gbstwrldnws.com/adult_video_2/favicon.ico
1.4 kB URL gbstwrldnws.com/adult_video_2/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel\012- data
Hash bf5b6c805abb9d242e0eefe8f85e9253
7430ff53470894ca5d22d074c1569efc3b72b95d
edff483f89d1eeef57d191848be78a7f52313af079c116bf714a0f5d5b57e9c5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /adult_video_2/favicon.ico HTTP/1.1
Host: gbstwrldnws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gbstwrldnws.com/adult_video_2/1328/2da4af00d834dfbd23fda189a58e00c9/?click_id=w79krnjob883088mi236hta0&sub1=&sub2=&sub3=&tb=&fullscreen=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:19 GMT
content-type: image/x-icon
content-length: 1406
last-modified: Thu, 25 Jul 2019 13:49:48 GMT
etag: "5d39b37c-57e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
ykrvt.bestssp.top/?pl=qRuQunqVKEWrY1jyLTBUOA&sub_id=1328
0 B URL ykrvt.bestssp.top/?pl=qRuQunqVKEWrY1jyLTBUOA&sub_id=1328
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?pl=qRuQunqVKEWrY1jyLTBUOA&sub_id=1328 HTTP/1.1
Host: ykrvt.bestssp.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbstwrldnws.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 05 Dec 2023 15:39:20 GMT
content-length: 0
location: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NYgKHpCS8LsM9tlTi26QlaTXlQHpycMUbn7gkbEEoQwcdFOgjYqEqaD%2FEcZ8K%2Fof5r1ArPxmlLx0BVrAxkiWoXAfRS%2Be2w4BLyDOOuaV39iOlgX1rzHH5MfReR1bZU8gRXNWdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830d619b187156b5-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/lp.js
722 B URL news-xagedi.cc/lands/36/lp.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (685), with no line terminators
Hash 8061571ac71b47c9ef862658f7e3e81c
c8109eda3ac59808f2e331aa52883ef72526833d
0437c5e6e3fb2533b3166485bb94ad975513518f741a5a7e2d74aeb0ddaa0875
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/lp.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 722
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2d2"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/logo.png
7.4 kB URL news-xagedi.cc/lands/36/img/logo.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 180 x 56, 8-bit/color RGBA, non-interlaced\012- data
Hash 6cd3a78b39a704ee1c84f31c8c4e5808
bb5c81cadfcd60bd5c7b29af2395ef24b11ebb93
4cfbf07b7b4def7ad505f3be44e311c631ffec252a93f031d11356bc1b0c8193
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/logo.png HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/png
content-length: 7398
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-1ce6"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/search-icon.png
461 B URL news-xagedi.cc/lands/36/img/search-icon.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 71a97f63eeafce6cc8dd4e7b92e77303
e92e36474a69fcf7b932efc581e024a1c25773e5
fc2f527dba6449b1d9a7f17e4e9926039806904f58a7b4278dccf398900371d2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/search-icon.png HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/png
content-length: 461
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-1cd"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/Spin-1s-80px.gif
31 kB URL news-xagedi.cc/lands/36/img/Spin-1s-80px.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 80 x 80\012- data
Hash 68556766cd260e97fec2b60a9bfaf8c7
26c969371c9a3de360fab6d7a7a3bec2c5d5c99f
ef50b84645244197917d80f6bcd6f604dce892ec4cdcdc96f11ea40f4a093676
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/Spin-1s-80px.gif HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/gif
content-length: 30677
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-77d5"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/player-controls-l.png
945 B URL news-xagedi.cc/lands/36/img/player-controls-l.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 146 x 60, 8-bit gray+alpha, non-interlaced\012- data
Hash 6865c8700b582e4c7848472bb23dd65a
c5ea2c514de8f55145550f9589e1e07cda457994
e1f5b32f965cf94fdb788fa9cff4f2f80b34c234f7e9fa9139de890e89438324
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/player-controls-l.png HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/png
content-length: 945
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-3b1"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
11 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
Hash 1fd6783eae3dd0e1c78c4de1bc01f6cc
7bf7037249ff52a6f51f17eea72bd1e2ac7b369e
0ea67e934968616fef808a57db9e483cfbed74b584e34b375b4ad9be72170576
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gbstwrldnws.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:20 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/player-bg.jpg
11 kB URL news-xagedi.cc/lands/36/img/player-bg.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash d0c6f02d6933f0b93db0942e3e7f3609
bc96b3878d13d0f46aa464e94515f27ad53531b0
7296089ccd9e42b305c5b0398d47a78f900b40225c592c6f1ef23ade5bbe667a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/player-bg.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 11291
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2c1b"
accept-ranges: bytes
X-Firefox-Spdy: h2
gbstwrldnws.com/adult_video_2/1328/2da4af00d834dfbd23fda189a58e00c9/?click_id=w79krnjob883088mi236hta0&sub1=&sub2=&sub3=&tb=&fullscreen=1
