| src_domain/sb/ssp/interstitial/bottom_banner/1/js/script.js | 0.0.0.0 | | 0 B |
URL GET src_domain/sb/ssp/interstitial/bottom_banner/1/js/script.js IP 0.0.0.0:0
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /sb/ssp/interstitial/bottom_banner/1/js/script.js HTTP/1.1
Host: src_domain
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.show-sb.com/favicon.ico | 172.67.170.115 | 404 Not Found | 153 B |
URL GET cdn.show-sb.com/favicon.ico IP 172.67.170.115:443
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html CertificateIssuerGoogle Trust Services Subjectshow-sb.com Fingerprint1D:98:CF:D5:11:E1:60:97:76:85:27:F9:55:AF:5E:13:60:3F:67:B7 ValidityMon, 14 Apr 2025 03:51:48 GMT - Sun, 13 Jul 2025 04:50:09 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash841102042dfedb8a9dcc0e6a9966307f 313ea8da3498deebf7f443093638df7501ce60c6 6ad407809dc8e6d079dfbd21823508dffb897b97a27eb8ae43acbea1b7c8df0d
GET /favicon.ico HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Mon, 28 Apr 2025 06:30:14 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G1l%2BBn8OYHgFCE03jMqQ81E6RbLC%2FDntFyuvanIcSTL3IFAyHhs1yuylH%2Fqc40sGajEH%2B%2B9JBMY31Cb3gBOZKwInTFbYJGuyWTCQQGNd4bhXTXxzWt9ioahGMH9ddTL7d4Y%3D"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9374827ffcd9568a-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2626&min_rtt=554&rtt_var=1210&sent=116&recv=160&lost=0&retrans=0&sent_bytes=11484&recv_bytes=9746&delivery_rate=6837&cwnd=12000&unsent_bytes=0&cid=07d0ebf94ce585d5&ts=1076&x=16"
|
|
| cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html | 172.67.170.115 | 200 OK | 1.5 kB |
URL User Request GET cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html IP 172.67.170.115:443
CertificateIssuerGoogle Trust Services Subjectshow-sb.com Fingerprint1D:98:CF:D5:11:E1:60:97:76:85:27:F9:55:AF:5E:13:60:3F:67:B7 ValidityMon, 14 Apr 2025 03:51:48 GMT - Sun, 13 Jul 2025 04:50:09 GMT
File typeHTML document, ASCII text Hash972f68410d9349904f897739b33e12cc e41130dbad60e81ad2665bb7407a50888aae8150 90c062931018d386488b555fd261405457f9744db31512ff5780d49769d7b0d0
GET /sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 28 Apr 2025 06:30:13 GMT
content-type: text/html
server: cloudflare
last-modified: Fri, 11 Apr 2025 14:28:57 GMT
vary: accept-encoding
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 937482793ce956c7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html#%23ICON%23%23 | 172.67.170.115 | 200 OK | 1.5 kB |
URL GET cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html#%23ICON%23%23 IP 172.67.170.115:443
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html CertificateIssuerGoogle Trust Services Subjectshow-sb.com Fingerprint1D:98:CF:D5:11:E1:60:97:76:85:27:F9:55:AF:5E:13:60:3F:67:B7 ValidityMon, 14 Apr 2025 03:51:48 GMT - Sun, 13 Jul 2025 04:50:09 GMT
File typeHTML document, ASCII text Hash972f68410d9349904f897739b33e12cc e41130dbad60e81ad2665bb7407a50888aae8150 90c062931018d386488b555fd261405457f9744db31512ff5780d49769d7b0d0
GET /sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 28 Apr 2025 06:30:13 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zUxgow3LgmuUdorXdkVW1uG4m8rHyUULdEJW4tw1ejG9SRLdZxX3vDSliy9se6bl5bCBLzh1F8a3TfTSRFsx3DLvJ4%2FHBoA6VyAuQQgfA5JEneUP7riDd7onrikIl6GHG2Y%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 11 Apr 2025 14:28:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: 9374827decc5568a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2687&min_rtt=554&rtt_var=908&sent=112&recv=157&lost=0&retrans=0&sent_bytes=9144&recv_bytes=9331&delivery_rate=2214&cwnd=12000&unsent_bytes=0&cid=07d0ebf94ce585d5&ts=387&x=16"
|
|
| src_domain/sb/ssp/interstitial/bottom_banner/1/css/style.css | 0.0.0.0 | | 0 B |
URL GET src_domain/sb/ssp/interstitial/bottom_banner/1/css/style.css IP 0.0.0.0:0
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /sb/ssp/interstitial/bottom_banner/1/css/style.css HTTP/1.1
Host: src_domain
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html#%23ICON2%23%23 | 172.67.170.115 | 200 OK | 1.5 kB |
URL GET cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html#%23ICON2%23%23 IP 172.67.170.115:443
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html CertificateIssuerGoogle Trust Services Subjectshow-sb.com Fingerprint1D:98:CF:D5:11:E1:60:97:76:85:27:F9:55:AF:5E:13:60:3F:67:B7 ValidityMon, 14 Apr 2025 03:51:48 GMT - Sun, 13 Jul 2025 04:50:09 GMT
File typeHTML document, ASCII text Hash972f68410d9349904f897739b33e12cc e41130dbad60e81ad2665bb7407a50888aae8150 90c062931018d386488b555fd261405457f9744db31512ff5780d49769d7b0d0
GET /sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 28 Apr 2025 06:30:13 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RL%2BE0aStKHIy8V0Pyj0zY6ovc10dbG9x2GGeXnwlIE69%2Bu8NsKPEL0CUhszLoraqnc5mmuBW7lkhoiAj7e7rW4Osrt0NRL6UbHIrshupET9Lp4mok3YCeTKhvGg2NBVGTYs%3D"}],"group":"cf-nel","max_age":604800}
last-modified: Fri, 11 Apr 2025 14:28:57 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: DYNAMIC
vary: accept-encoding
content-encoding: br
cf-ray: 9374827decc6568a-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2852&min_rtt=554&rtt_var=1010&sent=114&recv=159&lost=0&retrans=0&sent_bytes=10331&recv_bytes=9701&delivery_rate=48364&cwnd=12000&unsent_bytes=0&cid=07d0ebf94ce585d5&ts=752&x=16"
|
|
| src_domain/sb/ssp/interstitial/bottom_banner/1/css/animate.css | 0.0.0.0 | | 0 B |
URL GET src_domain/sb/ssp/interstitial/bottom_banner/1/css/animate.css IP 0.0.0.0:0
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /sb/ssp/interstitial/bottom_banner/1/css/animate.css HTTP/1.1
Host: src_domain
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| src_domain/sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js | 0.0.0.0 | | 0 B |
URL GET src_domain/sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js IP 0.0.0.0:0
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js HTTP/1.1
Host: src_domain
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700&display=swap | 142.250.74.10 | 200 OK | 28 kB |
URL GET fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700&display=swap IP 142.250.74.10:443
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint7E:14:87:08:DF:BA:04:65:17:BA:3B:4F:BA:EA:BC:8C:3F:0A:A4:00 ValidityMon, 31 Mar 2025 08:55:43 GMT - Mon, 23 Jun 2025 08:55:42 GMT
File typeASCII text, with very long lines (1572) Hash213822b07ad94930bbfc93e2bc9bad9a 96a9f6c67d810ee92a922abd207f9995238cffdc 6b6274a784ea45cd9dfbab668bcc96a4efd208181ddec235958770fbb52b6fc9
GET /css2?family=Roboto:wght@100;300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Apr 2025 06:30:13 GMT
date: Mon, 28 Apr 2025 06:30:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| src_domain/sb/ssp/interstitial/bottom_banner/1/img/close.svg | 0.0.0.0 | | 0 B |
URL GET src_domain/sb/ssp/interstitial/bottom_banner/1/img/close.svg IP 0.0.0.0:0
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /sb/ssp/interstitial/bottom_banner/1/img/close.svg HTTP/1.1
Host: src_domain
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700&display=swap | 142.250.74.10 | 200 OK | 28 kB |
URL GET fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700&display=swap IP 142.250.74.10:443
Requested byhttps://cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint7E:14:87:08:DF:BA:04:65:17:BA:3B:4F:BA:EA:BC:8C:3F:0A:A4:00 ValidityMon, 31 Mar 2025 08:55:43 GMT - Mon, 23 Jun 2025 08:55:42 GMT
File typeASCII text, with very long lines (1572) Hash213822b07ad94930bbfc93e2bc9bad9a 96a9f6c67d810ee92a922abd207f9995238cffdc 6b6274a784ea45cd9dfbab668bcc96a4efd208181ddec235958770fbb52b6fc9
GET /css2?family=Roboto:wght@100;300;400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdn.show-sb.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Apr 2025 06:30:13 GMT
date: Mon, 28 Apr 2025 06:30:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|