Report - greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true

Report Overview

Submitted URL
greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
IP
104.21.66.209
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 22:37:44
Access
public
Website Title
greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Final URL
greenorbitly.com/blank
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
greenorbitly.com	unknown	2023-12-20	2023-12-21	2024-04-18	8.0 kB	425 kB	104.21.66.209
undefined	142677	unknown	2020-01-28	2023-07-23	468 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	undefined	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js	89 kB	2023-12-01	2024-05-19
Pretty URL greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 17:43:42 Last Seen2024-05-19 16:08:18 Times Seen113 Hash 8de5f1bfeb434ccf34a254a49093706a 78e1085a0f56e6e20f14f84a70ed45079b2a4da9 0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a Loading...

	greenorbitly.com/_next/static/chunks/pages/_app-3c580167d7556a71.js	19 kB	2024-05-07	2024-05-08
Pretty URL greenorbitly.com/_next/static/chunks/pages/_app-3c580167d7556a71.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 06:09:08 Last Seen2024-05-08 00:37:45 Times Seen10 Hash 2d385fb52ec0ddeb7279c32d841ef792 965cc3a31900b7f59f2b444c87b3a5ea57f303e3 767c792b5241303a607b649f87126d760b71d3db10f86ef26246691888d12b5a Loading...

	greenorbitly.com/_next/static/chunks/7928-34fde4ce1d4f2a43.js	93 kB	2024-05-07	2024-05-08
Pretty URL greenorbitly.com/_next/static/chunks/7928-34fde4ce1d4f2a43.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 06:09:08 Last Seen2024-05-08 00:37:45 Times Seen10 Hash beb94707f02fac3bf468e8ed87c296ba 4b604cf8b7871e8e65e49cb19f27a8b939037ceb bd2317127e681f24da7d931d274531e639c48b1e3ece2f4aa34e90a09ddf07ba Loading...

	greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_buildManifest.js	1.0 kB	2024-05-07	2024-05-08
Pretty URL greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_buildManifest.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 06:09:08 Last Seen2024-05-08 00:37:44 Times Seen5 Hash 98fc0720ac8651424f9b41a03aa600a0 66a937f59ee19a0f7252566fbb8d5d3fbd6255b5 c866742cc545ad82a1400ea0bd51c923ead456b9c34886785d1a00eff2daa82f Loading...

	greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_ssgManifest.js	77 B	2023-03-07	2024-05-19
Pretty URL greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_ssgManifest.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2024-05-19 21:05:48 Times Seen87598 Hash b6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e Loading...

	greenorbitly.com/_next/static/chunks/webpack-efa57154fdd02278.js	11 kB	2024-05-07	2024-05-08
Pretty URL greenorbitly.com/_next/static/chunks/webpack-efa57154fdd02278.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 06:09:08 Last Seen2024-05-08 00:37:45 Times Seen10 Hash 69cb8839247d9a7d59dfbbe7bbf9ecee 4ca180e33a5dddf0ce9bd7bf589918ab71a44d5b 9b16f64d2b6f7ab5b79c21d78b7b749de241a94f3302befbf06ac60627e790ae Loading...

	greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js	141 kB	2023-04-09	2024-05-19
Pretty URL greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 05:13:29 Last Seen2024-05-19 16:08:18 Times Seen224 Hash 6081d0683ad8f48c96c1fa6ba4b00a6c 288295b31b2be8ca70324de3142b75483a4571cf 1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580 Loading...

	greenorbitly.com/_next/static/chunks/pages/index-b0225420320d8186.js	22 kB	2024-05-07	2024-05-08
Pretty URL greenorbitly.com/_next/static/chunks/pages/index-b0225420320d8186.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 06:09:08 Last Seen2024-05-08 00:37:45 Times Seen10 Hash 5fc5a7ae974deb27cc8285c0adb29016 0f04fc07f350d82b614f6b88814dd6b45f0bbc55 a5ed31b66becbdfa65d43c0c1b33f8c8239c2313dc758ba442d2962aa7243c7e Loading...

	greenorbitly.com/_next/static/chunks/pages/blank-b75035bea272d899.js	911 B	2024-05-07	2024-05-08
Pretty URL greenorbitly.com/_next/static/chunks/pages/blank-b75035bea272d899.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-07 06:09:08 Last Seen2024-05-08 00:37:45 Times Seen10 Hash c31ba3cab9cef554827e56aa34a0ba42 1cc03303cc57bb85e737ca9b8e1c7ae597b1a7ff 7c27bd782b1ed63ca1ea7bbe8ccb898998c9430e629701b1ea4b52d027fa8985 Loading...

HTTP Transactions (13)

URL IP Response Size

greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_ssgManifest.js

104.21.66.209

200 OK

10 kB

URL GET HTTP/3
greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_ssgManifest.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
ASCII text, with no line terminators
Size
10 kB (10132 bytes)
Hash
b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

HTTP Headers

GET /_next/static/5d3QJLB4Lw1sFGSwIR1BN/_ssgManifest.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"4d-18f5017d29a"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 85655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xxrnX1Y%2FXH4zMG8iP0a%2BdFiHPO7YGN2TfoAv%2BWM5ugZgzOebPiC%2BIZbYtyNSG2AXLYRwI%2F3O6C6fLuYWkB65M8d3jKonsnBwLtfHr4rvDOisICX2yJRspRiBuW%2FQcDEdGJpJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1992c8c569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true

104.21.66.209

200 OK

1.6 kB

URL User Request GET HTTP/2
greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
HTML document, ASCII text, with very long lines (1755), with no line terminators
Size
1.6 kB (1621 bytes)
Hash
ed7d7461e978023a49dde03fc28f58f8
4fc08636e5504a062111d6a54b92a0eb57b77eac
b8b39bbbbb0081297f49ca56fff3163a6f498d7d18877c4be7514990cfb0099f

HTTP Headers

GET /?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=haT4B%2F2ug9Qw0pXSRgX%2BHklTrEXXBq%2BFgeupwlhIGvObXVq3PNTPNqzC76TeHWS0migS31wWGVpWUMqIqeRGyy%2FD1ibwWZWGb8IMi%2BOcPeRn%2BfQ7xZyPJclCPb5jdD4Z9gK9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b196399e56a4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

greenorbitly.com/_next/static/css/9d92a176c9608aa4.css

104.21.66.209

200 OK

102 B

URL GET HTTP/3
greenorbitly.com/_next/static/css/9d92a176c9608aa4.css
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
ASCII text, with no line terminators
Size
102 B (102 bytes)
Hash
6cf10bb0ebaccbb83a7d95b8b2faf6a2
0c203afc6a2c883c7b4f0a8561cd6df35dca1ba3
9b5d584b6200dfb2ea17d372ceb88c61ee68bf6e7ae5cabed28d31952b048a10

HTTP Headers

GET /_next/static/css/9d92a176c9608aa4.css HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Apr 2024 22:48:25 GMT
etag: W/"66-18f2c0b8ab1"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 613448
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iZ1CH0TJv6KF3eeIljBUzTRhRdtU6UUjTd2ZbH9L6xNm65Zn%2FQRrBrqAEscf853nz9eivDoqnhkdO%2Fjkn%2FvdUHKZ8BRM8SkNAMY2NRspj3F9PyXgKHw4Pqmh3lriUqby18mg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1991c7b569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/pages/index-b0225420320d8186.js

104.21.66.209

200 OK

22 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/pages/index-b0225420320d8186.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (21926), with no line terminators
Size
22 kB (21926 bytes)
Hash
5fc5a7ae974deb27cc8285c0adb29016
0f04fc07f350d82b614f6b88814dd6b45f0bbc55
a5ed31b66becbdfa65d43c0c1b33f8c8239c2313dc758ba442d2962aa7243c7e