286 kB URL gbstwrldnws.com/adult_video_2/1328/2da4af00d834dfbd23fda189a58e00c9/?click_id=w79krnjob883088mi236hta0&sub1=&sub2=&sub3=&tb=&fullscreen=1
IP
File type gzip compressed data, max speed, from Unix\012- data
Size 286 kB (286426 bytes)
Hash 0b4a6576b88337830d06a04175e240bd
f6a28c35ed0b0d34c6edd5c8963d87f463d98896
f266ce2cf831d0b739fac1ddddba9dcde0e815151b402acfe7f99ef663871104
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /adult_video_2/1328/2da4af00d834dfbd23fda189a58e00c9/?click_id=w79krnjob883088mi236hta0&sub1=&sub2=&sub3=&tb=&fullscreen=1 HTTP/1.1
Host: gbstwrldnws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:17 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-WoW64, Sec-CH-UA-Bitness, Sec-CH-UA-Model
permissions-policy: ch-ua=(self "https://rexpush.club"), ch-ua-mobile=(self "https://rexpush.club"), ch-ua-platform=(self "https://rexpush.club"), ch-ua-full-version=(self "https://rexpush.club"), ch-ua-full-version-list=(self "https://rexpush.club"), ch-ua-platform-version=(self "https://rexpush.club"), ch-ua-arch=(self "https://rexpush.club"), ch-ua-wow64=(self "https://rexpush.club"), ch-ua-bitness=(self "https://rexpush.club"), ch-ua-model=(self "https://rexpush.club")
content-encoding: gzip
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-2.jpg
9.5 kB URL news-xagedi.cc/lands/36/img/pics-2.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash b1444ede1cb63c55f07c4b7cc861ec58
504823696a6990f0c6892721e34a7496cfe4e704
628146e090737199d0b92e0d069cdc8fa95d65391a7e84b7da053dbc0275b2f8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-2.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9474
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2502"
accept-ranges: bytes
X-Firefox-Spdy: h2
gpshtb.com/go/709?source=1328
9.4 kB URL gpshtb.com/go/709?source=1328
IP
File type JPEG image data\012- data
Hash 76025b7cd7b3e168342e9f6916d8c7f4
bd2a6ea7c9105935c7a616fec2d6d85dbf98bfc2
46eaa0e5c25c663d858a5c65629f960ed17d2fe30b2484f629158e6d6460d775
GET /go/709?source=1328 HTTP/1.1
Host: gpshtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gbstwrldnws.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: text/html; charset=UTF-8
location: https://ykrvt.bestssp.top/?pl=qRuQunqVKEWrY1jyLTBUOA&sub_id=1328
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-4.jpg
9.5 kB URL news-xagedi.cc/lands/36/img/pics-4.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 107bdcec0a201d69db378827b68127cd
efc977edd0a369769d5f32d88e9858302bed1e5e
cb8a23effd64618021ebe40be5ed24bfb27c17f6d0a82c87a96d9efd91e06468
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-4.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9468
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-24fc"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-5.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-5.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 628b98b82d0aca1c1b2155aa5ec51a6a
db663b2b85cf8828f3e9c5aa879325bb50e684a0
d7dfe6be5b49bee8bbf743bc58d74af3dc7d0250c89bd6dd7e9ad268c287289d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-5.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9557
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2555"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-6.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-6.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash a83d5196e71bd6f9c55ef3e7322e527c
9dbddad413391599552c4d9cc5c9e8a287ef910f
52212d360cbbf493678d8e8bf75c20b7ad4b1d6cf86bf03e1c87fb5b4d6cb818
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-6.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9620
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2594"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-7.jpg
9.5 kB URL news-xagedi.cc/lands/36/img/pics-7.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 94edfad63e95c79618692b8d8dc20587
f582b7b70443ea1fff184ade49ab560fc8fd3318
0940f729e51d0fb610affca787415657f39a630cc0450d08576f69fd0f71756e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-7.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9484
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-250c"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-8.jpg
9.8 kB URL news-xagedi.cc/lands/36/img/pics-8.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 2e7eafc3878ee465f96bca0f9d1e1712
c4f353f12542db5d2df3be74dbae890e0430ac6e
df67f968a051026a5c43eb3e40b8d02a0c72bc742055526fef7e2655dd837cc1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-8.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9750
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2616"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-9.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-9.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash c3af10d166a4447c21f25e4a32383a5d
37a0342d08d6933b3bbfd4063b7ba998c991dd73
963fbe86dc33b1a1ba5c695bf9b74ebde439bc7a9260137121d747cf4cfbdd73
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-9.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9646
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-25ae"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-10.jpg
9.7 kB URL news-xagedi.cc/lands/36/img/pics-10.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 00ad8eccd280144f038e883859beeabe
e13583bbe25712e827b8b22b1353c883531f849f
21397b18bd87b564f70404ea1ff41d8d23ba804ed6eea4de323ac1c94e096ada
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-10.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9681
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-25d1"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-11.jpg
9.5 kB URL news-xagedi.cc/lands/36/img/pics-11.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 8611f67b36ff57eaa1060e793b9e6ad4
49f273a5760e7375adb1efc58f0ed2c665da6ae8
de70c6d29629dd9ec1b85e3146390c1019bd608eeb3d7ffdc196627f70ee30b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-11.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9483
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-250b"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-12.jpg
9.5 kB URL news-xagedi.cc/lands/36/img/pics-12.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 3971b0cd6849aef8e63c281fe7e53c57
690281f0f9a05a32be18029632240693f7b26270
20a9e9a79f97878e87f805b977eb6046480b734dfd9e90df9f34b22ef484777a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-12.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9487
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-250f"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-13.jpg
9.4 kB URL news-xagedi.cc/lands/36/img/pics-13.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash cd911694d58b5fb86c94cf7a1d5b530b
f32925a79b755d76fdf1ae56fa898ef23d816699
5a8f5f99cb386403813964a7ee271660131e9c50eb5267f932a67ce0f4fb2ea2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-13.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9378
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-24a2"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-14.jpg
9.5 kB URL news-xagedi.cc/lands/36/img/pics-14.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 4957499f251b620472eb5fe6fd126c22
a237ac15f4b16256f1c49a40ca07ca168dea540c
de5d64cc00dd3bc0e0998e274f41bb78de69cae402e53c4f41c0ab8e0af2cd0b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-14.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9498
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-251a"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-15.jpg
9.7 kB URL news-xagedi.cc/lands/36/img/pics-15.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash bf608c2d10293273951a88b8d38de015
15b2a17c7300725aacc27f320480dfe5bf173a00
118f446f628921fb7cab1afeac932ef77d63a7c5a31ffa288427d80c4de69f9f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-15.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9673
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-25c9"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:20 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/36/img/pics-16.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-16.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 700dfe65fca751e5c160aa1ed38c0389
61a7a9ba2a5209bb28b6a36c4b7ba9088f4b2886
8f8c3d5f93cc6dc00172cf203f6b0113819e853de45518cbcee1e68f9e95fbc1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-16.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9570
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2562"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-17.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-17.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 3617c828a4589dfd2af8f90e31f92666
0e7a1dbe743c9eaad109659f7b21ab86719b9cd0
f3ab898058b0ebaba11001b5a2b3c5b5db2d7f766000d95abdbfb841fcb16c1f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-17.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9595
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-257b"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-18.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-18.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 52ada45615791fefe3513b98a28d6c61
334b68a65108b2274dc0d41bbed58d10cbfb41a0
204715e71db20e5daffe8494816412e0998ec0b97b303f16fb4102226c492fa4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-18.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:20 GMT
content-type: image/jpeg
content-length: 9645
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-25ad"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/48/preloader-43.5794040.gif
7.0 kB URL news-xagedi.cc/lands/48/preloader-43.5794040.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 160 x 160\012- data
Hash 5794040ee88def220320edd0ed2e2ac9
7ec6d7843172d2bec7c0ed0d7eabed19a800fd7b
c1a4896adebc502e9be1248a28bc641ef9a5b75c6bdefa5d704a220c128ee34e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/48/preloader-43.5794040.gif HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: image/gif
content-length: 7010
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-1b62"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:21 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
11 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9539)
Hash 1eb93dbf1fb7060699a1c2f24d4f0bf1
502ba6808987cda233868ad1dfc6c2322cd650dd
7042e3b948851ab2dffc80933697456e35b5ec3417a872366cd056ec77b6ce42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:21 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
48 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
Hash 7ee939c4d27111cc5806012a5e0ccff5
e9f831ad4ca3dc89f276f6981c2225540e072474
fe32123ba541b062d661880f2da4b8889fe643a5c34e2015b1dad371e3e68be2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:21 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/pics-18.jpg
9.6 kB URL news-xagedi.cc/lands/36/img/pics-18.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data\012- data
Hash 52ada45615791fefe3513b98a28d6c61
334b68a65108b2274dc0d41bbed58d10cbfb41a0
204715e71db20e5daffe8494816412e0998ec0b97b303f16fb4102226c492fa4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/pics-18.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: image/jpeg
content-length: 9645
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-25ad"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:21 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:21 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:22 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:22 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
96 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63929)
Hash 0bf20f01234a67981874b737cb2d1330
5489e4d5598c2698d7a782458f3461897869ab1e
5f88e02cea58c9357bf91d074cf6be44a0c6e7d20065e5894f5f5f8055b987d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:22 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:22 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:22 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
130 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (41930)
Size 130 kB (130234 bytes)
Hash fbca5687bab94f659733da3fc9a1221c
4df6b9108b480d73364eae266ee33e732b642d62
e69602a2d6f487c6030235d95284d70cb29c9e0808bc54adc3ca746ada4f5f6a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:22 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:22 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:22 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:23 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/36/lp.js
722 B URL news-xagedi.cc/lands/36/lp.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (685), with no line terminators
Hash 8061571ac71b47c9ef862658f7e3e81c
c8109eda3ac59808f2e331aa52883ef72526833d
0437c5e6e3fb2533b3166485bb94ad975513518f741a5a7e2d74aeb0ddaa0875
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/lp.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 722
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2d2"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:23 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/36/lp.js
722 B URL news-xagedi.cc/lands/36/lp.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (685), with no line terminators
Hash 8061571ac71b47c9ef862658f7e3e81c
c8109eda3ac59808f2e331aa52883ef72526833d
0437c5e6e3fb2533b3166485bb94ad975513518f741a5a7e2d74aeb0ddaa0875
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/lp.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 722
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2d2"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:23 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
46 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42369)
Hash 416fab7a57ce0468c4f7be7ca09227c8
c1002106d2a820f9dbd72ad006393d41181cc42f
c74b8ea92260b4564b45b6308475b445407df11967721e2a4610ed6462f76c24
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:23 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
29 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26966)
Hash 4ea9a2ab70025d257fb7a49eb6cd8aec
55bd817c932a6606de651f0d4907c18eb8bd781e
148804a7250bc11845fb510738a947ec72113a835be6d37ae3a07937852c69ac
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:23 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:24 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/css/style.css
4.9 kB URL news-xagedi.cc/lands/53/css/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (4928), with no line terminators
Hash ff30963b59d24c95ee8ed06ee6f286d1
dbba4c06e6064e4bce5a928ff9905684d66a073d
d5ef0347241cb62969a80994ed4e4f87cf20f817e3036756df731aa04d238581
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/css/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: text/css
content-length: 4928
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-1340"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/images/spinning-circles2.svg
503 B URL news-xagedi.cc/lands/53/images/spinning-circles2.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 14e6f9981fa27406176056df2451d27b
aa1b6fd6071391d0031bff2d74ae77347ec2fdb4
466d361db2f130d7e3d40a671c935e3e556c3a49567657afee2e44a0a390a84f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/images/spinning-circles2.svg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: image/svg+xml
content-length: 503
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-1f7"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/js/device.js
3.3 kB URL news-xagedi.cc/lands/53/js/device.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (3289), with no line terminators
Hash 2d9887b21aa6b47c56e7f43e66560a4f
42cdfc5b3b23d32152750bf2cea4233044491768
863a13c42ef72b562bc7aa5005b8ff5693763ae8d16ce3bfc3d876e92a7fdf85
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/js/device.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 3289
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-cd9"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/images/video.gif
500 kB URL news-xagedi.cc/lands/53/images/video.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 320 x 180\012- data
Size 500 kB (500082 bytes)
Hash 2e59da03066a7854825901e0c1460b52
8d5aa04f252de7a85b8387051c1321338ac32d32
63412ff22ec2f712d6e82d34889a0a48948523dedd0bfce03bba69a19a9b4433
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/images/video.gif HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: image/gif
content-length: 500082
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-7a172"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:24 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/36/lp.js
722 B URL news-xagedi.cc/lands/36/lp.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (685), with no line terminators
Hash 8061571ac71b47c9ef862658f7e3e81c
c8109eda3ac59808f2e331aa52883ef72526833d
0437c5e6e3fb2533b3166485bb94ad975513518f741a5a7e2d74aeb0ddaa0875
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/lp.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 722
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2d2"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:24 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:25 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:25 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:25 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/63/images/thumb-big.jpg
83 kB URL news-xagedi.cc/lands/63/images/thumb-big.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1237x691, components 3\012- data
Hash cb5cedbae6d67e62dc9fde274b7f7dbe
f31d7811c4b6e50ae053f315152366501a8b6002
deaddba93625d2c7610076927fcd37afadad9324ca3210a2bb12784d313dd788
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/63/images/thumb-big.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: image/jpeg
content-length: 82623
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-142bf"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/63/images/male.jpg
728 B URL news-xagedi.cc/lands/63/images/male.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3\012- data
Hash 11887dd0a5df5563fc133e173f0fd484
56c828481f045e04ad0543cecfe06bbb25b41655
9233233438671b5836951cd8d3d8cef0dff3a26fd6693ea22ec92cb67c5c32de
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/63/images/male.jpg HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: image/jpeg
content-length: 728
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2d8"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:25 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
57 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55053)
Hash fd739ef87b79b03dc442f09d158ecd5c
a17f5c0edee8a7e4576dfba74d34221fc3a2114f
03e6ccf28a551b9b466251fb26e7fc2353a68e22cca2405e00d692f10ec74247
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:22 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:22 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:26 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
62 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (59969)
Hash b407ed055698574d4d9c5d74b4b120c2
6462c83459c55c0b05e46d3602e3df5f9f9e3836
404c8b5fad9d1d31872c6945114631ba0ec359d2aca6e829be5c401dfa2af776
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:26 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:26 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
63 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (59622)
Hash 6bb4d5c052af8cf84cf8a34535c69358
2b9d842b51e94e1e732dff2c2353ff3d8492acec
543bf237111307cb8fdd1e61e5c960045a0e78ff5793ae9e4174c1d1edc39c65
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:26 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:26 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:26 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:27 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
18 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15233)
Hash 96086a6487f8caf42b4cb6fec935209f
0704443299f11e5abccb36687f69f25f96bf00a0
8e354db4c67f161196feba0acb012f1bb579b0703d89c619735a520bf699f2bb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:24 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
29 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26966)
Hash e9813197d8139e5ae7b1d02edc2a3743
62ddf404f4edc60902afb9fbee033d8fd412c3a2
3f73b97bc9d5d72b4612d998507526f414e207d98975a946b0872a8355896d3f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:24 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:24 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/css/style.css
4.9 kB URL news-xagedi.cc/lands/53/css/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (4928), with no line terminators
Hash ff30963b59d24c95ee8ed06ee6f286d1
dbba4c06e6064e4bce5a928ff9905684d66a073d
d5ef0347241cb62969a80994ed4e4f87cf20f817e3036756df731aa04d238581
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/css/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: text/css
content-length: 4928
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-1340"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/js/device.js
3.3 kB URL news-xagedi.cc/lands/53/js/device.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (3289), with no line terminators
Hash 2d9887b21aa6b47c56e7f43e66560a4f
42cdfc5b3b23d32152750bf2cea4233044491768
863a13c42ef72b562bc7aa5005b8ff5693763ae8d16ce3bfc3d876e92a7fdf85
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/js/device.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 3289
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-cd9"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:27 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
41 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (37453)
Hash d4dcdd724d8559769d6383194b2d5f3e
c7f3cbac85b4148d996bd43d1125fea0bede2c92
4663bbe34397e6e1f93e648636c52759926fc88c40e188f8e086bd2cf59dd26d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:27 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:28 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:28 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:28 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:29 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/lands/37/jquery-3.2.1.min.js
86 kB URL news-xagedi.cc/lands/37/jquery-3.2.1.min.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65460)
Hash 749cf8b9115d2e483c42a09caba49a47
6071774de33379640cc5bc565bc4f5fc8a73dc8d
4c6c48643cdfc617725f69f7c826b4e87983947a709b36f1e8016ad818bb6d83
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/37/jquery-3.2.1.min.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 86537
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-15209"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:29 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:29 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
97 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (54849)
Hash 6a5f9eac81eeb5763da4ce64f2fe64a3
f07f48670767859dafff83c8325c1e0f62eac30c
9e580c27d78c9e2667f26ca68c77f70999368976b6858730a6e7f57f626da920
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:23 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:23 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
80 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63929)
Hash c144e492dfc1822deddd0dd06f6dac91
a827238def1ffcf923d3854f05aad25e8140628d
568fbacc71e3688ee5c91049744a4d8e91b255ed45e05c75b02ba34c55591f27
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:25 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:25 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/lp.js
722 B URL news-xagedi.cc/lands/36/lp.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (685), with no line terminators
Hash 8061571ac71b47c9ef862658f7e3e81c
c8109eda3ac59808f2e331aa52883ef72526833d
0437c5e6e3fb2533b3166485bb94ad975513518f741a5a7e2d74aeb0ddaa0875
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/lp.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 722
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2d2"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
96 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63929)
Hash da32252959e3a3b1ea619c2ee78d7e75
da7c198612878029698a4fa93858a7d3e664544a
8ccb3873ab5a08ad7a7b28b2f67cd4e78eb2ff1fe6d3164a40a2df4f25b7d3ab
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:26 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:26 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:30 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
63 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (59622)
Hash 95f70eda12e703ac55cc9c83a8782eb1
003772f4d9217d4c80d3e408445c32c2dbefd0e0
d7a15d9e027402ff52a4e21c0702884f5829f768b69024b965afb9bbfebc8fe3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:27 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:27 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
41 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (37453)
Hash 013dc5536282637a4162a548dd184a2d
aa70b615df0fdbc209a3a0bce44ce0ae3d1959be
aa1b48213fcfb7c0ec3f1dedf938bb05ffe75273e87752cf10eb3402abb9481c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:30 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:30 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:31 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
96 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63929)
Hash 05798f42593ea6f51f3e128d8b232cd6
81ed7e59d5262f7115533f47ef1c34bb8682d044
b086d1dc26380c6fe6146bf1b76ac7ab1476b4601b326e3ef0ee6afa0eff14ae
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:28 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:28 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:31 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
96 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (63929)
Hash 11fdcc0405ebff04b82f0a9ec2f9f4ad
87a4abfe04dd88aad38a73eecbde34ac9806a843
8a23674e6e3095d8ee367efece866b571e02a0d746745321ef8635b6b732c912
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:29 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:31 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
74 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (53483)
Hash 648215e83a2018553674fa4b2adf0090
b8d6270105d98150bb5a1c5212673cacfee2625d
93885c2c727609ae8f2c0da389868de5a709099c7774db1674547fb244c6609d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:30 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:30 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
44 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (41869)
Hash 776964c5bde005737d60c875a805128f
7f532ea2230448bbecff087a0ba393fe7027b7e1
8900397704a4f198416e58a5a3a5a961c2efe435d5a1a8b4e0842b2e2205f51a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:29 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/lands/53/js/device.js
3.3 kB URL news-xagedi.cc/lands/53/js/device.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (3289), with no line terminators
Hash 2d9887b21aa6b47c56e7f43e66560a4f
42cdfc5b3b23d32152750bf2cea4233044491768
863a13c42ef72b562bc7aa5005b8ff5693763ae8d16ce3bfc3d876e92a7fdf85
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/53/js/device.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 3289
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-cd9"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/?id=1218770951&p1=tk_adult
18 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (15233)
Hash a8abe5b750275d5e50186d3c0d886832
bb3e1fd28f2ea88d1e4bd961b8048dbbeb5ea2c9
5b9e0c3f9170b15ffc9262b36f2e83bd130f04bf9603f640fd9ad6150d7cd88d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:31 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUzLCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:31 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjYzLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:32 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjUwLCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:32 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
news-xagedi.cc/?id=1218770951&p1=tk_adult
44 kB URL news-xagedi.cc/?id=1218770951&p1=tk_adult
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (42542)
Hash b60bfd80949518d7000ac923c7635ae4
c1d9611c3ec860c4f110777c4c7775d890bdc0b3
8f4ff18852845b6b10c1096c514a4effd89cded577c0f6210b961635a563ed22
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?id=1218770951&p1=tk_adult HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjQ4LCJwMSI6InRrX2FkdWx0In0=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:29 GMT
content-type: text/html; charset=UTF-8
set-cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM3LCJwMSI6InRrX2FkdWx0In0=; Path=/; Expires=Wed, 06 Dec 2023 15:39:29 GMT; HttpOnly; Secure; SameSite=None
vary: Origin
X-Firefox-Spdy: h2
news-xagedi.cc/revopush.js
18 kB URL news-xagedi.cc/revopush.js
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (18112), with no line terminators
Hash 773d5dd04e1cf97341ac6e4cf2b23707
a56ebf246900b619f34bdfa36ea0f4a36d800730
a35876c74a7686acc90ac9e198313f89062cf1e0e22cac557b623c92f69f19d1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /revopush.js HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 18177
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-4701"
accept-ranges: bytes
X-Firefox-Spdy: h2
news-xagedi.cc/lands/36/img/style.css
12 kB URL news-xagedi.cc/lands/36/img/style.css
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (11701), with no line terminators
Hash ceafd56cc56028ed6235ce4c4db73d43
c0d374219bfbd71aebf2caa38494d48838d4cce0
8878692d5f9a94657f598a59e11fde8703ff41c6ee99d378acc5b22bec49cbd7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lands/36/img/style.css HTTP/1.1
Host: news-xagedi.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/?id=1218770951&p1=tk_adult
Cookie: clickdata=eyJzdWJhY2MiOjEyMTg3NzA5NTEsImxhbmQiOjM2LCJwMSI6InRrX2FkdWx0In0=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 05 Dec 2023 15:39:33 GMT
content-type: text/css
content-length: 11701
last-modified: Fri, 01 Dec 2023 12:50:34 GMT
etag: "6569d69a-2db5"
accept-ranges: bytes
X-Firefox-Spdy: h2
errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
1.9 kB URL errors.house/js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (512)
Hash cecbd15c62682460fc296825e598657c
7ea3ec61b65e0a88058e3943327a61d055ef4284
58664ef4f18d3763e07cf7c74738b3a1089fc115331ce34bfe300be3e125b510
GET /js-sdk-loader/c682bf15f58a4ecea9ff491233690e22.min.js HTTP/1.1
Host: errors.house
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://news-xagedi.cc
DNT: 1
Connection: keep-alive
Referer: https://news-xagedi.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.1
Date: Tue, 05 Dec 2023 15:39:33 GMT
Content-Type: text/javascript
Content-Length: 1855
Connection: close
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=3600, s-maxage=60, stale-while-revalidate=315360000, stale-if-error=315360000
Surrogate-Key: project/7 sdk/7.15.0 sdk-loader
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000
192.133.142.177
188.114.97.1
144.76.106.61