| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.35.47_REC-320x180.png |  185.178.208.133 | 200 OK | 33 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.35.47_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash6dfe9f2b0d4879036360078ba204a915 244525345e40011a6d2e8adb7b0f29a2c22f5d38 08a3923fb9e042aebca59f65ea4d8f3967b042ec3c4397032e4845dacce5f932
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.35.47_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=KRWWP3Ql7JpTpyD0; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Mon, 28 Apr 2025 11:36:07 GMT
accept-ranges: bytes
content-length: 32938
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/E365740-720p-frame-at-0m2s-320x180.jpg | 185.178.208.133 | 200 OK | 14 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/E365740-720p-frame-at-0m2s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash7c7c2cf17b0f75413f1561db38ec000d a5af4543012efc715e08f3c2114f7cdedd78cb3c 12baf4e6ff541f5e2a8204043e165d6b41d6e4180f098fe5e2c5cb01da424594
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/E365740-720p-frame-at-0m2s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=f0brJnoy1otjmrar; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sun, 27 Apr 2025 10:14:36 GMT
accept-ranges: bytes
content-length: 14512
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/26C7E7A-frame-at-1m6s-320x180.jpg | 185.178.208.133 | 200 OK | 11 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/26C7E7A-frame-at-1m6s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash372ded97a344bf96c2114a89d742e905 e868ffde295671155951eb280df9db90a4008306 3ac7161b89714691da70e0e675f9cc81e7a611bb36a02b66e1fe57550f20e979
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/26C7E7A-frame-at-1m6s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=LTVYyAmv60uKaXsK; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:04 GMT
last-modified: Sun, 27 Apr 2025 10:08:22 GMT
accept-ranges: bytes
content-length: 11346
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/1910734075654012928-frame-at-23m43s-320x180.jpg | 185.178.208.133 | 200 OK | 11 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/1910734075654012928-frame-at-23m43s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash76cd242739c78eb4628f6dd233cf2a67 fcacfd1c59ed4b3599e322d1e9ac9b0b4c2a1770 91943beb8f98b1a48a743bcba204ec28eff09c98a5be902c81c0e0416a76b75a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/1910734075654012928-frame-at-23m43s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=ezK2DySd0dasOl7M; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:07:00 GMT
last-modified: Fri, 25 Apr 2025 11:35:17 GMT
accept-ranges: bytes
content-length: 10675
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 10227
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/24.04.2025_12.02.41_REC-320x180.png | 185.178.208.133 | 200 OK | 32 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/24.04.2025_12.02.41_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hashbc8cd99e9187917c06c164fec38ad9cf 552240ffc548e8db3ebb9071407fb5bdd2edbcbe 23a9d2449eab8462932ec86145627045dea41c02b31601ad7ed22f08eb857a37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/24.04.2025_12.02.41_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=bY3HWhIxeBb8hvX0; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:52:15 GMT
last-modified: Thu, 24 Apr 2025 11:03:03 GMT
accept-ranges: bytes
content-length: 31645
content-type: image/png
ddg-cache-status: HIT,HIT
age: 7512
X-Firefox-Spdy: h2
|
|
| guidepaparazzisurface.com/lv/esnk/2064784/code.js |  94.242.247.33 | 200 OK | 175 kB |
URL GET guidepaparazzisurface.com/lv/esnk/2064784/code.js IP94.242.247.33:443
CertificateIssuerGoogle Trust Services Subjectguidepaparazzisurface.com FingerprintE0:2B:E5:BB:DD:D5:4D:8C:03:81:64:8C:41:56:C2:13:F7:7E:38:0F ValidityWed, 12 Mar 2025 15:21:29 GMT - Tue, 10 Jun 2025 15:21:28 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size175 kB (174719 bytes) Hashdb945fef7bfbb8351b2df8cbf8b308e2 4cf092ce54696b37c1c706783cbfb75e2156e06d 1e3f58207a17c9ce4413c023f57d66b6f3fca09330522d04df468c5ba87f5ca0
GET /lv/esnk/2064784/code.js HTTP/1.1
Host: guidepaparazzisurface.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Apr 2025 00:57:26 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 28 Apr 2025 08:42:15 GMT
vary: Accept-Encoding
etag: W/"680f3f67-2ab27"
x-js-ab2: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.49.02_REC-320x180.png | 185.178.208.133 | 200 OK | 38 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.49.02_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash91f17940c81e969f5008fae7fca3dae1 d720c33258de1275431b867c24a5d2529206086d 12217147bcba839e3504e731c278738804011b89352682b2a268bbf5a821ae40
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.49.02_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=5KaJQolaazGNnqCk; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:02 GMT
last-modified: Mon, 28 Apr 2025 11:49:19 GMT
accept-ranges: bytes
content-length: 38304
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.46.38_REC-320x180.png | 185.178.208.133 | 200 OK | 42 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.46.38_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash5d4fabfc9f32bbab773752c522869e4f 2cf03e69ee0910e02571dcf6b887715ffe22755f b9946a4f5a05476529394610c5c6e812a362c2e2895bb8d9a42461c6c2104063
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.46.38_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=RMQ6K5bfJO8Evxkl; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:02 GMT
last-modified: Mon, 28 Apr 2025 11:46:58 GMT
accept-ranges: bytes
content-length: 42349
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/27.04.2025_11.12.14_REC-320x180.png | 185.178.208.133 | 200 OK | 42 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/27.04.2025_11.12.14_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash92dd81cc1fa462d05180ad77d9a9d77b 78a012e244f8110dfcd2a8b51b859f461bd4eaba 9ae761aeb2daa9bf8df6f00d8e8dd6b15cfe5d4c82c21519db67079f4ca6fa02