HTTP Headers

GET /_next/static/chunks/pages/index-b0225420320d8186.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"55a6-18f5017d296"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 85655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PitjlqjPaYafQ%2F7L4j7t0rkwruq6ZiEyafmyvc%2FDG2BtFcCw6ZQwKlE5rpRCOT1ibNRHqHb9%2BlsLHtAsBMJx2RAhp9homRsKEc4zvNXh6lXuDz6QtyHSM%2B7Zz3Jh%2B2zXlLdE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1992c89569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js

104.21.66.209

200 OK

141 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (65201)
Size
141 kB (141053 bytes)
Hash
6081d0683ad8f48c96c1fa6ba4b00a6c
288295b31b2be8ca70324de3142b75483a4571cf
1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580

HTTP Headers

GET /_next/static/chunks/framework-3671d8951bf44e4e.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"226fd-18f3ce5eaa8"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 407416
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tWNFbXksR7PqbLfaMoeh96JB7cpNwoHIxM9i6elYZwjgJpayL%2FPSk%2Bk2ei%2FcHq2NtyqeP7ltQdALhm%2Fw4T1FewLSceo5PEq7s347skRSWXvxDV4sbk3DQAl2ejckNQSNHGIz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1991c83569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/7928-34fde4ce1d4f2a43.js

104.21.66.209

200 OK

93 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/7928-34fde4ce1d4f2a43.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
93 kB (93215 bytes)
Hash
beb94707f02fac3bf468e8ed87c296ba
4b604cf8b7871e8e65e49cb19f27a8b939037ceb
bd2317127e681f24da7d931d274531e639c48b1e3ece2f4aa34e90a09ddf07ba

HTTP Headers

GET /_next/static/chunks/7928-34fde4ce1d4f2a43.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"16c1f-18f5017d296"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 85655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QKhUPu1mfukQoXENFLI2PBuwuQrc1zubNeQc23XdPS0wWD%2FyB%2FO6dCpN6K9IL5ubCHwICi%2BDMgh5E1417aG9ASxrIM9%2FuqWYzRyBazi0rplF%2BTjmkf3xTW9rNZzDp2fh4NTy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1992c87569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/pages/blank-b75035bea272d899.js

104.21.66.209

200 OK

911 B

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/pages/blank-b75035bea272d899.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (911), with no line terminators
Size
911 B (911 bytes)
Hash
c31ba3cab9cef554827e56aa34a0ba42
1cc03303cc57bb85e737ca9b8e1c7ae597b1a7ff
7c27bd782b1ed63ca1ea7bbe8ccb898998c9430e629701b1ea4b52d027fa8985

HTTP Headers

GET /_next/static/chunks/pages/blank-b75035bea272d899.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding, Accept-Encoding
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"38f-18f5017d296"
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: HIT
age: 62927
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w4pqj50gQ6%2FEOfx6NHCogQ1Jt%2BBA8b9tEvQabu6d2rGhZIsNdsJXutF%2BTkjrwt%2BtHkEjOQFHAPZZEfyngMAQ1daMW6Csq5oBNxqsiLGt75IOqbBGVXm24V60it2IhKoou25q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b19a1d16569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/webpack-efa57154fdd02278.js

104.21.66.209

200 OK

11 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/webpack-efa57154fdd02278.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (10551), with no line terminators
Size
11 kB (10551 bytes)
Hash
69cb8839247d9a7d59dfbbe7bbf9ecee
4ca180e33a5dddf0ce9bd7bf589918ab71a44d5b
9b16f64d2b6f7ab5b79c21d78b7b749de241a94f3302befbf06ac60627e790ae

HTTP Headers

GET /_next/static/chunks/webpack-efa57154fdd02278.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"2937-18f5017d296"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 85655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6hjGVGZGxIZ0kG9r5WmuRJ09kJIZbQcz44dHt98M6Cy01CO3BKFOgLTaUr4bqYSz0%2Bk%2F05aHW2ddmYnrUEF8MAJUHa1GUnzpr9vf498Qy69VC0RgYtj1igmDlIOrRB%2F6I3o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1991c7c569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js

104.21.66.209

200 OK

89 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
89 kB (89343 bytes)
Hash
8de5f1bfeb434ccf34a254a49093706a
78e1085a0f56e6e20f14f84a70ed45079b2a4da9
0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a

HTTP Headers

GET /_next/static/chunks/main-403c8612371c9360.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"15cff-18f3ce5eaa4"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 407416
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MeiIU87HvBHRBQ0Lmdy6a8RAylUpPZBaizpVT0Q1zOGgUTp54%2BkUT5v2stoWtm2m2QYpzIhkFfm71V9d3KTPOPBx44JKFKRPtLlRmj%2BzZrCcvFlPnu9qEDpZI8aIOpQvzqjS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1991c84569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/pages/_app-3c580167d7556a71.js

104.21.66.209

200 OK

19 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/pages/_app-3c580167d7556a71.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (18770), with no line terminators
Size
19 kB (18770 bytes)
Hash
2d385fb52ec0ddeb7279c32d841ef792
965cc3a31900b7f59f2b444c87b3a5ea57f303e3
767c792b5241303a607b649f87126d760b71d3db10f86ef26246691888d12b5a

HTTP Headers

GET /_next/static/chunks/pages/_app-3c580167d7556a71.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"4952-18f5017d296"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 85655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wdYofrYTadHtKoZTVlnmo0pxsQVPzja76ySHWn9rHCioEdYL1GmF9LjVdn9c1jTPbGWp9vjQjmyNArEVv1V6dCwd8KbrwBNywmL2ejfj5mx%2B4ltK0slTE1mNu5%2FE1B3mPxpW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1992c85569d-OSL
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_buildManifest.js

104.21.66.209

200 OK

1.0 kB

URL GET HTTP/3
greenorbitly.com/_next/static/5d3QJLB4Lw1sFGSwIR1BN/_buildManifest.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
ASCII text, with very long lines (1102), with no line terminators
Size
1.0 kB (1034 bytes)
Hash
e712eab98071940c0bb7fefa5c03545e
2074e8d486d2b77814c11a99cbabf814b0c2bc20
bc26fe1978ffd2aa4f37be87a2ddd23242eb35e64329ac91caea12aafaeb1fdd

HTTP Headers

GET /_next/static/5d3QJLB4Lw1sFGSwIR1BN/_buildManifest.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 06 May 2024 22:48:09 GMT
etag: W/"40a-18f5017d29a"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 85655
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EeJbV69DofGN%2FR3KJNQ6d0kR%2FTo8uWpzlnKEmMydgh5doxfN9y2RS0d8NbujhfxV4cIdOL1eV02XMvf9WG46u0ui5e3bGI1XGivespphmog5kBC%2FlwLY7TZLTVep3sIQo%2Fej"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b1992c8b569d-OSL
alt-svc: h3=":443"; ma=86400

undefined/click?upd_clickid=cotapsb2r96s73arv9qg&add_event6=1

0.0.0.0

0 B

URL GET
undefined/click?upd_clickid=cotapsb2r96s73arv9qg&add_event6=1
IP
0.0.0.0:0
ASN
#0

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /click?upd_clickid=cotapsb2r96s73arv9qg&add_event6=1 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://greenorbitly.com
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

greenorbitly.com/favicon.ico

104.21.66.209

200 OK

26 kB

URL GET HTTP/3
greenorbitly.com/favicon.ico
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
26 kB (25931 bytes)
Hash
c30c7d42707a47a3f4591831641e50dc
9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e
2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6787328&cid=cotapsb2r96s73arv9qg&lpkey=17151ae792658d5a6e6db314bdb2e7713238221693&isV2=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 22:37:17 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Mon, 06 May 2024 22:47:54 GMT
etag: W/"654b-18f501797f1"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4lHvyVyU7JguSUf2mdHVc5sjAh3N5igL0Qk%2B5Q1AAEqItJ%2BNpz3M3LuGECqIlLDVIW%2FJwXZrpwe6sVfYTqZ179Imv%2Bpt4fWZ1qHL%2FhBPjHldrhfMhYGx64uqZY%2FKsoNJpn8H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8804b19a3d2d569d-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML