| xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webpURL:https:/xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webp |  188.114.96.1 | 302 Found | 0 B |
URL User Request GET xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webpURL:https:/xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webp IP188.114.96.1:443
CertificateIssuerGoogle Trust Services Subjectxgifer.com Fingerprint1D:C7:27:BC:7E:08:33:F2:84:69:A4:9A:2E:CB:6D:74:34:FA:F2:E2 ValidityWed, 02 Apr 2025 17:20:24 GMT - Tue, 01 Jul 2025 18:18:06 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webpURL:https:/xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webp HTTP/1.1
Host: xgifer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 14 Apr 2025 08:49:22 GMT
content-type: text/html
content-length: 143
location: https://cdn.sexgify.com/static/img/sexgify.png
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2BanoUsVRCV%2FE4OjUMJE%2FNbLvAQbo1fnf7FoU2eWtkotFIp%2BVT6CXMccoOhJZqy7zwVxiHxpjVoP8QieNYqQJoM9UdTEVWOpJcGz7UPUzd39HyZDBPHd4T5v7PMk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 9301f3134f238645-AMS
X-Firefox-Spdy: h2
|
| cdn.sexgify.com/static/img/sexgify.png | 104.26.12.42 | 302 Found | 0 B |
URL User Request GET cdn.sexgify.com/static/img/sexgify.png IP104.26.12.42:443
CertificateIssuerGoogle Trust Services Subjectc953cefa.sni.cloudflaressl.com FingerprintA1:A5:57:EC:74:1A:A1:B0:69:07:79:22:7B:E3:F5:09:53:E2:8F:CA ValidityFri, 14 Mar 2025 22:47:06 GMT - Thu, 12 Jun 2025 23:47:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/img/sexgify.png HTTP/1.1
Host: cdn.sexgify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 14 Apr 2025 08:49:22 GMT
content-type: text/html
content-length: 143
location: http://192.168.1.13/static/img/sexgify.png
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4fYycpIgzuiz5W469QYYYnpqac8umhQwLV2LGkxA3W5o8o4SAN0b8yZIAVsiGUXIBQq0sXFuSzAvMno4AZHiIJAhFlCQI9w36P0zObF3O8hsUkHb6QFOHuw3KQ5%2FIgjEYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 9301f3146b2256ba-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=505&min_rtt=479&rtt_var=118&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3242&recv_bytes=1141&delivery_rate=7400340&cwnd=253&unsent_bytes=0&cid=ddc9fd7e2a68a0bd&ts=75&x=0"
X-Firefox-Spdy: h2
|
| 192.168.1.13/static/img/sexgify.png | 0.0.0.0 | | 0 B |
URL User Request GET 192.168.1.13/static/img/sexgify.png IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /static/img/sexgify.png HTTP/1.1
Host: 192.168.1.13
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
|
0.0.0.0![Share reporttesting](/search?q=http.url.addr:"xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webpURL:https:/xgifer.com/content/2023/01/mama-loves-her-alma-mater-and-she-makes-sure-that-when-team-recruits-visit-they-are-treated-very-well_001.webp"){kind=link}