| tally.so/widgets/embed.js |  104.21.72.50 | 200 OK | 11 kB |
URL GET HTTP/2tally.so/widgets/embed.js IP104.21.72.50:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hasha0364f33beb4e657282f939efdbbe53b 5cecb63a378dd61a4612dd204360a1eae391ef41 ec08db878fba83ae27acd6ba0bc8d8c7de75d0462f3eae731d0659889b9d66d5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /widgets/embed.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:12 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=14400, stale-while-revalidate
access-control-allow-origin: *
last-modified: Fri, 10 May 2024 14:28:25 GMT
etag: W/"77f8-18f62e7bb28"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 2720
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o1Z4mdOe4kIwPzO9jNE5%2FMccNMZQVPSvxeyTP2xj4AIoGE4b5pzYCwK33uC2bYSioSZVGpwZa3TAWQ5cWcCWoWm8mLnsR2Do2Px8OQ38Gy88rOAq5P5D1Gvlrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde6d7d220b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-K88V7M6 |  142.250.74.168 | 200 OK | 104 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-K88V7M6 IP142.250.74.168:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (10322) Size104 kB (103720 bytes) Hashd11fb3afeab9cb8c74e58cb651204666 ff77f59fdb3df0b1c25d63ac249b85ddcec13141 8e0464d98f4d443f1c724d195956969ca13d311e80abed5d26cc170821f3abe1
GET /gtm.js?id=GTM-K88V7M6 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 21:02:12 GMT
expires: Fri, 10 May 2024 21:02:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103720
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-873424914&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 85 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-873424914&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashfe8211d14b051e8eee61198f6a5289fb b270461ceb8f420b5abe29f8fefeebbb3bc7cf7f 93fb05ca500f34dee1b2eb5551a415abee33925e63eda1691a696ebba3e5e55c
GET /gtag/destination?id=AW-873424914&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 21:02:12 GMT
expires: Fri, 10 May 2024 21:02:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84758
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-LQZLPEMHMV&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 108 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-LQZLPEMHMV&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (9699) Size108 kB (107792 bytes) Hashad447769a01b4ec10862df6c514e0ca3 d85693984ae726178565c237b2afcbbe66bb728a 95b0fdd82231d604359959805a4c13db792da631e9a4ac4d41b7ee10043f3802
GET /gtag/js?id=G-LQZLPEMHMV&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 21:02:12 GMT
expires: Fri, 10 May 2024 21:02:12 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 107792
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css2?family=Inter&family=Open+Sans:ital,wght@0,400;0,600;1,400&display=swap | 142.250.74.106 | 200 OK | 1.9 kB |
URL GET HTTP/3fonts.googleapis.com/css2?family=Inter&family=Open+Sans:ital,wght@0,400;0,600;1,400&display=swap IP142.250.74.106:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (1572) Hash6118f2183f96837378429c6cde29fe65 5dd4f2835b2e7a8c1823168b08b1de5d8211b839 62fc1befa1b254d0c4cffa16c912a004f4fe90f6c6175d681ab1bd3fa68164ae
GET /css2?family=Inter&family=Open+Sans:ital,wght@0,400;0,600;1,400&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 21:02:12 GMT
date: Fri, 10 May 2024 21:02:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| in-automate.brevo.com/p?key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&ma_url=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&sib_type=page&ma_title=&sib_name=&ma_referrer=&ma_path=%2Fvegas%2F | 104.18.38.216 | 204 No Content | 0 B |
URL GET HTTP/2in-automate.brevo.com/p?key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&ma_url=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&sib_type=page&ma_title=&sib_name=&ma_referrer=&ma_path=%2Fvegas%2F IP104.18.38.216:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjectbrevo.com Fingerprint9C:4B:56:5A:C3:CD:CC:B6:C5:90:DC:D7:EE:9D:7D:DE:07:B9:84:4B ValidityTue, 23 Apr 2024 21:09:18 GMT - Mon, 22 Jul 2024 21:09:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&ma_url=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&sib_type=page&ma_title=&sib_name=&ma_referrer=&ma_path=%2Fvegas%2F HTTP/1.1
Host: in-automate.brevo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 10 May 2024 21:02:13 GMT
access-control-allow-origin: *
cache-control: no-cache
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 881cde759f1e56bb-OSL
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/join-conference.59e1df172ed88a500cf7.png | 172.67.223.129 | 200 OK | 569 kB |
URL GET HTTP/3ai4.io/vegas/static/media/join-conference.59e1df172ed88a500cf7.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 710 x 446, 8-bit/color RGBA, non-interlaced Size569 kB (568785 bytes) Hash8079ef47b588fa44742fea2b65a5faf5 b2772ec1a3888152feff7e2e675819f1a3728f2b d77ef5b4c8f0b0fd5a544c6e57181475c7f51b44864b0098275af66529ee6126
GET /vegas/static/media/join-conference.59e1df172ed88a500cf7.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/png
content-length: 568785
last-modified: Mon, 29 Apr 2024 18:17:13 GMT
etag: "662fe429-8add1"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831448
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AOFCCdkXxeDi8EiL3phq8f9k7NIyssVClWCRyzDiLHTBPrQF31NsyjtEbH%2Be2FAo9Hzju012A1vXnBkk8n3Md%2FP9mfcr59URp5wuOwzOmmOjRs%2FRc%2FLexA0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76de0856af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| web.miniextensions.com/statics/embed.js?miniExtIframeId=miniExtIframe-zd8ayDzfoYnC4dMVFQJx | 104.21.87.105 | 200 OK | 38 kB |
URL GET HTTP/2web.miniextensions.com/statics/embed.js?miniExtIframeId=miniExtIframe-zd8ayDzfoYnC4dMVFQJx IP104.21.87.105:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjectminiextensions.com FingerprintE2:6A:F8:71:97:6D:D3:4A:B8:15:23:06:9B:27:66:EC:3F:35:1E:DC ValidityMon, 22 Apr 2024 11:49:59 GMT - Sun, 21 Jul 2024 11:49:58 GMT
File typegzip compressed data, from Unix Hash465998faae5e3d0a1bd1e71e41a05f28 5b2862b26283033549a7b7dfc0e0bc12499044d1 519c61775132c69055b545fa9f8061b293bb0894fa0a06d8f2a8dfd7ace52c99
GET /statics/embed.js?miniExtIframeId=miniExtIframe-zd8ayDzfoYnC4dMVFQJx HTTP/1.1
Host: web.miniextensions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:12 GMT
content-type: application/javascript; charset=UTF-8
cache-control: no-cache, no-store, must-revalidate
last-modified: Thu, 09 May 2024 11:30:15 GMT
etag: W/"8c2-18f5d1e4158"
vary: Accept-Encoding
content-encoding: gzip
via: 1.1 google, 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bIhRdUucZTxU%2BiVz37LF4CFjjO7dHuvlB%2B2IwCtoRI13dqmgR66Ec6uEjp07BzhG2WhhXSJmzFF41JIsslT7Dj1k11vwHtxCn7NyjYMouOCEJKzg%2FhyD7YHUjQdqmoibs2RzgO6N%2B9eH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde6d795cb50b-OSL
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/js/main.f5186b11.js | 172.67.223.129 | 200 OK | 418 kB |
URL GET HTTP/3ai4.io/vegas/static/js/main.f5186b11.js IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJavaScript source, ASCII text, with very long lines (65465) Size418 kB (417681 bytes) Hashb21ba3037d9a4acdf59a306229edecde 05e606b5dd0e3aafbaf5b3c66b30698df481a1c4 f3dceb66d24aa47b69bfa38d0fb792f442dbedb35b7e67f25b34c4e571924c43
GET /vegas/static/js/main.f5186b11.js HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 10 May 2024 18:09:25 GMT
etag: W/"663e62d5-dacd5"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=go5XvN%2Fbk9ZZUphsA6usfGm81LzGd8KJ8ZHLiMiGZGzSD2yDWw4PrtOB4Cr9xm%2BAisEXgbYZz7k92z637NdR7kvclWUfSjGOQsBeBNR5wjMjkj%2FJGunkZrI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde6d3a4156af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Logo-Sliders-4.392f737258826b5b6a48.png | 172.67.223.129 | 200 OK | 51 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Logo-Sliders-4.392f737258826b5b6a48.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 2880 x 216, 8-bit/color RGBA, non-interlaced Hash0aa85ebce233dd6fb87c211cc5b90602 f047bfddf0d91b43c6fda27b9070f1a5238b0ec0 3b44b6913654fe3dc6bb892302f492a383be82782e9bcb385592cd6d450ab21b
GET /vegas/static/media/Logo-Sliders-4.392f737258826b5b6a48.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/png
content-length: 51448
last-modified: Mon, 29 Apr 2024 18:08:04 GMT
etag: "662fe204-c8f8"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867479
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6gZvUXQ6aCFTR7mgInd1BRpKF3bi0Q0n27SOR0RprJddWcxIgh%2BVIDr16o%2Fs2f8e%2Fn0xi7TWLZ2eriFaoD%2BW5SjZFRp9%2F%2FVbk9zfQ99PFeOKZQqK4MPjaEE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76fe3256af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/?utm_source=Apollo& | 172.67.223.129 | 200 OK | 51 kB |
URL User Request GET HTTP/2ai4.io/vegas/?utm_source=Apollo& IP172.67.223.129:443
CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4111), with no line terminators Hash83cbffc63ec88bd7a72139c5772c9249 59b145d59cecbc587eeb4ffbf65221266fcb199d c263d7125b40c4c3cf90dce468e6812bdf221bd97c23decae08cf1f41e26ee89
GET /vegas/?utm_source=Apollo& HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:11 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 10 May 2024 18:09:00 GMT
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lITcQByWgCHtDVQCQYS3obEu%2BrhWAkxpHQcylQRwCZpiaE92206jABUIWQ5RxUR7mZRZr8%2F8wcdpuL5znAWWTSjUaw%2BUYmYxpdNTyqr2vBEC7ENFu2VDm%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde678d7a569a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.klaviyo.com/onsite/js/klaviyo.js?company_id=UcEJx6 | 151.101.194.133 | 200 OK | 922 B |
URL GET HTTP/2static.klaviyo.com/onsite/js/klaviyo.js?company_id=UcEJx6 IP151.101.194.133:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectstatic.klaviyo.com Fingerprint45:9A:0F:8B:B7:70:DD:92:C3:37:98:20:4A:4D:51:AC:5F:66:B8:0A ValidityWed, 13 Mar 2024 09:31:33 GMT - Tue, 11 Jun 2024 09:31:32 GMT
File typeJavaScript source, ASCII text, with very long lines (2028) Hash7773170f3f8b1713a24402b9429d8f3d 33dcb72b8c672202bbe76ed284c1560797eead9b 3d0f148ac3c6ac020547a9ebf8ae5a3c42950adbf635b8f53e6048df238fedaf
GET /onsite/js/klaviyo.js?company_id=UcEJx6 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-language: en-us
content-security-policy: base-uri 'none'; frame-ancestors 'self' login.bigcommerce.com *.mybigcommerce.com admin.shopify.com klaviyo.file.force.com klaviyo.lightning.force.com klaviyo.my.salesforce.com; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' https://cdn.ampproject.org/; object-src 'none'; report-uri /csp/
content-type: application/javascript
etag: "7773170f3f8b1713a24402b9429d8f3d"
server: nginx
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 21:02:13 GMT
x-served-by: cache-lga21929-LGA, cache-hel1410020-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1715374933.924300,VS0,VE836
vary: Accept-Encoding
content-length: 922
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/gradient-border.770b43cde7d853d006a0b5e680fd0aed.svg | 172.67.223.129 | 200 OK | 47 kB |
URL GET HTTP/3ai4.io/vegas/static/media/gradient-border.770b43cde7d853d006a0b5e680fd0aed.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hash7067fa528b5f2d3191cc369e145bd15b 019132358d82ad1c6e1e6cc8ddbe45109e19b765 b94bfccc0e4a9616b75d5c36d16d96d9e3917ca5767952d4b21c54875e24501a
GET /vegas/static/media/gradient-border.770b43cde7d853d006a0b5e680fd0aed.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 08 May 2024 10:48:18 GMT
etag: W/"663b5872-1bb"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 113383
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1MXogf%2Bb2uvmNjyujebXBQT%2BhgTwmjk4UL1p4bqacQcvsU%2Fjc8Um%2Bu%2B5a9ci%2F9qYvuL7En13kYxe1oM%2BoUsOKLlSnVxBi5yoyFScljoDCZ56ENd0RH6BtCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76ce0556af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Brendan-Schulman.c49b85845a405e4d6300.jpg | 172.67.223.129 | 200 OK | 20 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Brendan-Schulman.c49b85845a405e4d6300.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashbfcf67ffbff64eb123aca82d202781dc 7dc16dc3ef6bb4276ce2915eb3a262e9628587e1 80036a61bcc6915d7e8b657ad025f34ce6a6d4b6f3ade5b6f1b5cf4e3d3462cb
GET /vegas/static/media/Brendan-Schulman.c49b85845a405e4d6300.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 20344
last-modified: Mon, 29 Apr 2024 18:08:11 GMT
etag: "662fe20b-4f78"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zGqJg8vgWgSDsPUx0IP8qsudSC2iFaWUKCefe8uo1cSMyTKG2UYhhVHUAF4nb1PhrwYCGFOcjcbUV5JWjPYBWR8KdBNEJ3MV1iDb7eeMq6CGKuxgWwXgDts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde79897c56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/KarinTimpone.c7d95e70c64386b5dc09.jpg | 172.67.223.129 | 200 OK | 17 kB |
URL GET HTTP/3ai4.io/vegas/static/media/KarinTimpone.c7d95e70c64386b5dc09.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashc5ab881ca7a70debff61b19377805290 7e1b9ddadf208073f3cf0dc2d8c97a7febf150a0 7f2429541098f0ad962921abbe8e3013d8a8b8396b6b4b667fba5147d89e3f0e
GET /vegas/static/media/KarinTimpone.c7d95e70c64386b5dc09.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 17416
last-modified: Mon, 29 Apr 2024 18:04:57 GMT
etag: "662fe149-4408"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831448
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4qvMa2HQVJ5KritR28bzBnC3NeAWq8hbjXOhTTv4tlblfziUTmuLZXn%2FPrY8pUU%2B17XmBBa%2FiG4448Y%2FcNKUPCRRmpDHPBC7tjbW8KpYCGDCLBo5nI6f4Gw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde79897956af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.eventbrite.co.uk/static/widgets/eb_widgets.js | 54.230.111.44 | 200 OK | 31 kB |
URL GET HTTP/2www.eventbrite.co.uk/static/widgets/eb_widgets.js IP54.230.111.44:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subjecteventbrite.com FingerprintA6:3A:58:EA:D8:FA:15:FF:35:DB:64:E6:23:08:1F:FC:12:94:2B:FA ValidityMon, 22 Jan 2024 00:00:00 GMT - Wed, 19 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (12206), with no line terminators Hasha10fb0b58cd509c6c51288bb827c651d 078bdc70f2157dd5e92f41ee79ecabe01d546d5a 5ef22ca29ec8fd7284cf13f49b84930220612f3c99daaca37739455f5e2f6bd3
GET /static/widgets/eb_widgets.js HTTP/1.1
Host: www.eventbrite.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 10 May 2024 20:28:37 GMT
server: nginx
last-modified: Fri, 10 May 2024 13:51:59 GMT
content-encoding: br
etag: W/"663e267f-2fae"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -WVfQLyeqkEAG9YOIuB2t0YYyJf9eFVnywubP_p2V-G6aJB1rZam3w==
age: 2015
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/css/main.02ef614c.css | 172.67.223.129 | 200 OK | 34 kB |
URL GET HTTP/3ai4.io/vegas/static/css/main.02ef614c.css IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeUnicode text, UTF-8 text, with very long lines (40784) Hash35b71ba48530899738eeeeb3b1d4d085 863771db43f681b56cb83ff0d0a3e6ee87d30812 537181041f8ed7bc0bf8e02bbdd92b54d6a025f5dca854767fa13af7365a20b8
GET /vegas/static/css/main.02ef614c.css HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:12 GMT
content-type: text/css
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 10 May 2024 18:09:10 GMT
etag: W/"663e62c6-ceec"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBZ4PC5EKzA%2BMkIAYZTFbtaSoGXoBvBlLiihsDrN9lPelb60GzhoV7rOpwCyPOidB0u0ETDzn%2Be%2FWDhAI%2BJJFVhk%2FRkT9gcsHA8q4XWyezcXFdmhmcHE2UU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde6d3a4356af-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.addevent.com/libs/imgs/icon-calendar-t5.png | 52.85.243.111 | 200 OK | 150 B |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-calendar-t5.png IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typePNG image data, 18 x 18, 1-bit colormap, non-interlaced Hash25306d88428e3c5d378ceccc2ef8c9d1 4f7c22f485b08796138b9071a91e523eb97d9627 f6b0ca3d4b707e8f3d83d767adbc6170d6e5ee30cc194fe2c689f3c98abe4103
GET /libs/imgs/icon-calendar-t5.png HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 150
vary: Origin
date: Thu, 07 Mar 2024 08:14:45 GMT
last-modified: Wed, 10 Nov 2021 14:38:40 GMT
etag: "25306d88428e3c5d378ceccc2ef8c9d1"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
cache-control: max-age=8380800, public, must-revalidate
age: 5575650
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; preload
x-amz-cf-id: IprvmRri5U4JVBO3Q-5TL5pJJ67-P8S3CMmYhFPqYCdbYQkwJ3JwkA==
|
|
| cdn.addevent.com/libs/imgs/icon-calendar-t1.svg | 52.85.243.111 | 200 OK | 659 B |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-calendar-t1.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hasha8b27deb29c234aeba4d7f5fa73ebf44 23d92c92e07e3ed54c592678bda3adf577907561 1e16aaad0806140e2da858ecc53385963ea2f7d96ac514288de532b23bfa6250
GET /libs/imgs/icon-calendar-t1.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
content-length: 659
vary: Origin
date: Sun, 21 Apr 2024 03:00:33 GMT
last-modified: Wed, 10 Nov 2021 14:38:39 GMT
