Seen	Last Seen
	#1 Eval - ed31146ed32e3b0b17eab2e46c3cd585	436 B	2024-07-23 06:35	2024-10-11 09:00
Pretty Observations First Seen2024-07-23 06:35 Last Seen2024-10-11 09:00 Times Seen26 Hash ed31146ed32e3b0b17eab2e46c3cd585 137bd329b899b3c9a67993a7a4f76371ae2b90ac 3562042f6da27f59a69ef39d798f080b1f3739b4e42b1384ec1442f82b000ddc Loading...

HTTP Transactions (17)

URL IP Response Size

r10.o.lencr.org/

23.36.76.242

504 B

URL
r10.o.lencr.org/
IP
23.36.76.242:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
33985775df7b619cb33f4050d88c5fb9
cf0b2ff92cd2f7e12ce788a164a73d75dea5da83
b6db380f5eeb73aa56abf90afa43b52cc9f51b01f33ad1eefeccc473a41ffb86

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B6DB380F5EEB73AA56ABF90AFA43B52CC9F51B01F33AD1EEFECCC473A41FFB86"
Last-Modified: Tue, 08 Oct 2024 11:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8612
Expires: Tue, 08 Oct 2024 22:48:42 GMT
Date: Tue, 08 Oct 2024 20:25:10 GMT
Connection: keep-alive

theirsneedful.com/q8gn2yu4?key=6d67777fce8f4c7302049e790de516de

192.243.61.227

1.3 kB

URL
theirsneedful.com/q8gn2yu4?key=6d67777fce8f4c7302049e790de516de
IP
192.243.61.227:0
ASN
#39572 DataWeb Global Group B.V.

File type
JavaScript source, ASCII text, with very long lines (427)
Size
1.3 kB (1304 bytes)
Hash
ab2e3523303c5040dbce2f4b9064e6ba
f7c9311ac7587e2d0bb0f890cca4a7c94636550f
044e3aa808d454da3991ec819d04f41ad8a986d9664d8039e0d73fe344a9adf0

HTTP Headers

GET /q8gn2yu4?key=6d67777fce8f4c7302049e790de516de HTTP/1.1
Host: theirsneedful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 08 Oct 2024 20:25:12 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=24521789; expires=Wed, 09 Oct 2024 20:25:12 GMT; path=/
ain=eyJhbGciOiJIUzI1NiJ9.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.8WLH5Z5vBZy4SbtLjNXyP_HlAsAGLdalQuP7cV_SGdU; expires=Tue, 08 Oct 2024 20:26:12 GMT; path=/
Host: theirsneedful.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c1410bcd75aa8529e030df0b4e5fa131
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

theirsneedful.com/api/users?token=L3E4Z24yeXU0P2tleT02ZDY3Nzc3ZmNlOGY0YzczMDIwNDllNzkwZGU1MTZkZSZwc3Q9MTcyODQxOTE3MiZyZWZlcj1odHRwcyUzQSUyRiUyRnQuY28lMkYmcm10Yz10JnNodT1lM2ZmMjZhMzFkNTA3MGFhZDVjMzk3NTI4NTljMjA3NmJjYmVlZjc0NmZlYjc2NzlhMmVjMWQ5MWVhZWJkYWFmOWQxZjE5ZTI0ZjEwNmQ0ZjU2MjU4YmUwZDA2MjdhYjU3NzFlMjY4ZjQ3ZmY3YWY1ZGI2MmNkYWM3NGRmNDc4ZDBhMjk1NDg5NTk4Y2U4ZWRiMDJkZjBiOTRjNWY4MmI5ZTcyMGUzNGI3YmU5M2ZmMDdlMjhhNw&uuid=&pii=&in=false

172.240.127.234

302 Found

0 B

URL User Request GET HTTP/1.1
theirsneedful.com/api/users?token=L3E4Z24yeXU0P2tleT02ZDY3Nzc3ZmNlOGY0YzczMDIwNDllNzkwZGU1MTZkZSZwc3Q9MTcyODQxOTE3MiZyZWZlcj1odHRwcyUzQSUyRiUyRnQuY28lMkYmcm10Yz10JnNodT1lM2ZmMjZhMzFkNTA3MGFhZDVjMzk3NTI4NTljMjA3NmJjYmVlZjc0NmZlYjc2NzlhMmVjMWQ5MWVhZWJkYWFmOWQxZjE5ZTI0ZjEwNmQ0ZjU2MjU4YmUwZDA2MjdhYjU3NzFlMjY4ZjQ3ZmY3YWY1ZGI2MmNkYWM3NGRmNDc4ZDBhMjk1NDg5NTk4Y2U4ZWRiMDJkZjBiOTRjNWY4MmI5ZTcyMGUzNGI3YmU5M2ZmMDdlMjhhNw&uuid=&pii=&in=false
IP
172.240.127.234:443
ASN
#7979 SERVERS-COM

Certificate
IssuerLet's Encrypt
Subjecttheirsneedful.com
FingerprintC3:AA:D2:33:10:68:B8:16:2E:85:68:94:72:17:69:6E:33:DE:74:2D
ValidityThu, 29 Aug 2024 12:48:29 GMT - Wed, 27 Nov 2024 12:48:28 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /api/users?token=L3E4Z24yeXU0P2tleT02ZDY3Nzc3ZmNlOGY0YzczMDIwNDllNzkwZGU1MTZkZSZwc3Q9MTcyODQxOTE3MiZyZWZlcj1odHRwcyUzQSUyRiUyRnQuY28lMkYmcm10Yz10JnNodT1lM2ZmMjZhMzFkNTA3MGFhZDVjMzk3NTI4NTljMjA3NmJjYmVlZjc0NmZlYjc2NzlhMmVjMWQ5MWVhZWJkYWFmOWQxZjE5ZTI0ZjEwNmQ0ZjU2MjU4YmUwZDA2MjdhYjU3NzFlMjY4ZjQ3ZmY3YWY1ZGI2MmNkYWM3NGRmNDc4ZDBhMjk1NDg5NTk4Y2U4ZWRiMDJkZjBiOTRjNWY4MmI5ZTcyMGUzNGI3YmU5M2ZmMDdlMjhhNw&uuid=&pii=&in=false HTTP/1.1
Host: theirsneedful.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theirsneedful.com/api/users?token=L3E4Z24yeXU0P2tleT1hOTY5Y2E1YzlhZDI2MTE3NjJmMTFiNzlhNTI2ZTJkMiZzdWJtZXRyaWM9MjQ1MjE3ODk
Cookie: u_pl=24521789; ain=eyJhbGciOiJIUzI1NiJ9.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.8WLH5Z5vBZy4SbtLjNXyP_HlAsAGLdalQuP7cV_SGdU; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Tue, 08 Oct 2024 20:25:12 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://appnowsite.appnow.site/2098bc0b-41c9-498e-8ddf-5cf8536c3ae9?zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik%20verk&isp=Blix%20Solutions&useragent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Set-Cookie: iprc0a45df6d35ab1ce201ccdf7f7d1434df=5577412; expires=Wed, 09 Oct 2024 20:25:12 GMT; path=/
pdhtkv=true; expires=Wed, 09 Oct 2024 20:25:12 GMT; path=/
uncs=1; expires=Wed, 09 Oct 2024 20:25:12 GMT; path=/
pdhtkv28=true; expires=Wed, 09 Oct 2024 20:25:12 GMT; path=/
uncs28=1; expires=Wed, 09 Oct 2024 20:25:12 GMT; path=/
Host: theirsneedful.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 391762838e34f5ec959f725851fc9626
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

appnowsite.appnow.site/2098bc0b-41c9-498e-8ddf-5cf8536c3ae9?zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik%20verk&isp=Blix%20Solutions&useragent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2

54.240.174.42

302 Found

0 B

URL User Request GET HTTP/2
appnowsite.appnow.site/2098bc0b-41c9-498e-8ddf-5cf8536c3ae9?zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik%20verk&isp=Blix%20Solutions&useragent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
IP
54.240.174.42:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subjectappnowsite.appnow.site
FingerprintC2:22:AE:F5:28:9E:8F:9D:72:B9:0B:00:39:25:39:C0:DD:2D:67:07
ValidityTue, 07 May 2024 00:00:00 GMT - Thu, 05 Jun 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /2098bc0b-41c9-498e-8ddf-5cf8536c3ae9?zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik%20verk&isp=Blix%20Solutions&useragent=Mozilla%2F5.0%20%28X11%3B%20Linux%20x86_64%3B%20rv%3A96.0%29%20Gecko%2F20100101%20Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2 HTTP/1.1
Host: appnowsite.appnow.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theirsneedful.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
content-length: 0
location: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
date: Tue, 08 Oct 2024 20:25:13 GMT
server: nginx
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: 2098bc0b-41c9-498e-8ddf-5cf8536c3ae9-v4=FXMiDq2-H1x7P_J9Atcq0iwjbD8xNWLVgzYnfLuesl8; Max-Age=86400; Expires=Wed, 09 Oct 2024 20:25:13 GMT; Domain=appnowsite.appnow.site; Path=/; Secure; HttpOnly;SameSite=None
cep-v4=shV_-wj7W887fsbIzm2rW8ZCz2Zzv_QrjKtryeyqkBIaTYwSMhFQK9GpiCgNKkcQkHcitQTGVeWZwaVf7kDTcYTX3efqsDFbXQ26Kdb1w6t54cT4PkajHYMWT6_K-zZEfrXqJGuJtRrbILZAlT-1Xfz2f7vzfEJCIVJMwdmaZyusAg-jxru1vSLsG8ZkUAVZ5hr_ENG30EB15jkl0wbEgJFnT_6sy11m-5MOegOOtcPnSSFMJcONmUsUDE0g_ahN6XnkHQ_pV9zPEc_8jsCalT4xDCOGnT9ICp1tQxDkwuv-hI2TixJYHtNxQKB8V_BTczEnpFXC7036JP7EwIlRKYJPYn7vzGbpqwlYdodIDg_suQBlsSh8hTc3OylOHL-oQ_DgH8-MafUJDee_bXLkn_Q7VgGIvVK-2uDtxfykv5quCdSsUg5G8iD7yJ1uZTHsrr6DTdzBKiXbSwg8MiLb4suTPv49hROF00ow7M31hiUXJOUjSnWMVxUO-lstyB_mojK-7itXBhTnbodKI_zbMNraKAKToObxTdTALafSqBmoav3Dsb20UFfwCjCRzlKb7o8kjWmClm7dHfaXNwmxp9ZleGDuaiL6a6n52UZuI5WcuTu2uoLBg1QNfwUfaEgLev6on1sifzS7rJNJMsO6Mn4no16wowcgTg4JPoNT2zNwjuVIaXzSetnbfnMVrB69eGy77k4e4JvgPLyy8egRCQ; Max-Age=86400; Expires=Wed, 09 Oct 2024 20:25:13 GMT; Domain=appnowsite.appnow.site; Path=/; Secure; HttpOnly;SameSite=None
x-cache: Miss from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mqzlDRqnX2mC_2Lg-r50KSvCBmVwjwu7_q21oGcXfrr3Bo7qUq3JqA==
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/img/x.jpg

104.21.86.92

200 OK

81 kB

URL GET HTTP/2
updatenow.pro/scanning-your-device/img/x.jpg
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced
Size
81 kB (81174 bytes)
Hash
fb0479b32165743707b76faa661482cf
f00b35b8a17a36f8e506a1ff23c1ac3dca0558bf
ddc0f3d26a8b630f67ba0f2964419a3a76878947ddfcd3a43c10acae833f4dab

HTTP Headers

GET /scanning-your-device/img/x.jpg HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: image/jpeg
content-length: 81174
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "019b5b4d9578c30676f1fc13a35f89ec"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FfRdpkNLe3Nmr5SjW%2B4YpAuq6n8AK5slaClrbMS9BNSDuuAjToHr4fuu6zYf7r254a0XrMJRu7BRAwK%2F5wX6HrH67O43FARsHKcxnbUuzQqLjBKPGSQdmvOQRJz5DzGU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 726
accept-ranges: bytes
server: cloudflare
cf-ray: 8cf8dbe2fbfc0a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/landings/209605/1618996856/images/ico_tray1.gif

104.21.86.92

200 OK

69 B

URL GET HTTP/2
updatenow.pro/scanning-your-device/landings/209605/1618996856/images/ico_tray1.gif
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
GIF image data, version 89a, 16 x 16
Size
69 B (69 bytes)
Hash
3ae573d079dcd1d2da4086f2c0c72c45
e7c9dabec81379373476ed23168dcecb9b8c56aa
9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107

HTTP Headers

GET /scanning-your-device/landings/209605/1618996856/images/ico_tray1.gif HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: image/gif
content-length: 69
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "aaf6c5e1ac9ac320bede916158ed5d07"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWU2gZUmE6wDMrTaL%2Bni7lBGFh67xd3fBiUIFGz5c2w5kKbX1F5QNqPbMXPfIxsy6tqF%2FEXN47Zenpxa114yew5iwC68A9N3pBeETvoSeh8jHVTmyM3mU1XwZFGNN2k3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 6079
accept-ranges: bytes
server: cloudflare
cf-ray: 8cf8dbe2fbff0a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/landings/209605/1618996856/images/ico_tray2.gif

104.21.86.92

200 OK

377 B

URL GET HTTP/2
updatenow.pro/scanning-your-device/landings/209605/1618996856/images/ico_tray2.gif
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
GIF image data, version 89a, 16 x 16
Size
377 B (377 bytes)
Hash
c10bdec858cb0cf9e6cc5865d5925746
697c095ed5509e5a5af0c5ebf2380662aeffc531
b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9

HTTP Headers

GET /scanning-your-device/landings/209605/1618996856/images/ico_tray2.gif HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: image/gif
content-length: 377
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "9f6c72ab1272f4bbadf6b026cfcf0490"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tcVgUBPImhTD8i%2Fcl6yDO9SxiF94FwfvFwDjkCeVlt%2BcRbutO1hehaVRbAbWtutsTZ8pzTpfbsA3dq9CBKl3QNUJOCdaiigpGXTtVKNxYzplFgIZInZ0sXiegTYryutr1Guige1OMlKVuByN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 726
accept-ranges: bytes
server: cloudflare
cf-ray: 8cf8dbe2fc010a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2

104.21.86.92

200 OK

5.2 kB

URL User Request GET HTTP/2
updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
JavaScript source, ASCII text
Size
5.2 kB (5228 bytes)
Hash
ce230154394e983d11646b7ac204bcd4
d921038e8be47cb5bc0caf3bddce9649b173e5c6
33c348d3a4097d7c1df5375c8319c534e695bcda847c8d19d18259abab325f4a

HTTP Headers

GET /scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2 HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://theirsneedful.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m29uELfGMHopHmJULdJs05NncJjP6LVbtxHWtARpHJb0tGm0v%2BMpjInyg9hXsS0KCUe9PawsZqm40ZfS%2FemK7AhOBJshkax2Xu6J2l0CcBMszci6AK3qwinO54DaNuur"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 8cf8dbe0f9540a64-AMS
content-encoding: br
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/landings/209605/1618996856/images/ico_tray3.gif

104.21.86.92

200 OK

234 B

URL GET HTTP/2
updatenow.pro/scanning-your-device/landings/209605/1618996856/images/ico_tray3.gif
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
GIF image data, version 89a, 16 x 16
Size
234 B (234 bytes)
Hash
9ce99ec458daf212f9812a90f3fadd13
9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1
b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753

HTTP Headers

GET /scanning-your-device/landings/209605/1618996856/images/ico_tray3.gif HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: image/gif
content-length: 234
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "77658f49c3237c43feb1f812a11dc45b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1sjBFvMhcOmNHYWNp3GGeYhsvVnW4drr0eM1seY0wvE1DW%2FB9YBKNHSk8OE7eIJ347rbfXOEl9v%2FDqDOBZECjwxt4THJ4CUOuzaRXfcY5wwM6pHuSIHCj1Q99hvTkz1o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 726
accept-ranges: bytes
server: cloudflare
cf-ray: 8cf8dbe2fc040a64-AMS
X-Firefox-Spdy: h2

threatdetect.org/fonts/?font=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

78.129.252.31

200 OK

436 B

URL GET HTTP/1.1
threatdetect.org/fonts/?font=aHR0cHM6Ly91cGRhdGVub3cucHJvL3NjYW5uaW5nLXlvdXItZGV2aWNlLz9sYW5nPW5vJmNlcD1CWjJvX3ZScDctVXdrZ0kzZWxmeTk2NC1abml3SmZ4aEREcFZ5YmQyU2ZXcmRGV2xBei1qTmlSNEVTbVA4S2ZUSERTWG14TkpfazV6WVVsVnd6bmpjcjQyWjdwYklDV1dFVG8xTHpLc3lfMGxnUHc1bDFxb3cxNDRNV01iMWpVa0lXVWs5aEl3c0R5Z0JSYlZSNWxSQ1A2VjJva0diYlNBVl9lNFA1YTNsNm5fUlFDeHNCVklBOEVHcWlVSmNvcnRtOXhoSGwzRjJFWk9PeTNITUltX3p5SWwxQTl5clMxRU00S1hSR0F6aWd4V2ZLVjhqaXRKdVVkdVJyVC1ieUpTYV9TUkxHQ2JoUXB0QUE2emdrRGlZX3VURG9OQ25jbkVBVzl0LXJ0RWsxcUVud3BYa0dmNF9xRVRFb0NKNGZSeEtnckhoaGEwcnVfRm5iRWFmTmNjMWdHYjY1STR6TE0tRm1LcDVXeVdxSG4zRGRzMVFTSS1aRC0wdC0yeHlhTHhJQ0lUYmF5aDl4dEg4ZWpoMUFtUm1LMGhHWGJiN0xQVXJhTWN2Wi1pRUx6TFc1QWd6dEVIZnE2cFZzYmlnZ0t3aHB4YjNNYnUydVRZX3ZwV3lYSThrTjdKWUVmU25VVGZyNEc3Y0ZZZndib0daWG1qX0xrRFBxX0NSTDZRek1JWGNXRlhCR0QwUmdUUVZBVUNrRVpOeU85V2xnWTJjcTFpc2pxRjhaU0s5WTNWcVpKTFFHRUZCZ0thVHRqdjlWNURQbTBxQnZHRm9wUU5MVkk3NmxGbGs3bmRuSkhBekdmNi1tdHNUVTFHa0lHVTBmUHRoYU1IdUowNGdOWUxEVURFMWJZT0tZQ2xrMG81WEJIWFUwamhROEJJMWRwYml3YmlfN2tRZEE4OHdaWGhENk9TaHV2MldUZHlPcXNkZXhqSEM2c2pOSVJ0blRGN2VMN0M4dnBsMVEmbHB0b2tlbj0xN2VkMjg4YTQyNTYwOWUxMTNiNiZ6b25laWQ9NDI3OTMyOSZicm93c2VyPVVua25vd24mYmFubmVyaWQ9MzEyOTk3MCZvcz1MaW51eCZjb3VudHJ5PU5vcndheSZyZWdpb249SCVDMyVCOHZpayt2ZXJrJmlzcD1CbGl4K1NvbHV0aW9ucyZ1c2VyYWdlbnQ9TW96aWxsYSUyRjUuMCslMjhYMTElM0IrTGludXgreDg2XzY0JTNCK3J2JTNBOTYuMCUyOStHZWNrbyUyRjIwMTAwMTAxK0ZpcmVmb3glMkY5Ni4wJmxhbmd1YWdlPTExJnBsYWNlbWVudD0yNDUyMTc4OSZzdWJpZD00MzY3NGI4MDRjODRmODNhMDg4NWM5ZWRkYTc1MzFlMg==
IP
78.129.252.31:443
ASN
#20860 Iomart Cloud Services Limited

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerLet's Encrypt
Subjecthimosteg.xyz
FingerprintEF:0D:29:E6:81:01:6B:86:D2:88:7B:1F:BC:D4:1B:E9:DD:31:8B:AC
ValiditySat, 21 Sep 2024 17:01:52 GMT - Fri, 20 Dec 2024 17:01:51 GMT

File type
JavaScript source, ASCII text, with very long lines (301), with CRLF line terminators
Size
436 B (436 bytes)
Hash
ed31146ed32e3b0b17eab2e46c3cd585
137bd329b899b3c9a67993a7a4f76371ae2b90ac
3562042f6da27f59a69ef39d798f080b1f3739b4e42b1384ec1442f82b000ddc

HTTP Headers

GET /fonts/?font=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 HTTP/1.1
Host: threatdetect.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/
Origin: https://updatenow.pro
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 08 Oct 2024 20:25:13 GMT
Server: Apache
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

updatenow.pro/favicon.ico

104.21.86.92

404 Not Found

0 B

URL GET HTTP/2
updatenow.pro/favicon.ico
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Tue, 08 Oct 2024 20:25:13 GMT
content-length: 0
access-control-allow-origin: *
cache-control: no-store
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TK5eTj1%2FeEo8vN0EsKitaZyzLDlHzvrDWSE1aaE1K%2Bd4I0WIt1FQLcy29JP0%2F3v3lPzSvYDZsmR7YfkZZ5ZpBTqbnaDRqufLriTIP0H%2B%2BRp6fW6ksaxo2b5H1HOSDQgr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: BYPASS
server: cloudflare
cf-ray: 8cf8dbe50ee20a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/js/trans.js?v=2409192

104.21.86.92

200 OK

11 kB

URL GET HTTP/2
updatenow.pro/scanning-your-device/js/trans.js?v=2409192
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
Unicode text, UTF-8 text, with very long lines (11480), with no line terminators
Size
11 kB (11039 bytes)
Hash
9d3ab2ae7916d05d01d132569a73788d
0877b92f71871d73887fdbe89f01bc3d1fa3fc58
649f81d8c92a1d237eb9cea88cdbf998a8c36f6b11a00b963fc0ebc21b4c3f78

HTTP Headers

GET /scanning-your-device/js/trans.js?v=2409192 HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"739de51bde61f16a5583a98a94b77999"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JAJKLh9jFLThJtmsbQn2h5jzzgcHwsjpc%2BrWhHhZ0swDs2MfOvcYKLdgXbiWRLFd7Y6A390xLMTxO9Kjp7NcK0GJpVwYbkbyxWCcRwlCxqD1Ef7T%2F0nqvvGU97jWB46MbWA%2FNP9pOHy7PG%2B2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 6613
server: cloudflare
cf-ray: 8cf8dbe30c130a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/img/logo.png

104.21.86.92

200 OK

3.6 kB

URL GET HTTP/2
updatenow.pro/scanning-your-device/img/logo.png
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced
Size
3.6 kB (3619 bytes)
Hash
fac400941652b9e4da713b818ca13822
67546046d8f76504855e095ba9dcc5e4bcaddd0e
0da8e901848697aca8328a2a3c26a024b7163bd0eeafddf72f4ac119553fba87

HTTP Headers

GET /scanning-your-device/img/logo.png HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: image/png
content-length: 3619
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: "5f42b8bbe60481ed0e66945c3a8ba116"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yXo7gCQVdGHiYfmsqVtV0Q7D0BZJKqOkV%2BGdWZzrfcRMCeR83Zid3RQzf6wvCoYJ1UYeC29CH%2BIJq7OjW%2FwCIAH3CPgqNK1nmPofGd8cqfgL7Ay92qeOVddNprF9ryM4H9%2BOQbnXc1qCSMnJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 726
accept-ranges: bytes
server: cloudflare
cf-ray: 8cf8dbe2ebf40a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/assets/jquery.js

104.21.86.92

200 OK

292 kB

URL GET HTTP/2
updatenow.pro/assets/jquery.js
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
JavaScript source, ASCII text
Size
292 kB (292458 bytes)
Hash
0208b96062ba59d07c4495115d2b42ce
611b7f56ab2146e1277e9258f15c55d50034dcef
6bd8c1051ca05f5061e65b7c1998d70f3c8e07e6d6bdef4488eeed44e52d8ff1

HTTP Headers

GET /assets/jquery.js HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"c776ab918d350c7e6f4463231128b1d6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wlSpagzPKibZhvQPOB0%2FdPBJY3SgkgUKeMsb6Ea2nQ5OOVjmQO%2FiJJ4Kc5%2BbpFSuEWcIHlOb%2Be5VE%2B9ql2EskVqc8u4ERfbgt5xc%2FSTMbYrwjQaRvbQgN7qjL%2FXYF2YB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 5940
server: cloudflare
cf-ray: 8cf8dbe30c0a0a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/js/interactive.js

104.21.86.92

200 OK

8.4 kB

URL GET HTTP/2
updatenow.pro/scanning-your-device/js/interactive.js
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
JavaScript source, ASCII text, with very long lines (9698), with no line terminators
Size
8.4 kB (8416 bytes)
Hash
faa5c98104342aa88f3cac311aba497e
c0f3f4b4c9f613308841816b3574839b12cabc3a
a476645665992293286c5850e2af40ad8e01fc04cf168d6174f93bf64315d276

HTTP Headers

GET /scanning-your-device/js/interactive.js HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"d8872729e700ab19cc7c99093b77fd72"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EsNXbrSYNJWP0XXuNGuNHJzPQ2NO9D2L02HwI1%2F8edFd%2FLzU74NeDijiCQn1Oes3UUiMYUnXDj%2F2e7qT99a%2F%2FIyeeYmBejO9cjcPM0NpBspTFBe3BMWswyRj4z0s3LoW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 726
server: cloudflare
cf-ray: 8cf8dbe30c0c0a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/scanning-your-device/css/style.css?v=240919

104.21.86.92

200 OK

9.2 kB

URL GET HTTP/2
updatenow.pro/scanning-your-device/css/style.css?v=240919
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
ASCII text, with very long lines (9816), with no line terminators
Size
9.2 kB (9175 bytes)
Hash
9e6f30748ec26f81c064bdc62cc1c019
a7be5387494b40e728230ed1d42e0d5a00e01f10
0f7ae3550bb5aadb7fbd0dc0ac981d56ae8ddfcf6a7617a71a8b2b721679544c

HTTP Headers

GET /scanning-your-device/css/style.css?v=240919 HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"d72a4579b95ad707acb3056dfab423a2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hbELrSzfsh3ZIyro1bx7UnJcpptBGOTId4YqxpjUPJ0aL6L1CZ%2FvsqKtwwfvPblLwYvB7%2FZuAqKqdUM6PvjIgwLlQrFUk0IjdCH%2BvgOQsCi7nSOc6uDr9ASfcDNjt5m4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 726
server: cloudflare
cf-ray: 8cf8dbe2ebf00a64-AMS
X-Firefox-Spdy: h2

updatenow.pro/assets/link.js

104.21.86.92

200 OK

658 B

URL GET HTTP/2
updatenow.pro/assets/link.js
IP
104.21.86.92:443
ASN
#13335 CLOUDFLARENET

Requested by
https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
Certificate
IssuerGoogle Trust Services
Subjectupdatenow.pro
Fingerprint9D:25:36:8C:66:FB:DA:EC:E3:D9:00:BE:53:17:ED:7C:75:D4:E3:55
ValiditySat, 07 Sep 2024 01:40:14 GMT - Fri, 06 Dec 2024 01:40:13 GMT

File type
Unicode text, UTF-8 text, with very long lines (709), with no line terminators
Size
658 B (658 bytes)
Hash
8deeee00f7a5b628b3d05cd537feaa97
c74a91793118e5493e136bf900e60d2bb1ffab12
a730ed48f54327c72922b58ad7113abe56ac004a84f6e88070d80f268792b974

HTTP Headers

GET /assets/link.js HTTP/1.1
Host: updatenow.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://updatenow.pro/scanning-your-device/?lang=no&cep=BZ2o_vRp7-UwkgI3elfy964-ZniwJfxhDDpVybd2SfWrdFWlAz-jNiR4ESmP8KfTHDSXmxNJ_k5zYUlVwznjcr42Z7pbICWWETo1LzKsy_0lgPw5l1qow144MWMb1jUkIWUk9hIwsDygBRbVR5lRCP6V2okGbbSAV_e4P5a3l6n_RQCxsBVIA8EGqiUJcortm9xhHl3F2EZOOy3HMIm_zyIl1A9yrS1EM4KXRGAzigxWfKV8jitJuUduRrT-byJSa_SRLGCbhQptAA6zgkDiY_uTDoNCncnEAW9t-rtEk1qEnwpXkGf4_qETEoCJ4fRxKgrHhha0ru_FnbEafNcc1gGb65I4zLM-FmKp5WyWqHn3Dds1QSI-ZD-0t-2xyaLxICITbayh9xtH8ejh1AmRmK0hGXbb7LPUraMcvZ-iELzLW5AgztEHfq6pVsbiggKwhpxb3Mbu2uTY_vpWyXI8kN7JYEfSnUTfr4G7cFYfwboGZXmj_LkDPq_CRL6QzMIXcWFXBGD0RgTQVAUCkEZNyO9WlgY2cq1isjqF8ZSK9Y3VqZJLQGEFBgKaTtjv9V5DPm0qBvGFopQNLVI76lFlk7ndnJHAzGf6-mtsTU1GkIGU0fPthaMHuJ04gNYLDUDE1bYOKYClk0o5XBHXU0jhQ8BI1dpbiwbi_7kQdA88wZXhD6OShuv2WTdyOqsdexjHC6sjNIRtnTF7eL7C8vpl1Q&lptoken=17ed288a425609e113b6&zoneid=4279329&browser=Unknown&bannerid=3129970&os=Linux&country=Norway&region=H%C3%B8vik+verk&isp=Blix+Solutions&useragent=Mozilla%2F5.0+%28X11%3B+Linux+x86_64%3B+rv%3A96.0%29+Gecko%2F20100101+Firefox%2F96.0&language=11&placement=24521789&subid=43674b804c84f83a0885c9edda7531e2
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 08 Oct 2024 20:25:13 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"c0469b4e9ecb9aa8d1c23bfbf2f1fe53"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E9O8LOn3e4FdyKlP7xDyYjIgONMt5eMl%2Fuwcv3cRmfjcUS1kcnOzZVHR99goPnoSr%2FOsugbCrEkQWBfCImh1wpXUdp4%2BM7yHwtjwf0gZElpr%2FEb3ziaZNimgzS75l6%2FB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 5940
server: cloudflare
cf-ray: 8cf8dbe30c110a64-AMS
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (17)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers