Report - entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX

Report Overview

Submitted URL
entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
IP
104.18.38.160
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 20:22:33
Access
public
Website Title
Registrer Deg Nå
Final URL
entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
48

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-26	485 B	146 kB	104.18.10.207
entertain-zer.com	unknown	unknown	No data	No data	17 kB	667 kB	172.64.149.96
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-25	1.0 kB	85 kB	104.17.24.14
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	5.3 kB	77 kB	142.250.74.106
use.fontawesome.com	942	2012-10-18	2017-01-30	2024-04-25	472 B	42 kB	172.67.142.245
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	563 B	20 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed
2024-04-26	medium	entertain-zer.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.e076a388.js	448 kB	2024-04-25	2024-05-02
Pretty URL entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.e076a388.js IP 172.64.149.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-25 23:15:47 Last Seen2024-05-02 21:52:53 Times Seen6 Hash a4c1f966c99825fa216143c693587a90 432069ec1bf01690496a30ab58eb3c99121816f7 338cbcfa532a150023090c323c359b16661749b2d8fed84cf702917ca75d9095 Loading...

	entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX	2.3 kB	2023-03-07	2024-05-02
Pretty URL entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX IP 172.64.149.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:31:47 Last Seen2024-05-02 21:52:53 Times Seen58 Hash 39659808a79e6d178ba125786572f920 9fde2436f2d06d92dd489e550a7d62a87de33252 0d3c6521f1debc17446c2bb273300de5826083366abc0823c0a7060b941a5212 Loading...

	entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX	3.2 kB	2024-04-26	2024-04-26
Pretty URL entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX IP 172.64.149.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 22:22:39 Last Seen2024-04-26 22:22:40 Times Seen1 Hash 54fe17f4a6200d7eef5708a882ff9c11 094511798ccbd0e7b8b3f33542a20824b82c7742 cb18655825aa37860411af61d4e2801a4954d90e3e6bab213a15cfedc6256516 Loading...

	entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.928257bc.js	7.2 kB	2023-09-17	2024-04-28
Pretty URL entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.928257bc.js IP 172.64.149.96 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-17 00:52:31 Last Seen2024-04-28 05:53:57 Times Seen17 Hash 28b6594ba090a242c06471073a37e9d7 37557e9c9e86bea5a1200e5372ed45743170107e df18245fa12f3d30de06a42c95bc1c03d1572e711964152934203040a62093b8 Loading...

		Size	First Seen	Last Seen
	#1 Eval - a1fb4aaee1dcbfd24e6ec0fd67ab9645	23 kB	2023-03-07	2024-05-07
Pretty Observations First Seen2023-03-07 12:55:31 Last Seen2024-05-07 15:49:42 Times Seen928 Hash a1fb4aaee1dcbfd24e6ec0fd67ab9645 77558a30ff578aeb671e2bdb574df166751aa487 c84e4b2e9e47490ff3fa125e0aa933f617633649358da8861b4b430ab6ae9a70 Loading...

	#2 Eval - 4f5885262e8544079071bf4876566be7	10 kB	2023-03-07	2024-05-02
Pretty Observations First Seen2023-03-07 14:01:42 Last Seen2024-05-02 21:52:53 Times Seen66 Hash 4f5885262e8544079071bf4876566be7 fb478d496b42b2e1294ce6a6600c6478b998a6e8 23669666145b59237c11e83d15e64cf78cbc32dee8f82fb46f0f3f4e3adb8e10 Loading...

	#3 Eval - dd3e764ebf5da43ce326820343a363f1	31 kB	2024-04-25	2024-05-02
Pretty Observations First Seen2024-04-25 23:15:47 Last Seen2024-05-02 21:52:53 Times Seen6 Hash dd3e764ebf5da43ce326820343a363f1 867750c581e5dcb1f60a9d6dcc180ce2f938d0dd 760a8777e63133a279976939aaf785eeaba163069ab20b4811f26ed61112907c Loading...

	#4 Eval - fa93e8894edb6245ab03883633b12b6e	3.9 kB	2023-03-07	2024-05-06
Pretty Observations First Seen2023-03-07 12:01:36 Last Seen2024-05-06 19:02:50 Times Seen659 Hash fa93e8894edb6245ab03883633b12b6e e3ba4c7d1a8876090756fd31715b4f6af6fd649e 3fc8d8f8c09ee97d9c8cd4a6178ad0bd921a9cbe55c14513e0c06738c9dc8d15 Loading...

	#5 Eval - b90224b3995754521f76fe6a4e0fc66f	22 kB	2023-10-24	2024-05-02
Pretty Observations First Seen2023-10-24 19:03:11 Last Seen2024-05-02 21:52:53 Times Seen19 Hash b90224b3995754521f76fe6a4e0fc66f 3f270614f20e687b9311d639799e673c7c537ac4 4c8a1baaab3a4eb377259fa298363caf5a6ac231b50085fa1146ed4fe14ef338 Loading...

	#6 Eval - f6eccd44d13002452f69c0d9d198d3ab	10 kB	2023-03-07	2024-05-02
Pretty Observations First Seen2023-03-07 12:12:23 Last Seen2024-05-02 21:52:53 Times Seen208 Hash f6eccd44d13002452f69c0d9d198d3ab 4aa54a0d27c5eda66d9c78f6085f8015d09a1a2f d8702cde5c6e252ac0fdb01b1766e0695e79812b97f2f56c8f6a4271662a998e Loading...

	#7 Eval - b49273b51dae7361e02dca0763144e54	4.9 kB	2023-03-07	2024-05-03
Pretty Observations First Seen2023-03-07 01:10:18 Last Seen2024-05-03 14:55:42 Times Seen524 Hash b49273b51dae7361e02dca0763144e54 4a1f2abaf3bc1b4aec31d199b6b236112106ad32 f0718dd44766296547e2153766bdc56d31e8aac51c7ed78b6499d59aa0ffac2f Loading...

HTTP Transactions (41)

URL IP Response Size

entertain-zer.com/img/logos/custom/min/vibestream-dark.png

172.64.149.96

200 OK

57 kB

URL GET HTTP/2
entertain-zer.com/img/logos/custom/min/vibestream-dark.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 531 x 621, 8-bit colormap, non-interlaced
Size
57 kB (57392 bytes)
Hash
c2c4d604d12464fda3c659988f723d43
c252b5fb2cbf2f44734c842c1cc06817f6ebd227
64eb47eb085f9d74ed4a350fb35119f707ac3ab3534986c709246d6f187e2092

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/logos/custom/min/vibestream-dark.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 57392
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-e030"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487a9bdfb518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/ar.png

172.64.149.96

200 OK

318 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/ar.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
318 B (318 bytes)
Hash
b11bcada2c51b6e5e299245db87bec18
56dc40f41854e76cbdf12683721763b674fbef14
59fae4a2c45ab3f79b6e012c3bc435bad3d83de43cd8b5cb9ec792bbdc71e034

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/ar.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 318
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-13e"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487a9be5b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/cs.png

172.64.149.96

200 OK

355 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/cs.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
355 B (355 bytes)
Hash
1dce874aa08b4056fcbea8bed2bc0a5f
71d96821168f0f67bfe9ca168db09373d99e57bc
4df39f91b4133cc13f1248a5583917f8841afa615d9dd605aa3b15ccdff23245

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/cs.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 355
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-163"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487a9be9b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/no.png

172.64.149.96

200 OK

334 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/no.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
334 B (334 bytes)
Hash
c48ab8c65139f9647fee8710c4b3b66c
df412e417270d78833a1efacdc61529abb7ad03c
79ca4cda3faf0379f6fb2df3f82b896393291eede7c9c7e09b5199572de06d5c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/no.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 334
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-14e"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5947
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487a9be1b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/da.png

172.64.149.96

200 OK

298 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/da.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
298 B (298 bytes)
Hash
c34a7583b5e01b331ee79386d8cebf95
fd0d1f826a6619d278fe962292b63ae91bf61170
5c80542e1988370b38fae869c8adc6edbb449b91e87d0544b4c5074e191d6916

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/da.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 298
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-12a"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc0bb518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/de.png

172.64.149.96

200 OK

464 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/de.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
464 B (464 bytes)
Hash
3babff7961e39e8cd594b9678f7ce728
ea40638d6af4722c8b0e4314e95d64ae059a3ae0
7319b0ebaea7239bf208e9bbf05c5756659be88767ad0424eca017aacf7940eb

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/de.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 464
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-1d0"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc0cb518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/en.png

172.64.149.96

200 OK

481 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/en.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
481 B (481 bytes)
Hash
2b936acc8c146a32951e38be063165d3
c379684310743ece93501b7fcdf396359f577cdb
1b959a0f3a63cc646af532327035df4c4ebc6b91ac86fc5384fe60283e26132a

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/en.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 481
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-1e1"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc10b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/es.png

172.64.149.96

200 OK

365 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/es.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
365 B (365 bytes)
Hash
9790f666586897cf09b4e2ff5e11f674
bbeedd0fd9332b6534a259e71a6b871b7dea16e0
52f9f4b06302262227ccfcbd5bc1f1a8be31b554167a48e8b90bb8b569743bfc

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/es.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 365
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-16d"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc12b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/fr.png

172.64.149.96

200 OK

369 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/fr.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
369 B (369 bytes)
Hash
83d2595ea3031de73b98f2c57ad88949
32bd0c5b029e8b75bef13eeb532917d9a56f61c9
0ec28fba482645dc252afe2be19282beebab6162300c9291c16a31138694cca0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/fr.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 369
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-171"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc14b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/hu.png

172.64.149.96

200 OK

303 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/hu.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
303 B (303 bytes)
Hash
70006a59a0a303c96b772f500a287f70
d7afc45fa97725ebaac57726d5d45f602ac7bfef
940b53ff3a42a200817ce9c4d1c8c4d1563853486b628d199b2d4b1f12fd255f

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/hu.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 303
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-12f"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc15b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/it.png

172.64.149.96

200 OK

316 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/it.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
316 B (316 bytes)
Hash
acab890d6d5eb20e38f22aba425c3d34
ec0be0f24e663759356e817bd73a7e7569663bb6
f6f0eb8b370c334ab172fa69fb55ec7b72c6bd3d137c0bbd750d0fc788f433b0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/it.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 316
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-13c"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc16b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/nl.png

172.64.149.96

200 OK

328 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/nl.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
328 B (328 bytes)
Hash
c055c14b8f44b006b32261e71be3324f
34ccf4e9f9d0f18b86fabafe477d5cc76d6ca725
ad2583d30cae6dfdba4e48dedbdb623305fb0e5a310cf84deedb75cb8e7214a2

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/nl.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 328
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-148"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc1ab518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/ja.png

172.64.149.96

200 OK

266 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/ja.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
266 B (266 bytes)
Hash
f8d5d965c5ac8014d2e0293d67f893a4
476ddbaaa32dc435e1c1aa04104c88c9771c5fbe
f8876ab39504d02b6fb905eef77c4ad8d181a563105609bed0b57fc279352ef0

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/ja.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 266
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-10a"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 219
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc18b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/pt.png

172.64.149.96

200 OK

427 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/pt.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
427 B (427 bytes)
Hash
86b64a6009b9fda3f62281760c1dd4f0
c536dff21701618654328b21773e69a7508c4c85
28d682eed12d0786c32613e2c4c54c144975c7160f2584380d1839d9dc04f824

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/pt.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 427
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-1ab"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5947
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487acc30b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/sv.png

172.64.149.96

200 OK

342 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/sv.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
342 B (342 bytes)
Hash
0f13dc11fccbdd9a587353905c836b16
dbf9faf4f7d227c11a5ba77fd3ae09af52763b8c
ebd9138caa9f44e33b54636bdf819ae6ece1f72a1405e58f37724273f187adc4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/sv.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 342
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-156"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5947
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487acc35b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/pl.png

172.64.149.96

200 OK

256 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/pl.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
256 B (256 bytes)
Hash
0bf391411c6f06bef68cc4c369b9eba0
7773847a6c110241864cdb7760fc80c76011978b
51f29fd11cad81a8cbe246c0ee8d4f97fd8a04859fbf6a4517b7cce931e8ba34

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/pl.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 256
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-100"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5947
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487abc25b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/flags/min/zh.png

172.64.149.96

200 OK

290 B

URL GET HTTP/2
entertain-zer.com/img/flags/min/zh.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 16 x 11, 8-bit colormap, non-interlaced
Size
290 B (290 bytes)
Hash
329cca45f3a4c46ec249638ca4f8d6e0
98b23617ef88d3a4cd632839fe4180b0ee05a697
9c70b1a563b14ee447b6fc9c00532a73a1e09c500660ce8063d6b3fbce48ae47

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/flags/min/zh.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 290
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-122"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5947
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487aec4cb518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/img/logos/entertainment/min/entertainzer.png

172.64.149.96

200 OK

1.3 kB

URL GET HTTP/2
entertain-zer.com/img/logos/entertainment/min/entertainzer.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 250 x 60, 8-bit colormap, non-interlaced
Size
1.3 kB (1333 bytes)
Hash
e6219598a2c2991debd2027b3ce0230a
cdc8fcf27a700b79af816e783f4a1fddc40d9b91
937cb83e99191feb41e67d7273db2f3a406f249e2b23509978a3969afc7d3f93

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/logos/entertainment/min/entertainzer.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: image/png
content-length: 1333
last-modified: Thu, 25 Apr 2024 19:26:50 GMT
etag: "662aae7a-535"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5947
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487afc5eb518-OSL
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css

104.17.24.14

200 OK

5.6 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (30837)
Size
5.6 kB (5631 bytes)
Hash
269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 956412
expires: Wed, 16 Apr 2025 20:22:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H3I2ozsBopgbedYX8MsJix5mSlCpUaYvCRZ2os%2F1zud41fPnIK4krQeppAbeuJlQt7KoFVe9fYV8lw9egzsR0Tz73sR1yyS%2FFOcWZuiTxR3BMm66P05hlc%2F79t%2BKgXQtaDr7%2F3Hk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9487b29b956c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Anton

142.250.74.106

200 OK

15 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Anton
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
15 kB (15401 bytes)
Hash
7496cb673a8a06e0e6aa0cf6dc173a1c
292e91b672fd959c06b3f0c62dc03ed71bd8f285
c0b66f92c88d4030a1abc52663acc8d3a7c59a1c0aa0a2ed5d0fa56518f3b3a0

HTTP Headers

GET /css?family=Anton HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0

104.17.24.14

200 OK

77 kB

URL GET HTTP/3
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

HTTP Headers

GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertain-zer.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 26 Apr 2024 20:22:08 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 5022144
expires: Wed, 16 Apr 2025 20:22:08 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7IQOYf29LSquLgotJDSXKqKBb9tJKIzultMJCYNXkPIr2QjbEFpEofFp4OlUAzeIOAfM%2FkmJgtyy8%2BDRbjMFKLiWhArCdT%2FsuwWM4JR8Y32fC6wj2H5N5p91wciKb8ByHecNUdTa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a9487feadb0b65-OSL
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:100,200,300,400,500,600,700,800,900

142.250.74.106

200 OK

7.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:100,200,300,400,500,600,700,800,900
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
7.4 kB (7393 bytes)
Hash
df3f11d7c103119c886db11a78c93f2e
2f230d5cf9e37ec53bec780b88b987e840cedd05
00649a2bf148e578dbbaf48c48c6b8003f1676ec3cc6506b14955dfb122831c6

HTTP Headers

GET /css?family=Roboto:100,200,300,400,500,600,700,800,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Abel

142.250.74.106

200 OK

20 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Abel
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
20 kB (19561 bytes)
Hash
4b48e68fae153fcbb404f275730c453f
740de05a390724f57aa2a7a93d4734d214f535b1
a754fe0701a24481ef8a95d27df2c74be3196b22b30d4570992747332106550b

HTTP Headers

GET /css?family=Abel HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans

142.250.74.106

200 OK

5.8 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (5866), with no line terminators
Size
5.8 kB (5776 bytes)
Hash
9a9a7fec0410c78b8c7601306b9fa182
7d736470060c2cbab18d2a59c043202c2d3dbaac
6a2126bd16491c04d2f664d8acb3a7ad24ec144e02bffd62db7254bee91567f0

HTTP Headers

GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.928257bc.js

172.64.149.96

200 OK

7.2 kB

URL GET HTTP/2
entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.928257bc.js
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
JavaScript source, ASCII text, with very long lines (7664), with no line terminators
Size
7.2 kB (7206 bytes)
Hash
8b061a79d70f10fc75bb3d2722fd2598
d0cd800e107300e125be154241033eebef26056c
be1e78c7c19afc73eee58a9c6e18f22f4e2b96b98189ad2c9a5729a7ee3a56f4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /theme/Master/SubscriptionPages/js/subscriptions/validation/min/regValidation.min.928257bc.js HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 25 Apr 2024 19:26:48 GMT
etag: W/"662aae78-1c26"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5948
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487afc67b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

entertain-zer.com/theme/Master/SubscriptionPages/img/sprites/connsmythe-sprites.png

172.64.149.96

200 OK

15 kB

URL GET HTTP/2
entertain-zer.com/theme/Master/SubscriptionPages/img/sprites/connsmythe-sprites.png
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
PNG image data, 300 x 213, 8-bit/color RGBA, non-interlaced
Size
15 kB (14990 bytes)
Hash
8f6f69116ce39f0b56b9c9f7aa080d9b
2db6c7f5747315867afe28e0204fb59fd849bcef
5ca26ee807f7e5c6cb1a3e716efbe1ae68acc0a389fb78f2e525bb589db8726c

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /theme/Master/SubscriptionPages/img/sprites/connsmythe-sprites.png HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/panther-basic.a34b2de8.css
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:08 GMT
content-type: image/png
content-length: 14990
last-modified: Thu, 25 Apr 2024 19:26:48 GMT
etag: "662aae78-3a8e"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5948
expires: Sat, 27 Apr 2024 00:22:08 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487f8a29b518-OSL
X-Firefox-Spdy: h2

entertain-zer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/basic-main.da4ee7dc.css

172.64.149.96

200 OK

28 kB

URL GET HTTP/2
entertain-zer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/basic-main.da4ee7dc.css
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
ASCII text, with very long lines (27599), with no line terminators
Size
28 kB (27599 bytes)
Hash
8e3145c4ea31e592fa2b1996124aa17f
f6d28230f734ea264bc7040d165d91f58e41a161
0ab305672c2bc097237ec754a26c5727c57ef9bb85b2cb5fb81fc29456cb2c8b

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /theme/Master/SubscriptionPages/css/subscriptions/theme/basic-main.da4ee7dc.css HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: text/css
last-modified: Thu, 25 Apr 2024 19:26:48 GMT
vary: Accept-Encoding
etag: W/"662aae78-6bcf"
x-frame-options: SAMEORIGIN
content-encoding: gzip
cf-cache-status: HIT
age: 5955
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487a7bc8b518-OSL
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Oswald:200,300,400

142.250.74.106

200 OK

5.5 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Oswald:200,300,400
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (5607), with no line terminators
Size
5.5 kB (5487 bytes)
Hash
238a5bf9df5444ec093cc4bf932663bc
9369bae15d8fcb9214765462073684c143152862
0e553f8fdda46bf73817be9b5978c6ddaff3946ff31ab5c0d4f178410b801ea1

HTTP Headers

GET /css?family=Oswald:200,300,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.0.13/css/all.css

172.67.142.245

200 OK

41 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.0.13/css/all.css
IP
172.67.142.245:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (40884)
Size
41 kB (41065 bytes)
Hash
d61bfe9b56c13ecff5313ee3abb45e8b
ecb7caed8f169c4ae226d85b82cfec19fc50d4ac
43730866612149a27f49159d7c4f19185c8694bb91bf41abc884a6fe1346e96e

HTTP Headers

GET /releases/v5.0.13/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entertain-zer.com
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"d61bfe9b56c13ecff5313ee3abb45e8b"
last-modified: Fri, 22 Sep 2023 01:44:09 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 1885105
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYWPuw7s6H7MHYKQdw0gSyuXWXLmmq741NquymJCVxS4AN3Df2u12i3nH%2BIceKiEUEb1JJ%2BwwIhSTA3Zzrk0QmZyOdk31RYh873k9uF%2FHCE71TMnV1K7Pibo7FQW09AuXY%2Fg2rTA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a9487b29341c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.227

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Size
19 kB (18668 bytes)
Hash
8655d20bbcc8cdbfab17b6be6cf55df3
90edbfa9a7dabb185487b4774076f82eb6412270
e7af9d60d875eb1c1b1037bbbfdec41fcb096d0ebcf98a48717ad8b07906ced6

HTTP Headers

GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://entertain-zer.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:01:38 GMT
expires: Sat, 26 Apr 2025 06:01:38 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:00:39 GMT
content-type: font/woff2
age: 51630
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Noto+Sans

142.250.74.106

200 OK

3.0 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Noto+Sans
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (3088), with no line terminators
Size
3.0 kB (3016 bytes)
Hash
f75c277ea3504309940d1141ebcaa35c
642b80f26b8eb2eb26342a26aceeb7e3b2a6d652
588354aac33e2201e95502c089f18b1c9438c4f5d650f926996ef36955235959

HTTP Headers

GET /css?family=Noto+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Libre+Baskerville:400,400i&display=swap

142.250.74.106

200 OK

1.7 kB

URL GET HTTP/3
fonts.googleapis.com/css?family=Libre+Baskerville:400,400i&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (1733), with no line terminators
Size
1.7 kB (1697 bytes)
Hash
ec70ae3a83e9faf6d4aa2b80edc914ea
250ae77abe759e7e24ed96ccb7e6e4d2018c6356
1a1aacf1019c07a10a596506374310784362d91b7cb6a0686a212c2328a116c1

HTTP Headers

GET /css?family=Libre+Baskerville:400,400i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:08 GMT
date: Fri, 26 Apr 2024 20:22:08 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

entertain-zer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/panther-basic.a34b2de8.css

172.64.149.96

200 OK

50 kB

URL GET HTTP/2
entertain-zer.com/theme/Master/SubscriptionPages/css/subscriptions/theme/panther-basic.a34b2de8.css
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type
ASCII text, with very long lines (49959), with no line terminators
Size
50 kB (49959 bytes)
Hash
1ac20a1ccae81863fcf133c82673aa4d
f50f58e6baa24fa328280c34634d62f751d219ae
9a472c942af2c279568fb2ea86d58f0fb58d64f7f8354799653e21d20b246202

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /theme/Master/SubscriptionPages/css/subscriptions/theme/panther-basic.a34b2de8.css HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: text/css
last-modified: Thu, 25 Apr 2024 19:26:48 GMT
vary: Accept-Encoding
etag: W/"662aae78-c327"
x-frame-options: SAMEORIGIN
content-encoding: gzip
cf-cache-status: HIT
age: 3266
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487a7bcbb518-OSL
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Candal

142.250.74.106

200 OK

386 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Candal
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (394), with no line terminators
Size
386 B (386 bytes)
Hash
c38a44eb976231c785e8c4fbddcd8d7c
081b12a59220a19e818ba8cd6e5553fe49efcc77
cd187243a42e186ff34a24e296b2170d0936a0bb6a163e6d0a2ac4cb4cc89a40

HTTP Headers

GET /css?family=Candal HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Montserrat

142.250.74.106

200 OK

1.8 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Montserrat
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (1849), with no line terminators
Size
1.8 kB (1809 bytes)
Hash
f9bede8e0040dae7b773802d556ed574
3b54311abf21a8a22a7c39012bd4365561cd958e
a431b718972726753c9f8bfc03334df3414b61b644f692c51673bfbe90164e4a

HTTP Headers

GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX

172.64.149.96

200 OK

42 kB

URL User Request GET HTTP/2
entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type

Size
42 kB (42491 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: text/html
cf-ray: 87a948761e70b518-OSL
cf-cache-status: DYNAMIC
cache-control: max-age=604800
expires: Mon, 26 Jul 1997 05:00:00 GMT
strict-transport-security: max-age=0; includeSubDomains
vary: Accept-Encoding
cache-tag: 1973,entertain-zer.com,/registration,NO,panther-direct-3FX,nor,,
set-cookie: CakeCookie[lang]=nor; Path=/; Secure; Max-Age=9999999
CakeCookie[registrationaff_undefined_undefined_fire_stats]=true; Path=/; Secure; Max-Age=3600
x-cache-url: https://entertain-zer.com/registration?lang=nor&theme=panther-direct-3FX&cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxub3IsLA==
x-frame-options: SAMEORIGIN
server: cloudflare
content-encoding: gzip
X-Firefox-Spdy: h2

entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.e076a388.js

172.64.149.96

200 OK

448 kB

URL GET HTTP/2
entertain-zer.com/theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.e076a388.js
IP
172.64.149.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerLet's Encrypt
Subjectentertain-zer.com
FingerprintAB:09:51:1A:2C:F1:62:D7:80:46:F0:8C:FD:C6:9C:01:EA:43:DB:9B
ValidityThu, 04 Apr 2024 20:23:48 GMT - Wed, 03 Jul 2024 20:23:47 GMT

File type

Size
448 kB (448539 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /theme/Master/SubscriptionPages/js/subscriptions/min/scripts.min.e076a388.js HTTP/1.1
Host: entertain-zer.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Cookie: CakeCookie[lang]=nor; CakeCookie[registrationaff_undefined_undefined_fire_stats]=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: application/javascript; charset=utf-8
last-modified: Thu, 25 Apr 2024 19:26:48 GMT
etag: W/"662aae78-6d81b"
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 5948
expires: Sat, 27 Apr 2024 00:22:07 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
strict-transport-security: max-age=0; includeSubDomains
server: cloudflare
cf-ray: 87a9487aec50b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Raleway:400,400i&display=swap

142.250.74.106

200 OK

3.7 kB

URL GET HTTP/3
fonts.googleapis.com/css?family=Raleway:400,400i&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (3839), with no line terminators
Size
3.7 kB (3749 bytes)
Hash
109828e9260e20cb44a2a6c72866d948
f9d538c4a6332f5fb3d50a6e6f3fc306a3b439e3
124c132f836fe540e78489a40c9b7949c212ec8cb9092fab0ada58ad8e2e9010

HTTP Headers

GET /css?family=Raleway:400,400i&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:08 GMT
date: Fri, 26 Apr 2024 20:22:08 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

fonts.googleapis.com/css?family=Lato

142.250.74.106

200 OK

717 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Lato
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (733), with no line terminators
Size
717 B (717 bytes)
Hash
c9c62a38769c1a58126a2f8fa7f66d66
08590fc53991e4690ec26e433dcd606675acabad
2030b72bdbbd77f2a506d3860622158b427d727086ca5a4cf774830152fe64aa

HTTP Headers

GET /css?family=Lato HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css

104.18.10.207

200 OK

145 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65325)
Size
145 kB (144877 bytes)
Hash
450fc463b8b1a349df717056fbb3e078
895125a4522a3b10ee7ada06ee6503587cbf95c5
2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d

HTTP Headers

GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://entertain-zer.com
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 20:22:07 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:51:41
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: c3c61f3db9627658b64de025b42abede
cdn-cache: HIT
cf-cache-status: HIT
age: 1895279
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a9487b29047129-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Yanone+Kaffeesatz

142.250.74.106

200 OK

4.7 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Yanone+Kaffeesatz
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://entertain-zer.com/registration?cacheHash=MTk3MyxlbnRlcnRhaW4temVyLmNvbSwvcmVnaXN0cmF0aW9uLE5PLHBhbnRoZXItZGlyZWN0LTNGWCxlbmcsLHR1cm5odWIubmV0&lang=nor&theme=panther-direct-3FX
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (4770), with no line terminators
Size
4.7 kB (4714 bytes)
Hash
3f90b9d0443067b924f3f5ad2806eef0
2771493c7a95e1d1f4cf661b1d5b44b5ea56c4d2
48a2f822c8bcd665337bb9d6f83c261bd38122aeb93eb59d194e2f9311b064b4

HTTP Headers

GET /css?family=Yanone+Kaffeesatz HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://entertain-zer.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 20:22:07 GMT
date: Fri, 26 Apr 2024 20:22:07 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (41)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2