Report - go.goodlifestylenews.com/NitricDrive0424/48a4110ea6d5d30d4a1ec319367080b8/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta

Report Overview

Submitted URL
go.goodlifestylenews.com/NitricDrive0424/48a4110ea6d5d30d4a1ec319367080b8/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta
IP
172.67.172.49
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-05 00:35:47
Access
public
Website Title
Free Video - Limited Time Only!
Final URL
boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-04	983 B	8.8 kB	142.250.74.106
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-03	871 B	396 kB	142.250.74.168
boostnitricdrive.com	unknown	2023-06-26	2023-09-20	2024-02-16	6.7 kB	549 kB	45.32.140.150
go.goodlifestylenews.com	unknown	2020-07-10	2022-06-02	2024-04-18	867 B	34 kB	104.21.30.61
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-04	456 B	10 kB	104.17.25.14
vjs.zencdn.net	4968	2011-12-27	2012-05-21	2024-05-03	412 B	161 kB	151.101.2.217
s3.amazonaws.com	unknown	2005-08-18	2020-05-13	2024-03-23	435 B	45 kB	52.217.125.56
customer-fu1clsqwpnozbg2f.cloudflarestream.com	unknown	2017-09-13	2024-03-18	2024-04-18	3.6 kB	936 kB	104.16.96.114
verifiedwebpage.com	unknown	2022-03-23	2022-03-23	2024-04-18	615 B	1.2 kB	104.18.20.187
use.fontawesome.com	942	2012-10-18	2017-01-30	2024-05-03	477 B	46 kB	104.21.27.152
www.trusttrk3.com	unknown	unknown	No data	No data	514 B	33 kB	34.120.219.72
unpkg.com	11693	2016-01-06	2016-01-08	2024-05-03	422 B	40 kB	104.17.249.203
nitricdrive.com	unknown	2020-08-11	2020-10-14	2022-06-15	571 B	852 B	45.32.202.143
ocsp.starfieldtech.com	6616	2003-03-06	2012-06-22	2024-05-04	668 B	5.3 kB	192.124.249.23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	goodlifestylenews.com	Sinkholed
2024-05-05	medium	goodlifestylenews.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtm.js?id=GTM-W76DBR8	260 kB	2024-05-05	2024-05-05
Pretty URL www.googletagmanager.com/gtm.js?id=GTM-W76DBR8 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:55 Times Seen2 Hash 096c64c2b6b5722f443f10f951957a4f 144dbfd07a9dabcd1dc4f87539621989eb8b9b52 9b384a65a942a66316eb1e67a0e3b2da01a2a59e100f92de18b532a44c2e79a3 Loading...

	www.googletagmanager.com/gtag/js?id=G-W7EWT6R1YW&l=dataLayer&cx=c	305 kB	2024-05-05	2024-05-05
Pretty URL www.googletagmanager.com/gtag/js?id=G-W7EWT6R1YW&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:55 Times Seen2 Hash b156bb74416e9e2390f4c40bb8b91f47 930ac6109c2ec08ce881317ef86c01f5a6a3291d 03ec39af6e9beb9036348a999027db11b14447d5c397a2d3002a6929a5ea4e7d Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	341 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash ec4f21c7d4986a2c73472df6a789d68a 017ca6169e5ce8e9ce22b09d6657e3db59e7c0ae 54a5b0bf8a1ea6af7e6488e8f4cf8abafc443d7a0f16b00838695eaef239dec5 Loading...

	vjs.zencdn.net/8.3.0/video.min.js	558 kB	2023-05-26	2024-05-18
Pretty URL vjs.zencdn.net/8.3.0/video.min.js IP 151.101.2.217 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-26 23:12:08 Last Seen2024-05-18 07:28:07 Times Seen136 Hash dfd31a0c13c2ee0e0617253850492858 0924aca005ae3707b411f12afa181384254b4fd5 5bbf29f1baa92596071f0f7d6d70608214994ae631ddb1cb9bb464f0dae76236 Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	633 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash 4a8bb9808f9e972823b81a00dc43507d e8c195c9ea835833e31d5024ed7360871144d33a 6af43007b266d2e6ac024953680ea16e0f678372ae2defc409edba76e799f56b Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	116 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash aef4a69df7ea26e05380ee0c0961ac13 a0208e5fe45a52635ced0e091d62c3177a6a9e9a 44f1cff1ab81a7ed87fbbc05a265a2b3b15a54923d906cc3f10aa02d2ef21820 Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	234 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash 8d31751f9662aee90cae0181b2632588 eecba331e0400430e85d9b251d1c0161d7629ea5 d5fcd406511314f61ec1e5dc0ce8c12bce0470eacbd36d2457fd2bb6e86ed320 Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	54 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash f35e949fb9cfb76c2e6b97c40619bf3d 6c853480b9cbb7f34e249d8d690729e5add40ce5 a6ab6ef1cefe145bd203233109360f10915e5f91992455dc46023a3890cb0656 Loading...

	unpkg.com/alpinejs@3.10.5/dist/cdn.min.js	40 kB	2023-03-08	2024-05-18
Pretty URL unpkg.com/alpinejs@3.10.5/dist/cdn.min.js IP 104.17.249.203 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:39:44 Last Seen2024-05-18 11:42:47 Times Seen251 Hash 4395bba1a904428e56386c063e7af624 7c6d1d0524732e1dfdc85c995533492e766e5bc1 5b02426e749fbc4999d6407083463b9bcb5511f073f413249a56e21643bb6bd8 Loading...

	unknown	16 B	2023-04-10	2024-05-18
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-10 15:57:29 Last Seen2024-05-18 19:02:11 Times Seen35533 Hash 7c3c3ddeb80438dcbb3d081d2d00e152 5a4016732ee72ec77b4f6ab17047bcea6d2ea34d 321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187 Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	2.0 kB	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash d5e916efe1c6a1ab911538dae3aeeace a373648cf8690e3464f11aeda5e1d9eeefe0b1ee 3413aeb282abd849cc69966dc30488a00ef7379550618ce3278375ad95bb924e Loading...

