504 B IP
ASN #20940 Akamai International B.V.
Hash 72e206e9b89445fb2fb4031a6abe6169
a18bebfb86a71685bd817c15e348cfb5ea438c72
856f85441e043130f88668be6cf68110187856f17999bddc4332437d383c79b6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "856F85441E043130F88668BE6CF68110187856F17999BDDC4332437D383C79B6"
Last-Modified: Mon, 23 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10825
Expires: Tue, 24 Sep 2024 10:47:27 GMT
Date: Tue, 24 Sep 2024 07:47:02 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash ac5bb00c5084cf045ab1804337159860
6aa3dc582782c4ed67debf8b6c18b003c07971b9
d11b8e8ec087f14efcd43ebc717ab118e0da9dc5e72775b9a51a971789ceb1cd
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D11B8E8EC087F14EFCD43EBC717AB118E0DA9DC5E72775B9A51A971789CEB1CD"
Last-Modified: Sun, 22 Sep 2024 14:41:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6184
Expires: Tue, 24 Sep 2024 09:30:06 GMT
Date: Tue, 24 Sep 2024 07:47:02 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 83e8473238bebc5e171012e356106e09
673cfc364f70090410bfe715d26d6fe32b7f3969
3f7db639c6e4b8e9fb7451a9f026b9d2f49fc4e247d3a2ee694b0e28994f6a9b
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3F7DB639C6E4B8E9FB7451A9F026B9D2F49FC4E247D3A2EE694B0E28994F6A9B"
Last-Modified: Mon, 23 Sep 2024 23:04:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12230
Expires: Tue, 24 Sep 2024 11:10:52 GMT
Date: Tue, 24 Sep 2024 07:47:02 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash c6c7d535128f9eb2ec6dcd3d7d62919a
5aaa50926b462ccfc32d84db180a9af68e4d6b46
d498f9efc3307515c07f69fe4e630319e60c13d37700b7f35297c9b8d442b690
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "D498F9EFC3307515C07F69FE4E630319E60C13D37700B7F35297C9B8D442B690"
Last-Modified: Sun, 22 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2484
Expires: Tue, 24 Sep 2024 08:28:26 GMT
Date: Tue, 24 Sep 2024 07:47:02 GMT
Connection: keep-alive
0 B URL graichigra.com/track-impression-applab?z=7512248&b=20484827&ymid=88580c37-79c6-11ef-831e-d05099fb240b&var=D2&var_3=20484827_&redirect=true&redirectUrl=https://thirsuftutch.com/4/7930688/?var=7512248&ymid=D2&var_3=${SUBID}&land_state=before_render&land_id=lbKt2FsEy70WXWp&land_generation_time=2024-09-24_02:44:51&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=5d0c95d6d54fcc7a6baf39c59a9b9d58&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=apk
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /track-impression-applab?z=7512248&b=20484827&ymid=88580c37-79c6-11ef-831e-d05099fb240b&var=D2&var_3=20484827_&redirect=true&redirectUrl=https://thirsuftutch.com/4/7930688/?var=7512248&ymid=D2&var_3=${SUBID}&land_state=before_render&land_id=lbKt2FsEy70WXWp&land_generation_time=2024-09-24_02:44:51&land_error_code=&ruid={ruid}&mgeo={mgeo}&oaid=5d0c95d6d54fcc7a6baf39c59a9b9d58&land_type=rtr&isPushSubscribed=false&isPushAlreadySubscribed=false&land_tracker=marker&land_purchase_method=apk HTTP/1.1
Host: graichigra.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 24 Sep 2024 07:47:02 GMT
content-length: 0
location: https://thirsuftutch.com/4/7930688/?var=7512248
x-trace-id: c8c86d3fe2f431f7695459e21be6b434
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ikAYJasxdRINDoHJujg7CmOjgKIDbFhKxF6Xz29eO%2F3NXFNhg3b1FgqpZIYkpqvVcBO0As%2F39x1AJiO7lgDp2A3y1FHkL394gf07nWTrhpZIC3zWsWTEalhwUtjMzCNZvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0639f10b51-OSL
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 4bd2b0ab2ae1f25b52a4ade1e120d236
8233fffaeed143387cc860b6ff69678ef162585f
1ba84293bc783bffad72d422d577cd5b085c4e1e0b515fcc09ee1958e32e697f
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1BA84293BC783BFFAD72D422D577CD5B085C4E1E0B515FCC09EE1958E32E697F"
Last-Modified: Sun, 22 Sep 2024 16:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8407
Expires: Tue, 24 Sep 2024 10:07:09 GMT
Date: Tue, 24 Sep 2024 07:47:02 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 8ab80371465a057b549a046eb6f97853
0ccf179fc8a2f02fc91bdb73161837daf6f5c08a
e8d786bfe63e0db6078c37a721dcd2c244ca27d70e5ecc8d99ccea1755073729
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8D786BFE63E0DB6078C37A721DCD2C244CA27D70E5ECC8D99CCEA1755073729"
Last-Modified: Sun, 22 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11322
Expires: Tue, 24 Sep 2024 10:55:45 GMT
Date: Tue, 24 Sep 2024 07:47:03 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash b10c9c57a3734fe53e9e1538274e20c5
b3def9b12d6966636abd6fcd2aa6d0d15e0d0eb9
50a8a5d5699ecf17bfeeb3e6259cb10e36004498ca7de7b129aed2029186e610
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "50A8A5D5699ECF17BFEEB3E6259CB10E36004498CA7DE7B129AED2029186E610"
Last-Modified: Sun, 22 Sep 2024 03:25:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8194
Expires: Tue, 24 Sep 2024 10:03:37 GMT
Date: Tue, 24 Sep 2024 07:47:03 GMT
Connection: keep-alive
43 B URL thirsuftutch.com/sftouch?userId=0080e11dea7340e0fe7f0afa6742b319&z=7930688&p_rid=205a1b6e-de26-48a3-8a05-8e13337ee37a&p_src=sf&branchId=2301301&rb=TRLpsZjpbRvqGrchIjaSEa2Hj_5bGC3R2BIr2-C4J_7ozvuNiEa-q5zIPkn23OkLZemxoJItKnI3WYMPbm6oz6kksXWfdLldDuNHeo2I51D7LwzFlylpn8W1zQYw5OBM_ZLHGc6KRuh-EzpaLOXA-DhltMJa4cZlFtUU91Ap1bzUVEckCmeo7vPH6l7x4IEGo8YxWQLCvKb3zRoeOD08STMHfzkjdIIQLU-6_drbEafas1wLHan-ZkkCTsUPyY_2XpI01hQhCt95UHkc&w_img=1
IP
File type GIF image data, version 89a, 1 x 1
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sftouch?userId=0080e11dea7340e0fe7f0afa6742b319&z=7930688&p_rid=205a1b6e-de26-48a3-8a05-8e13337ee37a&p_src=sf&branchId=2301301&rb=TRLpsZjpbRvqGrchIjaSEa2Hj_5bGC3R2BIr2-C4J_7ozvuNiEa-q5zIPkn23OkLZemxoJItKnI3WYMPbm6oz6kksXWfdLldDuNHeo2I51D7LwzFlylpn8W1zQYw5OBM_ZLHGc6KRuh-EzpaLOXA-DhltMJa4cZlFtUU91Ap1bzUVEckCmeo7vPH6l7x4IEGo8YxWQLCvKb3zRoeOD08STMHfzkjdIIQLU-6_drbEafas1wLHan-ZkkCTsUPyY_2XpI01hQhCt95UHkc&w_img=1 HTTP/1.1
Host: thirsuftutch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thirsuftutch.com/4/7930688/?var=7512248
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; oaidts=1727164022
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:03 GMT
content-type: image/gif
content-length: 43
x-trace-id: daade77441825a75e7c0dfb5b4dcc2e7
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 66e9872824ffcec4436b5711eda8ad16
65e098ad6b772c3a5391bff37948f353a93f5064
5ff2047d21da0f2d2dfacb74eb4c39150590b757c1c0051447d1f10da4783e13
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5FF2047D21DA0F2D2DFACB74EB4C39150590B757C1C0051447D1F10DA4783E13"
Last-Modified: Sun, 22 Sep 2024 17:05:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10315
Expires: Tue, 24 Sep 2024 10:38:58 GMT
Date: Tue, 24 Sep 2024 07:47:03 GMT
Connection: keep-alive
43 B URL my.rtmark.net/img.gif?f=merge&userId=0080e11dea7340e0fe7f0afa6742b319&z=7930688&p_rid=205a1b6e-de26-48a3-8a05-8e13337ee37a&p_src=sf
IP
File type GIF image data, version 89a, 1 x 1
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=0080e11dea7340e0fe7f0afa6742b319&z=7930688&p_rid=205a1b6e-de26-48a3-8a05-8e13337ee37a&p_src=sf HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thirsuftutch.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:03 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080e11dea7340e0fe7f0afa6742b319; expires=Wed, 24 Sep 2025 07:47:03 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
12 B URL thirsuftutch.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=205a1b6e-de26-48a3-8a05-8e13337ee37a
IP
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=205a1b6e-de26-48a3-8a05-8e13337ee37a HTTP/1.1
Host: thirsuftutch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1425
Origin: https://thirsuftutch.com
DNT: 1
Connection: keep-alive
Referer: https://thirsuftutch.com/4/7930688/?var=7512248
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; oaidts=1727164022
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:03 GMT
content-type: application/json; charset=utf-8
content-length: 12
access-control-allow-origin: https://thirsuftutch.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
0 B URL thirsuftutch.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=205a1b6e-de26-48a3-8a05-8e13337ee37a
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=205a1b6e-de26-48a3-8a05-8e13337ee37a HTTP/1.1
Host: thirsuftutch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 463
Origin: https://thirsuftutch.com
DNT: 1
Connection: keep-alive
Referer: https://thirsuftutch.com/4/7930688/?var=7512248
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; oaidts=1727164022
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:03 GMT
content-length: 0
access-control-allow-origin: https://thirsuftutch.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
0 B URL thirsuftutch.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: thirsuftutch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://thirsuftutch.com/4/7930688/?var=7512248
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; oaidts=1727164022
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Tue, 24 Sep 2024 07:47:03 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
POST thirsuftutch.com/?z=7930688&syncedCookie=true&rhd=false
302 Found 0 B URL User Request POST HTTP/2 thirsuftutch.com/?z=7930688&syncedCookie=true&rhd=false
IP
Certificate IssuerLet's Encrypt
Subjectthirsuftutch.com
FingerprintCC:29:B9:97:77:C3:F2:A5:A4:60:46:83:A3:71:76:FE:89:C9:EA:6C
ValidityFri, 19 Jul 2024 19:24:43 GMT - Thu, 17 Oct 2024 19:24:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /?z=7930688&syncedCookie=true&rhd=false HTTP/1.1
Host: thirsuftutch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 8863
Origin: https://thirsuftutch.com
DNT: 1
Connection: keep-alive
Referer: https://thirsuftutch.com/afu.php?zoneid=7930688&var=7930688&rid=ksX-wKK1z8yLZCaWKyzJyw%3D%3D&rhd=false&ab2r=2301301&sf=1
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; oaidts=1727164022
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
server: nginx
date: Tue, 24 Sep 2024 07:47:03 GMT
content-length: 0
location: https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
x-trace-id: 6b537339a05cb66f2da47ae058e2828c
link: <https://nenseely.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
referrer-policy: no-referrer
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
access-control-allow-origin: https://thirsuftutch.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; expires=Wed, 24 Sep 2025 07:47:03 GMT; path=/; secure; SameSite=None
oaidts=1727164022; expires=Wed, 24 Sep 2025 07:47:03 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Tue, 01 Oct 2024 07:47:03 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash e7fe75fd1845b22fc3910d62f9912007
02e9a253afe7718911252d91b74ab79f39d8e18a
6d3ab8e695320d724567b7471e6227811f77077a8ea5c2a978e565255cdc2199
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6D3AB8E695320D724567B7471E6227811F77077A8EA5C2A978E565255CDC2199"
Last-Modified: Mon, 23 Sep 2024 01:50:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13066
Expires: Tue, 24 Sep 2024 11:24:49 GMT
Date: Tue, 24 Sep 2024 07:47:03 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 66e9872824ffcec4436b5711eda8ad16
65e098ad6b772c3a5391bff37948f353a93f5064
5ff2047d21da0f2d2dfacb74eb4c39150590b757c1c0051447d1f10da4783e13
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5FF2047D21DA0F2D2DFACB74EB4C39150590B757C1C0051447D1F10DA4783E13"
Last-Modified: Sun, 22 Sep 2024 17:05:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10314
Expires: Tue, 24 Sep 2024 10:38:58 GMT
Date: Tue, 24 Sep 2024 07:47:04 GMT
Connection: keep-alive
GET nenseely.com/js/v-redux-toolkit.esm.js.61510496.js
200 OK 4.3 kB URL GET HTTP/3 nenseely.com/js/v-redux-toolkit.esm.js.61510496.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (11319), with no line terminators
Hash bcd7372f51c7e725335ac2b99f5669e1
2b15ed1e1a3762c3a5c99572e75fd0007ad2a8a0
40ff34e4603dfa933b0e2a1174b7a0e24c2311166bb1cf9ffc8b005f0245e1df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-redux-toolkit.esm.js.61510496.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a28-2c37"
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6042
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NBqQPhBeNuXMyuKTAo4F92Zd3oVaPyyuPYMDopU%2BjcCseUXRaG68VGsdBMsFZPTlFL7nhlsRkYhPja7oaOFaexi%2F%2Fse6ly%2F8E1cAmba3zexwBYeEfEFJUiy6ehd%2B8aM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e294256aa-OSL
content-encoding: br
GET nenseely.com/img/sweep/tokens10k.png
200 OK 82 kB URL GET HTTP/3 nenseely.com/img/sweep/tokens10k.png
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type PNG image data, 480 x 500, 8-bit colormap, non-interlaced
Hash 10337a4976db716ba3b8cad1f0f1f736
788015c74e561249cc5318fc178e564b68bce44d
fef211dba7465da86e75019f78dcdf59af496394963b0bc6cc78b02286effe58
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/sweep/tokens10k.png HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/png
content-length: 82163
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-140f3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FBSbT%2BdBBczRw8ikITdsfFw1%2BwnIi36ZX%2BI0HscRQs8L3AhvYQ5GkJitngLwfjlmgPO7jkLieXXvvydluZYUiSfmfneMBZ3VxyloOBv2YN%2BwQapBR9prijJLF7NhnxU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a106c9656aa-OSL
GET nenseely.com/css/sweeps-survey.c9db58bc.css
200 OK 44 kB URL GET HTTP/3 nenseely.com/css/sweeps-survey.c9db58bc.css
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2c4f8bb8329914f457070622e0b8818c
2f72f807a481bcd644fd777d8b642b96e3295b56
5bfeb36fbf4dc45489c0f3463674cf9173a8257c84b3986d6e2a32aad5f0f865
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/sweeps-survey.c9db58bc.css HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=97992
etag: W/"66f18a27-17ec8"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0dUtndyzzIaelLgvYWfUDXSapEL%2FsMj4OHatnTe%2Frpp%2B9DmNu0jIiMN9y8Zmfj2pppsv3Aitu2Ux9wGCDk%2BNFc%2Bry5BcLrXjL2oWObagHLbiiq1l%2FyE1U5vO%2BU7HNgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e395556aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-2.webp
200 OK 538 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-2.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash e4d97f0d392aca4fa78b0928438d0168
55f713d8826a9a65e11fddf4c5fa4ea5939953b2
7058be64334990621fbc8cc06782aac5116c6e8a6d7700d892cb8b36f06c5866
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-2.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 538
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: "66f18a28-21a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6015
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFF2jHM3RnKeQsA3ueFM8fs41zodV9kTFrwsQ9YYiFfAl5DSOTtx0aB9bJFzT9KuWYNCKUyaQRsHDKFm6QeX2Ez8WJ%2B1XQ%2BfaF6aVK68ciz4OsFgHj5gzxBNr%2BiBv6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10dd1556aa-OSL
GET nenseely.com/js/config/dict/cookie-consent-1.json?v=10
200 OK 3.5 kB URL GET HTTP/3 nenseely.com/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
Hash 4f1c632e971c4261f927ed0cf67bfdee
18c72b10719ca98b61b1f1f84e4b01f0ed8b3763
2bfa8e9b4326caea44f0d0c0345a31f34f19d47ae2e60fbc7c557df9ceffdca6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/json
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: W/"66f18a28-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3rxTGOWQvR0GnrdDkR1LYPTFFejK6NYns7Sffdlfja4TrMX12p3zUeJguPqJOK5Op5o46RgJ6fgDcgYuKuNdc934VVH0Rh8cIIPY7bxVltF%2BnQHStMEubtQoYE89k30%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0f5b3756aa-OSL
content-encoding: br
GET nenseely.com/js/s-storageService.js.f95818a9.js
200 OK 2.1 kB URL GET HTTP/3 nenseely.com/js/s-storageService.js.f95818a9.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (2170), with no line terminators
Hash c58689cceb2a5462528f47fa6fa1cb62
1728791f1fbac4f69b60755228fba43e6ed65f28
bd41a79de42839454cba1bcf221161d62988aaa781dac6a045d185dde165643a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-storageService.js.f95818a9.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a28-87a"
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zkG%2FtDhJEnP6D4rKbC8TUoYF%2BxZmdufK2CL2MJvPdY7k1gs1pOz1OhtLz1AfCRN%2FnlhKgdgn9jXG7sYO2cM240W4nipZL8NRw2yqVtR1kpTlNkLki%2FZShya1%2FvBKqhA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e293c56aa-OSL
content-encoding: br
GET nenseely.com/js/_core-survey.329d5327.js
200 OK 43 kB URL GET HTTP/3 nenseely.com/js/_core-survey.329d5327.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash bd83576fb85eb392d9ee72cbf3e2602d
b7a08c21b6458a22c103107d7ef1f4266df520a8
a79e86ad2b70c9ec45a173cf7a83bf69c5988258257d3472ddf688bd716bbad7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_core-survey.329d5327.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=156085
etag: W/"66f18a27-261b5"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6042
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pfFjTj%2BDMJO%2FrfZvc%2BW%2FokZk4%2Br07UnPitAel8%2BPFQYpQ2s8yCPb0J6kxRFaggafVlQZ08Okq%2BqgdxtRdwzBLc6CrUuudwwKcKPaYa5JeCwsfkhAc9PRGXFLK4cOI%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e294956aa-OSL
content-encoding: br
GET nenseely.com/js/v-react-dom.production.min.js.e532a3ff.js
200 OK 43 kB URL GET HTTP/3 nenseely.com/js/v-react-dom.production.min.js.e532a3ff.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash c2cf402b45a2670a7c49fff904dae02e
f56f5968f7aa6eff91d85d7f11e97a46790dd684
6bcbf6c0a1c5a41aba18b241fe9ea09e935110665fada43402ffbc91de3e23e0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-react-dom.production.min.js.e532a3ff.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=129359
etag: W/"66f18a26-1f94f"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6042
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uy4GH9oQQV7MKaqwkAoWJrVarilX2UIx84FzSftWuFgN1sTwn%2FSJjscQUOxjywcrUPzUIS%2B%2B9jaCY4E0vOXRMeqFqznGvw9%2B6yQrKes8GhmmE0OmMAW3AtvmEXFjra4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e294456aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-8.webp
200 OK 696 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-8.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 6a6742fef0cd1bd74f6da94e9fb833e1
ccaae2ff48574bbb04072b2efc5864b9177017a5
96bf5ed5aa8149269a215cf19a17889c762b8cddb2fe36229849c8379c2d4aa6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-8.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 696
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-2b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zkgw42GKv4FsjLUC6ljPqBXlw2v1uKoNhRC6dyZKeh7bX7BXWUMhHXxk4pYLTP%2FDDzL21AzIzAYQ53x8k558vf%2Ba0Fha4SVKfKoHWnu5p%2F3p5RK5jacgDdI1L7cwTL4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd4c56aa-OSL
GET nenseely.com/img/comments/person-sweep-9.webp
200 OK 818 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-9.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash a61b1f29004e5a54130bc57051a49c0d
7f60eef07e311b3598895343111d90282a002ea0
b3de11ad2ace70aa9786af4a9e65db774466fe25aca16e16dabdfa7ec76b0a53
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-9.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 818
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-332"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agPc03QM0rlt%2BgtDgz5r8gMyXJONRaFc7hCKwSwhDkxCZ0HR3KFLXu6%2BDSjk3mJRp9gU9rE7o0szuMeZ8bf8Iffz56lmMabaQJKeORL3TXVGrQOE9yJaJoAVG7MqK6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd4e56aa-OSL
GET nenseely.com/img/comments/person-sweep-12.webp
200 OK 668 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-12.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash c57b8a772545ee6e05fedb58c143beb1
6cb5aef79f86275a725cfdd406c7038b24d80aa9
03389ef007f0fd3486a5c71848fd2b67cc05341cf449bcdd34a81a1d4048b090
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-12.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 668
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-29c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vJXorYPGDqTUJCvzDTRTSD12%2BrfSHtgRLn8Caa6HP37N4DSu%2FU3A92Mgbe6tzrIwznmqAvu9flnFe7SMQTeI6ycS2SKw2FTNy3H%2BTHDq1u7dDXoHvuaDooGbm5jpUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd5756aa-OSL
GET nenseely.com/js/v-html-to-dom.js.6f877ef8.js
200 OK 848 B URL GET HTTP/3 nenseely.com/js/v-html-to-dom.js.6f877ef8.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (364), with no line terminators
Hash 2c246fbf964ef076df635e736b5a326d
5df106f4ba371db07c94e4cb77c5176e7c39a5c6
db4884db299689db4f3d465bccecf829da42dea2f7acdce9accfebd7351602df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-html-to-dom.js.6f877ef8.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a27-16c"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lyX6wCIEZYTzfMPQwKr4OosvFXLH50qrD98bHP48gytE8%2FvhIRfapgQlEbjkYbNXFvSriNBZ63Y6hS2HZ3g%2BC8IgJNEFCjHxBP%2BYo7bteXKInAmbFFaYa%2F3qQ7H9rmg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fabaa56aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-13.webp
200 OK 640 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-13.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 8532ec97225298a9c3ae5e393f62e462
fc26fa010830045fa91a16ac9b8c89c45bb35232
9c45568c99b7782b240341ba6729ecacc59d41a8ced9b9846ca4ac51e50c5320
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-13.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 640
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-280"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G%2BpzkuYJflagNRwdzhbhFdnBaVvrOTRZRc5OV662%2FVztFV0rmdxi9exDGS4g8oeqa4If%2F%2FE4J2oVJTQ5OiEQaH6JpcPicctOri1fFCSh8Ko%2FXuq8TT5%2BRNPDLGPv5Wc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd5956aa-OSL
GET nenseely.com/js/v-dom-to-react.js.0eca2a35.js
200 OK 1.2 kB URL GET HTTP/3 nenseely.com/js/v-dom-to-react.js.0eca2a35.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (1085), with no line terminators
Hash dc8fc82300322899a76036aa8627e4f4
a07bd7b384d7ca25588ac17be4ee58a90eda2a53
7977d75d0f2b2aac689546784dd83968f7d35e0b988bbd072a2315c8a2862bbc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-dom-to-react.js.0eca2a35.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a26-43d"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jSmAh4NjwEArWDWw0RPITXlAAnNp%2FS5KkTrg0TmlTvjCY0zotAboyfM7DfM9FdQgaAa0iksQONHscfBYYN1Tvsa5kXNtZgnNigy%2BgmblWmHJAtOn9iSUjASlEZdFB24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0faba856aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-10.webp
200 OK 572 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-10.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 206819c13484a7a818f1e4499be3704e
ada2f34308d6eaa0d004ed0c732e5a3aa7fda1db
f4eed862cbcf8f9ce2bde63cf3e13e73ed3e58ac93ec4bb14301b248c4d58e1f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-10.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 572
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-23c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xf4jH5Aa243Ri4IbF1qDHULtlCjThE4MGHa2qrvcFxc66OPLxnsfc%2FVkAiM373kh%2BHRWCHx23IKxQDSZbhGurQEFJrO8SP%2BGzWWT65lINBCdxIKgc1JfOyVeKaGCDLU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd5256aa-OSL
GET nenseely.com/img/comments/person-sweep-16.webp
200 OK 734 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-16.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 0e8c55db8fda61ba2565a293b72e36e1
ef9deaad0f8a71da57252bcf543ea369673d39ff
79b1a144ec7d571b7a155cd2852da72e89b2954affca1448001e3fed2227cb34
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-16.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 734
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: "66f18a28-2de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l4ytpVANdlnFAm1RrUSqJ4wZmxoEl2KfVFF8naEPoLCBoXXQxGvqMKSt09UcxfMOOdaTg7A3QIA1nrIJ8yrou%2BC0YNmZtkOcBsLXgPRg2yYxRKXFi1myR3S%2FaVMvoEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a110d5f56aa-OSL
GET nenseely.com/img/comments/person-sweep-14.webp
200 OK 626 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-14.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 7c494127025f1ec09a96c16bf0531a36
0c2f9302c41f99da9fb5eead2c364bdbdf435156
e6443a7cdcc5ee11ece88ce10824fd79851700e4bd3dc6259d1a816182b82e5b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-14.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 626
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-272"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpkkSnJivIK7C2HlYeaEdWlrWftcMsfXGPGdYiUUxB2tJwRNWaf8J%2FKEj9FOAjV70Jkcs6s6%2FUPPcwYIOEav8dVSU2f5y63XPV6o1koWJjWjmKLkNViW%2BrhiTy5qyvk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a110d5c56aa-OSL
GET nenseely.com/img/comments/person-sweep-11.webp
200 OK 502 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-11.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 7ec874233fc75e1ec8df712b7ebbd7d2
cc219fb2b7e6057a8303283023dd1aa09a082455
9bb6b14a5a503d3c52bc6fc2e7c236a90e7971ceb41cb99e5245fcfc39ef328b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-11.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 502
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: "66f18a28-1f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CnRqZG%2FL%2BW9oCzO1SDn5or3oYyIjfzpCmoZnfGLc5TM4BRRc4WUGHK2LCHiu6%2BsXICTt9LMVBWK4jKm0sj5RNmqduVKbpSwoijFbvAQnZQRh6dEQz5H5Y5luHz2Qntk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd5556aa-OSL
504 B IP
ASN #20940 Akamai International B.V.
Hash 72e01cf8ce3d2f0a48e418a724a21b8f
e23d484b65df2b50849e5867ce3af58afcdb7c4d
625548e1c1e169d946f2349f0285ab674ca58857642b25bd35410a58129ed8d8
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "625548E1C1E169D946F2349F0285AB674CA58857642B25BD35410A58129ED8D8"
Last-Modified: Mon, 23 Sep 2024 06:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8769
Expires: Tue, 24 Sep 2024 10:13:13 GMT
Date: Tue, 24 Sep 2024 07:47:04 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 72e01cf8ce3d2f0a48e418a724a21b8f
e23d484b65df2b50849e5867ce3af58afcdb7c4d
625548e1c1e169d946f2349f0285ab674ca58857642b25bd35410a58129ed8d8
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "625548E1C1E169D946F2349F0285AB674CA58857642B25BD35410A58129ED8D8"
Last-Modified: Mon, 23 Sep 2024 06:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8769
Expires: Tue, 24 Sep 2024 10:13:13 GMT
Date: Tue, 24 Sep 2024 07:47:04 GMT
Connection: keep-alive
OPTIONS arleavannya.com/sync-do
200 OK 0 B IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerLet's Encrypt
Subjectarleavannya.com
FingerprintC1:1C:85:01:CE:80:29:42:D7:7F:5A:F6:AB:57:E6:B1:6B:A0:B8:38
ValidityTue, 20 Aug 2024 19:49:35 GMT - Mon, 18 Nov 2024 19:49:34 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://nenseely.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:04 GMT
content-length: 0
access-control-allow-origin: https://nenseely.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET nenseely.com/js/v-domparser.js.2f998fb8.js
200 OK 2.5 kB URL GET HTTP/3 nenseely.com/js/v-domparser.js.2f998fb8.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (1720), with no line terminators
Hash bacaf103248319bc704a58548d3d8e1e
c4dbf338d5cbc10c25ed32054e2e4099bbcb5287
2d7fedd370cd3164d6cdb12ae31333d04d34b69c84eb0d81dbe143e45ee6d495
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-domparser.js.2f998fb8.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a27-6b8"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M3Y9SJkMU801PgIYr7sOdhAS0EvIbFZgSTqT857vAazGveROzQQwuauYQwKKvzpw8p4ZlnHZQkQ5nz%2FyOkQtCCIZ5%2BDZ2miHgkSgEnf0FGDcoRfgBCTtBV4InfGBPaA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0faba656aa-OSL
content-encoding: br
OPTIONS arleavannya.com/sync-do
200 OK 171 B IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerLet's Encrypt
Subjectarleavannya.com
FingerprintC1:1C:85:01:CE:80:29:42:D7:7F:5A:F6:AB:57:E6:B1:6B:A0:B8:38
ValidityTue, 20 Aug 2024 19:49:35 GMT - Mon, 18 Nov 2024 19:49:34 GMT
Hash 84563efb06be0ca10ea3f9ac9687149b
3efb1e5ecbe8ba3aab0e8e9ab64204a8810c63ce
183355255fd65735240ee8bd9ceb82a53a4caded98ce4e82783c9f7e058c13da
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 149
Origin: https://nenseely.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/json; charset=utf-8
content-length: 171
x-trace-id: e23d081d05b245134b9226516025338d
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://nenseely.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET nenseely.com/js/v-node.js.b3f20640.js
200 OK 6.1 kB URL GET HTTP/3 nenseely.com/js/v-node.js.b3f20640.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (6251), with no line terminators
Hash 34ea0907efd338e9e0d8ea46afb66c98
c96e3471fe33e9652881932062583f3d1c1ff531
1d525de9457160ed5ea2528a1bc72f1217706cce001e85f77be6011b3ec1afc2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-node.js.b3f20640.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a26-186b"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EyLSGy2ev58N0eYnqv0GX3wdmqc9WONeyjr8lEHgN8Fpb%2FbwjnKwCK9WKHMzdyqnW3GSkfeCmwNFycpyM%2B%2Bfz9FlLGUxsQzyOk2b6Pj0myD5fwrcS9DSiE5m2NUE2XY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fab9956aa-OSL
content-encoding: br
504 B IP
ASN #20940 Akamai International B.V.
Hash 9b46c3577c9513b260ce14c295639451
500d1a034702255133167cbbb43b8be0e6d7523e
046224cbdaa03b08777500a934c9044b725cf5e2a50d1f80dfe7a31712694ab9
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "046224CBDAA03B08777500A934C9044B725CF5E2A50D1F80DFE7A31712694AB9"
Last-Modified: Mon, 23 Sep 2024 12:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2498
Expires: Tue, 24 Sep 2024 08:28:43 GMT
Date: Tue, 24 Sep 2024 07:47:05 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9b46c3577c9513b260ce14c295639451
500d1a034702255133167cbbb43b8be0e6d7523e
046224cbdaa03b08777500a934c9044b725cf5e2a50d1f80dfe7a31712694ab9
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "046224CBDAA03B08777500A934C9044B725CF5E2A50D1F80DFE7A31712694AB9"
Last-Modified: Mon, 23 Sep 2024 12:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2498
Expires: Tue, 24 Sep 2024 08:28:43 GMT
Date: Tue, 24 Sep 2024 07:47:05 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9b46c3577c9513b260ce14c295639451
500d1a034702255133167cbbb43b8be0e6d7523e
046224cbdaa03b08777500a934c9044b725cf5e2a50d1f80dfe7a31712694ab9
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "046224CBDAA03B08777500A934C9044B725CF5E2A50D1F80DFE7A31712694AB9"
Last-Modified: Mon, 23 Sep 2024 12:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2498
Expires: Tue, 24 Sep 2024 08:28:43 GMT
Date: Tue, 24 Sep 2024 07:47:05 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 9b46c3577c9513b260ce14c295639451
500d1a034702255133167cbbb43b8be0e6d7523e
046224cbdaa03b08777500a934c9044b725cf5e2a50d1f80dfe7a31712694ab9
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "046224CBDAA03B08777500A934C9044B725CF5E2A50D1F80DFE7A31712694AB9"
Last-Modified: Mon, 23 Sep 2024 12:40:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2498
Expires: Tue, 24 Sep 2024 08:28:43 GMT
Date: Tue, 24 Sep 2024 07:47:05 GMT
Connection: keep-alive
5.8 kB URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type gzip compressed data, max speed, from Unix
Hash 05981986d5753a46137430aebfa4062e
5b0c317119c395206931d243c6bd9a306bb18d30
c0c3b12086cd8b9c5f9daca47acd872db6c268cff70dc0a6d050f56a7564acea
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:21 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-11-02-12-44-24.chain; p384ecdsa=DSerJEgEMFPJm3HKBuyeIfQkytVpDPwc0cAADGi4oTu4A-2j5gb1Cw06aHU28JDYiv-MP88iqc3tNn0eEEsbdOYSkjndREgaPZfQN3Lti6paYnEeclEsb4VPT32pwM1F
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
GET nenseely.com/css/SweepHeader.f7064bad.css
200 OK 250 B URL GET HTTP/3 nenseely.com/css/SweepHeader.f7064bad.css
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (387), with no line terminators
Hash a1502f6958ba303256c5f3c58f3d9b5c
269295c488b23e54f2ab298cccbc9bd396caa1e5
66271bae359e6d84ec3bf5aa7bb758f1e155cab91b6604bc28f224e4210e7694
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/SweepHeader.f7064bad.css HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=388
etag: W/"66f18a27-184"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7J0AKJwl5F9HZgofY1YQ7x2zp30w8ka28TWdnelbe%2FkZQTxr%2FR01GplFXdws21FNrmsuDvbjiGYqQmy5Q38mxPbMNMP1gcNhVfr%2BTgikDmA0gLYpxNJh64JKyjqyJF4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fab9456aa-OSL
content-encoding: br
GET nenseely.com/css/_core-survey.d3ac2ee0.css
200 OK 83 B URL GET HTTP/3 nenseely.com/css/_core-survey.d3ac2ee0.css
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with no line terminators
Hash 30d726a40ffe74d794b282ca1795b44c
b43155653a1b9cc8d257687df9a75e0f204db348
4916da6d6e00e0e6681cccaf9107eb45fdfc78fe2e476444623c30a64959b5e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/_core-survey.d3ac2ee0.css HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=84
etag: W/"66f18a27-54"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gja74BtIrrfF4jBnAE6XHx4uUNHLHAlxNjMlDC7A8Un8sluqrxznBjfYxN0wzLV2lzvBV3%2BEhnQb2P5xbqGlnWQy0eVUUaDpkPZwbC3e4lqZetBAgC%2Fn9e1Ixr%2BPY3s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e395256aa-OSL
content-encoding: br
GET nenseely.com/js/s-checkSessionStorageAvailable.ts.080f6a89.js
200 OK 330 B URL GET HTTP/3 nenseely.com/js/s-checkSessionStorageAvailable.ts.080f6a89.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators
Hash 8da162f3faf910fd59af32a86469529f
72a9fdd9ef138c6b685377251e127ed6f379723e
64dcef87d8efc4cd1e9ec991238c62190a5578318f0e14997370003488b34ae3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-checkSessionStorageAvailable.ts.080f6a89.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a26-14a"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QveVXth7qGxjRaBlO6ERU2yZn4JOhNNc4sVEdsl%2FAyTFlGtDn1g98Tuuz1EWlcwAlRoXoZ54c5FxL665JAZaKwQ5JOPp9JC%2BjKbkSY3KL7bem9N9psAbtWXdueJFePs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e293e56aa-OSL
content-encoding: br
GET nenseely.com/js/v-attributes-to-props.js.5847b9cb.js
200 OK 702 B URL GET HTTP/3 nenseely.com/js/v-attributes-to-props.js.5847b9cb.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (718), with no line terminators
Hash 811904250c1a0b2d2cf2752c7709a3fb
298882040b340e6651acca9f256e62eeb373b585
7f7cd4315254cbab3388b7ee99ea3bd65a455d89064c60228e69a2346827270c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-attributes-to-props.js.5847b9cb.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a26-2be"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XyB%2Bd4zf5h5wTOSRdzi3zybNOVyXeOMVZDxDEbbNMN6dRk7UxmDLOGiESiXj5GpABH4ScgEtoPx3vOh%2B%2FLUE%2B46W8lQtr9Hqp3riZQUv4d7B981d4fZseJpPi%2F93ky0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0faba956aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-15.webp
200 OK 576 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-15.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 6c0726564aa84c5f1161bd0051e0c5e0
6df7e7122e0d007e7ea187c3c35fbc869f8ef8e5
98ff0218f67c0bce5c834a0145c686f56d3a7ca1b948341a3181739da66883b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-15.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 576
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-240"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=03LnMW%2FgrDgqTO9CuREgefv0TL0w%2FbhYSqzMWTGtcF%2FLNAS53cpG1iIj%2BE7%2FPU2vaK2UjzMSm9MHq%2BHig%2FjJhkJwjX4Ec%2BSi3RZITB0j1aAbADRYnd6nzPrZgE5UQFA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a110d5d56aa-OSL
GET my.rtmark.net/gid.js?userId=0080e11dea7340e0fe7f0afa6742b319
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=0080e11dea7340e0fe7f0afa6742b319
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint59:49:A1:C9:C3:99:98:FC:2D:E7:4A:9E:86:83:A6:DE:2E:C3:8A:B6
ValidityFri, 30 Aug 2024 01:00:45 GMT - Thu, 28 Nov 2024 01:00:44 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash c2713b120b52608d64875fcb04b43508
df1fec0ccf032677045e94ca76a74bbd563a2adc
560ac01e95c5c0284a2b527c7fdcdb4d2124a29ec99ba2359f213560cfff2aa2
GET /gid.js?userId=0080e11dea7340e0fe7f0afa6742b319 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nenseely.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://nenseely.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080e11dea7340e0fe7f0afa6742b319; expires=Wed, 24 Sep 2025 07:47:04 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET nenseely.com/img/comments/person-sweep-3.webp
200 OK 582 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-3.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 8347ebfbfa18beba17d356a3dbacb100
f1d66a05e07953cea27fe277e72a495a8e3de2e7
318e494a7bcf7cb28173e54feebeb44ba93b4c17a423c7036d2fcac40e4db6cd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-3.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 582
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: "66f18a28-246"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6015
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lt%2FJtWTHFRj2jaD%2FkHcYUqgnDKk0arpeSu9hNDcZQ9KPMK0svc0a%2FXu7zXnI%2BhoCe0czD2lr4zlmXSC5J4%2FrPsb60%2Bem1JJB0R8Yy06vpImefcL3Hxtqn1zJ4wvo6Bo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10ed1f56aa-OSL
GET nenseely.com/js/_each-land-config.daf8cdd2.js
200 OK 75 kB URL GET HTTP/3 nenseely.com/js/_each-land-config.daf8cdd2.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 7bb32b3a6c86b9cd7be8c4756eca8ec6
529b4e488f101242c23961f0876bc630f362f00e
ea5158e6a717da182f18b2c6289bd8917c07632eff263be01aa12d8d79861823
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_each-land-config.daf8cdd2.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=74802
etag: W/"66f18a27-12432"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6042
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFlaMavOv8gvIGI3%2F94wTC6oKsHVrLsQ0gRCwADNxK3hzJotyoP5z%2BSkeFDkdyG%2FofLz5ELLZYxk%2FQag6XP82bOoCiD8euez5Qzsimd3rGwm4fVdyNxPF%2FbWOiEM66Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e294356aa-OSL
content-encoding: br
GET nenseely.com/js/v-possibleStandardNamesOptimized.js.11ece07d.js
200 OK 7.6 kB URL GET HTTP/3 nenseely.com/js/v-possibleStandardNamesOptimized.js.11ece07d.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (7923), with no line terminators
Hash 40afcf9799eb216713f97fda40691fcb
638ab978d2f32ca129e5ac06eb541c71dd0f2a14
9724a018a83d7c934a763fa996f41e73586767e4cf9e1400f2fc5b5d56738b38
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-possibleStandardNamesOptimized.js.11ece07d.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a27-1d99"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bc2svGDCPsZ8pzFosgJb6iK%2FEtu4ESriMll1bsXyZ5WwympcFa0uMQr0OrL7R1lYmzQA44tunwDpWn%2Ba%2B5brGQ2CkVrTSJ2skjCIJDNUCJi%2B9WH5rg6n3nsjF2XrPuY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fab9d56aa-OSL
content-encoding: br
GET nenseely.com/js/v-constants.js.23082895.js
200 OK 600 B URL GET HTTP/3 nenseely.com/js/v-constants.js.23082895.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (664), with no line terminators
Hash 30f960371113252f177f1a13cc5e45ee
331255bde26c4b71483eb8345ca26bf37c7a352e
54ad95437640d5d44dc9d87117e4f031f8a9e3233b99462b5e792b045b510d4e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-constants.js.23082895.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a28-258"
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8l5FLSEv7QDfdkrHkKmEXuDR4rVmEx5zEPmc3PnyzpymrWThq5AeCXE1chaQNNOih%2FoxTk6qPelwctFjp2jQej1MkgLKSa7SG6d1MZF1J6P%2BEAz%2BFi%2F5xd2VKsrHMg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fbbad56aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-5.webp
200 OK 588 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-5.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 25e1107a0e365082ccd6093e0073f05c
7b0d3c741f2bbabbcac99f29bee8cf2f9eaa1841
935ec86b128c0bb7bfafc5915a46c0c3709c47b90509e26e4c994d8ef5587cf2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-5.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 588
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-24c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UCeflIP0CXYc%2FQOnVzFgZ9kWhbI9NCqL5JGjtkBZdc84rn43uEbkKBwq%2BO8t6HXhNpcqzE51FuDnxhs19cbrJ7xjjUMQAq58OKJTZbD0G8e00gptYxCUOp60j5O%2BiIU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd4456aa-OSL
GET nenseely.com/js/v-index.js.5b2ca3be.js
200 OK 41 kB URL GET HTTP/3 nenseely.com/js/v-index.js.5b2ca3be.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (40985), with no line terminators
Hash 215cd3b327ba30435f9c0ff3ca47b922
6a04322915142458451f3ad8cd2d4f21a2b857c8
35d59eabc6466988a49bf79a938c60970d56358d939def8d16e6c930af0b2a72
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-index.js.5b2ca3be.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=40988
etag: W/"66f18a27-a01c"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lESfmboJphmjnXhlMqGTHi%2FuVOV8q%2BfJ3arZWVx%2FvP9wEwfiX3nGuXG5R5q2lsEfEQ9K4V7FmsCeU3h1Hdm9D%2Bx2PF8HZAirWdgmgAZazElga6ihCZJhtr%2BmXNs0op0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e293856aa-OSL
content-encoding: br
GET nenseely.com/js/sweeps-survey.90b95c54.js
200 OK 5.9 kB URL GET HTTP/3 nenseely.com/js/sweeps-survey.90b95c54.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (6226), with no line terminators
Hash 5f219006434f6213816c643d6651d2bb
2f103bfa8403cf33981dcd79a257da1533b0b904
367e4f7d7263077703a7a8c332bbbe38da11dc27b0f097d2737944b0402abb9f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/sweeps-survey.90b95c54.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a28-1737"
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6042
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mAHr2vBn5BCfUc4ylCX1y37TEFKHuMHjBjzAb33drHuRNGssXDEmor9ayDU7KFSidLVvnfx3KdCZNYpfq9C4G9P17KXU%2FYUtK8FEdUE8hQ6ETwG6%2BLbl0k2otbcbS7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e294d56aa-OSL
content-encoding: br
GET nenseely.com/js/v-index.mjs.50c8d69e.js
200 OK 35 kB URL GET HTTP/3 nenseely.com/js/v-index.mjs.50c8d69e.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (35286), with no line terminators
Hash 5c080e9f349f6d33d5c403bc10184fe1
60f3e3a155ea4ece476a55514b2787c1fb8d4079
77475e9048319c715ea626739ad44bd16d6372dd0ec5c3584334edd3c38aa6d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-index.mjs.50c8d69e.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a26-89d6"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lnwAt9EU4vhbOIn9xtm0cy9X4nIVCBRIyt6Xf9y%2BkK4JLkLS8Z7ZvSgj6PI%2FB8eAu%2BqtL60SZyO%2BYyH240EN18RnDU%2Bbzh0p1%2BliwksPZLY%2Bqf7CzQikJGvgqtdbDY4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fab9856aa-OSL
content-encoding: br
GET nenseely.com/js/config/comments/en-sweep.json
200 OK 4.9 kB URL GET HTTP/3 nenseely.com/js/config/comments/en-sweep.json
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (5602), with no line terminators
Hash e365b2a50ff785aa57118984ebc86b5d
0cf187164eaa42ff7e244ba653bbde659feaa5bc
3094a84e8e909474fae4e0db6685d9b407d4493efd9389efe35caf326c95a6f0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/comments/en-sweep.json HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/json
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: W/"66f18a27-12f9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mBSAvH%2Fx9FBojAmffYWLz%2FvZp8VHuQ1UWuCNOnJGfRalpylVeoR4jpzjh0sDZgRDowX5Isec%2BMKpZ2rJoa3ahYVOdJA%2B5PVG7dmeXPaSuqx%2F4OA1eS7mmYZ0%2FQ0w7h4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0f7b6256aa-OSL
content-encoding: br
GET nenseely.com/favicon.ico
200 OK 1.2 kB IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/x-icon
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: W/"66f18a27-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=itMKAz7J2ggD6OM6WPWTW5jfHDETHu9sJ2InOqZoajxzTqqntapQ4%2Br6TVdCHkTVK71gbmX7k7cthhmkPNa%2Byy29aPKglTzKcLPoiuGmizw9l8%2BBwjY3EQ5tSZs%2BgXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10ccfb56aa-OSL
content-encoding: br
GET nenseely.com/js/s-checkLocalStorageAvailable.ts.f85cd6f6.js
200 OK 330 B URL GET HTTP/3 nenseely.com/js/s-checkLocalStorageAvailable.ts.f85cd6f6.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators
Hash 32117b84efdd7689199f1f4d52e98f0f
1d4364d78491cb51a8c8e9bd1cc8510cdc81a8db
0f021caaf643542f3e291702d8995802dbc4fe04ee7d99a84c2472d3f9afdb1a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-checkLocalStorageAvailable.ts.f85cd6f6.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a28-14a"
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Koqaq%2FZsmL9u4fZ%2FEZCV%2BVIaJL0s8bHcw0CD6YH%2BMudHsbSCN9CnCAJIiNkPhML0GwJJlqBIhoLMFXSfdk8G1OqwGeT7DQSXYzTG9g2W%2Fb3gC85J9utS7ef%2FKIj8VHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e294056aa-OSL
content-encoding: br
GET nenseely.com/img/comments/person-sweep-1.webp
200 OK 862 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-1.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x52, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 384118eb5e49870ad443d90051c692cb
35a73704dcf55b3232f2e9cfc333ff2ecfdcc19f
1ae21006f04f15e16a8057644615cdf8a8a9b39db706f53ba9a925327a6a1635
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-1.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 862
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-35e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6015
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gu0w6YI7htB4WtYrzP3fxfknFjFAsnSoSO3r4mcWlKfBUxbKGIZMMKpDTi8%2BmsYrUJ%2F2CLJn91sazHsfUFcKqBDjv46qFLsSNWII4H5OIHocgQhis5zGYnMAwvEnVM8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10dd1256aa-OSL
GET nenseely.com/img/comments/person-sweep-4.webp
200 OK 800 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-4.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash b1c95558f71bd6614c52433c225b6a28
7c903c12b48199ac1e1b3c8846baf12693b97a28
8e5987af9fd886b03617f6e4980035a877697b9ccdeb9f002c41baa1d6ee8912
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-4.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 800
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-320"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2BBOA%2BN5MRxq5D7O3Hxkt4v8H7VEX7OMpywdFxwlCKhdqEXwg3n3cp%2FqUe5BZHou%2FCUliVi5Wr7Ioelo6eAnvDWKPDMh3ecMTgsXnNzeuwx%2F%2FItGQFqb9Ax9I%2FUCwvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10ed2956aa-OSL
GET nenseely.com/img/comments/person-sweep-6.webp
200 OK 462 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-6.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash dfb961fdb848e75591268fde9c186902
2218e96a5c5081f5bef43fda74fd8f0cbb025003
4cf92de9b24fb1484bc1d97880c20589e113b9b1f065df1963e0648f3a38474d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-6.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 462
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
etag: "66f18a28-1ce"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xyYho9kvKzc%2FyhvhVRYpSaXmKP8r9fCUm6VlK5k61%2Bry8XHdrRcM5%2BcpLQ6Sh56pUu9dbPnnTgdWWmSTjvR6SaSOXx5PIOb5WQ%2F4OhsGWbaGS5B7AXck2MTvoeWn5TQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd4656aa-OSL
GET nenseely.com/img/comments/person-sweep-7.webp
200 OK 610 B URL GET HTTP/3 nenseely.com/img/comments/person-sweep-7.webp
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp
Hash eb52e160b8ea5a1e0de8b2453f46d642
4d28311b4ca822a0a74e318c9d1f54def088b509
2e9c67781abf2cfbabb240bfd08ca836658063849f3303b85027203eec1d37c5
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-sweep-7.webp HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080e11dea7340e0fe7f0afa6742b319; syncedCookie=true; oaidts=1727164024; ID=0080e11dea7340e0fe7f0afa6742b319
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: image/webp
content-length: 610
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
vary: Accept-Encoding
etag: "66f18a27-262"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6027
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2Fsi8B200nmeNiyjXLjGEwOH9hE3GydDpfz3kEttmWKU5NaKyHcp3wZdahjFV%2FIJ8ok%2FjRl1VI95TIDRG%2F7nJsnXkf6FFo3Yi6nRI4Xjj8TwyRkt1po51yMdUdCT38k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a10fd4a56aa-OSL
GET nenseely.com/js/config/sd/sd-99275599-en.js?v=10
200 OK 5.2 kB URL GET HTTP/3 nenseely.com/js/config/sd/sd-99275599-en.js?v=10
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type ASCII text, with very long lines (5380), with no line terminators
Hash 5f743ae44ecf79f46e1283242703efe9
b94976f36efc92d69bc7dca22c022fae0fe9f97a
9ffb0e0f086d5d9ca36db4cf2c10823ad6dd1442ef80902672ab7dd26620114f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/sd/sd-99275599-en.js?v=10 HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a27-1428"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3069
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMv%2B76XUWNO%2F877hk2gCWIcSv43UQhsf7bj3guiq%2B8uJx%2FKSSEmfFYqCilphPrx8F2HVa5dJ2kkgLOvGsM1eQFe2CQmS78OKRsEZxUnJL%2BBVdO3Jkqd8tkR7XRyP85s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0eeab956aa-OSL
content-encoding: br
GET nenseely.com/js/v-utilities.js.a456b741.js
200 OK 2.6 kB URL GET HTTP/3 nenseely.com/js/v-utilities.js.a456b741.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (2645), with no line terminators
Hash 852ea4d04438ff562ceadbbb71009dd0
9c4736483676fe729102bf471f4d766b17bd23b5
0e7a97427b44dc39e3a00f543f5847610da645860d80e1227c44c75033811f0c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-utilities.js.a456b741.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a27-a11"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NuF7LVp1ySfzbMZb0S5hfIcpvd66E5gnXcC7vBctKGhaG%2BPiP5%2FoVAWj%2B80oJnjChjpsmdSJQuXcvDS8jin6xvph2VfbJjekgip0yyDO15bTlcJ8Isxa1641TuF7vKA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0faba356aa-OSL
content-encoding: br
GET nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
200 OK 8.2 kB URL User Request GET HTTP/2 nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
IP
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type HTML document, ASCII text, with very long lines (8487), with no line terminators
Hash d46f6a2c9698c9a77fa63c5e55a2e6c3
137d76dfafa031b2ec464c92505c390f2008555f
801134b35c16f4d8891264db164b7d9757dc4fcd52c21a5f3e3adfb98fdd6e28
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 24 Sep 2024 07:47:03 GMT
content-type: text/html
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NtzAnbinO0%2F5XrA%2Fupt0EXmlsxoYUDObXMIXQPlTeSqkC5Y6ApQ0hXnhkDxtr982W5WVypLCMbWNFSRsKri08IIGVgs%2FrMlt8v7kNNk1hodjiwvOP2ij7uNwSaicMis%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8c812a0ced09b4f4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nenseely.com/js/SweepHeader.d70c07bc.js
200 OK 1.1 kB URL GET HTTP/3 nenseely.com/js/SweepHeader.d70c07bc.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (1097), with no line terminators
Hash 385266b7b912d6fb021867ab8ec452e7
53943436d6efffe4fbee348b6600aa2924c9cfa6
88172ca6ae46cea52ae752f0b6d771f7ebc790ea91fd4d9f08248cc1e965396c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/SweepHeader.d70c07bc.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a26-429"
last-modified: Mon, 23 Sep 2024 15:32:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WcpZ9CIIme8GyW9LMrKvcT04jjI5vUlczmYUR3I7gUE7TDwf7btCNLBBHTz9Of%2FLGO0Jlzee3rzwNg6%2Ffzqt4uzilCv2EnXYPITzkhB%2BwmCm4I9OIGQobOB52t2OGJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fab9756aa-OSL
content-encoding: br
GET nenseely.com/js/SurveyContainer.2f08abd0.js
200 OK 57 kB URL GET HTTP/3 nenseely.com/js/SurveyContainer.2f08abd0.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (56840), with no line terminators
Hash a503a39fa643af38d49e28cf8d2a49f3
b3b834f743cca5fdca0ea831e37a861e8b25d7b2
1c4ecfe023b36172e572077bfddeeab93fba70d3c4c8705f0cc022afcf1e4b25
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/SurveyContainer.2f08abd0.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=56843
etag: W/"66f18a28-de0b"
last-modified: Mon, 23 Sep 2024 15:32:56 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6041
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mxyBX%2FkCSuKyIi1OFXHRq33xAuMUYghQr87qkN%2FHOBeruHLHYtr1fkR28VPfF1wTylqeX5pohMDA8PjhGWx959NpjVPStL%2BEJJfbccon3%2BWAgDV6F0CJFoTmWMCR%2B8Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0fbbae56aa-OSL
content-encoding: br
GET nenseely.com/js/_rtc.18eb00dc.js
200 OK 12 kB URL GET HTTP/3 nenseely.com/js/_rtc.18eb00dc.js
IP
Requested by https://nenseely.com/policy-sweep-check.html?offer_id=99275599&geo=NO&oaid=0080e11dea7340e0fe7f0afa6742b319&s=862351016807637322&z=7930688&b=21546778&var=7512248&campaignid=14083&utm_campaign=7512248&utm_medium=7930688&utm_source=zd_14083&utm_term=21546778&utm_content=zd_public_v2&country=NO
Certificate IssuerGoogle Trust Services
Subjectnenseely.com
Fingerprint9D:0A:E9:03:E6:79:2E:B7:AC:E6:22:A4:8A:D2:EE:59:F7:C5:2F:F2
ValidityTue, 10 Sep 2024 16:27:17 GMT - Mon, 09 Dec 2024 16:27:16 GMT
File type JavaScript source, ASCII text, with very long lines (12222), with no line terminators
Hash 5c5f3060cd93784f5fa50afe6afc74d6
75e3b31d4f51eb81f248f6b839b6d72d914ab135
c95a1d56c4d585ba485463a4d4061e64b1e46d17f4b9e83cab0f95302cba65fe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_rtc.18eb00dc.js HTTP/1.1
Host: nenseely.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 24 Sep 2024 07:47:04 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66f18a27-2fbe"
last-modified: Mon, 23 Sep 2024 15:32:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6123
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=68H0uXX2mDuptFGnsHr9vlTFP5MuXWmWEo%2BS%2FVTKRcQwsyuZ9J8P9cFrXwp8yU1wZVOz4l7ADloDUv43rnc64SbENdo9fz87y5rTVj6wjer1Pfmz7tj1SC%2FYwJFjiY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8c812a0e293456aa-OSL
content-encoding: br
104.21.5.147
35.244.181.201
23.36.77.32
139.45.197.245
188.114.96.1