etag: "a8b27deb29c234aeba4d7f5fa73ebf44"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
cache-control: max-age=8380800, public, must-revalidate
age: 1706502
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; preload
x-amz-cf-id: mKBpRwVZPpGAofKrR8kW41Kw1Y2xlooPmd_OXMbD2XYkeJGVKqXyEg==
|
|
| cdn.addevent.com/libs/imgs/icon-facebook-t5.svg | 52.85.243.111 | 200 OK | 628 B |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-facebook-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf7bdcc734328c93b652a386e76659cc3 e88a26acd2825931a0ea3f5fbc846ace59d4335a 6e56a42dcf4f255898159d98cabf52c2ad34e7d70a6ca877cf1e99dc29fd3a68
GET /libs/imgs/icon-facebook-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
content-length: 628
vary: Origin
date: Thu, 11 Apr 2024 05:40:54 GMT
last-modified: Wed, 10 Nov 2021 14:38:40 GMT
etag: "f7bdcc734328c93b652a386e76659cc3"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
cache-control: max-age=8380800, public, must-revalidate
age: 2560881
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; preload
x-amz-cf-id: IbcGzvN0CmBlxSTmxa888H3dKm73S4LEC3CDDcGgc8Ron9zuQgXhxA==
|
|
| cdn.addevent.com/libs/imgs/icon-office365-t5.svg | 52.85.243.111 | 200 OK | 256 B |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-office365-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash2515acaf7e8291e1deb738254cf7aad6 2018d1def711cc15dc7ee946e462d2309c384c66 caf28e24fcfc37e2b6b79b3f67fb64f85adfc99b8f542e317fa3ca1bfd7293c6
GET /libs/imgs/icon-office365-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
content-length: 256
vary: Origin
last-modified: Wed, 10 Nov 2021 14:38:40 GMT
accept-ranges: bytes
server: AmazonS3
date: Tue, 19 Mar 2024 16:10:06 GMT
etag: "2515acaf7e8291e1deb738254cf7aad6"
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
cache-control: max-age=8380800, public, must-revalidate
age: 5526187
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; preload
x-amz-cf-id: D_0nMlQGA0usihivI94T2M7v6DjaPa5IR73-yPtJKKy-74DZNbLtrw==
|
|
| ai4.io/vegas/static/media/join-conference.59e1df172ed88a500cf7.png | 172.67.223.129 | 200 OK | 569 kB |
URL GET HTTP/3ai4.io/vegas/static/media/join-conference.59e1df172ed88a500cf7.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 710 x 446, 8-bit/color RGBA, non-interlaced Size569 kB (568785 bytes) Hash8079ef47b588fa44742fea2b65a5faf5 b2772ec1a3888152feff7e2e675819f1a3728f2b d77ef5b4c8f0b0fd5a544c6e57181475c7f51b44864b0098275af66529ee6126
GET /vegas/static/media/join-conference.59e1df172ed88a500cf7.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/png
content-length: 568785
last-modified: Mon, 29 Apr 2024 18:17:13 GMT
etag: "662fe429-8add1"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831449
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7cVkMlSoUrxhG6R2oi9Qf7jHwOUdVp5LYChxo69U8k2QOcFt%2FIbTx4bzjRchW6Tx1Fz22jcYu5VmUh%2F87pFyFkWheLfPQYpUArdxMNzb9SFHE5rTO3rYPik%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b5979b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/uncover-back.acab8c9ed2ab6c0dff5f.jpg | 172.67.223.129 | 200 OK | 156 kB |
URL GET HTTP/3ai4.io/vegas/static/media/uncover-back.acab8c9ed2ab6c0dff5f.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1434x775, components 3 Size156 kB (155704 bytes) Hash659cc66b69994cf00640afd976783a3c 07fdbe90ea63441ae07c853808fb42c21eb76a02 625b7617a691bc5b88bcbd748aa936616e29ea5853638169ef2af0689fbd0527
GET /vegas/static/media/uncover-back.acab8c9ed2ab6c0dff5f.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 155704
last-modified: Mon, 29 Apr 2024 18:07:14 GMT
etag: "662fe1d2-26038"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831457
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fgm01UhMxHVYabFgW2%2BroXKPRHlXaVZ7s%2BqoTh6kb8V%2FxCOI1rdl%2FfuCORzSiof%2BPS8dq3kifLpt7ZAJXjbmkhlqHlfUezBivpmx8apzoioLh0sSzSubt2g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b597db509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Keynote.3e827c7526ed72460830.jpg | 172.67.223.129 | 200 OK | 80 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Keynote.3e827c7526ed72460830.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.6 (Macintosh), datetime=2024:04:16 18:27:53], baseline, precision 8, 120x445, components 3 Hashe901b5eeee287cd9499d6665c98f9ebd fedd33cea02208dfa16feac10bc1f2892d1af233 24ecc2f0eeae35782bede01a4ad1c232a3a5ebeff1c44b4941da761035bc0700
GET /vegas/static/media/Keynote.3e827c7526ed72460830.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 79870
last-modified: Thu, 09 May 2024 19:16:15 GMT
etag: "663d20ff-137fe"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 43159
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FeDxTua8sy1qqiX9e43rrxZVFASPyjelRhzJFReD3k58IJWO9kfcx2Htq2iFbgbMUfpEH3uyr3O%2BUwFnxgLGyVpGnAyg%2BmAabkorvHAo2SNLBBLkdyBQhGw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b5983b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/KickoffCocktail.25008beb1c71bed1c241.jpg | 172.67.223.129 | 200 OK | 261 kB |
URL GET HTTP/3ai4.io/vegas/static/media/KickoffCocktail.25008beb1c71bed1c241.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 560x364, components 3 Size261 kB (260931 bytes) Hash36333dc6f185ea110be5394be17c11ac a32c28c99e36f40057a8b4e41be7ffce2261b17a b18228bfa0dc3087e62700b7e72f0cc52af135bfb2d87066c91033dc640082ff
GET /vegas/static/media/KickoffCocktail.25008beb1c71bed1c241.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 260931
last-modified: Mon, 29 Apr 2024 18:11:13 GMT
etag: "662fe2c1-3fb43"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831457
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lkKiDO9fi%2FCXHK%2FP45ZHNEmF3ANcfULgaQ%2B5wL5Jf2hRXy5BXAwXYLSCMoNTt94iCinG4teTne6rbk1e%2Bin%2BHmwgepEk6pLoKe3M3SJKl%2FBX6Gt%2FoaOwu80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b5980b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/application-bg.eee6a438f87d5d918d91.png | 172.67.223.129 | 200 OK | 977 kB |
URL GET HTTP/3ai4.io/vegas/static/media/application-bg.eee6a438f87d5d918d91.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 1440 x 1144, 8-bit/color RGBA, non-interlaced Size977 kB (976826 bytes) Hashe76eea39c4dde8aeb19aa350f464bd0b 2da8be7c96052405407142b78af46732fad24de0 403b9fb1dd8d0c5f4db698b6de631b741350f254042d8e998cd103b2070a35df
GET /vegas/static/media/application-bg.eee6a438f87d5d918d91.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/png
content-length: 976826
last-modified: Mon, 29 Apr 2024 18:20:41 GMT
etag: "662fe4f9-ee7ba"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831457
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wDn5muGeAtv2CEYJfc5S8%2BGZNWaZuYKa2Cl%2BsqbaT3OluyJrqLxR2YL5zBCMU9qg728hL%2F2WaGPveCWanUjRGiRVXyHiGcuHWzynvGTiS88VyxRijQ9oeOM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b597cb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Afterparty.ac1ee2aa200bf135fa34.jpg | 172.67.223.129 | 200 OK | 204 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Afterparty.ac1ee2aa200bf135fa34.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 560x364, components 3 Size204 kB (204159 bytes) Hashd799b7fd42b0a026cf8535e4efb16668 9e99cf9944dac40e9aca398267cadf61a715b574 01d364d1df7179bb136c71b6effca0984ca4aa475536534be8d9074bffba82b7
GET /vegas/static/media/Afterparty.ac1ee2aa200bf135fa34.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 204159
last-modified: Mon, 29 Apr 2024 18:15:28 GMT
etag: "662fe3c0-31d7f"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QFNnLPropDRMjhR%2BfYdgtHXG%2B05pmOb9%2BCXjRt%2Feja2cNnUfJN%2FMnXKCX0COxsS0DpvC%2FI%2Fa0h5YK0moEIKxF0ws8AWcCOh1B2Jd3oR9ccLtRtIdw%2FhyJ6M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b5986b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/testimonial.07ee201388c5a57582ee.png | 172.67.223.129 | 200 OK | 160 kB |
URL GET HTTP/3ai4.io/vegas/static/media/testimonial.07ee201388c5a57582ee.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 1439 x 568, 8-bit/color RGBA, non-interlaced Size160 kB (160476 bytes) Hash58d71cb6cfc226143accbfe3660b47eb 14c8b551f8cc7a5029239929162c85063355161d 3595324f7dd80df7bdebbcdbcfae6d07872f694b6ee981bf4a5de1ebe3a019eb
GET /vegas/static/media/testimonial.07ee201388c5a57582ee.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/static/css/main.02ef614c.css
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/png
content-length: 160476
last-modified: Mon, 29 Apr 2024 18:08:54 GMT
etag: "662fe236-272dc"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831451
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4uVtq2s6p7mn1R%2BeyPAQUmZgahhElS%2BbU6HyJYy8Q0ubFYX22j3mOte%2BVrUTxiwFROhxrKhwgIwAFRaoylqoVISjs1KoZl8W%2FYeC64ICbjJWhYE8MpOYw34%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b598ab509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/slick.295183786cd8a1389865.woff | 172.67.223.129 | 200 OK | 1.4 kB |
URL GET HTTP/3ai4.io/vegas/static/media/slick.295183786cd8a1389865.woff IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeWeb Open Font Format, CFF, length 1380, version 1.0 Hashb7c9e1e479de3b53f1e4e30ebac2403a af91c12f0f406a4f801aeb3b398768fe41d8f864 26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc
GET /vegas/static/media/slick.295183786cd8a1389865.woff HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/static/css/main.02ef614c.css
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: font/woff
content-length: 1380
last-modified: Mon, 29 Apr 2024 18:09:31 GMT
etag: "662fe25b-564"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 778230
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZqCJUkxay6%2Bp80FKFv55Q3U%2FnTnJq14O3zxncbLSHFOP1Cy4Gp7Q%2F5Rx0jqCHpIYfVFwdY3C6olDpGLBZ1Wuzb1GzgiW8Y83GXY394xxRlcn7zHgzUXJK4g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b6994b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Andrew-Yang.2f9e65fa096f5121a5fc.jpg | 172.67.223.129 | | 25 kB |
URL GET ai4.io/vegas/static/media/Andrew-Yang.2f9e65fa096f5121a5fc.jpg IP172.67.223.129:0
Requested byhttps://ai4.io/vegas/?utm_source=Apollo&
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash483ca735f9722b4824d8cd7fc8d8c642 f0aeb13ae01aa5da63ba82d5dff0ea10c4e804bf b14f547e174c0baa7d7ab60260906c4d611b9289d62c2d1e46a9a888db807d8b
GET /vegas/static/media/Andrew-Yang.2f9e65fa096f5121a5fc.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 25404
last-modified: Mon, 29 Apr 2024 18:06:40 GMT
etag: "662fe1b0-633c"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831448
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NgA4MokjOGBueuXYUb6t5FvbCkHEG%2F4fmieIxSuAz5mtorkxT2ZUf5ou6ukOTMDVL6%2FAkg4chAOJ0wVc5XE8HusPJPRLPn0Sx%2F3R5jPeUAwLUH%2BvY3NJPK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b6998b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/LasVegas-casino.1ce0f46e62cb0ad6936c.jpg | 172.67.223.129 | 200 OK | 80 kB |
URL GET HTTP/3ai4.io/vegas/static/media/LasVegas-casino.1ce0f46e62cb0ad6936c.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1440x552, components 3 Hashcdda0827e8157297648572264a1d7c2d a80af95fd761469844e68e2d4fd88684c15c5bf0 eabf7baa72e9f11ffd9945ae0be1258095b934319885d8f1592e0c0a3aac2ca2
GET /vegas/static/media/LasVegas-casino.1ce0f46e62cb0ad6936c.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 80358
last-modified: Mon, 29 Apr 2024 18:19:23 GMT
etag: "662fe4ab-139e6"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tsCvG%2FKDHum08%2BITcV4LKLI%2BTAQcWKuJ%2FPEmNPyG10FyUUF%2BOybsVSbXN%2BP8SSYuRfHlI6GYqeHQzUmdULlbkUBnJ5r402SsD%2Fj%2B5Tp2Ru4rSN1IhZppPdo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b5988b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/KarinTimpone.c7d95e70c64386b5dc09.jpg | 172.67.223.129 | 200 OK | 17 kB |
URL GET HTTP/3ai4.io/vegas/static/media/KarinTimpone.c7d95e70c64386b5dc09.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashc5ab881ca7a70debff61b19377805290 7e1b9ddadf208073f3cf0dc2d8c97a7febf150a0 7f2429541098f0ad962921abbe8e3013d8a8b8396b6b4b667fba5147d89e3f0e
GET /vegas/static/media/KarinTimpone.c7d95e70c64386b5dc09.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 17416
last-modified: Mon, 29 Apr 2024 18:04:57 GMT
etag: "662fe149-4408"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831448
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjGtSdC0v6nDauOWdCy8Kp2tNtD5J%2FgG2DBpiXJ8g%2BBf2%2BqNE6n33%2BEhyhssG%2BUW8gkDgHcPiw0yQZFDZES7oahcgQTNSP18Fn7JfInbxtLjpTpgJY43zmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b699db509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Brendan-Schulman.c49b85845a405e4d6300.jpg | 172.67.223.129 | 200 OK | 20 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Brendan-Schulman.c49b85845a405e4d6300.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashbfcf67ffbff64eb123aca82d202781dc 7dc16dc3ef6bb4276ce2915eb3a262e9628587e1 80036a61bcc6915d7e8b657ad025f34ce6a6d4b6f3ade5b6f1b5cf4e3d3462cb
GET /vegas/static/media/Brendan-Schulman.c49b85845a405e4d6300.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 20344
last-modified: Mon, 29 Apr 2024 18:08:11 GMT
etag: "662fe20b-4f78"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wYg0WkgskDVb%2BVJCS5H4RZ6iEve1gjKKbRKC%2Fs%2BC%2FKl7yuREotpYZ%2FxpnobLNeppvBBtiNu%2BM4Zz5Ws002PNN86cQNRTLP5mqMEN24HIx%2BpE496f3gMieyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b699fb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/EveCunningham.2d051f0daced586f6890.jpg | 172.67.223.129 | 200 OK | 20 kB |
URL GET HTTP/3ai4.io/vegas/static/media/EveCunningham.2d051f0daced586f6890.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash3c0194e242c112140cec6de303f23490 be69d426d707b19ad87cd4f67ffcc6df2ee5d33b b82ed6f7593558346b3fede5baddf12115bd8ce33247ab96d92d2456fe71f059
GET /vegas/static/media/EveCunningham.2d051f0daced586f6890.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 20353
last-modified: Wed, 08 May 2024 10:54:15 GMT
etag: "663b59d7-4f81"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 113372
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EhYfo8r9okGnQM7aATgmA%2B9ISU6rE32SH6%2F7Ao%2BVXcVTuNZklCDcFIKXC29WbtrWzr%2Bn6UEJmkb1Yqz9ikhhBBiEaILpRXcZ%2FI4oHM4fymTvya7awvH86fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b69a0b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/DanaUnderwood.eacb340eec0836d29c4b.jpg | 172.67.223.129 | 200 OK | 27 kB |
URL GET HTTP/3ai4.io/vegas/static/media/DanaUnderwood.eacb340eec0836d29c4b.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash4fccd5b96d8e562e0deed7fbff68244a 8e8a79822cceaf9c5c3ef1e0157f397506aa2dcf 8e53e0e4fe93d8d51a923c909dfa126fa55eac6e773ce8283707cf4162edd61b
GET /vegas/static/media/DanaUnderwood.eacb340eec0836d29c4b.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 27056
last-modified: Mon, 29 Apr 2024 18:12:09 GMT
etag: "662fe2f9-69b0"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831447
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vyq%2Byq8mc3NyWoRhMEYfFng4ultg32nNHaNnTYCTRWeRuw8tOpJ4MhzGK6iBIEGX%2BnpMPTiyEeh6Vy%2Bw2Q1BHRZSilMpKtgZ0GHcfAZJpVNOM0RoQ2VCc1Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b69a2b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Ron-Whitworth.cebf938f56da46161cc3.jpg | 172.67.223.129 | | 19 kB |
URL GET ai4.io/vegas/static/media/Ron-Whitworth.cebf938f56da46161cc3.jpg IP172.67.223.129:0
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashc33b9cfeaffc022b5fbf592629c25cc4 57bc0ef9cd6e78e465c7cb021dc3078a9d9dd31a aafec47cb32e25e6e49b50c7ce42f7a3ffdb57a3338e70078e0b0d33e86be6a3
GET /vegas/static/media/Ron-Whitworth.cebf938f56da46161cc3.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 18934
last-modified: Mon, 29 Apr 2024 18:11:00 GMT
etag: "662fe2b4-49f6"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831446
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ih5cqp69Xac3MFACLL6Vz9RJnDiYcZL7cgJr%2B0oywD2aE1l7DIplJnxu8PxUx9Y9iX03VPdjwc49yHUpA2D0UUmM0ZPpf9D%2FwscegeZ%2BAR0FSXoCo0JiX0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b69a3b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/LambertHogenhout.634fc8c0bc68540132bc.jpg | 172.67.223.129 | | 16 kB |
URL GET ai4.io/vegas/static/media/LambertHogenhout.634fc8c0bc68540132bc.jpg IP172.67.223.129:0
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hasha71a2912b976fcc1f0fd0e6b74b1bfdb 5a3bc4435b8485412cc7cdc4dac939943c70ef68 37e89b3359466ec6a3aea0ff37bd7cf1473b4190f58037dc687eb59105d01f59
GET /vegas/static/media/LambertHogenhout.634fc8c0bc68540132bc.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 16103
last-modified: Mon, 29 Apr 2024 18:12:32 GMT
etag: "662fe310-3ee7"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831446
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZMy7LIHyT5mjfhjPiiIpK%2FKJajL8PVLQuWecd8krBOi04b86pnnqRxqhgYdOQqwTuXaJvLYNrX9UA0qS6E7qx%2FpQUwwJBkKHnvJqPzpexoouZUz0kiQpbOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b69a4b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Jing-Wang.907edbb84c297a9bb6ec.jpg | 172.67.223.129 | 200 OK | 20 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Jing-Wang.907edbb84c297a9bb6ec.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashcae30f54a62b1c84d6803fb1a177b040 2e7a69e14e2635ce594a6b2a491d616652569ee6 2755c73a68a10aaa9d2ab85cda1351a29fc42d43d77909744d3cf14e58f3b044
GET /vegas/static/media/Jing-Wang.907edbb84c297a9bb6ec.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 19972
last-modified: Mon, 29 Apr 2024 18:15:39 GMT
etag: "662fe3cb-4e04"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831446
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsvouTBPk7cN7QY6vuqqal%2FqsFOmlH0PRdjte0xn%2BZyne%2Bh7IXZGXYiFcKBp6TXMO7oV%2B75LYXvfe70O96JdGQczpWWCCjGpiwihA84Bj3hGmJcZmGdTCjo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b79aeb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Stephanie-Franklin-Thomas.7496ca7abbc555e09877.jpg | 172.67.223.129 | | 19 kB |
URL GET ai4.io/vegas/static/media/Stephanie-Franklin-Thomas.7496ca7abbc555e09877.jpg IP172.67.223.129:0
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash0a7ba6ea5bbd7cebabae63b1b1144ef5 3b87cf8238655c00a755d2a4e050ac25c02fb180 ad1ec7b307be1a61c2e00e3b989bdbd4a18555537cbefd44d856c93fbd4789e5
GET /vegas/static/media/Stephanie-Franklin-Thomas.7496ca7abbc555e09877.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%2eyJmaXJzdFZpc2l0RGF0ZSI6IkZyaSwgMTAgTWF5IDIwMjQgMjE6MDI6MTQgR01UIiwic3VibWl0UGFnZSI6Imh0dHBzOi8vYWk0LmlvL3ZlZ2FzLz91dG1fc291cmNlPUFwb2xsbyYiLCJyZWZlcnJlclVSTCI6IiIsImxhbmRpbmdVUkwiOiJodHRwczovL2FpNC5pby92ZWdhcy8/dXRtX3NvdXJjZT1BcG9sbG8mIiwibGFzdFJlZmVycmVyVVJMIjoiIiwibGFzdExhbmRpbmdVUkwiOiJodHRwczovL2FpNC5pby92ZWdhcy8/dXRtX3NvdXJjZT1BcG9sbG8mIiwibGFzdFZpZXdlZFVSTCI6IiIsImRyaWxsRGF0YSI6eyJjaGFubmVsIjoiT3RoZXIgY2FtcGFpZ25zIiwiZHJpbGxEb3duMSI6IkFwb2xsbyIsImRyaWxsRG93bjIiOiJObyBDYW1wYWlnbiIsImRyaWxsRG93bjMiOiJObyBUZXJtcyIsImRyaWxsRG93bjQiOiJObyBDb250ZW50In0sImxhc3REcmlsbERhdGEiOnsiY2hhbm5lbCI6IkRpcmVjdCB0cmFmZmljIiwiZHJpbGxEb3duMSI6Ik5vbmUiLCJkcmlsbERvd24yIjoiTm9uZSIsImRyaWxsRG93bjMiOiJOb25lIiwiZHJpbGxEb3duNCI6Ik5vbmUifSwiZ2NsaWQiOiIiLCJtc2Nsa2lkIjoiIiwiZmJjbGlkIjoiIiwiaWQiOiIiLCJjdXN0b21GaWVsZHMiOnt9LCJsYW5kaW5nX3VybCI6Imh0dHBzOi8vYWk0LmlvL3ZlZ2FzLyIsInRlc3RfZGF0YSI6IkZyb20gcmVmZXJyZXIsIG9yaWdpbmFsIFVSTDogaHR0cHM6Ly9haTQuaW8vdmVnYXMvP3V0bV9zb3VyY2U9QXBvbGxvJiIsImxhbmRpbmdfcGFnZV9ncm91cCI6Ii92ZWdhcy8ifQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 18834
last-modified: Wed, 08 May 2024 10:49:27 GMT
etag: "663b58b7-4992"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 113372
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9yPlM%2BMMuk7OZPn3lBZ6ObKISzGBTC7qabluOCRI1Qmv4QjD7ZPgkHHqP4XoH1E21H0SePTCdkc807PKYlPBFRozB5ryE6b%2Brv1anER8Bf0eXbZU5RVg4uo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b79bcb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Agus-Sudjianto.6e20bad131514bfd5e03.jpg | 172.67.223.129 | 200 OK | 16 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Agus-Sudjianto.6e20bad131514bfd5e03.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashb5850384af1305c65aebf7d29e96d842 6b3e10896e918d57a6f88af799a9cbbf9489c4f6 45a1b4c1718d440ad8319c7a1008641122989b4667de9078f20ef012d35cd580
GET /vegas/static/media/Agus-Sudjianto.6e20bad131514bfd5e03.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 15676
last-modified: Mon, 29 Apr 2024 18:04:51 GMT
etag: "662fe143-3d3c"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831445
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GHdPviu7%2FpDcbyN323E3NKsIyBDdXA0AWIsWfYAm5s94ZKgLNVXnWSQzExHykKaXD3Ibqx2xzs67bJacTQm28wl47PHu0CyFTPFqgITxZ9abnn%2BZVjxuWGU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b79c0b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Sheetal-Sood.9f5a42f069d5a9a7160e.jpg | 172.67.223.129 | 200 OK | 23 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Sheetal-Sood.9f5a42f069d5a9a7160e.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash9038d16953a30150ccb492ffcd035f43 8f1452f7b01cb1d2ed96cc55b11e6bcf4c664403 d5d5db02585869edad337fc54a30622ce989f3b7fb3478ca35a346014fd8a6c8
GET /vegas/static/media/Sheetal-Sood.9f5a42f069d5a9a7160e.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 23366
last-modified: Mon, 29 Apr 2024 18:19:06 GMT
etag: "662fe49a-5b46"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831444
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q8%2BQQ58NjxyKfrmJrrJogXNJM9ZkOrjZQzhhoAwRwAL6JRpnkO7UNzX2egY8mbOwNOTfo%2FOE%2FkyLpt6zto3tIOccJSX7YJ7xl2Vn5mQmuf0eCtlJ%2Fk1cFFE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b89e1b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/NinaKottler.2941e3bb7ee49bd60f99.jpg | 172.67.223.129 | 200 OK | 18 kB |
URL GET HTTP/3ai4.io/vegas/static/media/NinaKottler.2941e3bb7ee49bd60f99.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashedc080ada6879da168bd19a3c0079431 8ed3a0c3e8802167164219b325251a62c974055a 9bfca9b7fb49b33084c9ee189c9fdf5e284fd9aeacc7f5b3618e42ac2531df35
GET /vegas/static/media/NinaKottler.2941e3bb7ee49bd60f99.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 18090
last-modified: Mon, 29 Apr 2024 18:12:17 GMT
etag: "662fe301-46aa"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831444
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h8n6N6MY%2FTx4elqWFezfgdR0LWirQb0aBNduIRq3%2BTDN05gOq9tUizlLkC3Z2oxY8jMQCFroH3WO8ppCT8jtxcDIrQTvlTmb3v2%2FykCEeSkUHzv9YdaX%2FGY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba2db509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Matthias-Feiler.0b203e149f52d877c829.jpg | 172.67.223.129 | 200 OK | 19 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Matthias-Feiler.0b203e149f52d877c829.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash2e9d6cfdb5d9287bf0feb602831dab95 83e711d94e461c2ca73414fbea27e9dc21d1e0ab 9fc48cabe07ca67a5cc51910a28b66386f2fef7f63f0a46b6114c576901876ab
GET /vegas/static/media/Matthias-Feiler.0b203e149f52d877c829.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 19088
last-modified: Mon, 29 Apr 2024 18:09:55 GMT
etag: "662fe273-4a90"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831443
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KB3KDt429CzK2Ov0kCGiHLmQ3F4l5nsYD8uZ5jCpJF0LTYFHeqbqXJ0SrLEUJg60%2F%2BgLuGANGhAFqZhPHU9rnXDBTiyQ9zJU5CmtJ4jT7zcyf9XjLwGcsmY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba31b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/AhmedSerag.4be415522ce860b1f62b.jpg | 172.67.223.129 | 200 OK | 18 kB |
URL GET HTTP/3ai4.io/vegas/static/media/AhmedSerag.4be415522ce860b1f62b.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash9b055a6af7d156834c7ffa00325e3fbc d09a7fc26f14a36c36df30055cc9e4d2f3a6e6c8 0858b132cf8786e066f3031cd971f3583c73c8778df36352088f8d9a04b04133
GET /vegas/static/media/AhmedSerag.4be415522ce860b1f62b.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 17528
last-modified: Mon, 29 Apr 2024 18:09:05 GMT
etag: "662fe241-4478"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831443
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8x4gvN%2BwS2HBgl0gAUUU2L5mLhrjGvfH%2BZeu0ysnRXDxBMXQ1GpeMwgRE6UUTXgYrXGgZF1s8vlwL2OUdUkZD7eOXRgNyoiLwhGFqkaBweS2tpvvWxbo%2F0w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba33b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Saima-Shafiq.40a711ec105b70c9bd3c.jpg | 172.67.223.129 | 200 OK | 18 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Saima-Shafiq.40a711ec105b70c9bd3c.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash59b9c55b356599f2114e4eebdd0c8b6a 8b45131f7cae307ea03e644eb66dd0125b16f049 4c6fae04555e03ba5787b3b7a59e8b6a7ba93d10a77dcbde150031432a9b7d6e
GET /vegas/static/media/Saima-Shafiq.40a711ec105b70c9bd3c.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 17741
last-modified: Mon, 29 Apr 2024 18:11:47 GMT
etag: "662fe2e3-454d"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831443
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PRd0%2F8s7zmp1%2B4FRA9zN0%2FqmRD6x04Le0j3JmbETkbhWXPkIpJ5ZefwfG%2BkjhuryiyOwFjoM8vTyq0bWwJBC3fDTZOBtSF%2FB3nAdGjXo%2BemY0%2BXCE7cYjmM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba36b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Alice-Fournier.dd77aa0b4f5967dc0e6d.jpg | 172.67.223.129 | 200 OK | 20 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Alice-Fournier.dd77aa0b4f5967dc0e6d.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashfa1b5bbda2542cc000cb463018e20aed 3b80fa50a6dc03cd6a64ec716ea4c33a4aac0214 f5349a15d9af850586bf3857c919a93d077ea29f0afcb3d0af9c88b25e630bfc
GET /vegas/static/media/Alice-Fournier.dd77aa0b4f5967dc0e6d.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 19781
last-modified: Mon, 29 Apr 2024 18:07:07 GMT
etag: "662fe1cb-4d45"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831442
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BtPg%2FhDHMysPL2OiFSFkNJ0i%2FHRhe8ScxdRWw8fNMz2xqmVPiwfS1um5ZaqB4WCPmIiQMW0YhCTXDlW60WeBBeCPqANXIEQZs4nm577hm5DKJk0%2FnPROAbk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba38b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Ellie_Graeden.f996486d6a965881e27d.jpg | 172.67.223.129 | 200 OK | 15 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Ellie_Graeden.f996486d6a965881e27d.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash4b19b0fbbfc3267a3bbc766218243d2a 8e9e106070a6134fe5f3bbcaddd00d9a6728b7a7 8a50afd1817d899cc245862f0920d60b9fff688f1db1a502c7f55182d65fa334
GET /vegas/static/media/Ellie_Graeden.f996486d6a965881e27d.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 15034
last-modified: Mon, 29 Apr 2024 18:05:46 GMT
etag: "662fe17a-3aba"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831442
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2F1g9N10fiwUVsnGuInZFFlk4SFFWnjSZQZanXfr3z%2BT8diQSyX0jg5ZrGQ%2BfXPbRFxfK64v8%2BvdT5ZLPvGMboD7t1S2VCzc1VP5ZECWjuFYiSTvQ7aZDnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba3db509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/JordanHarmon.0196c935297cabec311f.jpg | 172.67.223.129 | 200 OK | 16 kB |
URL GET HTTP/3ai4.io/vegas/static/media/JordanHarmon.0196c935297cabec311f.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash3bf5e4bc426f31a125692f64f43c09c2 3097c0573c98a4f5aaea65dd8f9f7150a841cf53 0bb3408436e019c152bc19b172056594253cc6240fff21149c909cd8f69d8c63
GET /vegas/static/media/JordanHarmon.0196c935297cabec311f.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 16342
last-modified: Thu, 09 May 2024 19:16:11 GMT
etag: "663d20fb-3fd6"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 43158
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=izwGiNacENuZmyPYWsXN5Uu2Qo3s%2F5gFzKAvG67%2B2ezOOy7Gd7lOIEdo4vyRGOEWqcjdbjiSS6KiVAnKv0JLBbm1yCKfcHFDQ3qU%2FIfJ%2FOh2hKTXHnxjoBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bba3fb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/BarbaraLatulippe.e95c9e4dfded2158b221.jpg | 172.67.223.129 | 200 OK | 21 kB |
URL GET HTTP/3ai4.io/vegas/static/media/BarbaraLatulippe.e95c9e4dfded2158b221.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hashe641b33ec0af3fe19f5653e624e0f4ac 715f667c777bf542fe6056e904a484fd3a7b6a95 df0b92f8657d158c727b6d4e509c49816ebb751d27e6d5301140403a8f354d26
GET /vegas/static/media/BarbaraLatulippe.e95c9e4dfded2158b221.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 20865
last-modified: Mon, 29 Apr 2024 18:08:20 GMT
etag: "662fe214-5181"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 831444
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZH38ukMdahXs%2BIngilllcPfFHqx%2Bn1TE%2BhH7BDx375esCxwiLl62qisf%2BShWIKkOERJT2N5rXcFlgsjkSEMRnynKI9LL9UmI8Ph8ur58TOmaImdTBqlXmJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b89e9b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Atul-Dalmia.e227f0bfc612db8f7f30.jpg | 172.67.223.129 | 200 OK | 21 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Atul-Dalmia.e227f0bfc612db8f7f30.jpg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x368, components 3 Hash8a80dcd5b2ac7b287231ccfeeb4a105a ffc109186df9d267c0bdc7087a720f171fd4fb0b 7a8e66096e9486ee3b1b785258228d46b5cc620bdb3ce5e3e962c874618afa5b
GET /vegas/static/media/Atul-Dalmia.e227f0bfc612db8f7f30.jpg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/jpeg
content-length: 21034
last-modified: Wed, 08 May 2024 10:49:30 GMT
etag: "663b58ba-522a"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 183138
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FlRcfcqtRiRV53F4Sxy%2ByMunE5pvx2xPBarj3cfKqBrXnND6WtIElKWuGv7z7mBjQAAAYVehFUjnyQd6t2DjpWo8CbolgbanxXsIhczu%2F435ZxVtp68ytLw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7b89efb509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0 Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 May 2024 03:25:26 GMT
expires: Wed, 07 May 2025 03:25:26 GMT
cache-control: public, max-age=31536000
age: 322609
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0 Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 15:13:04 GMT
expires: Fri, 09 May 2025 15:13:04 GMT
cache-control: public, max-age=31536000
age: 107351
last-modified: Fri, 22 Mar 2024 00:00:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0 Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 19:57:12 GMT
expires: Fri, 09 May 2025 19:57:12 GMT
cache-control: public, max-age=31536000
age: 90303
last-modified: Fri, 22 Mar 2024 00:00:38 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.addevent.com/libs/atc/1.6.1/atc.min.js | 52.85.243.111 | 200 OK | 8.5 kB |
URL GET HTTP/2cdn.addevent.com/libs/atc/1.6.1/atc.min.js IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash78c7b0371139249fb87e0fb129aa7f15 d9563d39686aaa1621b5d6de24c7c93e5d7fb932 a51450c88fb3cff34a158e28678860c6b067728233906ac8e6d02569a294532d
GET /libs/atc/1.6.1/atc.min.js HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 02 Mar 2024 01:13:31 GMT
last-modified: Thu, 28 Sep 2023 10:29:07 GMT
etag: W/"054b3aa7e686eac972fc5bae21c99c9f"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 210fa10efb175d891774d170436663b0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: jrGlaKKK615I5Qgt0k_Baf0TehBM-WYZJQzYTuMPOusGmxwBYt652w==
age: 6032922
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; preload
cache-control: max-age=8380800, public, must-revalidate
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| cdn.addevent.com/libs/imgs/icon-outlookcom-t5.svg | 52.85.243.111 | 200 OK | 2.1 kB |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-outlookcom-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashe1d7403c4528385877128898af02857c 7a69546d9337be50cc5626336abf26f8034db3ce d4347e5d2dad2962ea62ede5dfb42d34f813290c7dcd075512d3637aedd113e9
GET /libs/imgs/icon-outlookcom-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
strict-transport-security: max-age=31536000; preload
cache-control: max-age=8380800, public, must-revalidate
date: Tue, 09 Apr 2024 10:25:38 GMT
last-modified: Wed, 10 Nov 2021 14:38:41 GMT
etag: W/"54265beb2d8de84c00b474adc2697c9c"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-content-type-options: nosniff
age: 2716597
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: MRHxXy26DrjX72AAt2rcnJg8enLzIjUplqODE23TSt_VDEOqNLfsig==
|
|
| static-tracking.klaviyo.com/onsite/js/fender_analytics.f692ee00c71150d7db91.js?cb=1 | 151.101.2.133 | 200 OK | 13 kB |
URL GET HTTP/2static-tracking.klaviyo.com/onsite/js/fender_analytics.f692ee00c71150d7db91.js?cb=1 IP151.101.2.133:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerLet's Encrypt Subjectstatic-tracking.klaviyo.com FingerprintBF:89:8E:0C:4B:72:CB:14:0C:59:08:77:EC:BA:C8:AB:DA:11:43:AC ValidityThu, 21 Mar 2024 05:32:11 GMT - Wed, 19 Jun 2024 05:32:10 GMT
File typeJavaScript source, ASCII text, with very long lines (31701), with no line terminators Hashcb6418619f08d5e582cf68f2d2432438 e78308a6003b66c9439f78109c2f8e00f22fd124 182aed8bfe77643efd0464370a017e39fe115bc115962dede8fea94ac9191c56
GET /onsite/js/fender_analytics.f692ee00c71150d7db91.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: mKL1xWMRGO3xerTYlPL0yRvVbZ5DZgnzOEYw7UzT/IairFK8mTlaNUFMOeD5za6kjnB4D8Fzjtw=
x-amz-request-id: 41Y2RTP149KA3F25
last-modified: Thu, 11 Apr 2024 15:48:20 GMT
etag: "cb6418619f08d5e582cf68f2d2432438"
x-amz-server-side-encryption: AES256
x-amz-meta-entrypoints-hash: f762585ddd3a013913c4e420e75aa2819d1084f2
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 5WJy..Lo4mK2jnII0rHa1l5haINArMgZ
content-type: application/javascript
server: AmazonS3
content-encoding: br
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 10 May 2024 21:02:15 GMT
age: 4
x-served-by: cache-lga21947-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 87, 256421
vary: Accept-Encoding
content-length: 12748
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 IP216.58.207.227:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39412, version 1.0 Hashf00895393a31c17c1d38b3ca7a0c803f fa19070e138b46a2d4234af45cce46f0aa769ad9 91c01ec0de315f973f4c00041b7ae25e1a790cedff79a6fbb56c571bba379142
GET /s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:05:23 GMT
expires: Fri, 09 May 2025 02:05:23 GMT
cache-control: public, max-age=31536000
age: 154612
last-modified: Wed, 14 Feb 2024 22:43:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.addevent.com/libs/imgs/icon-apple-t5.svg | 52.85.243.111 | 200 OK | 8.7 kB |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-apple-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashfff9a8437dd609431fa2d93812cfe8d9 bb023f4ba6961802beb6cd4fa11dde8e898d07b8 9a75b2979b8b1a3f0e4324bc2777700983ad4ced04723e9312e4f90b4a55bf3d
GET /libs/imgs/icon-apple-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
strict-transport-security: max-age=31536000; preload
cache-control: max-age=8380800, public, must-revalidate
date: Sat, 27 Apr 2024 05:04:58 GMT
last-modified: Wed, 10 Nov 2021 14:38:39 GMT
etag: W/"dc5557ce99254f1b085b901bf32c59f6"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-content-type-options: nosniff
age: 1180637
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: bWWy2gDZxykz1s95tPRQcmnpZfo451H9JxJM2kkgZAMnpgveChuoWg==
|
|
| fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.8 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7816, version 1.0 Hash25b0e113ca7cce3770d542736db26368 cb726212d5d525021752a1d8470a0fb593e0c49e 9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 01:53:08 GMT
expires: Fri, 09 May 2025 01:53:08 GMT
cache-control: public, max-age=31536000
age: 155347
last-modified: Fri, 22 Mar 2024 00:00:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.addevent.com/libs/imgs/icon-google-t5.svg | 52.85.243.111 | 200 OK | 20 kB |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-google-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hashfead72e433b9d1939abf0532971913de 01f8f731508e6047465906fc84ae4e56ea7e2a75 099e5b054c2e4417745f15beec42d287eee65e293b115e7814a1596c7c26c8e7
GET /libs/imgs/icon-google-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/svg+xml
strict-transport-security: max-age=31536000; preload
cache-control: max-age=8380800, public, must-revalidate
date: Sat, 02 Mar 2024 01:55:02 GMT
last-modified: Wed, 10 Nov 2021 14:38:40 GMT
etag: W/"c25c73163339e3d519189795001712c1"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-content-type-options: nosniff
age: 6030433
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: H_JtUzy6IB_ba3HtDHTwHI_ha_MjZKmPdO7xbQk-VB23gOOizMznZw==
|
|
| fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 | 216.58.207.227 | 200 OK | 39 kB |
URL GET HTTP/2fonts.gstatic.com/s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 IP216.58.207.227:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 39412, version 1.0 Hashf00895393a31c17c1d38b3ca7a0c803f fa19070e138b46a2d4234af45cce46f0aa769ad9 91c01ec0de315f973f4c00041b7ae25e1a790cedff79a6fbb56c571bba379142
GET /s/notosans/v36/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 39412
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 May 2024 02:05:23 GMT
expires: Fri, 09 May 2025 02:05:23 GMT
cache-control: public, max-age=31536000
age: 154612
last-modified: Wed, 14 Feb 2024 22:43:09 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/website-video.329597485b5d1c0badb4.mp4 | 172.67.223.129 | 206 Partial Content | 1.1 MB |
URL GET HTTP/3ai4.io/vegas/static/media/website-video.329597485b5d1c0badb4.mp4 IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size1.1 MB (1130127 bytes) Hashfca532fde43c9e477cde376aebab1f2e e4e6259b525beba567ddfe51293904b04520397a da6187283fea81a77383aad0f5dae2942cd5c6225f2133e73aca661de77cf6d3
GET /vegas/static/media/website-video.329597485b5d1c0badb4.mp4 HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 10 May 2024 21:02:14 GMT
content-type: video/mp4
content-length: 14699825
last-modified: Mon, 29 Apr 2024 18:06:49 GMT
etag: "662fe1b9-e04d31"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 804950
content-range: bytes 0-14699824/14699825
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vv%2FnjgLvAhDTyGuqvYu%2FvTpD1jOCcvSTr9sZbaaDBbdftxFjWZYsn0VjkjfCSIXueE4XLiXWyNTIrZVgY81N0dS6Tc4ONOGzBWRXQaQLRmhm%2F1v9G3HBOmc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7e6cf7b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F |  35.205.106.218 | | 40 kB |
URL GET apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F IP35.205.106.218:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://ai4.io/vegas/?utm_source=Apollo&
File typeHTML document, Unicode text, UTF-8 text, with very long lines (22255) Hash062bc76d4136b01955af92b31bd79400 68f4144464a552a19205f4bdd3e465230286902c 5fd6c5e80c4a3d3de316bba50e3b15af1652e2e8a4fa07b8b73ccba6e2c90b6b
GET /newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F HTTP/1.1
Host: apply.ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-DNS-Prefetch-Control: off
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Download-Options: noopen
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Vary: Origin
Access-Control-Allow-Credentials: true
Content-Type: text/html; charset=utf-8
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Content-Length: 40460
ETag: W/"9e0c-aPQURGSlUqGSBfS90+RlIwKGkCw"
Date: Fri, 10 May 2024 21:02:15 GMT
Connection: keep-alive
Keep-Alive: timeout=5
|
|
| tally.so/_next/static/media/c9a5bc6a7c948fb0-s.p.woff2 | 104.21.72.50 | 200 OK | 47 kB |
URL GET HTTP/3tally.so/_next/static/media/c9a5bc6a7c948fb0-s.p.woff2 IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 46552, version 1.0 Hash74c3556b9dad12fb76f84af53ba69410 342edef074482299f72f8f7a8862e6f908bd4137 3bcf04ca301e44f13f404c8a04aa4ae707f67a950e12ef30c238f96e784266a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/media/c9a5bc6a7c948fb0-s.p.woff2 HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apply.ai4.io/
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: font/woff2
content-length: 46552
cache-control: public, max-age=86400, stale-while-revalidate
access-control-allow-origin: *
last-modified: Fri, 10 May 2024 07:54:11 GMT
etag: W/"b5d8-18f617eccb8"
x-cloud-trace-context: 0e1abf3dec2e320f5f6fa22c66520acb
cf-cache-status: HIT
age: 43159
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sRafe%2FEjOg42erBcDYN9HXYGLLc5rmqJWnrQqEmZyjPtlQ0k8aGYI6uGmGUw3DC3O3kfpusYrDsa%2B9nueYfRT6tiAGzCKXVcYq23aeZyOG2SYadipYKZuCaLjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 881cde831850b518-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/js?id=G-XXXXXXXXXX | 142.250.74.168 | 200 OK | 82 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-XXXXXXXXXX IP142.250.74.168:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (1822) Hash5c8a15fdb6a3d6f42e8b80e72366ee7f 58c690875af7d9b57806ada0d8cdfa3ab742df80 b30613b57c2c7a172eff8f5f3916763f493382a23905536654783aaf57b8b19e
GET /gtag/js?id=G-XXXXXXXXXX HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 21:02:15 GMT
expires: Fri, 10 May 2024 21:02:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81603
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| tally.so/_next/static/chunks/4681-2a027613c47b8f3f.js | 104.21.72.50 | 200 OK | 123 kB |
URL GET HTTP/3tally.so/_next/static/chunks/4681-2a027613c47b8f3f.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Size123 kB (122987 bytes) Hashcec9a8c84eb5333c538b95728e9d9c23 056d988e70de77273f14848eeeccefbbc06eac13 ee5aaea2e6c2e7b5c747be53db1d85799066126b9dd9e7d73a3453c8a92ed179
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/4681-2a027613c47b8f3f.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 07 May 2024 13:54:35 GMT
etag: W/"13664-18f5355ad78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 284559
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g1z%2BbMisNqYVNfFM3exWl5y%2BfX9JGgvMywm6u%2F2lUHRpy5vYPsR20HnAMs9yl7yBNqX77%2BYujdvre6L68cmCs7mEl7qR6btVzqxgO%2Fn3ebgmjbOZ%2FDtohgvv%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde83490356cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/9402-0d895e200dcc4ec3.js | 104.21.72.50 | 200 OK | 5.4 kB |
URL GET HTTP/3tally.so/_next/static/chunks/9402-0d895e200dcc4ec3.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hash07fdb5152417171282aaff2ae710f736 758e80db971a19bd4d4a7386eff8708b48c52da3 ab807f6d014f55d707dbd68fae81dec57f69efe8a7014a68900d73950431cad2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9402-0d895e200dcc4ec3.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"3385-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 881020
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4LhrNNrNhqzkHjg8QNJymQg3rJEajmxHMYpNuwnVeOlNc6U4bQj04KBb5fbiR25QSyI3T5XYNRMRQL2R4FDX9YE8yd9Jp1SMzWI3cwGYDQ7XsVRg4gr7e%2FwVew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8338f756cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/pages/embed/%5Bid%5D-0079320d2db817f0.js | 104.21.72.50 | 200 OK | 541 B |
URL GET HTTP/3tally.so/_next/static/chunks/pages/embed/%5Bid%5D-0079320d2db817f0.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (975), with no line terminators Hash61d05ed9cb1479b12cf7170f4c8f4873 3f7f35bcdeea9a49b611c26d59289b7303c60012 0eca678327664e3e39d8c0a32836e8924789295c9f6ed94c252bdefffacd2dc9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/embed/%5Bid%5D-0079320d2db817f0.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 07 May 2024 13:54:35 GMT
etag: W/"3cf-18f5355ad78"
vary: Accept-Encoding
x-cloud-trace-context: 62e68d1c1465cc7b04358b181b617d4a
cf-cache-status: HIT
age: 284558
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DwbDhCHaAOS4eB2m21rB19A6REO4V%2FrbJ8p%2FGdh7aL3uVl4uhJamnlogZipJW8dj%2B8b05DoqaWXtxAraFUwTijiPnMh4IF2fmHFolvzNdW7t5cgZuHGZXmDkBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde83491d56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/60-dfa3f4dad8f6725c.js | 104.21.72.50 | 200 OK | 24 kB |
URL GET HTTP/3tally.so/_next/static/chunks/60-dfa3f4dad8f6725c.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hashb98b2ca5a38854137b7cd32d77ea72a0 a119b866d5bf3fe541b36517fd383a5433c56006 6a141a779198b1182542304901c4d9c59fe2775c984f8dc14c60801b9c3f274e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/60-dfa3f4dad8f6725c.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 07 May 2024 13:54:35 GMT
etag: W/"154fc-18f5355ad78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 284573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6iYyNbUdIrIRkcG592UtxjBMv7tAZM2yjCHNaDz38nARtVjSloJ0kg8zpvD88GPtzQ%2BYl2RyzvnQycs9sntZmLpsfs%2FNpGAgu%2FH7F804KpjiBLCImeAigd4HMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8328dc56cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/framework-314c182fa7e2bf37.js | 104.21.72.50 | 200 OK | 46 kB |
URL GET HTTP/3tally.so/_next/static/chunks/framework-314c182fa7e2bf37.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hash418b6ddd02992488ce5727cfc04ca1ea 0f7af6189907b4dbb6b43355d67f437f87bff96f 9a5fa63a7095a6727f5b83e83975ddc7832a41eb4db12a2518aee927a701a1c0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/framework-314c182fa7e2bf37.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"226cf-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 872609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TUHt0q%2F1FxtwsjQsl9aRosiOX19grXCCXwBkcirWRV1MLDg1qiJMm5pRm%2BUTFW6IAniDnj3dccYfofdqARF8orJG8x2l89zoC1wiD18i6w6k1H9F00%2Fz%2Bz4gOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8318c956cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/2595-553c7e250cfe9afd.js | 104.21.72.50 | 200 OK | 9.7 kB |
URL GET HTTP/3tally.so/_next/static/chunks/2595-553c7e250cfe9afd.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hashf28e91a21c3a66cd744df6a8222b9fcf 61f5dbcf4801b7651933f664233c0fcd0df149db 9014bcee08e21cb53fab18be8599ec0b77f96f6af83b95faf0e07fd3e47fdf25
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/2595-553c7e250cfe9afd.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"7660-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 881053
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hFM5ih0TTatA1kYuFudCurWNBM5J0CPa1BWkbcM94faEU%2Boe8IP0cifFd%2FBjw2Nqs2Ne1Bx1NLfomiEaHubVrNtUhpdf7P%2BS%2FSrjcgEFLmxD%2BdFncUxwEn%2B%2BSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8338fc56cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| static.klaviyo.com/onsite/js/klaviyo.js?company_id=UcEJx6 | 151.101.194.133 | 200 OK | 922 B |
URL GET HTTP/2static.klaviyo.com/onsite/js/klaviyo.js?company_id=UcEJx6 IP151.101.194.133:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectstatic.klaviyo.com Fingerprint45:9A:0F:8B:B7:70:DD:92:C3:37:98:20:4A:4D:51:AC:5F:66:B8:0A ValidityWed, 13 Mar 2024 09:31:33 GMT - Tue, 11 Jun 2024 09:31:32 GMT
File typeJavaScript source, ASCII text, with very long lines (2028) Hash7773170f3f8b1713a24402b9429d8f3d 33dcb72b8c672202bbe76ed284c1560797eead9b 3d0f148ac3c6ac020547a9ebf8ae5a3c42950adbf635b8f53e6048df238fedaf
GET /onsite/js/klaviyo.js?company_id=UcEJx6 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers:
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
allow: OPTIONS, GET
cache-control: max-age=1, stale-while-revalidate=10800
content-language: en-us
content-security-policy: base-uri 'none'; frame-ancestors 'self' login.bigcommerce.com *.mybigcommerce.com admin.shopify.com klaviyo.file.force.com klaviyo.lightning.force.com klaviyo.my.salesforce.com; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' https://cdn.ampproject.org/; object-src 'none'; report-uri /csp/
content-type: application/javascript
etag: "7773170f3f8b1713a24402b9429d8f3d"
server: nginx
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Fri, 10 May 2024 21:02:15 GMT
age: 2
x-served-by: cache-lga21929-LGA, cache-hel1410020-HEL
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1715374936.938308,VS0,VE1
vary: Accept-Encoding
content-length: 922
X-Firefox-Spdy: h2
|
|
| tally.so/_next/static/chunks/198-a66de611c8fa52cb.js | 104.21.72.50 | 200 OK | 9.8 kB |
URL GET HTTP/3tally.so/_next/static/chunks/198-a66de611c8fa52cb.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (14950) Hash559e1cc999e53ce414003c3232188f0c e23033df14965bc0536aae3d7121f8b60230e1b7 f3c7d5fb1da60ee103a17987a461e791f73ca73eaa31596ae838c769f74f45af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/198-a66de611c8fa52cb.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"4b7b-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 872609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E1HWR%2BW7hjPJRrQEIacwswrtuWP%2Fd3XF6wSES%2B648YwL7T%2BDyEAmtpit85lCZZhh9vTChcFRfNdTFwCZpZ0KdWEdg%2FBDAE03Rnh97uvs1uhoRNeKNDl0XQkwRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8328d556cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/177-441380e846747cd9.js | 104.21.72.50 | 200 OK | 121 kB |
URL GET HTTP/3tally.so/_next/static/chunks/177-441380e846747cd9.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Size121 kB (121080 bytes) Hashd113390d58c501eca7e886bf5605bc36 1cd022d4ed29f14135021a5b31b33e5bbc709e68 e80980c6c9f2de8463e5475a649d995e2299f3b823ea3da4e09cd9d4b67053e9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/177-441380e846747cd9.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"7fba-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 876924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMN5pVSSYbpkYLefOgETI7aF2PuCItIeI8s3%2BADnoD%2BBiax2UbNPOqqUBlaxxQhdR9AyCsCC0G4s5zytEXJrPNhsfGNYAG2PleLzAnbkUcsc5NgxkxjFBlcq2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8328ec56cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.googletagmanager.com/gtag/destination?id=AW-873424914&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 85 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-873424914&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hash968ec5df3078b1f757e80566cf11bec8 474f2561bcd0ca21ee1beeca2437c4ad8c194663 62780ab3146d1b04bed5f6246e5fe4958dd8a026071231f2506a385351d16dd4
GET /gtag/destination?id=AW-873424914&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 10 May 2024 21:02:15 GMT
expires: Fri, 10 May 2024 21:02:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 84763
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| plausible.io/api/event |  194.242.11.186 | 202 Accepted | 2 B |
IP194.242.11.186:443 ASN#34989 ServeTheWorld AS
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerLet's Encrypt Subjectplausible.io FingerprintAD:0F:7D:DD:AB:46:B3:42:B1:97:57:A4:EB:88:19:D6:08:6A:AD:65 ValidityTue, 23 Apr 2024 07:08:31 GMT - Mon, 22 Jul 2024 07:08:30 GMT
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /api/event HTTP/1.1
Host: plausible.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 612
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 202 Accepted
date: Fri, 10 May 2024 21:02:15 GMT
content-type: text/plain; charset=utf-8
content-length: 2
server: BunnyCDN-NO1-830
cdn-pullzone: 682664
cdn-uid: 153cb5b1-399a-48ef-b5bf-098c03770254
cdn-requestcountrycode: NO
access-control-allow-credentials: true
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000
cache-control: must-revalidate, max-age=0, private
application: 10.0.0.3
permissions-policy: interest-cohort=()
x-request-id: F848am0nzlafxIgQogKD
cdn-proxyver: 1.04
cdn-requestpullsuccess: True
cdn-requestpullcode: 202
cdn-cachedat: 05/10/2024 21:02:15
cdn-edgestorageid: 830
cdn-requestid: c846724c026f984dac6c1f55bc25c7b0
X-Firefox-Spdy: h2
|
|
| static-tracking.klaviyo.com/onsite/js/fender_analytics.f692ee00c71150d7db91.js?cb=1 | 151.101.2.133 | 200 OK | 13 kB |
URL GET HTTP/2static-tracking.klaviyo.com/onsite/js/fender_analytics.f692ee00c71150d7db91.js?cb=1 IP151.101.2.133:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerLet's Encrypt Subjectstatic-tracking.klaviyo.com FingerprintBF:89:8E:0C:4B:72:CB:14:0C:59:08:77:EC:BA:C8:AB:DA:11:43:AC ValidityThu, 21 Mar 2024 05:32:11 GMT - Wed, 19 Jun 2024 05:32:10 GMT
File typeJavaScript source, ASCII text, with very long lines (31701), with no line terminators Hashcb6418619f08d5e582cf68f2d2432438 e78308a6003b66c9439f78109c2f8e00f22fd124 182aed8bfe77643efd0464370a017e39fe115bc115962dede8fea94ac9191c56
GET /onsite/js/fender_analytics.f692ee00c71150d7db91.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: mKL1xWMRGO3xerTYlPL0yRvVbZ5DZgnzOEYw7UzT/IairFK8mTlaNUFMOeD5za6kjnB4D8Fzjtw=
x-amz-request-id: 41Y2RTP149KA3F25
last-modified: Thu, 11 Apr 2024 15:48:20 GMT
etag: "cb6418619f08d5e582cf68f2d2432438"
x-amz-server-side-encryption: AES256
x-amz-meta-entrypoints-hash: f762585ddd3a013913c4e420e75aa2819d1084f2
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 5WJy..Lo4mK2jnII0rHa1l5haINArMgZ
content-type: application/javascript
server: AmazonS3
content-encoding: br
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 10 May 2024 21:02:16 GMT
age: 5
x-served-by: cache-lga21947-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 87, 256422
vary: Accept-Encoding
content-length: 12748
X-Firefox-Spdy: h2
|
|
| static-tracking.klaviyo.com/onsite/js/static.500134348b1f0969ffe3.js?cb=1 | 151.101.2.133 | 200 OK | 1.0 kB |
URL GET HTTP/2static-tracking.klaviyo.com/onsite/js/static.500134348b1f0969ffe3.js?cb=1 IP151.101.2.133:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectstatic-tracking.klaviyo.com FingerprintBF:89:8E:0C:4B:72:CB:14:0C:59:08:77:EC:BA:C8:AB:DA:11:43:AC ValidityThu, 21 Mar 2024 05:32:11 GMT - Wed, 19 Jun 2024 05:32:10 GMT
File typeJavaScript source, ASCII text, with very long lines (2183), with no line terminators Hash64de10774c3382fe4adddab07ea17f0d 32ddaf1cc1ae9c5c2a212ebaa9991e1c3b71a22c 1ba49e8383e2329fe4f6e2a33172420fefd5bee26ce915cef9315f5b09c54cf8
GET /onsite/js/static.500134348b1f0969ffe3.js?cb=1 HTTP/1.1
Host: static-tracking.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: 7YTZXjqkIvOweXIi7oeSA0xceDuWnmsMjEiNKqUFwDsP8LixUujiplLZJYiO/I8qfIFeO9cu6W1SD2AsFigCFg==
x-amz-request-id: ENY9D5YSSWTZMA0V
last-modified: Wed, 03 Apr 2024 02:24:08 GMT
etag: "64de10774c3382fe4adddab07ea17f0d"
x-amz-server-side-encryption: AES256
x-amz-meta-entrypoints-hash: a2a09d2f114724cda111ccd8470493362b1982e3
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: pOOHfwEpxidpf1C5y5x2xTnzSKHLx9Qw
content-type: application/javascript
server: AmazonS3
content-encoding: br
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 10 May 2024 21:02:16 GMT
age: 876
x-served-by: cache-lga21976-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 135, 3
vary: Accept-Encoding
content-length: 1029
X-Firefox-Spdy: h2
|
|
| static.klaviyo.com/onsite/js/runtime.d38366e97b4d226d07e0.js?cb=1 | 151.101.194.133 | 200 OK | 8.1 kB |
URL GET HTTP/2static.klaviyo.com/onsite/js/runtime.d38366e97b4d226d07e0.js?cb=1 IP151.101.194.133:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectstatic.klaviyo.com Fingerprint45:9A:0F:8B:B7:70:DD:92:C3:37:98:20:4A:4D:51:AC:5F:66:B8:0A ValidityWed, 13 Mar 2024 09:31:33 GMT - Tue, 11 Jun 2024 09:31:32 GMT
File typeJavaScript source, ASCII text, with very long lines (19958), with no line terminators Hashcc0cb63e101da55de9e484d57a043293 1de885173b483d727abcc8da36d415716a48d5ec 16dda4add82a4a59158b814eeaee6633f0b7068c8eee08a81e6956c1a5e4b372
GET /onsite/js/runtime.d38366e97b4d226d07e0.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: CvTBZtVO14B9vKeiK3vaSWu8dJQy5aOAKwJ+CHuGYfpxG3hOEMyu8U9Z9B0I8qYwLnOlx0t25p8=
x-amz-request-id: GQN4XZ8EWMKYGPP3
last-modified: Fri, 10 May 2024 19:05:43 GMT
etag: "cc0cb63e101da55de9e484d57a043293"
x-amz-server-side-encryption: AES256
x-amz-meta-entrypoints-hash: 5eae9bf06bb7d2e132b4da495f91856fd798837b
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 2_60EwAVe_h6Y2vOVXxTPp7zS9KtLF.e
content-type: application/javascript
server: AmazonS3
content-encoding: br
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 10 May 2024 21:02:16 GMT
age: 5
x-served-by: cache-lga21959-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 117, 14
vary: Accept-Encoding
content-length: 8125
X-Firefox-Spdy: h2
|
|
| static.klaviyo.com/onsite/js/sharedUtils.33782c9c80a866ae2ffa.js?cb=1 | 151.101.194.133 | 200 OK | 19 kB |
URL GET HTTP/2static.klaviyo.com/onsite/js/sharedUtils.33782c9c80a866ae2ffa.js?cb=1 IP151.101.194.133:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectstatic.klaviyo.com Fingerprint45:9A:0F:8B:B7:70:DD:92:C3:37:98:20:4A:4D:51:AC:5F:66:B8:0A ValidityWed, 13 Mar 2024 09:31:33 GMT - Tue, 11 Jun 2024 09:31:32 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (49233), with no line terminators Hashf02b97e8fb523ac47210b06f717d23d7 18412bcf2dc41e12268f4f849f9097964ebd27df e2af0b642e2ea5f68d7c367f130dcabf89d3f4a6cf5d8632e2389c028b8fa06f
GET /onsite/js/sharedUtils.33782c9c80a866ae2ffa.js?cb=1 HTTP/1.1
Host: static.klaviyo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: qPZyWsDC4R9JxrAxEuoBV6CclZjImw7g9EbxzS1Hq/p4WbaeVizz41NbViX+UJYNDXQDNPi6j40=
x-amz-request-id: 5S1VBXXQDJWY23WK
last-modified: Fri, 10 May 2024 16:08:49 GMT
etag: "f02b97e8fb523ac47210b06f717d23d7"
x-amz-server-side-encryption: AES256
x-amz-meta-entrypoints-hash: 76dd708e94558ab1d165917ff3f6cddee085e59d
cache-control: max-age=2592000,stale-while-revalidate=10800
x-amz-meta-surrogate-control: max-age=31536000
x-amz-meta-surrogate-key: fender-asset
x-amz-version-id: 9YyV8TgjdiskTB16mLEDkfI9CG772kUI
content-type: application/javascript
server: AmazonS3
content-encoding: br
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Fri, 10 May 2024 21:02:16 GMT
age: 5
x-served-by: cache-lga21972-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 97, 12
vary: Accept-Encoding
content-length: 19336
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/favicon.png | 172.67.223.129 | 200 OK | 5.1 kB |
IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (4111), with no line terminators Hash83cbffc63ec88bd7a72139c5772c9249 59b145d59cecbc587eeb4ffbf65221266fcb199d c263d7125b40c4c3cf90dce468e6812bdf221bd97c23decae08cf1f41e26ee89
GET /vegas/favicon.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: text/html
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Fri, 10 May 2024 18:09:00 GMT
x-frame-options: SAMEORIGIN
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H0uugYO6H%2BOQAO6kZlDWRCgkLFmD1ZooIq%2F8ZQQafRKhqDRAg2zYIArZyzTBNP9QcGKGRL88gDFiJHAyyAAHlN%2BK7HCouSOvboEzm9AyGH4zLboNQYNvEK0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde812fc7b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl | 104.18.37.70 | | 192 kB |
URL sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl IP104.18.37.70:0
File typeHTML document, ASCII text, with very long lines (63019) Size192 kB (192200 bytes) Hash0202a84414d47726b86c1b66b33b246e 6345bb8bbf27f364b75ad0043cc62da2dbcfdb6c 5be3697e8e842654c89f2548c67d6ef27386c7d6e4e866762cbc13cc4ca4ebcf
GET /cm.html?key=mxraov25s1nhuq4ktm6opzvl HTTP/1.1
Host: sibautomation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Cookie: uuid=40748e71-937e-489f-be24-46417e85c491
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: text/html; charset=utf-8
x-powered-by: Sails <sailsjs.com>
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 20635
expires: Fri, 10 May 2024 23:02:15 GMT
cache-control: public, max-age=7200
server: cloudflare
cf-ray: 881cde85cb0ab518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| js.intercomcdn.com/vendor.10719702.js | 54.230.111.33 | 200 OK | 200 kB |
URL GET HTTP/2js.intercomcdn.com/vendor.10719702.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65463) Size200 kB (199538 bytes) Hash10a33fbae9b028669f4ca58d7143c56f 4c27e70e84f2e1d719ff08a88558d8bb5040a30f 7d2d14822c3df70c09567bfc9ad1be3788d3f87a64f9cd9f74d7bf3128e596a9
GET /vendor.10719702.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 199538
last-modified: Thu, 09 May 2024 16:47:57 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: Fc6keJ6QY8NQrfh4IuQbVehBJj9pZUQx
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:28:59 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "9f7ebf6b2ae8012198c788bed5c9c246"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: Ry3yezkU4KAqyXUij5nMeCKcvlue6OXPROXbKVDradjttr3wcyW-TQ==
age: 1997
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| in-automate.brevo.com/p?key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&ma_url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F%3Fembed%3D1%26dynamicHeight%3D1%26hideTitle%3D1%26transparentBackground%3D1%26channel%3DOther%2520campaigns%26channeldrilldown1%3DApollo%26channeldrilldown2%3DNo%2520Campaign%26channeldrilldown3%3DNo%2520Terms%26channeldrilldown4%3DNo%2520Content%26gclid%3D%26msclkid%3D%26fbclid%3D%26id%3D%26landingpage%3Dhttps%253A%252F%252Fai4.io%252Fvegas%252F%26submitpage%3Dhttps%253A%252F%252Fai4.io%252Fvegas%252F%253Futm_source%253DApollo%2526%26testingdata%3DFrom%2520referrer%252C%2520original%2520URL%253A%2520https%253A%252F%252Fai4.io%252Fvegas%252F%253Futm_source%253DApollo%2526%26landingpagegroup%3D%252Fvegas%252F&sib_type=page&ma_title=Newsletter&sib_name=Newsletter&ma_referrer=https%3A%2F%2Fai4.io%2F&ma_path=%2Fnewsletter%2F | 104.18.38.216 | 204 No Content | 0 B |
URL GET HTTP/2in-automate.brevo.com/p?key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&ma_url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F%3Fembed%3D1%26dynamicHeight%3D1%26hideTitle%3D1%26transparentBackground%3D1%26channel%3DOther%2520campaigns%26channeldrilldown1%3DApollo%26channeldrilldown2%3DNo%2520Campaign%26channeldrilldown3%3DNo%2520Terms%26channeldrilldown4%3DNo%2520Content%26gclid%3D%26msclkid%3D%26fbclid%3D%26id%3D%26landingpage%3Dhttps%253A%252F%252Fai4.io%252Fvegas%252F%26submitpage%3Dhttps%253A%252F%252Fai4.io%252Fvegas%252F%253Futm_source%253DApollo%2526%26testingdata%3DFrom%2520referrer%252C%2520original%2520URL%253A%2520https%253A%252F%252Fai4.io%252Fvegas%252F%253Futm_source%253DApollo%2526%26landingpagegroup%3D%252Fvegas%252F&sib_type=page&ma_title=Newsletter&sib_name=Newsletter&ma_referrer=https%3A%2F%2Fai4.io%2F&ma_path=%2Fnewsletter%2F IP104.18.38.216:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjectbrevo.com Fingerprint9C:4B:56:5A:C3:CD:CC:B6:C5:90:DC:D7:EE:9D:7D:DE:07:B9:84:4B ValidityTue, 23 Apr 2024 21:09:18 GMT - Mon, 22 Jul 2024 21:09:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p?key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&ma_url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F%3Fembed%3D1%26dynamicHeight%3D1%26hideTitle%3D1%26transparentBackground%3D1%26channel%3DOther%2520campaigns%26channeldrilldown1%3DApollo%26channeldrilldown2%3DNo%2520Campaign%26channeldrilldown3%3DNo%2520Terms%26channeldrilldown4%3DNo%2520Content%26gclid%3D%26msclkid%3D%26fbclid%3D%26id%3D%26landingpage%3Dhttps%253A%252F%252Fai4.io%252Fvegas%252F%26submitpage%3Dhttps%253A%252F%252Fai4.io%252Fvegas%252F%253Futm_source%253DApollo%2526%26testingdata%3DFrom%2520referrer%252C%2520original%2520URL%253A%2520https%253A%252F%252Fai4.io%252Fvegas%252F%253Futm_source%253DApollo%2526%26landingpagegroup%3D%252Fvegas%252F&sib_type=page&ma_title=Newsletter&sib_name=Newsletter&ma_referrer=https%3A%2F%2Fai4.io%2F&ma_path=%2Fnewsletter%2F HTTP/1.1
Host: in-automate.brevo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Fri, 10 May 2024 21:02:16 GMT
access-control-allow-origin: *
cache-control: no-cache
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 881cde881aed56bb-OSL
X-Firefox-Spdy: h2
|
|
| www.google.com/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=847863103.1715374936&url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F&dma_cps=sypham&dma=1&npa=0>m=45He4580n81K88V7M6v810247524za200&auid=998420159.1715374933 | 142.250.74.164 | 302 Found | 42 B |
URL POST HTTP/2www.google.com/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=847863103.1715374936&url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F&dma_cps=sypham&dma=1&npa=0>m=45He4580n81K88V7M6v810247524za200&auid=998420159.1715374933 IP142.250.74.164:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=847863103.1715374936&url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F&dma_cps=sypham&dma=1&npa=0>m=45He4580n81K88V7M6v810247524za200&auid=998420159.1715374933 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 10 May 2024 21:02:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13t3t3t2t5&rnd=847863103.1715374936&url=https%3A%2F%2Fapply.ai4.io%2Fnewsletter%2F&dma_cps=sypham&dma=1&npa=0>m=45He4580n81K88V7M6v810247524za200&auid=998420159.1715374933
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tally.so/_next/static/chunks/pages/_app-df01ac0ae1b94297.js | 104.21.72.50 | 200 OK | 88 kB |
URL GET HTTP/3tally.so/_next/static/chunks/pages/_app-df01ac0ae1b94297.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hasha088a2441d08f99e8dcb20b359289e5b 2c8f1cbb5b27f7e64298a83fcde3c24efa3d5f20 ca806b7a1518a75a8e2fc8d9b8cb5edfb5533fa6733b4c016bb82d47c2399ee0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/_app-df01ac0ae1b94297.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 10 May 2024 14:26:35 GMT
etag: W/"4302e-18f62e60d78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 23444
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I6hh7a1N57sCmByNkg4Se2jctB5twgQadDsZEMPAVZTCP0WIEs47ByB52TB0bJAqKpqhkq2JsGYfNyXCDHh0O3MrTcnoxhmzxs8YE%2FjXi1P95rFp43UGK6GzUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8318ce56cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/7621-df73cfe9fad20d06.js | 104.21.72.50 | 200 OK | 10 kB |
URL GET HTTP/3tally.so/_next/static/chunks/7621-df73cfe9fad20d06.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hashaec3c3935522ed9820080b95e4d7954a 74cda9a828ed697a7061c0dfd7504694e6268fe8 e96b54e3e5e3287d894807ce08fee12677ca947c945bcfe47deaff8788e3374c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7621-df73cfe9fad20d06.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"3875-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 872609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9Xt%2F7%2FUiO3phBqyqyyN%2F0Z9f8UT58dSnwrGgt9Nq1JKNgDCMoUQvrKbTbA%2BpvnBtGUq1KIutgSOlB692XZmcJ%2ByE5uYampUiIexLJTZsGc%2F21WWh4gurZJVhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8338f356cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/8391-a5a30af02358c8f8.js | 104.21.72.50 | 200 OK | 8.2 kB |
URL GET HTTP/3tally.so/_next/static/chunks/8391-a5a30af02358c8f8.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typegzip compressed data, from Unix Hash5e1255fbc7e684cfffd1f0bd8a8bca74 1d76524a60c2a1450643cc372bc8a418c95c255a 52d1456cc90ab1ae9a7d47c7f7a031128ffb928fa71a0090b516a814404dd180
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8391-a5a30af02358c8f8.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 May 2024 12:26:42 GMT
etag: W/"2e7c-18f341f0fd0"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 808283
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U5YrvdU6uCqeoRcRxhJXhWECO49DpYgg3ZkTNaJr%2BL%2FJhbsjGNj4tC3spOQSljbH6DM41axGBiZcs2wwm7OWeyCKKmAIZhBRGHpDw6Sphuzt31C8I2DIUZpAMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8338f856cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| js.intercomcdn.com/vendors~app.fcd78c53.js | 54.230.111.33 | 200 OK | 22 kB |
URL GET HTTP/3js.intercomcdn.com/vendors~app.fcd78c53.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators Hashcc149135585d632c03f8c704a1a7f12e dcc90d3e211579dd61ed41ab79d0bfa65b0a7180 99eeb26d5346bfd5d89c4497f3fc446f712a5709eb4183ee8aed913883542c9b
GET /vendors~app.fcd78c53.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 21546
cross-origin-resource-policy: cross-origin
last-modified: Wed, 08 May 2024 16:19:19 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: zY23bPuJobwLQoXKJHX5J0mREleID3X7
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:30:37 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "f80aecf980e08392f6756ebb544bfce6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 1910
x-amz-cf-id: fBbsnq8IJ_PmSQu7240yatSpQkR6YVQ5flb6z10K2m-I0_MAP_sHgA==
|
|
| tally.so/_next/static/d-Jui6R-ZIYIYmtzQio1O/_buildManifest.js | 104.21.72.50 | 200 OK | 169 kB |
URL GET HTTP/3tally.so/_next/static/d-Jui6R-ZIYIYmtzQio1O/_buildManifest.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
Size169 kB (169424 bytes) Hashc850362ffa9c57a91e908804cee22b9c 37532c5e08c61d1f4598ef6bac4940bc8ad03078 4f3cb71951a04eed79021e807eaf6d10bf41877c3e56524e3fce64f74a586ff9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/d-Jui6R-ZIYIYmtzQio1O/_buildManifest.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 10 May 2024 14:26:35 GMT
etag: W/"1cd6-18f62e60d78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 23429
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H72YPTc4sep4z0evA%2FQuT1tLEguACLK9EriqyCJ7cAEeWKy6xmIjY4hMDmqiNSGATL3zb4%2FVaDs3qhNV2Sew0OE0aC7eROqaSRum8FWLoGDGGGuPY6j6x7ZpEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde83492156cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| js.intercomcdn.com/app~tooltips.dc57b358.js | 54.230.111.33 | 200 OK | 67 kB |
URL GET HTTP/3js.intercomcdn.com/app~tooltips.dc57b358.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65457) Hashd6a7ce4b17e54cc038167e337b2c88ec 55f55333d4dc73b15f11fa4270096609466b9aee 97427e55228c72736c0598c074d2f63398f47d57d295f3fa38d5b3c719095e6a
GET /app~tooltips.dc57b358.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 66609
cross-origin-resource-policy: cross-origin
last-modified: Fri, 10 May 2024 13:58:17 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: M5irmx7YNTWSxdJ3AGGqj1_gCZ0dDCBA
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:02:28 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "b9d6a06473ef5b21914412b29ad4c297"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 3601
x-amz-cf-id: Ex_hs3yj2rvVOWxth19h1hmBgBGYpjSIZBO-NRJ-4qYW95YexI2v2g==
|
|
| js.intercomcdn.com/app.4f6741f7.js | 54.230.111.33 | 200 OK | 166 kB |
URL GET HTTP/3js.intercomcdn.com/app.4f6741f7.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65459) Size166 kB (165963 bytes) Hashb8ac46e3dc09466f95e7a4ae124d71c7 1e37ae3a9c77d74b072bfd71e4c905ca8d848a03 86b4be1f20251e51fc9f96f3a678f30fae777d4f40ad7ab015f24233450152c2
GET /app.4f6741f7.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 165963
cross-origin-resource-policy: cross-origin
last-modified: Fri, 10 May 2024 13:58:17 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: lR.FaNM7Vq65XUMhv1xJJq2ALflFtzqq
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:02:28 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "4af850ea25f25b066b540bc882ec0598"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 3601
x-amz-cf-id: 7TEffEm9k-uiPd30TQy9OkpEF9QmRAeSthN4DI2CgMyySsjsDqZ5sg==
|
|
| js.intercomcdn.com/audio/notification.a161938bc0ae5943ddec.mp3 | 54.230.111.33 | 206 Partial Content | 23 kB |
URL GET HTTP/3js.intercomcdn.com/audio/notification.a161938bc0ae5943ddec.mp3 IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeAudio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, Stereo Hash205767301bc13a45332af776d517aada a21d8230fa62e154005674c786134e81200c63bf 0e6563a609efbf837985e4c598f5f41ef3f32634e60f2abe5e124594f2ea05d0
GET /audio/notification.a161938bc0ae5943ddec.mp3 HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
content-type: audio/mpeg
content-length: 22813
cross-origin-resource-policy: cross-origin
last-modified: Tue, 07 May 2024 16:31:08 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 87ZKsO5Rqvx_ZO7qS4WoRuJJczBmOW8f
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:24:02 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "205767301bc13a45332af776d517aada"
vary: Accept-Encoding
content-range: bytes 0-22812/22813
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 2302
x-amz-cf-id: GxWg3pUlNXK8xfOouwPpnNe6-FFpHuaLpXPZeWvfctQdqtlrRS7g-Q==
|
|
| api-iam.intercom.io/messenger/web/ping | 54.237.174.27 | 200 OK | 7.4 kB |
URL POST HTTP/2api-iam.intercom.io/messenger/web/ping IP54.237.174.27:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercom.com Fingerprint84:3F:75:36:86:5B:6C:03:88:CA:23:42:18:14:5B:D4:46:C7:9D:A3 ValidityMon, 15 Jan 2024 00:00:00 GMT - Tue, 11 Feb 2025 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (21679), with no line terminators Hash75f145c1361d93407978afbccd61d573 fcb41d6556914687d27ddba7b74ccd3f3f2e44e3 b8d2c712497f6db3442122e5fb689ea779e226bc81392e56de3a7801f06c06ea
POST /messenger/web/ping HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 504
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:17 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://ai4.io
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id
x-intercom-version: 0d771a6facb97b35c74ef92346c07c8651faf3cd
content-encoding: gzip
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 002clf2orni9nbuq46qg
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"d57f1dcca31a2b94ade3b4da74ea19f1"
x-runtime: 0.261716
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0185005c2bb6acfee
X-Firefox-Spdy: h2
|
|
| js.intercomcdn.com/message.4963e5bf.js | 54.230.111.33 | 200 OK | 34 kB |
URL GET HTTP/3js.intercomcdn.com/message.4963e5bf.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65460) Hash67beaa6eb8e8eeb48376bf9f05df15f3 05536c35dedecea0dfea61d391bd61a0cfad0e08 61ea6d3d4de8a8c7cd68acefa2a5a2359bedde1b275009a7ccc8146dc54621b7
GET /message.4963e5bf.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 34047
cross-origin-resource-policy: cross-origin
last-modified: Fri, 10 May 2024 13:58:18 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: m0ayNigas8U71UkrD2TSkdvZH3cbr0xg
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 19:58:44 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "8375f75d8e58b77c80513250f4e6e612"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 3835
x-amz-cf-id: yGxBWGzrEN60gX8iR3jKiNruckf5XTWJBuIxIkUetQtfmcjuck8T2Q==
|
|
| js.intercomcdn.com/images/dismiss.1e6831c11588937baf1e.png | 54.230.111.33 | 200 OK | 124 B |
URL GET HTTP/3js.intercomcdn.com/images/dismiss.1e6831c11588937baf1e.png IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typePNG image data, 8 x 8, 2-bit colormap, non-interlaced Hash249568e72cec7bca9d1887e46abe4f74 a9b3d62f455c887cfae57d7809e2811f2dc45d5e 3878bc01fed86222528eaaad9dd98fac94e82c88e7d8bf6e5e3750db93f6caa3
GET /images/dismiss.1e6831c11588937baf1e.png HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/png
content-length: 124
cross-origin-resource-policy: cross-origin
last-modified: Wed, 08 May 2024 16:19:37 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: JIB5y2uJaQ..kTGmIfWDk9d3vt.I3oWA
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 19:44:10 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "249568e72cec7bca9d1887e46abe4f74"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 4696
x-amz-cf-id: ZjbSSizJK00rlLz9YSFFIggAd8EHE7KDbUlYDRhrfDpDE6cxVWY7jw==
|
|
| static.intercomassets.com/avatars/4361919/square_128/0_1.37.52_PM-1600095324.jpeg | 54.230.111.8 | 200 OK | 3.8 kB |
URL GET HTTP/2static.intercomassets.com/avatars/4361919/square_128/0_1.37.52_PM-1600095324.jpeg IP54.230.111.8:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subjectintercomassets.com Fingerprint0B:26:54:3D:F7:F8:D4:CE:A2:CB:76:65:D9:1F:DC:94:19:04:B1:3F ValidityWed, 17 Apr 2024 00:00:00 GMT - Fri, 16 May 2025 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 128x128, components 3 Hash8a07f68001d9ee848c0fc9b226515693 38e450e5d016cfa8a7bb20a09f00c0f7dff1e9d9 00ea1a6dfd762633726eb9a815e431c9afb75f8f55365f447d9f7044fd2f1cfc
GET /avatars/4361919/square_128/0_1.37.52_PM-1600095324.jpeg HTTP/1.1
Host: static.intercomassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3804
date: Fri, 10 May 2024 11:14:46 GMT
last-modified: Mon, 14 Sep 2020 14:55:25 GMT
etag: "8a07f68001d9ee848c0fc9b226515693"
x-amz-server-side-encryption: AES256
cache-control: max-age=86400
x-amz-version-id: null
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: djPDbMsbGfkoCeFAqWmAepPd_w890NF2ZqoAOPcuzutQt2A5HC5zKQ==
age: 35259
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hashe0e26443b8b18542f77cfdd4bb3ad58e 800d5b264b5b36c4ea3b68f308d7850c1d983219 2ac15a80b83f492bd34e409ee7862f9e5cb9ec5e3787147b4501a48fc609c117
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 10 May 2024 21:02:24 GMT
Last-Modified: Fri, 10 May 2024 19:57:34 GMT
Server: ECAcc (ska/F73A)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zC8ta8CnO9yEl-2KTJwe2XS0tQ-9VnFzHJQQFFdVfLKX7lJkO13t1g==
Age: 3891
|
|
| services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US | 54.230.111.129 | | 82 B |
URL services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US IP54.230.111.129:0
Hash4f822d39c269d2c47e3174b6c6bad3b7 d56bd07959c766e9c18faa9cf1070548f9236b65 cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3
GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US HTTP/1.1
Host: services.addons.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
content-length: 82
server: openresty
date: Fri, 10 May 2024 20:58:29 GMT
allow: GET, HEAD, OPTIONS
x-amo-request-id: 0219432e3b6846549fcfd7e7b46e88b2
content-security-policy: style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; form-action 'self'; media-src https://videos.cdn.mozilla.net; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/; child-src https://www.recaptcha.net/recaptcha/; object-src 'none'; frame-src https://www.recaptcha.net/recaptcha/; connect-src 'self' https://*.google-analytics.com; default-src 'none'; font-src 'self' https://addons.mozilla.org/static-server/; script-src https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; report-uri /__cspreport__
x-frame-options: DENY
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: max-age=3600
public-key-pins: max-age=5184000; includeSubDomains; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="
via: 1.1 google, 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
etag: "4f822d39c269d2c47e3174b6c6bad3b7"
vary: origin,X-Country-Code,Accept-Language
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QUg1bYr8GIO9S3MdE9m7Pgo-JilW-Cf7QJ7KmlC5hOPQo4NvDQjCyw==
age: 250
X-Firefox-Spdy: h2
|
|
| aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 42 B |
URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text Hashf8f24fa0c857d8f2ee493e131b85ab62 cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6 e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: MISS
via: 1.1 google
date: Fri, 10 May 2024 21:01:13 GMT
content-type: text/xml; charset=utf-8
age: 86
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| js.intercomcdn.com/vendors~message.6a42fcdd.js | 54.230.111.33 | 200 OK | 14 kB |
URL GET HTTP/3js.intercomcdn.com/vendors~message.6a42fcdd.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (13931), with no line terminators Hasha303a6d7582d7f8ab7d034d904b64a1e da2cf5dac151a4c4b338064f3b534c9d02767613 607a5db71f3ce0aa09eb7c93a8b4471880c263563548bfbf9b33ae4a1c6ca3c8
GET /vendors~message.6a42fcdd.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 5272
cross-origin-resource-policy: cross-origin
last-modified: Tue, 07 May 2024 16:30:52 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: QnlWJhGQ889Dijq0hMSMRoxwPMryuc1z
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 19:57:40 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "3ff09a7f3020f923a7ad62fa9b6fa777"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 3885
x-amz-cf-id: ZiFdcxwJk8_UnfcWLYUrD29O3QLde5lkTPa7OjMsup4R4HoOKtBBOw==
|
|
| apply.ai4.io/_next/static/chunks/7251.8c652d7c649d4c86.js | 35.205.106.218 | 200 OK | 3.0 kB |
URL GET HTTP/1.1apply.ai4.io/_next/static/chunks/7251.8c652d7c649d4c86.js IP35.205.106.218:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerLet's Encrypt Subjectapply.ai4.io Fingerprint0B:C8:12:79:D0:6C:A2:9A:C8:58:82:5C:29:E2:0F:D2:B7:96:58:21 ValidityFri, 05 Apr 2024 20:08:52 GMT - Thu, 04 Jul 2024 20:08:51 GMT
File typeJavaScript source, ASCII text, with very long lines (3088), with no line terminators Hash97062350a3a018b649212bc8df5dba73 2a51e76f4206a17c4fd327262117d72154d49b3e 49b4fff0a7f242e66284621ba0c0c549a29c4425f17070799da5a40f34ebccd8
GET /_next/static/chunks/7251.8c652d7c649d4c86.js HTTP/1.1
Host: apply.ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
X-Powered-By: Express
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
transfer-encoding: chunked
connection: close
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 09 Apr 2024 12:44:02 GMT
etag: W/"bcb-18ec2e30650"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2143062
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0qSqUxwfmu3BwE5SDtSlTOrlelHtmpnszE8L2Fh5Mtcy8I0K%2F5gXjwKmCN%2BpWS3GMGDmfvHhIkYnHkP3FVazCRDVR%2F%2BT2ySVrm16mdgT8yRB9mhValKR7A%2BnLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde84f8bb6fc3-CDG
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| sibautomation.com/sa.js?key=mxraov25s1nhuq4ktm6opzvl | 104.18.37.70 | 200 OK | 8.2 kB |
URL GET HTTP/2sibautomation.com/sa.js?key=mxraov25s1nhuq4ktm6opzvl IP104.18.37.70:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjectsibautomation.com FingerprintA3:A5:F4:B4:C8:A6:31:68:A4:C8:A7:E5:5D:C1:B6:B9:2C:83:79:70 ValidityTue, 09 Apr 2024 00:57:20 GMT - Mon, 08 Jul 2024 00:57:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8388), with no line terminators Hashde9ff9bbb05859d378becc0f84771eb4 4cca61f89a3cc9bdaa29809e5d2e04bc12d1cd16 5f3c08ca826829b49a752b16aea95862c4707f0fdde40c55bd5d61f66262091e
GET /sa.js?key=mxraov25s1nhuq4ktm6opzvl HTTP/1.1
Host: sibautomation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:12 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=11140
access-control-allow-origin: *
etag: W/"2b84-QtB1j9J6WqOfVQtzLaBU2FPpuPg"
vary: Accept-Encoding
x-powered-by: Sails <sailsjs.com>
cf-cache-status: EXPIRED
expires: Fri, 10 May 2024 21:03:12 GMT
cache-control: public, max-age=60
server: cloudflare
cf-ray: 881cde71ccb3b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl | 104.18.37.70 | 200 OK | 2.4 kB |
URL GET HTTP/2sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl IP104.18.37.70:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjectsibautomation.com FingerprintA3:A5:F4:B4:C8:A6:31:68:A4:C8:A7:E5:5D:C1:B6:B9:2C:83:79:70 ValidityTue, 09 Apr 2024 00:57:20 GMT - Mon, 08 Jul 2024 00:57:19 GMT
File typeHTML document, ASCII text, with very long lines (2484), with no line terminators Hashc372f12caf82f4137f5a71fef94b644d 0ee4d3e080d9f891d6adbc837d418ee8c4ea188b 02911d5094ad8346fec6475bdf55abbad93af82eda3fdf18b096cfacbad1eaed
GET /cm.html?key=mxraov25s1nhuq4ktm6opzvl HTTP/1.1
Host: sibautomation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:12 GMT
content-type: text/html; charset=utf-8
x-powered-by: Sails <sailsjs.com>
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 20632
expires: Fri, 10 May 2024 23:02:12 GMT
cache-control: public, max-age=7200
server: cloudflare
cf-ray: 881cde72fe13b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/icon_fb.8280893ab17b452e65a9824ef9669284.svg | 172.67.223.129 | 200 OK | 417 B |
URL GET HTTP/3ai4.io/vegas/static/media/icon_fb.8280893ab17b452e65a9824ef9669284.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hash601866772ac1854365b460701a352859 d73b948c6a9541f94686a74f447c604850d8d6c7 3b245f9b639f76812f2f72957bd2486cf90cd409ad63599cde5737999dfda412
GET /vegas/static/media/icon_fb.8280893ab17b452e65a9824ef9669284.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 29 Apr 2024 18:14:29 GMT
etag: W/"662fe385-1a1"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867479
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lcoDkY4VgMv%2BDpTDd%2F9T7FKuckM1BnSiG4UMgvh0xccMOy6cgE4EqmqAr2N2m1XLNrP%2BKaYbfx2ZUd2mrpp4LQA0urYeZ%2Bdtf4bzNubqK%2B6TxGbthDpiUWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bda4fb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/css/35ecd37bad39778a.css | 104.21.72.50 | 200 OK | 6.3 kB |
URL GET HTTP/3tally.so/_next/static/css/35ecd37bad39778a.css IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeASCII text, with very long lines (6294), with no line terminators Hash7e50ce3f0c1164309c9a72152c8e19ea aff1940757fba3ce47c6178190b346c606c8106f 94494d9d864d861e5b0aa1e7c1aaf2ae20f2e823e6c29f8a52d9fb2a0a3a1ae4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/css/35ecd37bad39778a.css HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"187e-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 867025
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P3am5NmN2vqWrM4ywVMFHWRHIDSguxzVnlgWj1%2BVQ%2BhcZZsDtdDO5CycOXBsuftCMmzMk3%2BbHfLOxolM%2F%2BqVUa3DiYiCAK7DhWB32voe1zitb17TCVTVJjEKuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8308b256cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| in-automate.brevo.com/cm?uuid=40748e71-937e-489f-be24-46417e85c491&key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2 | 104.18.38.216 | 204 No Content | 0 B |
URL GET HTTP/2in-automate.brevo.com/cm?uuid=40748e71-937e-489f-be24-46417e85c491&key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2 IP104.18.38.216:443
Requested byhttps://sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl#cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2&cm_flag=true&allow_cookie=&i=0 CertificateIssuerGoogle Trust Services LLC Subjectbrevo.com Fingerprint9C:4B:56:5A:C3:CD:CC:B6:C5:90:DC:D7:EE:9D:7D:DE:07:B9:84:4B ValidityTue, 23 Apr 2024 21:09:18 GMT - Mon, 22 Jul 2024 21:09:17 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm?uuid=40748e71-937e-489f-be24-46417e85c491&key=mxraov25s1nhuq4ktm6opzvl&cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2 HTTP/1.1
Host: in-automate.brevo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sibautomation.com
DNT: 1
Connection: keep-alive
Referer: https://sibautomation.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Fri, 10 May 2024 21:02:13 GMT
access-control-allow-origin: *
cache-control: no-cache
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 881cde740d8556bb-OSL
X-Firefox-Spdy: h2
|
|
| sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl | 104.18.37.70 | 200 OK | 2.4 kB |
URL GET HTTP/2sibautomation.com/cm.html?key=mxraov25s1nhuq4ktm6opzvl IP104.18.37.70:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjectsibautomation.com FingerprintA3:A5:F4:B4:C8:A6:31:68:A4:C8:A7:E5:5D:C1:B6:B9:2C:83:79:70 ValidityTue, 09 Apr 2024 00:57:20 GMT - Mon, 08 Jul 2024 00:57:19 GMT
File typeHTML document, ASCII text, with very long lines (2484), with no line terminators Hashc372f12caf82f4137f5a71fef94b644d 0ee4d3e080d9f891d6adbc837d418ee8c4ea188b 02911d5094ad8346fec6475bdf55abbad93af82eda3fdf18b096cfacbad1eaed
GET /cm.html?key=mxraov25s1nhuq4ktm6opzvl HTTP/1.1
Host: sibautomation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Cookie: uuid=40748e71-937e-489f-be24-46417e85c491
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: text/html; charset=utf-8
x-powered-by: Sails <sailsjs.com>
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 20635
expires: Fri, 10 May 2024 23:02:15 GMT
cache-control: public, max-age=7200
server: cloudflare
cf-ray: 881cde85cb0ab518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.addevent.com/libs/imgs/icon-yahoo-t5.svg | 52.85.243.111 | 200 OK | 1.1 kB |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-yahoo-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashf23beb359ffef60a6e8ecb42f03ec946 b7c71e4731e9a51a8e712dd948b9aa6b3ca4ff9b 9bef7896187e96aec57bd7f38b00c0a713ee28ab3257bd3a5fe3f5c00a5e1bc5
GET /libs/imgs/icon-yahoo-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/svg+xml
strict-transport-security: max-age=31536000; preload
cache-control: max-age=8380800, public, must-revalidate
date: Sun, 17 Mar 2024 04:48:29 GMT
last-modified: Wed, 10 Nov 2021 14:38:41 GMT
etag: W/"2bb4e663c6a6e4157c8b46d4de0d5693"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-content-type-options: nosniff
age: 4724026
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: oGlO8ByuwV3V5YsD39ZC01dw3TcaCAUDoO8IWk6FEX9BHYVj8dX57Q==
|
|
| tally.so/_next/static/chunks/8789-9ee76d50b5e95a37.js | 104.21.72.50 | 200 OK | 28 kB |
URL GET HTTP/3tally.so/_next/static/chunks/8789-9ee76d50b5e95a37.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/8789-9ee76d50b5e95a37.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 07 May 2024 13:54:35 GMT
etag: W/"6eca-18f5355ad78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 284559
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hhk7RBVzNYYVV6hWeBzHCtdIhYhn3lMHh2IxBeXcLHJsHqqN%2FN5pabgBwYs8cjfRY14CY80Ny4Hjw3VoE6ydMhmRn136mpft3wh%2FTGYXgf585lK%2B%2BDvP6f4uqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde83491256cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| o407628.ingest.sentry.io/api/5277002/envelope/?sentry_key=c17ee4982b124541ae255c0c2f93d48f&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.80.0 | 34.120.195.249 | 200 OK | 2 B |
URL POST HTTP/2o407628.ingest.sentry.io/api/5277002/envelope/?sentry_key=c17ee4982b124541ae255c0c2f93d48f&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.80.0 IP34.120.195.249:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerDigiCert Inc Subjectingest.sentry.io Fingerprint60:82:0B:58:64:CD:37:FD:3F:C0:84:4F:0B:69:CF:58:05:15:97:9A ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash99914b932bd37a50b983c5e7c90ae93b bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/5277002/envelope/?sentry_key=c17ee4982b124541ae255c0c2f93d48f&sentry_version=7&sentry_client=sentry.javascript.nextjs%2F7.80.0 HTTP/1.1
Host: o407628.ingest.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://apply.ai4.io/
Content-Type: text/plain;charset=UTF-8
Content-Length: 448
Origin: https://apply.ai4.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tally.so/_next/static/chunks/5376-e74a5370b39f7eb8.js | 104.21.72.50 | 200 OK | 19 kB |
URL GET HTTP/3tally.so/_next/static/chunks/5376-e74a5370b39f7eb8.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (19354), with no line terminators Hash473168f3895884cec3d66d5fe0225749 3412cadf0636ce2e377430829a32209b9f2b4bbf 0decdb13b25aa179bbc55efed69b124c022284cb9919b37e71f54da4dfdcae13
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/5376-e74a5370b39f7eb8.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"4b9a-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 876924
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=19Pit6pwSZ6hAH7CO4LJSmDB46pt41zN44WTFwlUNKVogCNVfxKoOMBJjLXQyrxl2iTJ5bqKU6RXcGUZZ1oKhOkd0AoTzHcf2XtcJisLOKowmA6FFfSidI24yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8328e656cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/icon_in.422a1acc9e7f38bd8c7a45e715eb8562.svg | 172.67.223.129 | 200 OK | 3.2 kB |
URL GET HTTP/3ai4.io/vegas/static/media/icon_in.422a1acc9e7f38bd8c7a45e715eb8562.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hash5a308e5155614a87ae08d5422356cdbd ef8bcc5aae4a0993acc39a1635105bcfe0378116 5b024e5f20ef71398c6b301766a50e9b8a90bcae75cf0fb2c02ee7692d8af6bb
GET /vegas/static/media/icon_in.422a1acc9e7f38bd8c7a45e715eb8562.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Wed, 08 May 2024 10:52:45 GMT
etag: W/"663b597d-c6a"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 131457
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52fdc6pIBJcuvP%2FZJ4cCsP69LPFYHXOenaQrXZM8z0K%2B130yZjoXIonw5mtiTNJ2UB4yjkpv%2FcdrB3Qr5Zv0K1Zg2YXdhwsfopPk3NknM3Kskex7ABgznok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bda53b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/d-Jui6R-ZIYIYmtzQio1O/_ssgManifest.js | 104.21.72.50 | 200 OK | 77 B |
URL GET HTTP/3tally.so/_next/static/d-Jui6R-ZIYIYmtzQio1O/_ssgManifest.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeASCII text, with no line terminators Hashb6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/d-Jui6R-ZIYIYmtzQio1O/_ssgManifest.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 10 May 2024 14:26:35 GMT
etag: W/"4d-18f62e60d78"
vary: Accept-Encoding
x-cloud-trace-context: 54247fb50112b55cfb30eb51f57d1a61
cf-cache-status: HIT
age: 23444
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxHbsANRYQY39WZk71Lb4v%2BsIWFiqoxZot1YFsMv5Vn6x%2BHB0jHyvky%2FP9a2CSdECjkyHb4emncvE22G%2FU3nK2%2B3fH9AcAuitgNbtZB6HK59HklMKGiK5bcBgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde83492256cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/icon_sl.1f02bfd1c3cd1ffb7a756ce251ca0b02.svg | 172.67.223.129 | 200 OK | 3.7 kB |
URL GET HTTP/3ai4.io/vegas/static/media/icon_sl.1f02bfd1c3cd1ffb7a756ce251ca0b02.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hash0ad3d2af1315014aa3cd4567a7251fdb 805e751990953d23f74dd7ad4c8f9115ab07977e f253c8109551934b4300fb584110192c685dd54321eaca6425ed1717fd17487b
GET /vegas/static/media/icon_sl.1f02bfd1c3cd1ffb7a756ce251ca0b02.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 29 Apr 2024 18:16:01 GMT
etag: W/"662fe3e1-ea2"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fMT8Of9lq0TaVyCoya5xP7bPJSiQwKyUvhrA%2FAdgt9XsipBad3WixXSSMlBrXxUoNF3E%2FswlOAKXdf%2FHWphrSpbS%2Frg%2Fem%2BnV625CXzjRrK1LoC4n4bxslc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bda55b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| d1b3llzbo1rqxo.cloudfront.net/attributer.js | 54.230.241.33 | 200 OK | 50 kB |
URL GET HTTP/2d1b3llzbo1rqxo.cloudfront.net/attributer.js IP54.230.241.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.cloudfront.net FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52 ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7253) Hash88bb577366ee4181c2b33721ef19e69b c7511c25ff731f7999f2c4d27fc320b3852f9eff e6d232290aef758f8ca010737148116f465501bb2b49d12782f8837623e7ae1e
GET /attributer.js HTTP/1.1
Host: d1b3llzbo1rqxo.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 08 May 2024 22:53:26 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: vrcLl9vO.zYLhMZCo7d7e45DnwWZ1LIt
server: AmazonS3
content-encoding: br
date: Fri, 10 May 2024 18:09:51 GMT
etag: W/"88bb577366ee4181c2b33721ef19e69b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RyfsJGcKsDNnYXwGeKe-mAV1qHvuQLqCo6u8sEgfRNnwxmMHFxldvg==
age: 10341
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/Logo-Sliders-5.96c853792957448bfe1d.png | 172.67.223.129 | 200 OK | 47 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Logo-Sliders-5.96c853792957448bfe1d.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 2880 x 216, 8-bit/color RGBA, non-interlaced Hash962aefff359415414ae2328f5e8398d9 9eeb5d4ef740e481900377aa2668132f87c173a6 c8e38064b66ff23fcf3c6738d58ded1d330ac75ae5fb44828eadd215879cdf7d
GET /vegas/static/media/Logo-Sliders-5.96c853792957448bfe1d.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/png
content-length: 46977
last-modified: Wed, 08 May 2024 10:53:07 GMT
etag: "663b5993-b781"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 183154
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9nxcOpHsKSti6%2BVK20yw0dA2YSufKzmSEj6AvZE%2B9LAwACUXHg3pUm0VmoO%2BQ73BAfYFqQEtbOLGDOdC6HngKWFmbsWYkWbToQk3SNFB14cVDPOJsejgT28%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76ee2256af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| sibautomation.com/sa.js?key=mxraov25s1nhuq4ktm6opzvl | 104.18.37.70 | 200 OK | 8.2 kB |
URL GET HTTP/2sibautomation.com/sa.js?key=mxraov25s1nhuq4ktm6opzvl IP104.18.37.70:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjectsibautomation.com FingerprintA3:A5:F4:B4:C8:A6:31:68:A4:C8:A7:E5:5D:C1:B6:B9:2C:83:79:70 ValidityTue, 09 Apr 2024 00:57:20 GMT - Mon, 08 Jul 2024 00:57:19 GMT
File typeJavaScript source, ASCII text, with very long lines (8388), with no line terminators Hashde9ff9bbb05859d378becc0f84771eb4 4cca61f89a3cc9bdaa29809e5d2e04bc12d1cd16 5f3c08ca826829b49a752b16aea95862c4707f0fdde40c55bd5d61f66262091e
GET /sa.js?key=mxraov25s1nhuq4ktm6opzvl HTTP/1.1
Host: sibautomation.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Cookie: uuid=40748e71-937e-489f-be24-46417e85c491
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: text/javascript; charset=utf-8
cf-bgj: minify
cf-polished: origSize=11140
access-control-allow-origin: *
etag: W/"2b84-QtB1j9J6WqOfVQtzLaBU2FPpuPg"
vary: Accept-Encoding
x-powered-by: Sails <sailsjs.com>
cf-cache-status: HIT
age: 3
expires: Fri, 10 May 2024 21:03:15 GMT
cache-control: public, max-age=60
server: cloudflare
cf-ray: 881cde858ac3b518-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/icon_tw.2537c42c4cde97f12097010ef30be4e6.svg | 172.67.223.129 | 200 OK | 1.3 kB |
URL GET HTTP/3ai4.io/vegas/static/media/icon_tw.2537c42c4cde97f12097010ef30be4e6.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hash33bcb0967ef56916a64d542b311a92e0 4549ee4bf4bba0f5a92e978cbf12d3d9093f9cbe 9f8e240a5e08b784d9c0ae3c65890aefb7dc530943f61cb4aa436073a199e8cd
GET /vegas/static/media/icon_tw.2537c42c4cde97f12097010ef30be4e6.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 29 Apr 2024 18:20:54 GMT
etag: W/"662fe506-4f3"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 862144
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ojTVPKxmh%2BlC8MP272lO0cAX2Ur9WrrDCGxa%2F%2B4KTZ0JsSUCHWMamvmi1uB9BGagHzdojggaTnL4kKu3pyVJOg%2FhY3o%2FqtJmOEmSNJ%2Bbs0Yf6CiVyRIQ9k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bda51b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| tally.so/_next/static/chunks/9027-d3448e6225e526c4.js | 104.21.72.50 | 200 OK | 5.0 kB |
URL GET HTTP/3tally.so/_next/static/chunks/9027-d3448e6225e526c4.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (5114), with no line terminators Hash83fc0af8d8b723ca631f3c1045c98c43 6ec20026c5903ffb057fa80cab951b47ad0561a1 dc3545e5e17317eabaf53753819a43423d7ac1c41a0564378954ae0df13cdfcf
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/9027-d3448e6225e526c4.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"1371-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 872609
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N6DtEDYd2s4lq5gjNYsfqmwNehUr4K62HbmACWE89eJBaZnlQKJR5hNEuxcUK9tCTB2inClB4WjHbBzXXuuvUz5NsXHsgSocOu7fydKwnSLkwmPD%2Fs4exkPlvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8338f456cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Logo-Sliders-2.e7045feb2af8ba5c7067.png | 172.67.223.129 | 200 OK | 48 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Logo-Sliders-2.e7045feb2af8ba5c7067.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 2880 x 216, 8-bit/color RGBA, non-interlaced Hash6d27c9e4c70e22267f5448b4645e9f71 dce10e0e2c7620a66e6f1b0bc56bb690a6c04874 3c35feb24af5a4736ef5e8ff865ab529776f20d78fb46aa3260a49402086c1c1
GET /vegas/static/media/Logo-Sliders-2.e7045feb2af8ba5c7067.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/png
content-length: 47998
last-modified: Mon, 29 Apr 2024 18:14:26 GMT
etag: "662fe382-bb7e"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867481
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8bFmK0zbHDdfb76mBOyCbtlFwK%2Ffmy5LaVgDxOfgOM1COTUAARcdQV9iQGKAFA9OzEcL8wQuvVmDWMA9srJxCuFe%2FqTl%2FegPEZZ6bHemHkMFu3unCl8sMEc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76fe2956af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| api-iam.intercom.io/messenger/web/conversations/1581717 | 54.237.174.27 | 200 OK | 4.5 kB |
URL POST HTTP/2api-iam.intercom.io/messenger/web/conversations/1581717 IP54.237.174.27:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercom.com Fingerprint84:3F:75:36:86:5B:6C:03:88:CA:23:42:18:14:5B:D4:46:C7:9D:A3 ValidityMon, 15 Jan 2024 00:00:00 GMT - Tue, 11 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (4912), with no line terminators Hashc97f6ab20a9f9ac00a3646c74897c739 931d63042cb940451a340f59474f1cb1b96b501d 06e22fa5529b362a237faa76ce7bda9d04970c5d8ae0f830e1fd055f02c03074
POST /messenger/web/conversations/1581717 HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 540
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:23 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://ai4.io
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id
x-intercom-version: 0d771a6facb97b35c74ef92346c07c8651faf3cd
content-encoding: gzip
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 002co0v3nh8824g4p68g
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"0608c5a1e21243da843242b7c8c068ab"
x-runtime: 0.213121
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0185005c2bb6acfee
X-Firefox-Spdy: h2
|
|
| tally.so/_next/static/chunks/6464-9409142de250ca50.js | 104.21.72.50 | 200 OK | 58 kB |
URL GET HTTP/3tally.so/_next/static/chunks/6464-9409142de250ca50.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/6464-9409142de250ca50.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Tue, 07 May 2024 13:54:35 GMT
etag: W/"e23f-18f5355ad78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 284573
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PKCxmO6yN7p%2FcOSMQciPU5ZbPuZaOshC%2Fkrx0V765wKDbHmyFtiIgwNBKzaDBsWNiuBSB9GyEUl8Ix2Lp%2BASjfZvPAwsGQUmty4v5t6j6UoHVK4l%2FyARd6bLEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8338fe56cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| js.intercomcdn.com/frame.3fc0970b.js | 54.230.111.33 | 200 OK | 907 kB |
URL GET HTTP/2js.intercomcdn.com/frame.3fc0970b.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65464) Size907 kB (906618 bytes) Hash24f8ef8d8f6aa360c6ed923d96c92160 cf490d42d9ad2d22549b211e4baf12b242446271 a3395f4243aa85486d68e27491351f83d8eab6ba3cde18e22dc17eea21a806ec
GET /frame.3fc0970b.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 191003
last-modified: Fri, 10 May 2024 13:58:18 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: i.nlhGvy4fn3ASGiIuIcgQna6LLbYrdY
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:02:20 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "340ff7ca6ec565d86d21f5dfd28c93c6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: y3f5UiUgtmIZvvUzMQ_rkIdn2R7M7f7PoOCW_YtFqMd7tXwUO484ng==
age: 3595
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/icon_yb.1979677e54516498fd6c68fef7dce1d8.svg | 172.67.223.129 | 200 OK | 925 B |
URL GET HTTP/3ai4.io/vegas/static/media/icon_yb.1979677e54516498fd6c68fef7dce1d8.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hasha14d3d1a4ed55a0ce902d813006ba9b9 8afc094020b3a57801f4fa67588274e636688add d080d56b94fc6fe4b8f753828b7e9b2f475846d3dec9d05bb534775dfb8e77bc
GET /vegas/static/media/icon_yb.1979677e54516498fd6c68fef7dce1d8.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%2eyJmaXJzdFZpc2l0RGF0ZSI6IkZyaSwgMTAgTWF5IDIwMjQgMjE6MDI6MTQgR01UIiwic3VibWl0UGFnZSI6Imh0dHBzOi8vYWk0LmlvL3ZlZ2FzLz91dG1fc291cmNlPUFwb2xsbyYiLCJyZWZlcnJlclVSTCI6IiIsImxhbmRpbmdVUkwiOiJodHRwczovL2FpNC5pby92ZWdhcy8/dXRtX3NvdXJjZT1BcG9sbG8mIiwibGFzdFJlZmVycmVyVVJMIjoiIiwibGFzdExhbmRpbmdVUkwiOiJodHRwczovL2FpNC5pby92ZWdhcy8/dXRtX3NvdXJjZT1BcG9sbG8mIiwibGFzdFZpZXdlZFVSTCI6IiIsImRyaWxsRGF0YSI6eyJjaGFubmVsIjoiT3RoZXIgY2FtcGFpZ25zIiwiZHJpbGxEb3duMSI6IkFwb2xsbyIsImRyaWxsRG93bjIiOiJObyBDYW1wYWlnbiIsImRyaWxsRG93bjMiOiJObyBUZXJtcyIsImRyaWxsRG93bjQiOiJObyBDb250ZW50In0sImxhc3REcmlsbERhdGEiOnsiY2hhbm5lbCI6IkRpcmVjdCB0cmFmZmljIiwiZHJpbGxEb3duMSI6Ik5vbmUiLCJkcmlsbERvd24yIjoiTm9uZSIsImRyaWxsRG93bjMiOiJOb25lIiwiZHJpbGxEb3duNCI6Ik5vbmUifSwiZ2NsaWQiOiIiLCJtc2Nsa2lkIjoiIiwiZmJjbGlkIjoiIiwiaWQiOiIiLCJjdXN0b21GaWVsZHMiOnt9LCJsYW5kaW5nX3VybCI6Imh0dHBzOi8vYWk0LmlvL3ZlZ2FzLyIsInRlc3RfZGF0YSI6IkZyb20gcmVmZXJyZXIsIG9yaWdpbmFsIFVSTDogaHR0cHM6Ly9haTQuaW8vdmVnYXMvP3V0bV9zb3VyY2U9QXBvbGxvJiIsImxhbmRpbmdfcGFnZV9ncm91cCI6Ii92ZWdhcy8ifQ==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 29 Apr 2024 18:07:21 GMT
etag: W/"662fe1d9-39d"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 862144
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zssAeV7NUJBz02ibqDqFwNppWbQGULhpo6HFII6OKZ%2BX9spgv5IRlZtee1yQvOrmBFtc%2BFG02irkgto6tqRP2gicwNFlF7FmSvkVzLfPSgoEb%2FEQxC5i9NM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bda50b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| api-iam.intercom.io/messenger/web/rulesets/23600861/match | 54.237.174.27 | 200 OK | 4.5 kB |
URL POST HTTP/2api-iam.intercom.io/messenger/web/rulesets/23600861/match IP54.237.174.27:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercom.com Fingerprint84:3F:75:36:86:5B:6C:03:88:CA:23:42:18:14:5B:D4:46:C7:9D:A3 ValidityMon, 15 Jan 2024 00:00:00 GMT - Tue, 11 Feb 2025 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (4923), with no line terminators Hash2479c5b0faa5a8ae1f9a4d3b573b465d 0992a6b392402a3658135a0b5d9da5e611626ba6 865906c03a97e416b502023a93fbe20e7cc6c390c570dce304b6141a9e44ff78
POST /messenger/web/rulesets/23600861/match HTTP/1.1
Host: api-iam.intercom.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2085
Origin: https://ai4.io
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 21:02:23 GMT
content-type: application/json; charset=utf-8
status: 200 OK
cache-control: max-age=0, private, must-revalidate
access-control-allow-origin: https://ai4.io
vary: Accept,Accept-Encoding
strict-transport-security: max-age=31556952; includeSubDomains; preload
access-control-expose-headers: x-request-id
x-intercom-version: 0d771a6facb97b35c74ef92346c07c8651faf3cd
content-encoding: gzip
x-xss-protection: 1; mode=block
x-request-queueing: 0
x-request-id: 002bigsntpjpuaoc1gbg
access-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA
access-control-allow-credentials: true
access-control-allow-methods: POST, GET, OPTIONS
etag: W/"312934a7c4d2db87f9e67f427b284d5f"
x-runtime: 0.589829
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
server: nginx
x-ami-version: ami-0185005c2bb6acfee
X-Firefox-Spdy: h2
|
|
| ai4.io/vegas/static/media/Logo-Sliders-1.0ed252ea542968d9c0be.png | 172.67.223.129 | 200 OK | 37 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Logo-Sliders-1.0ed252ea542968d9c0be.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 2880 x 216, 8-bit/color RGBA, non-interlaced Hash8bcffc7b97afe5ad573b076430877bbe 3b71b3625a88181375facb1a768e6e75dcd8813c b3f2402275ce33033fbb131759a64c3faa8b7a1c24bb28541cc25d3c16230b8a
GET /vegas/static/media/Logo-Sliders-1.0ed252ea542968d9c0be.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/png
content-length: 36920
last-modified: Mon, 29 Apr 2024 18:08:17 GMT
etag: "662fe211-9038"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867481
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R9xD7sCjL3cEaOMbY14iGTlJHlgnCdYJ4kr9j48qbXcr2L39g6psCYX%2Fx9b2IPlIJ1uZi7wYtfspT7Z1KYYkCdszkDbnZiyT0nor179hU%2BMjMrL9q%2FSu1zk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76fe2856af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| js.intercomcdn.com/vendors~app~tooltips.02aed672.js | 54.230.111.33 | 200 OK | 709 kB |
URL GET HTTP/3js.intercomcdn.com/vendors~app~tooltips.02aed672.js IP54.230.111.33:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercomcdn.com FingerprintF0:2D:F5:73:71:5F:38:F6:2E:50:83:A3:D4:8A:21:C7:7B:AA:C2:D1 ValidityFri, 01 Dec 2023 00:00:00 GMT - Sun, 29 Dec 2024 23:59:59 GMT
Size709 kB (708606 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vendors~app~tooltips.02aed672.js HTTP/1.1
Host: js.intercomcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 167044
cross-origin-resource-policy: cross-origin
last-modified: Wed, 08 May 2024 16:19:19 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: CJ50T1tcYr_AdkxuSj.ymP7kCQutsJfy
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:34:57 GMT
cache-control: max-age=31536000, s-maxage=7200, public
etag: "a2af130c38849801b59890197bc06f69"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
age: 1657
x-amz-cf-id: qP9eRQ33ZMobjpUNi1z_26eXfzDCSCszXfFKYJtTnU9ZQJpLRSOSuQ==
|
|
| tally.so/_next/static/chunks/webpack-d9db3c465b3cf931.js | 104.21.72.50 | 200 OK | 19 kB |
URL GET HTTP/3tally.so/_next/static/chunks/webpack-d9db3c465b3cf931.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (18637), with no line terminators Hashbff479cff154610edef4f0b444b887f0 cdc3ba90cfda99087a6c3d77853f0e3495f4e9bc a7356c740f25f8797eea8a807c917e64e488a24062dc4204a78bf9b4cecd4982
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-d9db3c465b3cf931.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 10 May 2024 14:26:35 GMT
etag: W/"48cd-18f62e60d78"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 23444
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bCEfYUbg%2F%2FbOgZeMHpB6gIksv8lTpqBRBqSSZnjRAM9JPS3fx0Feiq32kaCybhYoHxtPA6JoJvT66dvUPzucYrYjbKbjSnLzkZrOaDuxF8layQq2nqFYyXc9ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8308c156cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/icon_ln.aeba4352053407d8c70eb1f62f30cb82.svg | 172.67.223.129 | 200 OK | 871 B |
URL GET HTTP/3ai4.io/vegas/static/media/icon_ln.aeba4352053407d8c70eb1f62f30cb82.svg IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeSVG Scalable Vector Graphics image Hash36c3569571839750e704ae890a82acc1 8fb11b2830a8424af4b917044df0ac5602bbcf8b 1a068a17afbb15253441ebea4a7130a635a215b03606b6370f4317c4cb4caf3c
GET /vegas/static/media/icon_ln.aeba4352053407d8c70eb1f62f30cb82.svg HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:14 GMT
content-type: image/svg+xml
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
last-modified: Mon, 29 Apr 2024 18:06:16 GMT
etag: W/"662fe198-367"
cache-control: public, max-age=31536000
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867476
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H82gmXeJtZ5R%2FYIk5A3HC0aaVYvQh1Fv4PmjSUSqIBJJ%2BlkZ13ZyxTyMxtDaM%2FPEPuYLa5aw%2B%2Bq7kWICyc3CxlcigmKwHlk7FocTcYDTKc3ChT8BciwjFY0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7bda56b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/homepage.23db61573614aba5356e.mp4 | 172.67.223.129 | 206 Partial Content | 668 kB |
URL GET HTTP/3ai4.io/vegas/static/media/homepage.23db61573614aba5356e.mp4 IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size668 kB (668139 bytes) Hasha86b52a9b04486408af3867b0e192e2e 3849cb73efa7718dc41f1a0a4f66aad9ec9807ce 70e9ddf2183c2c7d8dcfc2a2dc2380820290ac34f4df3ecfc63950d67d262e35
GET /vegas/static/media/homepage.23db61573614aba5356e.mp4 HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933; flaretrk=%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
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Fri, 10 May 2024 21:02:14 GMT
content-type: video/mp4
content-length: 63593513
last-modified: Thu, 09 May 2024 19:16:31 GMT
etag: "663d210f-3ca5c29"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 48326
content-range: bytes 0-63593512/63593513
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VZ4aPSv0liUbVhPBjoqNwXMMq6d2OG05s7noVXD2xUMO9ZZ1gqWVNm7vO7NI1MABvJGYuGwWSXAV%2FrQvLOQFPjzIuO5wyILM1wURZHioawCwJ3rn3lf%2B5D4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde7e6cf4b509-OSL
alt-svc: h3=":443"; ma=86400
|
|
| ai4.io/vegas/static/media/Logo-Sliders-3.f129eb67ef7023f66f2a.png | 172.67.223.129 | 200 OK | 62 kB |
URL GET HTTP/3ai4.io/vegas/static/media/Logo-Sliders-3.f129eb67ef7023f66f2a.png IP172.67.223.129:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerLet's Encrypt Subjectai4.io FingerprintAE:93:1C:EA:78:36:EE:BB:08:78:B3:50:06:FC:A4:D9:42:7A:51:04 ValiditySun, 21 Apr 2024 06:03:58 GMT - Sat, 20 Jul 2024 06:03:57 GMT
File typePNG image data, 2880 x 216, 8-bit/color RGBA, non-interlaced Hash69efefc208ab03b53722548d588eb8a1 87f3fc8dad06c77d67359a8e7252cf6fcb665ba7 c82772ecd08df3f435e74bc283fcc4b6818bad15e998844a512e332de9a35846
GET /vegas/static/media/Logo-Sliders-3.f129eb67ef7023f66f2a.png HTTP/1.1
Host: ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/vegas/?utm_source=Apollo&
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:13 GMT
content-type: image/png
content-length: 62354
last-modified: Mon, 29 Apr 2024 18:11:20 GMT
etag: "662fe2c8-f392"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 867481
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kcMXVsD6OlmHOoSPKbCpi%2BDWYIkgFKrJV1Uid%2Bb8ate0zt50FlJSaLzodsdo1cQbH4TpGrdX%2Bz6HAnLZxYddbLVRJ%2BzwxXAiK2eSKwT%2Fa087RlNF5u7hupA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde76fe2f56af-OSL
alt-svc: h3=":443"; ma=86400
|
|
| apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1 | 0.0.0.0 | | 0 B |
URL GET apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1 IP0.0.0.0:0
Requested byhttps://ai4.io/vegas/?utm_source=Apollo&
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1 HTTP/1.1
Host: apply.ai4.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Cookie: _gcl_au=1.1.998420159.1715374933; sib_cuid=006109f7-6e8b-4300-8b6e-b23762f3a6e2; _ga_LQZLPEMHMV=GS1.1.1715374933.1.0.1715374933.0.0.0; _ga=GA1.1.1774753672.1715374933
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| tally.so/_next/static/chunks/main-b131b8188e1836d4.js | 104.21.72.50 | 200 OK | 131 kB |
URL GET HTTP/3tally.so/_next/static/chunks/main-b131b8188e1836d4.js IP104.21.72.50:443
Requested byhttps://apply.ai4.io/newsletter/?embed=1&dynamicHeight=1&hideTitle=1&transparentBackground=1&channel=Other%20campaigns&channeldrilldown1=Apollo&channeldrilldown2=No%20Campaign&channeldrilldown3=No%20Terms&channeldrilldown4=No%20Content&gclid=&msclkid=&fbclid=&id=&landingpage=https%3A%2F%2Fai4.io%2Fvegas%2F&submitpage=https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&testingdata=From%20referrer%2C%20original%20URL%3A%20https%3A%2F%2Fai4.io%2Fvegas%2F%3Futm_source%3DApollo%26&landingpagegroup=%2Fvegas%2F CertificateIssuerGoogle Trust Services LLC Subjecttally.so Fingerprint53:0A:04:22:C1:00:28:BE:81:A3:86:0F:27:E7:F0:7C:34:72:94:86 ValidityTue, 23 Apr 2024 21:02:13 GMT - Mon, 22 Jul 2024 21:02:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size131 kB (130784 bytes) Hash4b1459cad85234b16f4aa0bf15dc8e47 f3386b732666262946beb82a960a85ffbf82fc14 834edf8e4fac61db80667a2aa7acf3c1ceaf453037072bea8f38c84c130af726
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-b131b8188e1836d4.js HTTP/1.1
Host: tally.so
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://apply.ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 10 May 2024 21:02:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 24 Apr 2024 08:26:23 GMT
etag: W/"1fee0-18f0f368798"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 881053
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GBG1RFLTs25Run35PuMxA1Bb%2FlPK75iDc%2Bq5EQPrU5Zeu6EHZvvJNqYHHsUT8eE6hp%2F3wWrprKawDD0%2Bo3Q4QqfN%2FVZmm5JJMrRJPSOf2C%2BXYVD8YBrwRovvxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 881cde8318cb56cc-OSL
alt-svc: h3=":443"; ma=86400
|
|
| nexus-websocket-a.intercom.io/pubsub/5-LRSqs7cdtq3R1uGRhnunUFWdbR7oaNW-daXS7vbX8WJhERHvpEvb2Djag7rR-3aNEptdx8f1qDmn1bJoT7yRhe6XC135V-Pc3v59?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor | 34.237.73.95 | 101 Switching Protocols | 0 B |
URL GET HTTP/1.1nexus-websocket-a.intercom.io/pubsub/5-LRSqs7cdtq3R1uGRhnunUFWdbR7oaNW-daXS7vbX8WJhERHvpEvb2Djag7rR-3aNEptdx8f1qDmn1bJoT7yRhe6XC135V-Pc3v59?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor IP34.237.73.95:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerDigiCert Inc Subject*.intercom.io Fingerprint3D:91:3E:2A:5D:80:08:D2:F0:DB:C3:9B:89:90:85:AA:FA:31:B2:DE ValidityTue, 07 Nov 2023 00:00:00 GMT - Sat, 07 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pubsub/5-LRSqs7cdtq3R1uGRhnunUFWdbR7oaNW-daXS7vbX8WJhERHvpEvb2Djag7rR-3aNEptdx8f1qDmn1bJoT7yRhe6XC135V-Pc3v59?X-Nexus-New-Client=true&X-Nexus-Version=0.12.12&user_role=visitor HTTP/1.1
Host: nexus-websocket-a.intercom.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://ai4.io
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lr2jyCFm8IP3dnXvUhKPCQ==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx
Date: Fri, 10 May 2024 21:02:17 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uSjA2utJhXTAllKRBdhTRz1XbC4=
Sec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover
|
|
| fonts.googleapis.com/css2?family=Noto+Sans:wght@400;600&family=Poppins:wght@400;500;600;700&display=swap | 142.250.74.106 | 200 OK | 9.2 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Noto+Sans:wght@400;600&family=Poppins:wght@400;500;600;700&display=swap IP142.250.74.106:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79 ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT
File typeASCII text, with very long lines (9478), with no line terminators Hash73986d89c933dff485bcaf4bbdce55cf d2aa77a46e119c4862bad4ee9348e1bf65895eef bddb8441cd7cc8a72b08e6e968b317f8e644e2f97cbeca82181f9b62958ba5a9
GET /css2?family=Noto+Sans:wght@400;600&family=Poppins:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 10 May 2024 21:02:12 GMT
date: Fri, 10 May 2024 21:02:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cdn.addevent.com/libs/imgs/icon-outlook-t5.svg | 52.85.243.111 | 200 OK | 2.0 kB |
URL GET HTTP/3cdn.addevent.com/libs/imgs/icon-outlook-t5.svg IP52.85.243.111:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.addevent.com FingerprintC4:AA:F1:04:5F:F1:35:33:F0:0E:AB:34:51:1D:E2:E0:4E:56:1F:A2 ValiditySat, 29 Jul 2023 00:00:00 GMT - Mon, 26 Aug 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hashe4e4f39cacaba6fc47d79007ed5a9b7f c330884e054419e365f27952c07488c0e94df8b3 dd2435a26c439439ac79ef9e1b7f8d95dc28af60ee018ba092905ca7f5e217cc
GET /libs/imgs/icon-outlook-t5.svg HTTP/1.1
Host: cdn.addevent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: image/svg+xml
strict-transport-security: max-age=31536000; preload
cache-control: max-age=8380800, public, must-revalidate
date: Sun, 17 Mar 2024 17:38:42 GMT
last-modified: Wed, 10 Nov 2021 14:38:41 GMT
etag: W/"357f1e3a95085d808d47ac6e371a5b4d"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding, Origin
x-cache: Hit from cloudfront
via: 1.1 05c02ade53b3395a9e9f2e8f66c7e4d0.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-content-type-options: nosniff
age: 4677813
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: LWtkT9JuBI3iJmMhOdoq3DjapAoNgbzxmCgf13FZ1wepuyuIpT6VBA==
|
|
| widget.intercom.io/widget/qsyl5sgh | 52.85.243.60 | 200 OK | 7.0 kB |
URL GET HTTP/2widget.intercom.io/widget/qsyl5sgh IP52.85.243.60:443
Requested byhttps://ai4.io/vegas/?utm_source=Apollo& CertificateIssuerAmazon Subject*.intercom.com Fingerprint84:3F:75:36:86:5B:6C:03:88:CA:23:42:18:14:5B:D4:46:C7:9D:A3 ValidityMon, 15 Jan 2024 00:00:00 GMT - Tue, 11 Feb 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7154), with no line terminators Hash78a305d960e2afd8af5bf2f51ce75625 9ef3374449814dab506f3cb4a742c2bafc2aa53c 06c9c8d671694eebe168821594436154e795ef271c9e6131d7211141cde75643
GET /widget/qsyl5sgh HTTP/1.1
Host: widget.intercom.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ai4.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2706
last-modified: Fri, 10 May 2024 14:02:17 GMT
x-amz-server-side-encryption: AES256
content-encoding: gzip
x-amz-version-id: PnqPBNYJRsAu.lLXRfOYyfZAZt_YMY1g
accept-ranges: bytes
server: AmazonS3
date: Fri, 10 May 2024 20:58:30 GMT
cache-control: max-age=300, s-maxage=300, public
etag: "0228d5192ddacd119a4240ae3ed20cec"
x-cache: Error from cloudfront
via: 1.1 9b9ff06545217fe747384bd8b8509aa4.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: U4rLfChEvrJX5sfcR0RbUfEjRnQ0_vxZv4zT62lS2ban9n26CVARoQ==
age: 295
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
0.0.0.0