	boostnitricdrive.com/js/basic-modal.js	1.3 kB	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/js/basic-modal.js IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:56 Times Seen4 Hash f87b43a0f973046de19ef7096bee789d 4c605ca701e2211f6e11ed8c3d97505d764f7189 d30745bae33ac5064eaec3a9087ea7b76d77541f407479d1e855c7aeb32ea762 Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	65 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:54 Times Seen1 Hash dd0938ce83a9a3b773c5f5fa07233c78 677760bf71dfa8e92f16ce6350404c36bd7d6de1 7740d5c89348837dfff58a31fe9a69fdf8b02532514bf23fb70b044a7772733e Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	1.0 kB	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:54 Last Seen2024-05-05 02:35:55 Times Seen1 Hash dfe69308a09e5c71f9ec75564e547105 42cd1c71a934ddf46fe494c1069aa50bdebd6898 c40db8559f13da5ec53b4d9a06f4f9a8e128227d70830dd3b865f82e9220d965 Loading...

	boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d	122 B	2024-05-05	2024-05-05
Pretty URL boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d IP 45.32.140.150 ASN #20473 AS-CHOOPA Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 02:35:55 Last Seen2024-05-05 02:35:55 Times Seen1 Hash bf1be52a9892ea3d93596fd72bbbf0b7 4ed47a7fe3c7c62a83cc4a3cc4f8d35dd6f81b6c 8420cc029f905679f80f9539cb6026bd3a8b651981f447db1a9dad1d3ed09fdd Loading...

HTTP Transactions (32)

URL IP Response Size

ocsp.starfieldtech.com/

192.124.249.23

2.1 kB

URL
ocsp.starfieldtech.com/
IP
192.124.249.23:0
ASN
#30148 SUCURI-SEC

File type
data
Size
2.1 kB (2149 bytes)
Hash
af7016ee2f3c6fac2023a68392d2065c
e094077606556434c5863006348b4a744aff4bf1
7fcacaa6baffe2c6c70c383600400d79f79b5fe2715bbd176d45bcbd21b480ba

HTTP Headers

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 May 2024 00:35:20 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 04 May 2024 20:42:33 GMT
Expires: Sun, 05 May 2024 20:42:33 GMT
ETag: "e094077606556434c5863006348b4a744aff4bf1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

verifiedwebpage.com/go?ehash=48a4110ea6d5d30d4a1ec319367080b8&product=47357&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=[s8]

104.18.20.187

302 Found

176 B

URL User Request GET HTTP/2
verifiedwebpage.com/go?ehash=48a4110ea6d5d30d4a1ec319367080b8&product=47357&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=[s8]
IP
104.18.20.187:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectverifiedwebpage.com
FingerprintB6:7C:0D:93:CD:D6:56:A3:74:B9:46:38:F0:C7:A5:31:BC:5F:AF:56
ValidityWed, 10 Apr 2024 21:43:08 GMT - Tue, 09 Jul 2024 21:43:07 GMT

File type
HTML document, ASCII text
Size
176 B (176 bytes)
Hash
b90f23c24f6aa3e1d12c93a315accd7c
c7c4543547226cc336459efc36af5236c3d723a3
bf7662c58146447d6ad95068b16ac30397d14af8c137e2a1e2ea24dc90e52ae6

HTTP Headers

GET /go?ehash=48a4110ea6d5d30d4a1ec319367080b8&product=47357&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=[s8] HTTP/1.1
Host: verifiedwebpage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sun, 05 May 2024 00:35:20 GMT
content-type: text/html; charset=UTF-8
location: https://www.trusttrk3.com/57QF5Z5/6KWS5L/?sub1=3415447649292417658
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
cf-cache-status: DYNAMIC
set-cookie: PHPSESSID=1eb7cfa0b969b2728c7860160b9635be; path=/
pixel_session_hash_47357=3415447649292417658; expires=Tue, 04-Jun-2024 00:35:20 GMT; Max-Age=2592000; path=/; secure; HttpOnly; SameSite=None
bt_tracking_product_47357=f3200f93ad1187da7e820c58d3819dae02374e75542d92454592432347ba3a1c; expires=Tue, 07-May-2024 00:35:20 GMT; Max-Age=172800
__cf_bm=BjG0hN6r7BYbet82H2fkIOKrxLA5w_dtE7Clposnp3g-1714869320-1.0.1.1-cLgvWCxgm0cvSek7vixzW94t6nO4QT72cnm0z7BAcmKizas19evc.3bQY8gErWTK93b5R8KC7U9sCJVewqQVsQ; path=/; expires=Sun, 05-May-24 01:05:20 GMT; domain=.verifiedwebpage.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87eca6609a95b511-OSL
X-Firefox-Spdy: h2

ocsp.starfieldtech.com/

192.124.249.23

2.1 kB

URL
ocsp.starfieldtech.com/
IP
192.124.249.23:0
ASN
#30148 SUCURI-SEC

File type
data
Size
2.1 kB (2149 bytes)
Hash
af7016ee2f3c6fac2023a68392d2065c
e094077606556434c5863006348b4a744aff4bf1
7fcacaa6baffe2c6c70c383600400d79f79b5fe2715bbd176d45bcbd21b480ba

HTTP Headers

POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sun, 05 May 2024 00:35:20 GMT
Content-Type: application/ocsp-response
Content-Length: 2149
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 04 May 2024 20:42:33 GMT
Expires: Sun, 05 May 2024 20:42:33 GMT
ETag: "e094077606556434c5863006348b4a744aff4bf1"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"

nitricdrive.com/v/dlandvsl.php?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d

45.32.202.143

301 Moved Permanently

369 B

URL User Request GET HTTP/2
nitricdrive.com/v/dlandvsl.php?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
IP
45.32.202.143:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerLet's Encrypt
Subjectnitricdrive.com
FingerprintAD:75:36:55:29:C6:70:12:C1:7A:4F:CB:B8:5A:12:FF:F6:57:B0:9C
ValidityFri, 08 Mar 2024 13:06:17 GMT - Thu, 06 Jun 2024 13:06:16 GMT

File type
HTML document, ASCII text
Size
369 B (369 bytes)
Hash
ca2b3c68b4d64cc6110bb991d3da3dcb
29fdae39329055b4968007badb597108161ce85e
65dad5cc1901189ddad714bc83f6966678c5e636aba2d9fc7eea675c4184b649