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/27.04.2025_11.12.14_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=1DTtdZOov6JRwjQo; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:04 GMT
last-modified: Sun, 27 Apr 2025 10:12:34 GMT
accept-ranges: bytes
content-length: 42528
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/26.04.2025_14.13.21_REC-320x180.png | 185.178.208.133 | 200 OK | 47 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/26.04.2025_14.13.21_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hashdb9064a538912160ef8c9e3a593464eb 3ac3a02bf11a4f66015e21ac6bfe88deb7ff5750 6cce2db1b2e3a005bd878af2f4de4e57d8c64fe0aa84358c95ce8d751c46300c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/26.04.2025_14.13.21_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=Qy1wrB3QRjeiuJXj; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sat, 26 Apr 2025 13:13:46 GMT
accept-ranges: bytes
content-length: 46850
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/D0A8318-frame-at-0m29s-320x180.jpg | 185.178.208.133 | 200 OK | 14 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/D0A8318-frame-at-0m29s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash084d1eb3a7b03afc344462a502e4690e 1dbe99f3e52decf09b78a5a57598b08d70fb829b 36fee0c49813e4797a675ccbb98c406c63acff71bf0015916c3910499d5a8f0d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/D0A8318-frame-at-0m29s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=ecVpvIMaChSZKKog; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:23:21 GMT
last-modified: Fri, 25 Apr 2025 11:26:48 GMT
accept-ranges: bytes
content-length: 13569
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 9246
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/24.04.2025_11.53.43_REC-320x180.png | 185.178.208.133 | 200 OK | 30 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/24.04.2025_11.53.43_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash483e2830f728adfc5d433de007a898df cdd478ce3be45189c94f21b5b4f6ca8a07478432 9415c920c7a6e6c47cd6b87f65f8ec835381799566319f15199c07f680544515
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/24.04.2025_11.53.43_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=PDGcWE8buNVQ0deX; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:52:15 GMT
last-modified: Thu, 24 Apr 2025 10:54:06 GMT
accept-ranges: bytes
content-length: 29826
content-type: image/png
ddg-cache-status: HIT,HIT
age: 7512
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 185.178.208.133 | 200 OK | 88 kB |
URL GET pytsct.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=9ojMdas4OoEofBWz; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Fri, 25 Apr 2025 14:18:40 GMT
last-modified: Mon, 28 Aug 2023 14:14:24 GMT
accept-ranges: bytes
content-length: 87553
content-type: text/javascript
ddg-cache-status: HIT,HIT
age: 297526
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.43.07_REC-320x180.png | 185.178.208.133 | 200 OK | 82 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.43.07_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hashbad8b8f0a1381634f36f9d839ec654f1 c2eb62d77a712283ed50d3782891e9eb8e2ac121 7c89a75362f354e14136764e7c176f6b88e53f8c3767090be7537f36b7cab7dc
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.43.07_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=aIspB2jbUspRuaEU; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:02 GMT
last-modified: Mon, 28 Apr 2025 11:43:26 GMT
accept-ranges: bytes
content-length: 82219
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/26.04.2025_14.15.42_REC-320x180.png | 185.178.208.133 | 200 OK | 44 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/26.04.2025_14.15.42_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash0f6d49883a7e0cbc798aff39f7e4c59f 0e030cd8297e2800c0346d160bf65ca47e7b0a10 2baa6a9d68445d733e7ad10d0274ff826e9cd3d923e3b1207c5f9f0eb68bc0f9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/26.04.2025_14.15.42_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=LrzypsLU9jaxgkWa; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:05 GMT
last-modified: Sat, 26 Apr 2025 13:16:08 GMT
accept-ranges: bytes
content-length: 43842
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/A981062-frame-at-0m46s-320x180.jpg | 185.178.208.133 | 200 OK | 11 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/A981062-frame-at-0m46s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash9200bde17ca722e37c3df0ecb89e68a9 00840c2a0441bf5396ec81cbb75572da4a3587b2 bb13002ff32a37cb16eeef65b8a4d584655308eb314d65edbf55af1cdf9edf47
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/A981062-frame-at-0m46s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=wHHKb55stsearUp9; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sat, 26 Apr 2025 13:11:55 GMT
accept-ranges: bytes
content-length: 11156
content-type: image/jpeg
ddg-cache-status: HIT,HIT
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/24.04.2025_12.08.08_REC-320x180.png | 185.178.208.133 | 200 OK | 27 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/24.04.2025_12.08.08_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash201bc39808447388638de6329720ea68 beb309b66fa63c754b299017b9a361337d450139 4948b42da31ccec12b1d2e94213b9f97366f7fedc04c295403aa101eef1453d1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/24.04.2025_12.08.08_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=HdBnvorTFYtU6HHa; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:52:15 GMT
last-modified: Thu, 24 Apr 2025 11:08:25 GMT
accept-ranges: bytes
content-length: 27088
content-type: image/png
ddg-cache-status: HIT,HIT
age: 7512
X-Firefox-Spdy: h2
|
|
| experttrafficcounter.com/stats |  52.59.66.7 | 200 OK | 40 B |
URL GET experttrafficcounter.com/stats IP52.59.66.7:443
CertificateIssuerAmazon Subjectexperttrafficcounter.com FingerprintEE:A0:89:D0:CF:A2:E2:EC:50:6D:6C:20:D2:5A:BB:B9:8C:6E:3F:CC ValidityThu, 23 Jan 2025 00:00:00 GMT - Sat, 21 Feb 2026 23:59:59 GMT
File typeASCII text, with no line terminators Hasha672d891ec8261246f8c66c492f4abeb 700fb68cd4d716692a933a0457e137b655ef23c9 48fb0cef299e55677bbac644e447a9adeb12cf41b2084ffa6c9e251c6bba3b34
GET /stats HTTP/1.1
Host: experttrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pytsct.com
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Apr 2025 00:57:27 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://pytsct.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=a9567bef-eda6-40f4-a2ce-ad0e67286137:1:1; expires=Fri, 27 Apr 2035 00:57:27 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8 | 185.178.208.133 | 200 OK | 19 kB |
URL GET pytsct.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJavaScript source, ASCII text, with very long lines (16290) Hash1dafa7fe14b33c26fef9b0e5ba0c8e72 62f67cdac55d89c43570bf0c338f4edf548b14e1 50cc1a0490008ec62ca8b581fa9cdcfb2eda2d36a08ccbeb1f004da599e9cc61
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=YyuV0G2DqfHS7OVV; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=puOWhuzrBvGBXnUa; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 02:19:55 GMT
last-modified: Tue, 15 Apr 2025 23:04:47 GMT
accept-ranges: bytes
content-length: 19264
content-type: text/javascript
age: 81451
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/DE37CBC-720p-frame-at-0m24s-320x180.jpg | 185.178.208.133 | 200 OK | 14 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/DE37CBC-720p-frame-at-0m24s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hashe40f5009a8016ab8da6246eb34b83942 bd6bf85ff1351cb4fec5607af111249cd3a4fad2 ec0d536501b4cf363c8a0f6fb64587786d2d122e42c28451544b92c91ac1743e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/DE37CBC-720p-frame-at-0m24s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=v5vXwvdApjhBiQMq; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sun, 27 Apr 2025 10:17:03 GMT
accept-ranges: bytes
content-length: 13560
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| | 185.178.208.133 | 200 OK | 71 kB |
IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators Hash695e862a87ff1149a6d2b9102842975c f2e8914c8e6b0569040b79f1ed553057493a31e0 bd95e9d94cefad5e49bd65f4ec79d9afb31c7466591b28f475350b62dddd75a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=4P8iZOPSlNO5O4jn; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:25 GMT
__ddg10_=1745888245; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:25 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:25 GMT
__ddg1_=rqkOjIXAeMnIqHm8jtFj; Domain=.pytsct.com; HttpOnly; Path=/; Expires=Wed, 29-Apr-2026 00:57:25 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:57:25 GMT
link: <https://pytsct.com/index.php?rest_route=/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.51.21_REC-320x180.png | 185.178.208.133 | 200 OK | 36 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.51.21_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hasheefe704d38b05ffd6828cb894f46306e ed6c8913a7a1073c66c88b232346dc691ad5fddb db44385896822d3909346dec48138e38485639a3bf903ce77a85ce77c1655bb5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.51.21_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=IUVNRG707OHmwhBm; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:02 GMT
last-modified: Mon, 28 Apr 2025 11:51:46 GMT
accept-ranges: bytes
content-length: 36509
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/6A2AD92-720p-frame-at-0m43s-320x180.jpg | 185.178.208.133 | 200 OK | 13 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/6A2AD92-720p-frame-at-0m43s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash67f3f96b84db07897a5419dd9b7ffb9f d56b6bd9a7fde02109d65b03f82c1af3af942499 44241a7b2fae1defdef3c33cb384db52f06e839e137e91c47d6db41e465f8106
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/6A2AD92-720p-frame-at-0m43s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=rgAx3ApWkzMx0bJT; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sun, 27 Apr 2025 10:19:39 GMT
accept-ranges: bytes
content-length: 12621
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.41.49_REC-320x180.png | 185.178.208.133 | 200 OK | 32 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.41.49_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash30ba67c5195ce45cf8c5b67fb094e955 912ac06999be79b6b7d6f89458aaa0d1aab291c9 b64d9962e09cfd09a7bdf1f6bc5a84f2169ad1ff77edd98e0bb103cd02a0a419
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.41.49_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=YZWsVeXFbXqgohDN; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:02 GMT
last-modified: Mon, 28 Apr 2025 11:42:06 GMT
accept-ranges: bytes
content-length: 31656
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/D22298F-720p-frame-at-2m24s-320x180.jpg | 185.178.208.133 | 200 OK | 12 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/D22298F-720p-frame-at-2m24s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hashf2ac101152ad697a384971da0347ccb7 cbd6dcba21bc358095d91ddfcf25703e83b44a74 48321c7fe349a9ed74c559f37461536c5b7e0dca2f552696ae84b743fe3c1f80
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/D22298F-720p-frame-at-2m24s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=OStQix1BjoK0jml9; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sun, 27 Apr 2025 10:06:34 GMT
accept-ranges: bytes
content-length: 11574
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/25.04.2025_12.24.31_REC-320x180.png | 185.178.208.133 | 200 OK | 34 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/25.04.2025_12.24.31_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash8d6f86677aba9fc0cf7c48213f4f4cc6 e6e695aa68a9b0ece30d8b6c22bead71a104b5ac c6bc0b03679c73bd6e29b569035fd9681e869a90a335c16dbda55ee85332512b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/25.04.2025_12.24.31_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=UMRmq8Zj0zQGZSRi; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 17:20:20 GMT
last-modified: Fri, 25 Apr 2025 11:24:56 GMT
accept-ranges: bytes
content-length: 34296
content-type: image/png
ddg-cache-status: HIT,HIT
age: 27427
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/24.04.2025_11.58.29_REC-320x180.png | 185.178.208.133 | 200 OK | 31 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/24.04.2025_11.58.29_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash9ca96d3ead1a0771d37ce643b385d87e 63cc8092dfcd155951c94c41a247243b76927a86 81a0fb33e372358aae047d86829850bf3118adf6c5ac325ce777ee80c1ab6577
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/24.04.2025_11.58.29_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=jvfJAlwRViSO2RAQ; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:52:15 GMT
last-modified: Thu, 24 Apr 2025 10:58:52 GMT
accept-ranges: bytes
content-length: 30594
content-type: image/png
ddg-cache-status: HIT,HIT
age: 7512
X-Firefox-Spdy: h2
|
|
| wearychallengeraise.com/watch.494520185054.js?dev=e&key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&pst=1745888307&rb=&refer=https%3A%2F%2Fpytsct.com%2F&res=14.3095&rmtc=t&shu=12c385fc018ab4ceb0d696e2e7052d29b4f18144e6c0c928430e2efdfd0a47af64a2d6b6a3fcbe180af86433b2a883dfe577964350666fc66009ca2b932135f1923f889e7a0869d16d40ae1facae364141d58ae2c7caeeac9e8240&tz=0&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1 |  172.240.253.132 | 200 OK | 5.1 kB |
URL GET wearychallengeraise.com/watch.494520185054.js?dev=e&key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&pst=1745888307&rb=&refer=https%3A%2F%2Fpytsct.com%2F&res=14.3095&rmtc=t&shu=12c385fc018ab4ceb0d696e2e7052d29b4f18144e6c0c928430e2efdfd0a47af64a2d6b6a3fcbe180af86433b2a883dfe577964350666fc66009ca2b932135f1923f889e7a0869d16d40ae1facae364141d58ae2c7caeeac9e8240&tz=0&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1 IP172.240.253.132:443
CertificateIssuerLet's Encrypt Subjectwearychallengeraise.com Fingerprint59:0D:D9:8E:52:01:C0:D1:1E:83:C9:8F:D9:E2:AA:FF:AF:B7:B8:51 ValiditySun, 20 Apr 2025 03:17:43 GMT - Sat, 19 Jul 2025 03:17:42 GMT
File typeJavaScript source, ASCII text, with very long lines (4177) Hash0594ae3b18bb64e5682fa8fb5e784d8a 3bf79216e0a80af78f9d58c069ad9acb9401cdaf 0f51d32c64cb26129d8688e4fa45f9c7162fa2828f60498acdaf93c9de2954d7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.494520185054.js?dev=e&key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&pst=1745888307&rb=&refer=https%3A%2F%2Fpytsct.com%2F&res=14.3095&rmtc=t&shu=12c385fc018ab4ceb0d696e2e7052d29b4f18144e6c0c928430e2efdfd0a47af64a2d6b6a3fcbe180af86433b2a883dfe577964350666fc66009ca2b932135f1923f889e7a0869d16d40ae1facae364141d58ae2c7caeeac9e8240&tz=0&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1 HTTP/1.1
Host: wearychallengeraise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pytsct.com
Referer: https://pytsct.com/
DNT: 1
Connection: keep-alive
Cookie: ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoyNjI4MDY3NywiayI6ImQ2YWEwZmQxNWIxODRmYTg5ZjYwMGU3ZWQzZjU0NmZhIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjozODA5MDY2LCJwaWQiOjE4MzMzNjUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MzQsImFpZCI6MjMsInB0Ijo0LCJwayI6InA3d3h6OTgzaSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9weXRzY3QuY29tLyIsImFyIjpbXX19.gCzVhgnsfdy6a13Bvv8dnH5aekeRh-3k_d1IDd8moFQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 29 Apr 2025 00:57:27 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
custom-referer: https://pytsct.com
access-control-allow-origin: https://pytsct.com
access-control-allow-credentials: true
set-cookie: uid_id2=a9567bef-eda6-40f4-a2ce-ad0e67286137:1:1; expires=Tue, 06 May 2025 00:57:27 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Wed, 30 Apr 2025 00:57:27 GMT; path=/; secure; SameSite=None
uncs=1; expires=Wed, 30 Apr 2025 00:57:27 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Wed, 30 Apr 2025 00:57:27 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Wed, 30 Apr 2025 00:57:27 GMT; path=/; secure; SameSite=None
u_pl26280677=1; expires=Wed, 30 Apr 2025 00:57:27 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 35
Host: wearychallengeraise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: af3f34cfeb2589de5cf0084c293f68ff
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdn.storageimagedisplay.com/cti/bd/f1/03/bdf10332bf86a6103b47ec75eceebd73/1708270698.jpg | 45.133.44.2 | 200 OK | 83 kB |
URL GET cdn.storageimagedisplay.com/cti/bd/f1/03/bdf10332bf86a6103b47ec75eceebd73/1708270698.jpg IP45.133.44.2:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectcdn.storageimagedisplay.com Fingerprint44:32:60:54:16:79:8E:ED:60:B9:DD:B2:36:7C:B0:DC:CC:F5:B5:5C ValidityWed, 12 Mar 2025 02:33:05 GMT - Tue, 10 Jun 2025 02:33:04 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 24.5 (Windows), datetime=2024:02:18 15:12:43], progressive, precision 8, 728x90, components 3 Hash7d58d61d22f030eeb233d77f7699693f 739efe509f7d2e41328173dce54076a0aaab9fa9 0c7499eedf96cd39ff7695da2ceca3e4cdd0a189874f063477475c8a157078b8
GET /cti/bd/f1/03/bdf10332bf86a6103b47ec75eceebd73/1708270698.jpg HTTP/1.1
Host: cdn.storageimagedisplay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Apr 2025 00:57:28 GMT
content-type: image/jpeg
content-length: 82939
server: nginx/1.21.6
last-modified: Sun, 18 Feb 2024 15:38:26 GMT
etag: "65d22472-143fb"
expires: Thu, 01 May 2025 00:57:28 GMT
cache-control: max-age=172800
x-cdn-host-id: ah0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 185.178.208.133 | 200 OK | 14 kB |
URL GET pytsct.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=IL3jnrcbPObYEGD4; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Sat, 26 Apr 2025 10:01:29 GMT
last-modified: Fri, 09 Jun 2023 02:49:24 GMT
accept-ranges: bytes
content-length: 13577
content-type: text/javascript
age: 226557
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2
|
|
| leaklitre.com/d6aa0fd15b184fa89f600e7ed3f546fa/invoke.js | 172.240.108.84 | 200 OK | 26 kB |
URL GET leaklitre.com/d6aa0fd15b184fa89f600e7ed3f546fa/invoke.js IP172.240.108.84:443
CertificateIssuerLet's Encrypt Subjectleaklitre.com FingerprintBD:80:C7:01:CD:DA:0F:AD:44:6D:4A:E1:9C:FD:58:A7:3A:8F:FA:9D ValiditySat, 08 Mar 2025 13:25:33 GMT - Fri, 06 Jun 2025 13:25:32 GMT
File typeJavaScript source, ASCII text, with very long lines (26445), with no line terminators Hashb35cfd4fcba5504789bc029a18a1e684 466673fea3657072a9b8b6d0a49a8839a670a512 e2bdfb08389e266c59a0dff92155570c1322b2f8c43686016ebffd8bd617ff9b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /d6aa0fd15b184fa89f600e7ed3f546fa/invoke.js HTTP/1.1
Host: leaklitre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 29 Apr 2025 00:57:26 GMT
Content-Type: application/javascript
Content-Length: 11094
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 9
Host: leaklitre.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 72ceb0a923c4784840d1f1725cc63b14
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| guidepaparazzisurface.com/get/2064784?zoneid=2064784&pid=__clb-2064784_1&jp=_clqqsbblfzmqrybezmmwza&dr=52&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=vX8&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=dB8hV4maHR0cHM6Ly9weXRzY3QuY29tLw&afid=2366218345812992&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0 | 94.242.247.33 | 200 OK | 6.5 kB |
URL GET guidepaparazzisurface.com/get/2064784?zoneid=2064784&pid=__clb-2064784_1&jp=_clqqsbblfzmqrybezmmwza&dr=52&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=vX8&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=dB8hV4maHR0cHM6Ly9weXRzY3QuY29tLw&afid=2366218345812992&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0 IP94.242.247.33:443
CertificateIssuerGoogle Trust Services Subjectguidepaparazzisurface.com FingerprintE0:2B:E5:BB:DD:D5:4D:8C:03:81:64:8C:41:56:C2:13:F7:7E:38:0F ValidityWed, 12 Mar 2025 15:21:29 GMT - Tue, 10 Jun 2025 15:21:28 GMT
File typeASCII text, with very long lines (6525), with no line terminators Hash76af3b709b133607d43d9ff905bc6def dd7287af11c9b0f86acdeb61c4c1b0b68a711a21 063b2616b93032de3056abae4383f00b0342237cf77817e1d434a4e67202bbd8
GET /get/2064784?zoneid=2064784&pid=__clb-2064784_1&jp=_clqqsbblfzmqrybezmmwza&dr=52&nojs=0&abvar=0&febuild=1.0.539&t=0&wcks=1&wgl=1&cnvs=1&os=0&tz=UTC&ss=1&ls=1&bb=0&cti=0&fn=3&es=13&ge=2&th=vX8&plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF&lang=en-US&pf=Linux%20x86_64&cd=24&vcv=Mesa&vcn=llvmpipe&ix=0&x=1280&y=1024&md=0&psu=dB8hV4maHR0cHM6Ly9weXRzY3QuY29tLw&afid=2366218345812992&eclog=0&snc=0&ssc=0&vp=0&dto=2&im=1&noch=1&de=0&cs=5&bp=3&uf=0&freq=0 HTTP/1.1
Host: guidepaparazzisurface.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: cart=1; cart_p=2
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Apr 2025 00:57:27 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: CHCK=1; Path=/; Expires=Tue, 02 Jun 2026 00:57:27 GMT; Secure; SameSite=None
UID=2504281957307bec35c2da4de1a56e6d339f; Path=/; Expires=Tue, 02 Jun 2026 00:57:27 GMT; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/48DB4A6-frame-at-0m20s-320x180.jpg | 185.178.208.133 | 200 OK | 13 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/48DB4A6-frame-at-0m20s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hashf2b963db7f3c43eac667868ea5a120c7 fc582308fcec62c8f0706075ebaf4e88b10ea0e7 5d048e81f6a69014a99303c7a93d4acee25d5c61850140eefac3202efb004aed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/48DB4A6-frame-at-0m20s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=AGv1KXBmYhrI43Ce; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:23:21 GMT
last-modified: Fri, 25 Apr 2025 11:29:26 GMT
accept-ranges: bytes
content-length: 12947
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 9246
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 | 185.178.208.133 | 200 OK | 31 kB |
URL GET pytsct.com/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeASCII text, with very long lines (30837) Hash269550530cc127b6aa5a35925a7de6ce 512c7d79033e3028a9be61b540cf1a6870c896f8 799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=N5gznIAV3D3kdr3D; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 16:03:34 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 31000
content-type: text/css
ddg-cache-status: HIT,HIT
age: 32032
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/EDE1E29-720p-frame-at-0m56s-320x180.jpg | 185.178.208.133 | 200 OK | 9.8 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/EDE1E29-720p-frame-at-0m56s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash5431511d5630d8b844d9fbcf6101272b 30ec33d8cd6272d6e8c1dcbc755d4dcd58f3778f fcfba59d8a2dab7cffeb7c2395cffd5e1fcabffcdad18b07fcaf96a585a2199a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/EDE1E29-720p-frame-at-0m56s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=jzxXVC7Git2iFPtk; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 23:19:12 GMT
last-modified: Sat, 26 Apr 2025 13:21:03 GMT
accept-ranges: bytes
content-length: 9758
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 5895
X-Firefox-Spdy: h2
|
|
| guidepaparazzisurface.com/jserror?type=banner&abvar=0&build=1.0.539&zoneid=2064784&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fpytsct.com%2F | 94.242.247.33 | 200 OK | 0 B |
URL GET guidepaparazzisurface.com/jserror?type=banner&abvar=0&build=1.0.539&zoneid=2064784&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fpytsct.com%2F IP94.242.247.33:443
CertificateIssuerGoogle Trust Services Subjectguidepaparazzisurface.com FingerprintE0:2B:E5:BB:DD:D5:4D:8C:03:81:64:8C:41:56:C2:13:F7:7E:38:0F ValidityWed, 12 Mar 2025 15:21:29 GMT - Tue, 10 Jun 2025 15:21:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jserror?type=banner&abvar=0&build=1.0.539&zoneid=2064784&e=Error&m=BCLC&aa=0&trid=&url=https%3A%2F%2Fpytsct.com%2F HTTP/1.1
Host: guidepaparazzisurface.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: cart=1; cart_p=2; CHCK=1; UID=2504281957307bec35c2da4de1a56e6d339f
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Apr 2025 00:57:27 GMT
content-type: application/octet-stream
content-length: 0
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/logo-dark-transparent.png | 185.178.208.133 | 200 OK | 1.7 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/logo-dark-transparent.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 498 x 144, 4-bit colormap, non-interlaced Hasha6131094e995e6413668094445631a5c fdec23bea80ff02e0809d4eb6d597309bd2e83b8 6310bbeaedb07911cc466330ed52017462051171d28460dbe69c345e0ca340fa
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/logo-dark-transparent.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=96u81WXBLMkBKKvM; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 27 Apr 2025 17:56:12 GMT
last-modified: Mon, 14 Apr 2025 17:05:44 GMT
accept-ranges: bytes
content-length: 1676
content-type: image/png
ddg-cache-status: HIT,HIT
age: 111674
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/DEBDA2B-frame-at-1m0s-320x180.jpg | 185.178.208.133 | 200 OK | 14 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/DEBDA2B-frame-at-1m0s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hashf7f6e6d866748852633d408f6836f8a1 a27e0079017eda8cb79d5ba46de6f86eb19d69a1 d3900a4933b2de258a67690aa11a16a343c3705659e8d2903a7282ea992208e7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/DEBDA2B-frame-at-1m0s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=MupTWvHKjhzfgGug; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:03 GMT
last-modified: Sun, 27 Apr 2025 10:10:24 GMT
accept-ranges: bytes
content-length: 14147
content-type: image/jpeg
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8 | 185.178.208.133 | 200 OK | 116 kB |
URL GET pytsct.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeASCII text, with very long lines (55654) Size116 kB (116363 bytes) Hashdfe67cbbac3da53fdbbaed71c91db428 8c82643ef63a8389c1b800b7c5d0af9d684b8b24 597ddfdee7171750c16ec5aafd392cf992e9c53386d6bb6061d48e30334f09e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=3MOPs8lprKMxHMpy; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 07:44:17 GMT
last-modified: Tue, 15 Apr 2025 23:04:47 GMT
accept-ranges: bytes
content-length: 116363
content-type: text/css
ddg-cache-status: HIT,HIT
age: 61989
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/themes/kingtube/assets/img/px.gif | 185.178.208.133 | 200 OK | 1.1 kB |
URL GET pytsct.com/wp-content/themes/kingtube/assets/img/px.gif IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeGIF image data, version 89a, 1 x 1 Hash96e31d075a835fb1e9d431373451cc27 8c0c1169f70c3d487419599597f095c60ed2469f a9bb07bf95a4eb5b11f74e1be96e3cee1579e41c4c134b3773581c5340ba63ac
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/assets/img/px.gif HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=x2HCoIDDLlXlryj7; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 12:29:22 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 1095
content-type: image/gif
ddg-cache-status: HIT,HIT
age: 44884
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/7693C5C-720p-frame-at-1m28s-320x180.jpg | 185.178.208.133 | 200 OK | 11 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/7693C5C-720p-frame-at-1m28s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hashf6dd38edbf7dd87243841d267c73d46b 9c3fd1b3258adf04a5f1e55c94fa1828154dc234 25ac1e5fc8eefd92b9f4712cf9a1511bbca4555e6c08af1aa70a72ace223f31c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/7693C5C-720p-frame-at-1m28s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=y4wvHst8IgRu9wCj; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 23:19:12 GMT
last-modified: Sat, 26 Apr 2025 13:19:12 GMT
accept-ranges: bytes
content-length: 11201
content-type: image/jpeg
ddg-cache-status: HIT,HIT
age: 5895
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/26.04.2025_14.08.42_REC-320x180.png | 185.178.208.133 | 200 OK | 48 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/26.04.2025_14.08.42_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash028962464ffe6573720c77862c0be119 6a31bc6a8e1dfbe2dcbf3f6dc9ec1d315e6dfb6f 168d2da70b162c15a8c96f4565d8ff786cecf5527a704ba31fcd8cc8ab632024
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/26.04.2025_14.08.42_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=HFdKNTNV8Xk2qsSC; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:05 GMT
last-modified: Sat, 26 Apr 2025 13:09:04 GMT
accept-ranges: bytes
content-length: 47697
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2424
X-Firefox-Spdy: h2
|
|
| wearychallengeraise.com/watch.494520185054.js?key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&refer=https%3A%2F%2Fpytsct.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1 | 172.240.253.132 | 307 Temporary Redirect | 5.1 kB |
URL GET wearychallengeraise.com/watch.494520185054.js?key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&refer=https%3A%2F%2Fpytsct.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1 IP172.240.253.132:443
CertificateIssuerLet's Encrypt Subjectwearychallengeraise.com Fingerprint59:0D:D9:8E:52:01:C0:D1:1E:83:C9:8F:D9:E2:AA:FF:AF:B7:B8:51 ValiditySun, 20 Apr 2025 03:17:43 GMT - Sat, 19 Jul 2025 03:17:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.494520185054.js?key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&refer=https%3A%2F%2Fpytsct.com%2F&tz=0&dev=e&res=14.3095&rb=&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1 HTTP/1.1
Host: wearychallengeraise.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pytsct.com
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 29 Apr 2025 00:57:27 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
custom-referer: https://pytsct.com
access-control-allow-origin: https://pytsct.com
access-control-allow-credentials: true
location: https://wearychallengeraise.com/watch.494520185054.js?dev=e&key=d6aa0fd15b184fa89f600e7ed3f546fa&kw=%5B%22pytsct%22%5D&pst=1745888307&rb=&refer=https%3A%2F%2Fpytsct.com%2F&res=14.3095&rmtc=t&shu=12c385fc018ab4ceb0d696e2e7052d29b4f18144e6c0c928430e2efdfd0a47af64a2d6b6a3fcbe180af86433b2a883dfe577964350666fc66009ca2b932135f1923f889e7a0869d16d40ae1facae364141d58ae2c7caeeac9e8240&tz=0&uuid=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1
set-cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.gCzVhgnsfdy6a13Bvv8dnH5aekeRh-3k_d1IDd8moFQ; expires=Tue, 29 Apr 2025 00:58:27 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 1
Host: wearychallengeraise.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0dd2efa2227eea09a348f85cffb09b2a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| pytsct.com/wp-content/themes/kingtube/assets/js/main.js?ver=1.3.11 | 185.178.208.133 | 200 OK | 36 kB |
URL GET pytsct.com/wp-content/themes/kingtube/assets/js/main.js?ver=1.3.11 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJavaScript source, ASCII text Hash1317801bbaf6f25a4457ee66b1cee704 6db0658f567614310aaa0f58cd641e32f7850ede 919a1650792edc4d16b0e455bc5a85524563e655826653ce554229d22444e77c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/assets/js/main.js?ver=1.3.11 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=0nuynnAmZvEyYCTa; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 00:28:37 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 36213
content-type: text/javascript
ddg-cache-status: HIT,HIT
age: 88129
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.38.20_REC-320x180.png | 185.178.208.133 | 200 OK | 35 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/28.04.2025_12.38.20_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash5647a7b4f4e24455405a77cdf48db705 4564d81af958c670632b95c8f865df76b111de87 8f95fb2ceaafedaef640c67911ca4bf536576cab6cb333143d6412698b785c4e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/28.04.2025_12.38.20_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=iLvUwuTGvtIVC3gm; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:17:02 GMT
last-modified: Mon, 28 Apr 2025 11:38:43 GMT
accept-ranges: bytes
content-length: 34667
content-type: image/png
ddg-cache-status: HIT,MISS
age: 2425
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/themes/kingtube/assets/js/skip-link-focus-fix.js?ver=1.0.0 | 185.178.208.133 | 200 OK | 683 B |
URL GET pytsct.com/wp-content/themes/kingtube/assets/js/skip-link-focus-fix.js?ver=1.0.0 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJavaScript source, ASCII text Hash75abd4cd8807b312f9f7faeb77ee774b e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7 ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=q6Br5YohCjGzcccL; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 00:44:52 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 683
content-type: text/javascript
ddg-cache-status: HIT,MISS
age: 87155
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/ssstwitter.com_1745353414379-frame-at-1m6s-320x180.jpg | 185.178.208.133 | 200 OK | 10 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/ssstwitter.com_1745353414379-frame-at-1m6s-320x180.jpg IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 320x180, components 3 Hash99aaa2f14e390ddb6eee70cf710e1299 bd2731b4b234c7d074be038b5fb37bd91c9dc992 7f82a2728442f92a44a229f907880fb047ee1671baab91e1435973955f54d785
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/ssstwitter.com_1745353414379-frame-at-1m6s-320x180.jpg HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=rQxhbOTp2jtSC4kE; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:34:44 GMT
last-modified: Thu, 24 Apr 2025 11:05:04 GMT
accept-ranges: bytes
content-length: 10171
content-type: image/jpeg
ddg-cache-status: HIT,HIT
age: 8563
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=GT-TWZP3DTF | 142.250.178.72 | 200 OK | 382 kB |
URL GET www.googletagmanager.com/gtag/js?id=GT-TWZP3DTF IP142.250.178.72:443
CertificateIssuerGoogle Trust Services Subject*.google-analytics.com FingerprintE4:97:12:2A:2B:30:84:66:33:9D:D6:09:14:D3:8F:CE:3E:20:73:24 ValidityMon, 31 Mar 2025 08:54:37 GMT - Mon, 23 Jun 2025 08:54:36 GMT
File typeJavaScript source, ASCII text, with very long lines (6129) Size382 kB (381539 bytes) Hash9e4ec4af3acd2cfd3bd0c3ee5b4711ba 492dc57b3df2236fb8783ca55851ecb4cb55e98c 2e87b3581b9b4958a7699febf83ecd7d9962274f7c922064046d821947bc89e2
GET /gtag/js?id=GT-TWZP3DTF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Apr 2025 00:57:26 GMT
expires: Tue, 29 Apr 2025 00:57:26 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1072:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1072:0
report-to: {"group":"ascgcycc:1072:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1072:0"}],}
server: Google Tag Manager
content-length: 126941
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/themes/kingtube/assets/js/navigation.js?ver=1.0.0 | 185.178.208.133 | 200 OK | 4.5 kB |
URL GET pytsct.com/wp-content/themes/kingtube/assets/js/navigation.js?ver=1.0.0 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeJavaScript source, ASCII text Hash3666196ce00f5c4fb6e0c9844d3f697a 38cdee1738247cf9d898ebc1213b79593860bc39 885845403cad2b1e4dea133e2c03cadbf4f89c02fee19d33adbfd89eb16d27e2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=zH1SOKHUBcHFSh3m; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Sun, 27 Apr 2025 19:47:23 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 4494
content-type: text/javascript
ddg-cache-status: HIT,HIT
age: 105003
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/uploads/2025/04/24.04.2025_11.57.01_REC-320x180.png | 185.178.208.133 | 200 OK | 35 kB |
URL GET pytsct.com/wp-content/uploads/2025/04/24.04.2025_11.57.01_REC-320x180.png IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typePNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced Hash84ce5e647320e76b3a45f3f2e063d8a1 d91d9a8a0c83bfb01011142827f85a51a0cdf510 cff5a98b864de0325c9ba0125a36c372c410dd7e1c9d43ecaf148fa967e46a46
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2025/04/24.04.2025_11.57.01_REC-320x180.png HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=puOWhuzrBvGBXnUa; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=gB5nOcz7HGS1ObZv; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 22:52:15 GMT
last-modified: Thu, 24 Apr 2025 10:57:19 GMT
accept-ranges: bytes
content-length: 35006
content-type: image/png
ddg-cache-status: HIT,HIT
age: 7512
X-Firefox-Spdy: h2
|
|
| pytsct.com/favicon.ico | 185.178.208.133 | 404 Not Found | 315 B |
IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeHTML document, ASCII text Hasha34ac19f4afae63adc5d2f7bc970c07f a82190fc530c265aa40a045c21770d967f4767b8 d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=jvfJAlwRViSO2RAQ; __ddg10_=1745888247; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj; UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ADNFZwAAAAAAAAAB%22%2C%22CAIFRT%22%3A%22ADNFZwAAAABoECSQ%22%7D; _ga_82WBLYHS6Q=GS1.1.1745888247.1.0.1745888247.0.0.0; _ga=GA1.1.1915365789.1745888247; dom3ic8zudi28v8lr6fgphwffqoz0j6c=a9567bef-eda6-40f4-a2ce-ad0e67286137%3A1%3A1; bnState_2064784={"impressions":1,"delayStarted":0}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: ddos-guard
set-cookie: __ddg8_=k1UgN2vX6yPzxVgT; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg10_=1745888247; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:27 GMT
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Apr 2025 00:57:27 GMT
content-length: 315
content-type: text/html; charset=iso-8859-1
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/themes/kingtube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 | 185.178.208.133 | 200 OK | 77 kB |
URL GET pytsct.com/wp-content/themes/kingtube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/wp-content/themes/kingtube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0
Cookie: __ddg8_=q6Br5YohCjGzcccL; __ddg10_=1745888246; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=YyuV0G2DqfHS7OVV; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 05:51:16 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 77160
content-type: font/woff2
ddg-cache-status: HIT,HIT
age: 68770
X-Firefox-Spdy: h2
|
|
| guidepaparazzisurface.com/check.html | 94.242.247.33 | 200 OK | 926 B |
URL GET guidepaparazzisurface.com/check.html IP94.242.247.33:443
CertificateIssuerGoogle Trust Services Subjectguidepaparazzisurface.com FingerprintE0:2B:E5:BB:DD:D5:4D:8C:03:81:64:8C:41:56:C2:13:F7:7E:38:0F ValidityWed, 12 Mar 2025 15:21:29 GMT - Tue, 10 Jun 2025 15:21:28 GMT
File typeHTML document, ASCII text Hash088dba8e97eede53134c93219f7ebbae adb707654d1fe0af7d0d7a9f55660d22bd3625e4 6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff
GET /check.html HTTP/1.1
Host: guidepaparazzisurface.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Apr 2025 00:57:26 GMT
content-type: text/html; charset=utf-8
last-modified: Wed, 16 Apr 2025 07:53:28 GMT
vary: Accept-Encoding
etag: W/"67ff61f8-39e"
x-js-ab: current
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 |  104.18.14.39 | 206 Partial Content | 953 kB |
URL GET playhubconnect.com/bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 IP104.18.14.39:443
CertificateIssuerGoogle Trust Services Subjectplayhubconnect.com Fingerprint41:34:43:06:D9:8E:33:32:9D:CF:FA:1D:6C:7F:F5:A2:43:0F:50:CC ValidityFri, 21 Mar 2025 15:11:05 GMT - Thu, 19 Jun 2025 16:11:01 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size953 kB (952885 bytes) Hash87ef915cc39e1ca0204ebda8289b4f52 bf37d056d84d92ce50d337c48e4cb6ab143cda69 a5c2f77a616c7caf3801bb24f99ee6ac1c6cc2bc85c0d79f4224779e39a16249
GET /bn/bf3/7d0/56d/bf37d056d84d92ce50d337c48e4cb6ab143cda69.mp4 HTTP/1.1
Host: playhubconnect.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
date: Tue, 29 Apr 2025 00:57:27 GMT
content-type: video/mp4
content-length: 952885
x-amz-id-2: HD0L/UjDOsrgKzgLcNnxtcUoUtk/2Bg3WeJ4EerewbaHdRR76LfYt6HOb5OH9O/4njtj19Rgl+A=
x-amz-request-id: 01Z1A3SEZWF3GS1G
last-modified: Thu, 20 Mar 2025 14:21:13 GMT
etag: "87ef915cc39e1ca0204ebda8289b4f52"
x-amz-server-side-encryption: AES256
cf-cache-status: HIT
age: 1640738
expires: Fri, 30 May 2025 00:57:27 GMT
cache-control: public, max-age=2678400
content-range: bytes 0-952884/952885
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 937ad86a8d6256c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| pytsct.com/wp-content/themes/kingtube/style.css?ver=1.3.11.1744648036 | 185.178.208.133 | 200 OK | 60 kB |
URL GET pytsct.com/wp-content/themes/kingtube/style.css?ver=1.3.11.1744648036 IP185.178.208.133:443
CertificateIssuerLet's Encrypt Subjectpytsct.com Fingerprint53:23:2B:03:71:3F:CA:8D:02:98:5A:55:BC:85:18:A9:CD:80:FE:67 ValidityMon, 14 Apr 2025 14:45:54 GMT - Sun, 13 Jul 2025 14:45:53 GMT
File typeassembler source, ASCII text Hash7172cd6c3a762cdcede5d7a018b6e495 634062d67de96a8c4389fec42fa63751d47d48fb 77ab0e9c8e7f349848ea888af6efa0c434d7e628a28523c58eb826e1fe8f842a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/kingtube/style.css?ver=1.3.11.1744648036 HTTP/1.1
Host: pytsct.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://pytsct.com/
Cookie: __ddg8_=4P8iZOPSlNO5O4jn; __ddg10_=1745888245; __ddg9_=91.90.42.154; __ddg1_=rqkOjIXAeMnIqHm8jtFj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: ddos-guard
set-cookie: __ddg8_=L6xQ52iiK6Fjh4yR; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg10_=1745888246; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
__ddg9_=91.90.42.154; Domain=.pytsct.com; Path=/; Expires=Tue, 29-Apr-2025 01:17:26 GMT
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Apr 2025 00:44:51 GMT
last-modified: Mon, 14 Apr 2025 16:27:16 GMT
accept-ranges: bytes
content-length: 60340
content-type: text/css
ddg-cache-status: HIT,HIT
age: 87155
X-Firefox-Spdy: h2
|
|
0.0.0.0