HTTP Headers

GET /v/dlandvsl.php?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d HTTP/1.1
Host: nitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: nginx-rc
date: Sun, 05 May 2024 00:35:21 GMT
content-type: text/html; charset=iso-8859-1
content-length: 369
location: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
cache-control: max-age=2592000
expires: Tue, 04 Jun 2024 00:35:21 GMT
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2

boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d

45.32.140.150

200 OK

10 kB

URL User Request GET HTTP/2
boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (1037)
Size
10 kB (9961 bytes)
Hash
a787f65c89fb27644a3c9672269c50a7
88e893e59778740b8ad8ce6c5bd83e386da9cf0e
c53462e3c3a0623f76acd19fda27d5fbb6f06776d90e669e31290ed2dcb81fe8

HTTP Headers

GET /vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:22 GMT
content-type: text/html; charset=UTF-8
content-length: 9961
expires: Thu, 19 Nov 1981 08:52:00 GMT
pragma: no-cache
set-cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; path=/
affid=2616; expires=Wed, 19-Jun-2024 00:35:22 GMT; Max-Age=3888000; path=/
vary: Accept-Encoding
content-encoding: gzip
x-content-security-policy: allow 'self';
x-ua-compatible: IE=Edge,chrome=1
cache-control: no-store, no-cache, must-revalidate, no-transform
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-xss-protection: 1; mode=block, 1; mode=block
x-content-type-options: nosniff, nosniff
X-Firefox-Spdy: h2

go.goodlifestylenews.com/

104.21.30.61

143 B

URL
go.goodlifestylenews.com/
IP
104.21.30.61:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text
Size
143 B (143 bytes)
Hash
f1fb042c62910c34be16ad91cbbd71fa
5bc7aceba9a8704ef4b1d427d7d08b140afcd866
9278d16ed2fdcd5dc651615b0b8adc6b55fb667a9d106a9891b861d4561d9a24

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 05 May 2024 00:35:22 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 Nov 2023 15:41:05 GMT
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Vary: Accept-Encoding,User-Agent
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tQqP5crWuPj4cUT%2BmKPGeGfnXu4sp3uWfwyKBZQnKIka8s793lem84oPGBxAX7AE05kn9T%2BkUK%2BvMTdIyY5mNIXAuKkXO8x3fHYTX3cEkhSY7L3rS0vglkIbK7PqTa3IiJ8cMlbbCjLW3DQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 87eca6709cac0afa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

cdnjs.cloudflare.com/ajax/libs/video.js/7.10.2/video-js.min.css

104.17.25.14

200 OK

9.1 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/video.js/7.10.2/video-js.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (40048), with no line terminators
Size
9.1 kB (9094 bytes)
Hash
f73663804f2a86a102f0cd4f059e7e79
81cb5cb82ebd621686fc30fd190e7074b4201f49
fdf5dfab742b9d6c8c626174cd7e8899d2350d3ada34202ad6f3e87dadabb36c

HTTP Headers

GET /ajax/libs/video.js/7.10.2/video-js.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:23 GMT
content-type: text/css; charset=utf-8
content-length: 9094
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5fa2f3c6-9c74"
last-modified: Wed, 04 Nov 2020 18:32:38 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 361372
expires: Fri, 25 Apr 2025 00:35:23 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BzPqwdPU4o8syXHtxikz3KkaMvPhMajw9RfCHiEBY9UmrdOep9LHZJHfXuokNi79YIlYMCLOGSzC92fgxFyCEum57Lx4289LosuIwQr%2BNLn8b5pujQMlUUSUbPr9K664PRcovAhm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87eca674cdba56c4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

vjs.zencdn.net/8.3.0/video.min.js

151.101.2.217

200 OK

160 kB

URL GET HTTP/2
vjs.zencdn.net/8.3.0/video.min.js
IP
151.101.2.217:443
ASN
#54113 FASTLY

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerGlobalSign nv-sa
Subjectvjs.zencdn.net
Fingerprint6B:3F:11:07:D7:05:FD:AF:4D:46:B4:BA:1C:8A:60:70:95:37:35:17
ValidityWed, 06 Mar 2024 21:50:11 GMT - Mon, 07 Apr 2025 21:50:10 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65142)
Size
160 kB (160422 bytes)
Hash
dfd31a0c13c2ee0e0617253850492858
0924aca005ae3707b411f12afa181384254b4fd5
5bbf29f1baa92596071f0f7d6d70608214994ae631ddb1cb9bb464f0dae76236

HTTP Headers

GET /8.3.0/video.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Wed, 05 Apr 2023 14:56:26 GMT
etag: "dfd31a0c13c2ee0e0617253850492858"
x-amz-server-side-encryption: AES256
content-type: text/javascript
content-encoding: gzip
date: Sun, 05 May 2024 00:35:23 GMT
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 0
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 160422
X-Firefox-Spdy: h2

boostnitricdrive.com/css/dlandvsl.css?v=1.2

45.32.140.150

200 OK

1.9 kB

URL GET HTTP/2
boostnitricdrive.com/css/dlandvsl.css?v=1.2
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
ASCII text, with very long lines (650)
Size
1.9 kB (1915 bytes)
Hash
06a47e80ddfa4881523265457c4d2560
f82c28d97e85fdbdce56f16eb315784689094c78
e92c6317a9fd814af2613685ab37c445119453d0d688a22747fcd3c96b8731b6

HTTP Headers

GET /css/dlandvsl.css?v=1.2 HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: text/css
last-modified: Mon, 17 Jul 2023 13:02:09 GMT
vary: Accept-Encoding
etag: W/"64b53bd1-10f2"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

boostnitricdrive.com/css/dvsl.css?v=1.3

45.32.140.150

200 OK

2.8 kB

URL GET HTTP/2
boostnitricdrive.com/css/dvsl.css?v=1.3
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
ASCII text
Size
2.8 kB (2753 bytes)
Hash
b388eb869f8915718658744736bf8625
5feb83643af3cde788eff5b27db01150978083e2
3ee665260b71f8dde10f11112083baa1975dfcd82d6a5fdfbba635a28ae2a5cc

HTTP Headers

GET /css/dvsl.css?v=1.3 HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: text/css
last-modified: Mon, 17 Jul 2023 13:02:09 GMT
vary: Accept-Encoding
etag: W/"64b53bd1-2a5e"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:400,400i,500,600,700,700i,800&family=Open+Sans+Condensed:300,70&family=Outfit:700&display=swap

142.250.74.106

200 OK

2.6 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans:400,400i,500,600,700,700i,800&family=Open+Sans+Condensed:300,70&family=Outfit:700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
2.6 kB (2553 bytes)
Hash
7e1ae74fa56dd311a75dda953f6af522
bf9b805934180ef7cda66916327a6c0c32907d39
30ff0c0ae4225143bbce395a7a6aa6268bc86eef972a6c7de28c5a30c8f4754c

HTTP Headers

GET /css?family=Open+Sans:400,400i,500,600,700,700i,800&family=Open+Sans+Condensed:300,70&family=Outfit:700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 00:35:23 GMT
date: Sun, 05 May 2024 00:35:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.googletagmanager.com/gtm.js?id=GTM-W76DBR8

142.250.74.168

200 OK

90 kB

URL GET HTTP/2
www.googletagmanager.com/gtm.js?id=GTM-W76DBR8
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5843)
Size
90 kB (89927 bytes)
Hash
096c64c2b6b5722f443f10f951957a4f
144dbfd07a9dabcd1dc4f87539621989eb8b9b52
9b384a65a942a66316eb1e67a0e3b2da01a2a59e100f92de18b532a44c2e79a3

HTTP Headers

GET /gtm.js?id=GTM-W76DBR8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:23 GMT
expires: Sun, 05 May 2024 00:35:23 GMT
cache-control: private, max-age=900
last-modified: Sun, 05 May 2024 00:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 89927
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

s3.amazonaws.com/5gm/tanimated1.gif

52.217.125.56

200 OK

45 kB

URL GET HTTP/1.1
s3.amazonaws.com/5gm/tanimated1.gif
IP
52.217.125.56:443
ASN
#16509 AMAZON-02

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerAmazon
Subjects3.amazonaws.com
Fingerprint82:A2:80:27:89:C3:32:0E:1E:77:2D:6F:F3:3D:19:D3:97:36:BC:7C
ValidityThu, 08 Feb 2024 00:00:00 GMT - Sat, 11 Jan 2025 23:59:59 GMT

File type
GIF image data, version 89a, 518 x 184
Size
45 kB (44849 bytes)
Hash
0cd4c6cf614b9cf544ff5a251516fba8
83b450dc45950393366ee977406750fa052ec3cc
211f1a4bfb51c4ed6b8c850e95c3651d41a19d3791b77bc2b6e530e3fafd16c1

HTTP Headers

GET /5gm/tanimated1.gif HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: KT7S2i/4d9RPhqDzPUXHKirAha/gUnw4wfL8/qSZLw1dAPhx+oMISFIwVdEJtBYHp+YdVtI5hkE=
x-amz-request-id: WDGWCVW1XRGPSFGS
Date: Sun, 05 May 2024 00:35:24 GMT
Last-Modified: Fri, 19 Jun 2020 14:38:26 GMT
ETag: "0cd4c6cf614b9cf544ff5a251516fba8"
Cache-Control: public,max-age=604800
Accept-Ranges: bytes
Content-Type: image/gif
Server: AmazonS3
Content-Length: 44849

boostnitricdrive.com/js/basic-modal.js

45.32.140.150

200 OK

903 B

URL GET HTTP/2
boostnitricdrive.com/js/basic-modal.js
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
ASCII text
Size
903 B (903 bytes)
Hash
f87b43a0f973046de19ef7096bee789d
4c605ca701e2211f6e11ed8c3d97505d764f7189
d30745bae33ac5064eaec3a9087ea7b76d77541f407479d1e855c7aeb32ea762

HTTP Headers

GET /js/basic-modal.js HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: application/javascript
last-modified: Mon, 17 Jul 2023 13:02:09 GMT
vary: Accept-Encoding
etag: W/"64b53bd1-513"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

boostnitricdrive.com/images/seal-min.png

45.32.140.150

200 OK

106 kB

URL GET HTTP/2
boostnitricdrive.com/images/seal-min.png
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
PNG image data, 122 x 85, 8-bit colormap, non-interlaced
Size
106 kB (106420 bytes)
Hash
3188785a0e2a67ebba8bb8aad56673e4
c2e60c9494ba56dbd224af792f28042b9e1f6017
294b6d73b37481289959885519fe176a171288e1c3c42583e0a197f7d5334d95

HTTP Headers

GET /images/seal-min.png HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: image/png
last-modified: Mon, 17 Jul 2023 13:02:09 GMT
vary: Accept-Encoding
etag: W/"64b53bd1-105b"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/video/480/seg_1.ts?p=eyJ0eXBlIjoidHJhbnNtdXgiLCJ2aWRlb0lEIjoiMmZiMjM1OGNhZTIzNDhkYTNmZjJjMzk0NjJiZDA5YjMiLCJvd25lcklEIjozNzY2NzcxOSwiY3JlYXRvcklEIjoiIiwic2VnbWVudER1cmF0aW9uU2VjcyI6NC4wMDQsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwidHJhY2siOiJiYjNhZjRiZjBlNWE3Zjk0NzVmNzk3ZDg4YmU4Njc2NSIsInJlbmRpdGlvbiI6IjY3OTc0NjAwNiIsIm11eGluZyI6IjczMzU5Njc4NiJ9&s=wp7CtcKtworDqsKLIcORw7jCr0zCqwPDmsKqwqAHJsO0w6llFQszJcKSwqzDmcKiLsO9cA

104.16.96.114

200 OK

182 kB

URL GET HTTP/2
customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/video/480/seg_1.ts?p=eyJ0eXBlIjoidHJhbnNtdXgiLCJ2aWRlb0lEIjoiMmZiMjM1OGNhZTIzNDhkYTNmZjJjMzk0NjJiZDA5YjMiLCJvd25lcklEIjozNzY2NzcxOSwiY3JlYXRvcklEIjoiIiwic2VnbWVudER1cmF0aW9uU2VjcyI6NC4wMDQsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwidHJhY2siOiJiYjNhZjRiZjBlNWE3Zjk0NzVmNzk3ZDg4YmU4Njc2NSIsInJlbmRpdGlvbiI6IjY3OTc0NjAwNiIsIm11eGluZyI6IjczMzU5Njc4NiJ9&s=wp7CtcKtworDqsKLIcORw7jCr0zCqwPDmsKqwqAHJsO0w6llFQszJcKSwqzDmcKiLsO9cA
IP
104.16.96.114:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectcloudflarestream.com
Fingerprint4B:FC:27:51:84:79:E8:BA:88:43:DB:65:F0:1A:02:38:C3:2C:69:E7
ValidityWed, 03 Apr 2024 04:01:30 GMT - Tue, 02 Jul 2024 04:01:29 GMT

File type
data
Size
182 kB (181984 bytes)
Hash
42e710414b5b7d5baeb50bf9c3dbe982
3d1d17fa936499a4fea11b23f1047cd593d77f0e
d97ba525b5eaf267ad328e1d0a3b469cb4d502f428357e154947b02178af450d

HTTP Headers

GET /2fb2358cae2348da3ff2c39462bd09b3/video/480/seg_1.ts?p=eyJ0eXBlIjoidHJhbnNtdXgiLCJ2aWRlb0lEIjoiMmZiMjM1OGNhZTIzNDhkYTNmZjJjMzk0NjJiZDA5YjMiLCJvd25lcklEIjozNzY2NzcxOSwiY3JlYXRvcklEIjoiIiwic2VnbWVudER1cmF0aW9uU2VjcyI6NC4wMDQsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwidHJhY2siOiJiYjNhZjRiZjBlNWE3Zjk0NzVmNzk3ZDg4YmU4Njc2NSIsInJlbmRpdGlvbiI6IjY3OTc0NjAwNiIsIm11eGluZyI6IjczMzU5Njc4NiJ9&s=wp7CtcKtworDqsKLIcORw7jCr0zCqwPDmsKqwqAHJsO0w6llFQszJcKSwqzDmcKiLsO9cA HTTP/1.1
Host: customer-fu1clsqwpnozbg2f.cloudflarestream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://boostnitricdrive.com
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:23 GMT
content-type: video/mp4
content-length: 181984
cf-ray: 87eca67a898d1bfa-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 345903
cache-control: public, max-age=864000
last-modified: Wed, 01 May 2024 00:30:20 GMT
vary: origin, referer, Accept-Encoding
access-control-allow-headers: range
access-control-expose-header: cf-ray
cf-transmux: 3
stream-dw-version: 2024.4.9
timing-allow-origin: embed.cloudflarestream.com,embed.videodelivery.net,iframe.videodelivery.net,iframe.cloudflarestream.com
server: cloudflare
X-Firefox-Spdy: h2

boostnitricdrive.com/apple-touch-icon.png

45.32.140.150

200 OK

107 kB

URL GET HTTP/2
boostnitricdrive.com/apple-touch-icon.png
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Size
107 kB (107380 bytes)
Hash
2491f594ebe7b06cd290f6683d3b2cda
cfeb3394b20cf5f3e176f08cadcd03cd9e109fc2
e72882b90832eb1b8b32bdb3e8252a6c8a01e37fdb69d5313db2d0c6aa429eb4

HTTP Headers

GET /apple-touch-icon.png HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: image/png
last-modified: Sun, 31 Dec 2023 23:25:27 GMT
vary: Accept-Encoding
etag: W/"6591f867-1a3d"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/manifest/stream_t0e01efbc6ea10abaf5c363929b719cbd_r679745097.m3u8?useMezzanine=true

104.16.96.114

200 OK

6.3 kB

URL GET HTTP/2
customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/manifest/stream_t0e01efbc6ea10abaf5c363929b719cbd_r679745097.m3u8?useMezzanine=true
IP
104.16.96.114:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectcloudflarestream.com
Fingerprint4B:FC:27:51:84:79:E8:BA:88:43:DB:65:F0:1A:02:38:C3:2C:69:E7
ValidityWed, 03 Apr 2024 04:01:30 GMT - Tue, 02 Jul 2024 04:01:29 GMT

File type
M3U playlist, ASCII text, with very long lines (488)
Size
6.3 kB (6255 bytes)
Hash
290b7ffd520fed9acf6d65fc5a763d33
b624707398a1b5ec6f7a67e30f6020c4e0b80afd
97170590dd30c06bce99634dd08625168dc2ef9011d9352af0491d453b2d37c1

HTTP Headers

GET /2fb2358cae2348da3ff2c39462bd09b3/manifest/stream_t0e01efbc6ea10abaf5c363929b719cbd_r679745097.m3u8?useMezzanine=true HTTP/1.1
Host: customer-fu1clsqwpnozbg2f.cloudflarestream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://boostnitricdrive.com
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:23 GMT
content-type: application/x-mpegURL
access-control-allow-origin: *
cache-control: public, max-age=600
vary: origin, referer, Accept-Encoding
access-control-allow-headers: range
access-control-expose-header: cf-ray
stream-dw-version: 2024.4.9
server: cloudflare
cf-ray: 87eca67a69791bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2

boostnitricdrive.com/css/main.css?ver=1712695310

45.32.140.150

200 OK

15 kB

URL GET HTTP/2
boostnitricdrive.com/css/main.css?ver=1712695310
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
ASCII text, with very long lines (29468), with no line terminators
Size
15 kB (15051 bytes)
Hash
2cd0e68183d8c4a2c2ee6e822f534c20
4457eae72fec4be85db17b8a8b020990d879c343
9be71a8162ae43a9e038c941650feab1e4989f139434e26f4d76a40c2de31dc7

HTTP Headers

GET /css/main.css?ver=1712695310 HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:22 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 20:41:50 GMT
vary: Accept-Encoding
etag: W/"6615a80e-731c"
expires: Tue, 04 Jun 2024 00:35:22 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

unpkg.com/alpinejs@3.10.5/dist/cdn.min.js

104.17.249.203

200 OK

40 kB

URL GET HTTP/2
unpkg.com/alpinejs@3.10.5/dist/cdn.min.js
IP
104.17.249.203:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerGoogle Trust Services LLC
Subjectunpkg.com
Fingerprint2E:F1:F6:31:28:EC:29:20:41:F4:58:4B:B1:CF:51:16:77:7E:BF:E3
ValidityMon, 01 Apr 2024 02:40:24 GMT - Sun, 30 Jun 2024 02:40:23 GMT

File type
JavaScript source, ASCII text, with very long lines (34767)
Size
40 kB (39813 bytes)
Hash
4395bba1a904428e56386c063e7af624
7c6d1d0524732e1dfdc85c995533492e766e5bc1
5b02426e749fbc4999d6407083463b9bcb5511f073f413249a56e21643bb6bd8

HTTP Headers

GET /alpinejs@3.10.5/dist/cdn.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:22 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
content-encoding: br
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: "9b85-fG0dBSRzLh39yFyZVTNJLnZuW8E"
via: 1.1 fly.io
fly-request-id: 01HWRACHM2GPNCBWYF80F8JMQY-arn
cf-cache-status: HIT
age: 361168
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 87eca6747f5056c0-OSL
X-Firefox-Spdy: h2

boostnitricdrive.com/images/ndr-thumbnail.gif

45.32.140.150

200 OK

261 kB

URL GET HTTP/2
boostnitricdrive.com/images/ndr-thumbnail.gif
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
GIF image data, version 89a, 897 x 505
Size
261 kB (261325 bytes)
Hash
90dc5687f01655ddffef31b38271a408
91222b5def86361c55f05b20bd974e7e354c275f
1a8fa1146d69c8d725caf1d56184a750a54618739bbc02d6ec4cccc7ebfb9636

HTTP Headers

GET /images/ndr-thumbnail.gif HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: image/gif
last-modified: Tue, 09 Apr 2024 20:41:50 GMT
vary: Accept-Encoding
etag: W/"6615a80e-3fccd"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/manifest/video.m3u8

104.16.96.114

200 OK

1.4 kB

URL GET HTTP/2
customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/manifest/video.m3u8
IP
104.16.96.114:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectcloudflarestream.com
Fingerprint4B:FC:27:51:84:79:E8:BA:88:43:DB:65:F0:1A:02:38:C3:2C:69:E7
ValidityWed, 03 Apr 2024 04:01:30 GMT - Tue, 02 Jul 2024 04:01:29 GMT

File type
M3U playlist, ASCII text, with very long lines (1461), with no line terminators
Size
1.4 kB (1420 bytes)
Hash
5cbd2259ce7d33d78b02913a2a435b87
936f1e33b2a0c35db077d38be3d1bb3398ad06da
9be6b8845dbe0c62146304b8c2a5d4d1f3591ebb8c3b00e15e4ca5f14c289a0c

HTTP Headers

GET /2fb2358cae2348da3ff2c39462bd09b3/manifest/video.m3u8 HTTP/1.1
Host: customer-fu1clsqwpnozbg2f.cloudflarestream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://boostnitricdrive.com
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:23 GMT
content-type: application/x-mpegURL
access-control-allow-origin: *
cache-control: public, max-age=600
vary: origin, referer, Accept-Encoding
access-control-allow-headers: range
access-control-expose-header: cf-ray
stream-dw-version: 2024.4.9
server: cloudflare
cf-ray: 87eca67808ac1bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700

142.250.74.106

200 OK

5.0 kB

URL GET HTTP/3
fonts.googleapis.com/css?family=Open+Sans+Condensed:300,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (5068), with no line terminators
Size
5.0 kB (4956 bytes)
Hash
ec4bca611842cd13cfd6feba64afaacf
064d0e71b5457d449fcf378faf17430329cf603f
dceeab8e3e31991c6ddb86d0a56d3b2e70862b7de5e576176f09035f9329415e

HTTP Headers

GET /css?family=Open+Sans+Condensed:300,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 00:35:23 GMT
date: Sun, 05 May 2024 00:35:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

boostnitricdrive.com/favicon-16x16.png

45.32.140.150

200 OK

380 B

URL GET HTTP/2
boostnitricdrive.com/favicon-16x16.png
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Size
380 B (380 bytes)
Hash
bc148c81de89c1b6fdc6d08dc3e1f635
debbe1220157d4e5191266a8177c74cc1aae878b
f0512fefe481d014ad18b0457a398d7645c691b2c9ab75a9b554e9faacc50c1f

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: image/png
last-modified: Sun, 31 Dec 2023 23:25:27 GMT
vary: Accept-Encoding
etag: W/"6591f867-17c"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

go.goodlifestylenews.com/NitricDrive0424/48a4110ea6d5d30d4a1ec319367080b8/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta

172.67.172.49

302 Found

32 kB

URL User Request GET HTTP/2
go.goodlifestylenews.com/NitricDrive0424/48a4110ea6d5d30d4a1ec319367080b8/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta
IP
172.67.172.49:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgoodlifestylenews.com
FingerprintCF:D4:62:67:0B:FC:CB:36:EF:53:02:EB:06:FE:15:35:2F:53:53:40
ValidityThu, 21 Mar 2024 14:09:53 GMT - Wed, 19 Jun 2024 14:09:52 GMT

File type

Size
32 kB (32437 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /NitricDrive0424/48a4110ea6d5d30d4a1ec319367080b8/55/leadsource/2608/1610/345599b9c81e1952060ac22c7b9cc293/mpmta HTTP/1.1
Host: go.goodlifestylenews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sun, 05 May 2024 00:35:19 GMT
content-type: text/html; charset=UTF-8
location: https://verifiedwebpage.com/go?ehash=48a4110ea6d5d30d4a1ec319367080b8&product=47357&ar=55&cid=2608&lid=1610&slhash=345599b9c81e1952060ac22c7b9cc293&mtaid=mpmta&cid2=[s8]
cache-control: max-age=600
expires: Sun, 05 May 2024 00:45:18 GMT
vary: User-Agent
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BJQKtT1JIlDVgn2PKSiEKalNl2r%2B3nVkl3%2B%2But5oZJRmePqSRJQrooehc3F2kwS3Kw5Ytw63PoljicOUAAV8fIcAWKEpY3pdT9sUGNSZd3AXHrrWf7VblVudVYWn237NGwl5jdOmCaHJNIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca65e8b0a5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

boostnitricdrive.com/css/base.css?ver=1712695310

45.32.140.150

200 OK

38 kB

URL GET HTTP/2
boostnitricdrive.com/css/base.css?ver=1712695310
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
ASCII text, with very long lines (9615)
Size
38 kB (38023 bytes)
Hash
fad32263b405d30041d4d2be2bc9f184
6bd4e588001c16c2eff40e780af754c5551d5f74
afdd4017ea8f6da25994f6b38cd5d3665d5f5070c1942935e99c45d8bec851cd

HTTP Headers

GET /css/base.css?ver=1712695310 HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: text/css
last-modified: Tue, 09 Apr 2024 20:41:50 GMT
vary: Accept-Encoding
etag: W/"6615a80e-9487"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

boostnitricdrive.com/css/buy-safe.css?v=1.2

45.32.140.150

200 OK

534 B

URL GET HTTP/2
boostnitricdrive.com/css/buy-safe.css?v=1.2
IP
45.32.140.150:443
ASN
#20473 AS-CHOOPA

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectboostnitricdrive.com
Fingerprint51:5A:99:E7:AA:03:C0:8D:DF:32:7B:6E:88:75:10:94:5F:80:55:E2
ValidityTue, 02 Apr 2024 08:06:19 GMT - Mon, 01 Jul 2024 08:06:18 GMT

File type
ASCII text, with very long lines (534), with no line terminators
Size
534 B (534 bytes)
Hash
90924084a2eadefaafa839becd5e9d5e
6abeb0e3040fe959ed349c7accc820e3a44c8caf
5c7358b97d06c77f1641108420df9b72caf8353bf02c1e7545c12ffe8ff20bb5

HTTP Headers

GET /css/buy-safe.css?v=1.2 HTTP/1.1
Host: boostnitricdrive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Cookie: PHPSESSID=0ko44c75j1k4m97mbbqshn7hlt; affid=2616
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx-rc
date: Sun, 05 May 2024 00:35:23 GMT
content-type: text/css
last-modified: Mon, 17 Jul 2023 13:02:09 GMT
vary: Accept-Encoding
etag: W/"64b53bd1-216"
expires: Tue, 04 Jun 2024 00:35:23 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2

use.fontawesome.com/releases/v5.1.0/css/all.css

104.21.27.152

200 OK

46 kB

URL GET HTTP/2
use.fontawesome.com/releases/v5.1.0/css/all.css
IP
104.21.27.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerCloudflare, Inc.
Subjectuse.fontawesome.com
FingerprintCB:BE:6B:C4:5F:DF:18:7A:C3:AD:BF:6C:40:36:18:9F:E2:99:7F:78
ValidityThu, 12 Oct 2023 00:00:00 GMT - Thu, 10 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (45507)
Size
46 kB (45687 bytes)
Hash
826c57385f3d35cfed5478ba7b1f5c03
20d2d431065fc6b38c1187eda564639527e2428e
ce91e2144ea27f82292ef2c87c5d9e1d0b9994df63836130293865aca18fc550

HTTP Headers

GET /releases/v5.1.0/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://boostnitricdrive.com
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:23 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=31556926
etag: W/"826c57385f3d35cfed5478ba7b1f5c03"
last-modified: Fri, 22 Sep 2023 01:44:25 GMT
vary: Origin, Accept-Encoding
cf-cache-status: HIT
age: 345904
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5AGsi3sX18W11xJn98ZDzFqH1JGZ8k5aJVOvHtCSrho8oduq7r10DrMcDds64ZXIijYor8dQ5nC3UQYhjWKEl0JZjlmhEObIASr5J%2F8vhYMIlKqAlsyAgd4nEDNTysONxlzKYhOd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87eca6769adfb52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-W7EWT6R1YW&l=dataLayer&cx=c

142.250.74.168

200 OK

305 kB

URL GET HTTP/3
www.googletagmanager.com/gtag/js?id=G-W7EWT6R1YW&l=dataLayer&cx=c
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
305 kB (305185 bytes)
Hash
b156bb74416e9e2390f4c40bb8b91f47
930ac6109c2ec08ce881317ef86c01f5a6a3291d
03ec39af6e9beb9036348a999027db11b14447d5c397a2d3002a6929a5ea4e7d

HTTP Headers

GET /gtag/js?id=G-W7EWT6R1YW&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 00:35:23 GMT
expires: Sun, 05 May 2024 00:35:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101595
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.trusttrk3.com/57QF5Z5/6KWS5L/?sub1=3415447649292417658

34.120.219.72

302 Found

32 kB

URL User Request GET HTTP/2
www.trusttrk3.com/57QF5Z5/6KWS5L/?sub1=3415447649292417658
IP
34.120.219.72:443
ASN
#396982 GOOGLE-CLOUD-PLATFORM

Certificate
IssuerStarfield Technologies, Inc.
Subjectbsdhsjre22jd.com
Fingerprint3C:84:66:1F:C4:CE:4B:B4:4A:B1:86:47:6E:7A:48:45:EF:12:0E:8C
ValidityFri, 05 Apr 2024 19:56:11 GMT - Fri, 12 Jul 2024 18:55:14 GMT

File type

Size
32 kB (32437 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /57QF5Z5/6KWS5L/?sub1=3415447649292417658 HTTP/1.1
Host: www.trusttrk3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nginx
date: Sun, 05 May 2024 00:35:20 GMT
content-type: text/html; charset=utf-8
content-length: 176
accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model
location: https://nitricdrive.com/v/dlandvsl.php?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
set-cookie: uniqueClick_6KWS5L=13bf2b40-a803-4a62-8f42-a50dbfd0c881:1714869320; Path=/; Expires=Mon, 06 May 2024 00:35:20 GMT; Secure; SameSite=None
transaction_id=79fa9aadf93c4af6a9a38427783b135d; Path=/; Expires=Sat, 03 Aug 2024 00:35:20 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 29792f4d-a0c2-4ef7-976a-64d0419163d3
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/manifest/stream_tbb3af4bf0e5a7f9475f797d88be86765_r679746006.m3u8?useMezzanine=true

104.16.96.114

200 OK

642 kB

URL GET HTTP/2
customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/manifest/stream_tbb3af4bf0e5a7f9475f797d88be86765_r679746006.m3u8?useMezzanine=true
IP
104.16.96.114:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectcloudflarestream.com
Fingerprint4B:FC:27:51:84:79:E8:BA:88:43:DB:65:F0:1A:02:38:C3:2C:69:E7
ValidityWed, 03 Apr 2024 04:01:30 GMT - Tue, 02 Jul 2024 04:01:29 GMT

File type
M3U playlist, ASCII text, with very long lines (475)
Size
642 kB (642219 bytes)
Hash
cc30308e93f4127ca3c0b4776dfe8d42
bc229ec7ba1ae62bdd1c189dff279dcc7f963d23
620451373e8d5dc6ff311fa90f5f6a44aaaddaa803e7c6bef223e8965e4b966a

HTTP Headers

GET /2fb2358cae2348da3ff2c39462bd09b3/manifest/stream_tbb3af4bf0e5a7f9475f797d88be86765_r679746006.m3u8?useMezzanine=true HTTP/1.1
Host: customer-fu1clsqwpnozbg2f.cloudflarestream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://boostnitricdrive.com
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:23 GMT
content-type: application/x-mpegURL
access-control-allow-origin: *
cache-control: public, max-age=600
vary: origin, referer, Accept-Encoding
access-control-allow-headers: range
access-control-expose-header: cf-ray
stream-dw-version: 2024.4.9
server: cloudflare
cf-ray: 87eca67989271bfa-OSL
content-encoding: br
X-Firefox-Spdy: h2

customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/audio/138/seg_1.ts?p=eyJ0eXBlIjoidHJhbnNtdXgiLCJ2aWRlb0lEIjoiMmZiMjM1OGNhZTIzNDhkYTNmZjJjMzk0NjJiZDA5YjMiLCJvd25lcklEIjozNzY2NzcxOSwiY3JlYXRvcklEIjoiIiwic2VnbWVudER1cmF0aW9uU2VjcyI6NC4wMTA2NTAyNTY0MTAyNTcsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwidHJhY2siOiIwZTAxZWZiYzZlYTEwYWJhZjVjMzYzOTI5YjcxOWNiZCIsInJlbmRpdGlvbiI6IjY3OTc0NTA5NyIsIm11eGluZyI6IjczMzU5NTg3NyJ9&s=woLDgMO1aTPDr8Orw6jCt8ODWsO2w47DskZawqF4K8OUT0rCgX_Ck8OAwrcJaGg2wrM

104.16.96.114

200 OK

101 kB

URL GET HTTP/2
customer-fu1clsqwpnozbg2f.cloudflarestream.com/2fb2358cae2348da3ff2c39462bd09b3/audio/138/seg_1.ts?p=eyJ0eXBlIjoidHJhbnNtdXgiLCJ2aWRlb0lEIjoiMmZiMjM1OGNhZTIzNDhkYTNmZjJjMzk0NjJiZDA5YjMiLCJvd25lcklEIjozNzY2NzcxOSwiY3JlYXRvcklEIjoiIiwic2VnbWVudER1cmF0aW9uU2VjcyI6NC4wMTA2NTAyNTY0MTAyNTcsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwidHJhY2siOiIwZTAxZWZiYzZlYTEwYWJhZjVjMzYzOTI5YjcxOWNiZCIsInJlbmRpdGlvbiI6IjY3OTc0NTA5NyIsIm11eGluZyI6IjczMzU5NTg3NyJ9&s=woLDgMO1aTPDr8Orw6jCt8ODWsO2w47DskZawqF4K8OUT0rCgX_Ck8OAwrcJaGg2wrM
IP
104.16.96.114:443
ASN
#13335 CLOUDFLARENET

Requested by
https://boostnitricdrive.com/vsl/aff_special20?a=2616&s1=3415447649292417658&s2=&s3=&s4=&s5=&o=113&r=79fa9aadf93c4af6a9a38427783b135d
Certificate
IssuerLet's Encrypt
Subjectcloudflarestream.com
Fingerprint4B:FC:27:51:84:79:E8:BA:88:43:DB:65:F0:1A:02:38:C3:2C:69:E7
ValidityWed, 03 Apr 2024 04:01:30 GMT - Tue, 02 Jul 2024 04:01:29 GMT

File type
data
Size
101 kB (101144 bytes)
Hash
527d1df987c978ae2c3568ce78ce801a
c1093904aedec40ffc2bee5e568e56e51dff69b2
c266b8ead2b09fffc46c68e705077bdf44f9a8a9e5676bccae11d8ee06c75828

HTTP Headers

GET /2fb2358cae2348da3ff2c39462bd09b3/audio/138/seg_1.ts?p=eyJ0eXBlIjoidHJhbnNtdXgiLCJ2aWRlb0lEIjoiMmZiMjM1OGNhZTIzNDhkYTNmZjJjMzk0NjJiZDA5YjMiLCJvd25lcklEIjozNzY2NzcxOSwiY3JlYXRvcklEIjoiIiwic2VnbWVudER1cmF0aW9uU2VjcyI6NC4wMTA2NTAyNTY0MTAyNTcsInVzZVZPRE9URkUiOmZhbHNlLCJmcm9tTWV6emFuaW5lIjpmYWxzZSwidHJhY2siOiIwZTAxZWZiYzZlYTEwYWJhZjVjMzYzOTI5YjcxOWNiZCIsInJlbmRpdGlvbiI6IjY3OTc0NTA5NyIsIm11eGluZyI6IjczMzU5NTg3NyJ9&s=woLDgMO1aTPDr8Orw6jCt8ODWsO2w47DskZawqF4K8OUT0rCgX_Ck8OAwrcJaGg2wrM HTTP/1.1
Host: customer-fu1clsqwpnozbg2f.cloudflarestream.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://boostnitricdrive.com
DNT: 1
Connection: keep-alive
Referer: https://boostnitricdrive.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 00:35:24 GMT
content-type: video/mp4
content-length: 101144
cf-ray: 87eca67bca0d1bfa-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 345904
cache-control: public, max-age=864000
last-modified: Wed, 01 May 2024 00:30:20 GMT
vary: origin, referer, Accept-Encoding
access-control-allow-headers: range
access-control-expose-header: cf-ray
cf-transmux: 3
stream-dw-version: 2024.4.9
timing-allow-origin: embed.cloudflarestream.com,embed.videodelivery.net,iframe.videodelivery.net,iframe.cloudflarestream.com
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML