| games.mochiads.com/ | 64.99.64.37 | | 308 B |
IP64.99.64.37:0
File typeHTML document, ASCII text Hash73728a68de91715e74341f721403592d 557371c393808240c08394405296be9f83b11586 fccb6fdef45b8f2782aba362230c9df6a2938bdefd37bfcd92d62efc6d272506
GET / HTTP/1.1
Host: games.mochiads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 10 May 2024 06:29:41 GMT
Server: Apache/2.4.18 (Ubuntu)
Cache-Control: private, no-cache
Location: http://wwwattheraces.com
Content-Length: 308
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
|
| wwwattheraces.com/ | 93.115.28.104 | | 11 B |
IP93.115.28.104:0 ASN#16125 UAB Cherry Servers
File typeASCII text, with no line terminators Hash32682312d17c7cbf18e73594f5570319 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Fri, 10 May 2024 06:29:41 GMT
location: http://ww1.wwwattheraces.com
server: nginx
set-cookie: sid=aee0feb7-0e96-11ef-b50a-a185ec7c7e4e; path=/; domain=.wwwattheraces.com; expires=Wed, 28 May 2092 09:43:48 GMT; max-age=2147483647; HttpOnly
|
|
| ww1.wwwattheraces.com/ | 15.197.204.56 | | 114 B |
IP15.197.204.56:0
File typeHTML document, ASCII text, with no line terminators Hashe89f75f918dbdcee28604d4e09dd71d7 f9d9055e9878723a12063b47d4a1a5f58c3eb1e9 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ww1.wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 10 May 2024 06:29:41 GMT
Content-Type: text/html
Content-Length: 114
Connection: keep-alive
|
|
| games.mochiads.com/c/g/poker-square_v744796.zip | 64.99.64.37 | | 308 B |
URL games.mochiads.com/c/g/poker-square_v744796.zip IP64.99.64.37:0
File typeHTML document, ASCII text Hash73728a68de91715e74341f721403592d 557371c393808240c08394405296be9f83b11586 fccb6fdef45b8f2782aba362230c9df6a2938bdefd37bfcd92d62efc6d272506
GET /c/g/poker-square_v744796.zip HTTP/1.1
Host: games.mochiads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Fri, 10 May 2024 06:29:42 GMT
Server: Apache/2.4.18 (Ubuntu)
Cache-Control: private, no-cache
Location: http://wwwattheraces.com
Content-Length: 308
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
|
|
| wwwattheraces.com/ | 93.115.28.104 | | 479 B |
IP93.115.28.104:0 ASN#16125 UAB Cherry Servers
File typeHTML document, ASCII text, with very long lines (479), with no line terminators Hash680ce32245607a81fc362140d9f8886e 603a3c56ddf2034602fcdde12791b70cc8c7eddf 1ee1e6e6871efb6734214aee4d705bfcfa25c282995764969e86d4a8c5215099
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
content-length: 479
content-type: text/html; charset=utf-8
date: Fri, 10 May 2024 06:29:42 GMT
server: Cowboy
set-cookie: sid=afd1815b-0e96-11ef-9aae-a1851d6eff26; path=/; domain=.wwwattheraces.com; expires=Wed, 28 May 2092 09:43:49 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| wwwattheraces.com/favicon.ico | 93.115.28.104 | | 9 B |
URL wwwattheraces.com/favicon.ico IP93.115.28.104:0 ASN#16125 UAB Cherry Servers
File typeASCII text, with no line terminators Hashd8f4a1993546cc4b850cde3599e27aec 094b763b4cfcc0b05e5d040581cd513c3ca08067 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wwwattheraces.com/
Cookie: sid=afd1815b-0e96-11ef-9aae-a1851d6eff26
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
cache-control: max-age=0, private, must-revalidate
content-length: 9
date: Fri, 10 May 2024 06:29:42 GMT
server: Cowboy
X-Firefox-Spdy: h2
|
|
| wwwattheraces.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcxNTMyOTc4MiwiaWF0IjoxNzE1MzIyNTgyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydjcwcGo4ZmNscjlsZTRqdXMxZDY4YTMiLCJuYmYiOjE3MTUzMjI1ODIsInRzIjoxNzE1MzIyNTgyOTQwODMwfQ.xkZF_cU_d_aYsrG1lPszvt9UsjYELloyd44BCFkbB3I&sid=afd1815b-0e96-11ef-9aae-a1851d6eff26 | 93.115.28.104 | | 11 B |
URL wwwattheraces.com/?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcxNTMyOTc4MiwiaWF0IjoxNzE1MzIyNTgyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydjcwcGo4ZmNscjlsZTRqdXMxZDY4YTMiLCJuYmYiOjE3MTUzMjI1ODIsInRzIjoxNzE1MzIyNTgyOTQwODMwfQ.xkZF_cU_d_aYsrG1lPszvt9UsjYELloyd44BCFkbB3I&sid=afd1815b-0e96-11ef-9aae-a1851d6eff26 IP93.115.28.104:0 ASN#16125 UAB Cherry Servers
File typeASCII text, with no line terminators Hash32682312d17c7cbf18e73594f5570319 60e22121bdd0bc71cdb2bae2a3aa577006b2eae9 e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTcxNTMyOTc4MiwiaWF0IjoxNzE1MzIyNTgyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydjcwcGo4ZmNscjlsZTRqdXMxZDY4YTMiLCJuYmYiOjE3MTUzMjI1ODIsInRzIjoxNzE1MzIyNTgyOTQwODMwfQ.xkZF_cU_d_aYsrG1lPszvt9UsjYELloyd44BCFkbB3I&sid=afd1815b-0e96-11ef-9aae-a1851d6eff26 HTTP/1.1
Host: wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wwwattheraces.com/
Cookie: sid=afd1815b-0e96-11ef-9aae-a1851d6eff26
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Fri, 10 May 2024 06:29:43 GMT
location: http://ww1.wwwattheraces.com
server: Cowboy
set-cookie: sid=afd1815b-0e96-11ef-9aae-a1851d6eff26; path=/; domain=.wwwattheraces.com; expires=Wed, 28 May 2092 09:43:50 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| ww1.wwwattheraces.com/ | 15.197.204.56 | | 114 B |
IP15.197.204.56:0
File typeHTML document, ASCII text, with no line terminators Hashe89f75f918dbdcee28604d4e09dd71d7 f9d9055e9878723a12063b47d4a1a5f58c3eb1e9 6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ww1.wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 10 May 2024 06:29:44 GMT
Content-Type: text/html
Content-Length: 114
Connection: keep-alive
|
|
| ww1.wwwattheraces.com/lander | 15.197.204.56 | | 620 B |
URL User Request GET ww1.wwwattheraces.com/lander IP15.197.204.56:0
File typeHTML document, ASCII text, with very long lines (619) Hashbe2898c1a2bf6dd65777d6ab7db351bf 72faa48da20ca3be43e409d41c1d9b4f248036a3 1967803bf528b67f3fd52f706399955d40e76adc3d95883f468745110ea9ab0f
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /lander HTTP/1.1
Host: ww1.wwwattheraces.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.wwwattheraces.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 10 May 2024 06:29:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: private, max-age=86400
Set-Cookie: expiry_partner=; Path=/; Max-Age=86400
caf_ipaddr=91.90.42.154; Path=/; Max-Age=86400
country=NO; Path=/; Max-Age=86400
city=Oslo; Path=/; Max-Age=86400
lander_type=parking; Path=/; Max-Age=86400
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_VsGDUdC3edY9BysSSFjr6nwcK5sBVudgd2aN5Jwz0FjleAnMuzae9d0zdOLh3P7osX8i10KzjiUFyDXlVNg11w
X-Content-Type-Options: nosniff
|
|
| img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css | 23.36.79.43 | 200 OK | 766 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/static/css/main.8a1d19af.css IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typeASCII text, with very long lines (2736) Hashe2009d689266387017b6648142516bd9 15535120c37eab27b129c344a9dac737d45844bb 0fe514c7010c6d8b9e44f011eea7497f7e482a60e1498ce324f99729948d048d
GET /parking-lander/static/css/main.8a1d19af.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.wwwattheraces.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: Bbx0twjBexN11tHX54e8zYW69emc9WSmeyXk9L/+8x0V5ncLNgs72wDdMht/43NgJ/+EGRmGUkLueeXRPeuurA==
x-amz-request-id: 0E084Q78HPSEWA8C
last-modified: Thu, 25 Apr 2024 14:57:39 GMT
etag: "e2009d689266387017b6648142516bd9"
x-amz-server-side-encryption: AES256
x-amz-version-id: QsGRKePFgIacC_imaTDmrynQkV6OaPi_
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 10 May 2025 06:29:45 GMT
date: Fri, 10 May 2024 06:29:45 GMT
content-length: 766
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/static/js/main.d964337e.js | 23.36.79.43 | 200 OK | 176 kB |
URL GET HTTP/2img1.wsimg.com/parking-lander/static/js/main.d964337e.js IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typeJavaScript source, ASCII text, with very long lines (65465) Size176 kB (175941 bytes) Hash28421e346677b5607095b13e38bd5b8a 579cd0727c99a699c9f0d017ff5c0ec18aeee780 4e0d32553e006e3de54cdd19c28c77862f84d50b0bf334cabdf43bb782104f07
GET /parking-lander/static/js/main.d964337e.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.wwwattheraces.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: ZGMHh5ZIPCK2yBcGe7p2FHqK9vN5W2CrV9ONkOywhIQT6at2uzk5oEbL270H4VVfBWeG9kvjuGzcfEEYeQzWmQ==
x-amz-request-id: K08TJYRSY9NA690E
last-modified: Tue, 30 Apr 2024 17:29:52 GMT
etag: "28421e346677b5607095b13e38bd5b8a"
x-amz-server-side-encryption: AES256
x-amz-version-id: I4ijK.v_9PzPMJT8YNL0ol0lPVWU.sgG
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 10 May 2025 06:29:45 GMT
date: Fri, 10 May 2024 06:29:45 GMT
content-length: 175941
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| btloader.com/tag?o=5097926782615552&upapi=true | 104.22.74.216 | 200 OK | 19 kB |
URL GET HTTP/2btloader.com/tag?o=5097926782615552&upapi=true IP104.22.74.216:443
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerGoogle Trust Services LLC Subjectbtloader.com Fingerprint70:F7:F9:F7:42:5B:08:2E:94:58:BB:71:DF:F9:4D:8C:F5:09:57:DA ValiditySun, 14 Apr 2024 06:05:01 GMT - Sat, 13 Jul 2024 06:05:00 GMT
File typeJavaScript source, ASCII text, with very long lines (56340) Hashb722e19572d5db4999cd0b0909719016 59cc58f15bda1e5c066dff34f234dafc37c4ee76 52d203de8ff92747682910b33ab10d10e19a9939b936bce4029bbdb3fa2cacd0
GET /tag?o=5097926782615552&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.wwwattheraces.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:29:45 GMT
content-type: application/javascript
content-length: 18798
cache-control: public, max-age=300, must-revalidate, stale-if-error=3600, stale-while-revalidate=300
content-encoding: gzip
etag: "1965e023b5cd9a33e8ec8e492cc47e36"
last-modified: Fri, 10 May 2024 05:34:08 GMT
vary: Origin, Accept-Encoding
via: 1.1 google
cf-cache-status: HIT
age: 3252
accept-ranges: bytes
server: cloudflare
cf-ray: 8817e06cdb138dc9-HEL
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/px.js?ch=1&abp=1&gdabp=true | 23.36.79.43 | 200 OK | 20 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/px.js?ch=1&abp=1&gdabp=true IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Hash3970e82605c7d109bb348fc94e9eecc0 e03849ea786b9f7b28a35c17949e85a93eb1cff1 f5d031af01f137ae07fa71720fab94d16cc8a2a59868766002918b7c240f3967
GET /parking-lander/px.js?ch=1&abp=1&gdabp=true HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww1.wwwattheraces.com/
Origin: http://ww1.wwwattheraces.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: +G9yEbfW8OTV/FYrCH+UfU+9EkMq3T0Ij48BLBTeGkllzEeUZdBoAtT5ai0KsBLs7GzKQTPK0pQ=
x-amz-request-id: RH9Y3EW7787DQ2H6
last-modified: Thu, 25 Apr 2024 14:57:40 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: _e6l_J7r0IBtIbGltEIDamQ8pCN1LYVI
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
cache-control: max-age=31536000
expires: Sat, 10 May 2025 06:29:45 GMT
date: Fri, 10 May 2024 06:29:45 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1&gdabp=true | 142.250.74.164 | 200 OK | 74 kB |
URL GET HTTP/2www.google.com/adsense/domains/caf.js?abp=1&gdabp=true IP142.250.74.164:443
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintC6:A2:DC:31:5A:53:FA:DD:55:71:A3:F4:DD:43:3D:16:71:B8:B3:99 ValidityTue, 16 Apr 2024 04:20:32 GMT - Tue, 09 Jul 2024 04:20:31 GMT
File typeJavaScript source, ASCII text, with very long lines (2247) Hash9884df1ca710a2cd9e0af91d851fc581 fd2d09df15c33b17809a168888fbfb8e166628a9 e08655bcdbd9409451071f25dd6267624cc1a4c88dcf0b2048843cf7bd53a994
GET /adsense/domains/caf.js?abp=1&gdabp=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.wwwattheraces.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 10 May 2024 06:29:45 GMT
expires: Fri, 10 May 2024 06:29:45 GMT
cache-control: private, max-age=3600
etag: "10744723455410272443"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ad-delivery.net/px.gif?ch=2 | 172.67.69.19 | 200 OK | 43 B |
URL GET HTTP/2ad-delivery.net/px.gif?ch=2 IP172.67.69.19:443
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerGoogle Trust Services LLC Subjectad-delivery.net Fingerprint03:56:A5:CD:68:65:E1:00:BD:87:3E:45:0C:B1:3B:C2:2C:8C:4E:18 ValidityTue, 19 Mar 2024 04:48:01 GMT - Mon, 17 Jun 2024 04:48:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=2 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.wwwattheraces.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:29:45 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPo6zuHjBRo7_QGjoPgBJ4cm6NGA39yz_qNjtg8PMIqquxVgKc71qnGT6ngjUyjh9ypCKobTvAyZ2w
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Tue, 30 Apr 2024 17:17:29 GMT
cache-control: public, max-age=86400
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
age: 828736
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D0DoPidTfyP0u1hM6Bxy%2F%2BC%2FLfadrkwTCnQIHGVQe6Ba2EZAlO7iWuRRw6fTBfsCp4uZxcGAGEIwZ%2B1eyeJ6aFgzkJw%2B9OwJz8ciYKStC3AQ0%2FCQJ%2B2bJkOB%2F3seZPeZPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817e06e697d56a9-OSL
X-Firefox-Spdy: h2
|
|
| ad-delivery.net/px.gif?ch=1&e=0.07114040035316793 | 172.67.69.19 | 200 OK | 43 B |
URL GET HTTP/2ad-delivery.net/px.gif?ch=1&e=0.07114040035316793 IP172.67.69.19:443
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerGoogle Trust Services LLC Subjectad-delivery.net Fingerprint03:56:A5:CD:68:65:E1:00:BD:87:3E:45:0C:B1:3B:C2:2C:8C:4E:18 ValidityTue, 19 Mar 2024 04:48:01 GMT - Mon, 17 Jun 2024 04:48:00 GMT
File typeGIF image data, version 89a, 1 x 1 Hashad4b0f606e0f8465bc4c4c170b37e1a3 50b30fd5f87c85fe5cba2635cb83316ca71250d7 cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /px.gif?ch=1&e=0.07114040035316793 HTTP/1.1
Host: ad-delivery.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.wwwattheraces.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 10 May 2024 06:29:45 GMT
content-type: image/gif
content-length: 43
x-guploader-uploadid: ABPtcPo6zuHjBRo7_QGjoPgBJ4cm6NGA39yz_qNjtg8PMIqquxVgKc71qnGT6ngjUyjh9ypCKobTvAyZ2w
x-goog-generation: 1620242732037093
x-goog-metageneration: 5
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 43
x-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
access-control-expose-headers: *
expires: Tue, 30 Apr 2024 17:17:29 GMT
cache-control: public, max-age=86400
last-modified: Wed, 05 May 2021 19:25:32 GMT
etag: "ad4b0f606e0f8465bc4c4c170b37e1a3"
age: 828736
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=50fBTAEWohqkWdaOvNWtbbv063I2kwLEFIqrRlxarxKKSzFP69v09Qc2OsTcu%2F7BSMw6PNv9uBUP4O6qnSB9vVTb4EmMiPa3l%2FzVKjmuETxA8xY17ZK31j0zMk7KaLWgZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8817e06e798356a9-OSL
X-Firefox-Spdy: h2
|
|
| api.btloader.com/mw/state?bt_env=prod | 130.211.23.194 | 204 No Content | 0 B |
URL GET HTTP/2api.btloader.com/mw/state?bt_env=prod IP130.211.23.194:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerGoogle Trust Services LLC Subjectapi.btloader.com Fingerprint91:D7:31:40:CA:23:84:1D:EC:B3:E5:18:FA:A1:67:B2:7E:BF:4D:3F ValidityFri, 05 Apr 2024 16:07:23 GMT - Thu, 04 Jul 2024 17:00:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /mw/state?bt_env=prod HTTP/1.1
Host: api.btloader.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww1.wwwattheraces.com/
Origin: http://ww1.wwwattheraces.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-origin: *
vary: Origin
date: Fri, 10 May 2024 06:29:45 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| img1.wsimg.com/parking-lander/px.js?ch=2&abp=2&gdabp=true | 23.36.79.43 | 200 OK | 0 B |
URL GET HTTP/2img1.wsimg.com/parking-lander/px.js?ch=2&abp=2&gdabp=true IP23.36.79.43:443 ASN#20940 Akamai International B.V.
Requested byhttp://ww1.wwwattheraces.com/lander CertificateIssuerStarfield Technologies, Inc. Subject*.wsimg.com FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /parking-lander/px.js?ch=2&abp=2&gdabp=true HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww1.wwwattheraces.com/
Origin: http://ww1.wwwattheraces.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 1qSoBWwECfWANdxPaBIT87buOEsYm6N7Zh8PmmMgHclIgc89GO+PLwWW+bGYbw3Yih+AGdfm/lg=
x-amz-request-id: TFAHTF9EPJAEV9J1
last-modified: Tue, 30 Apr 2024 17:29:58 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-server-side-encryption: AES256
x-amz-version-id: r379WJZyNAQk_Fk.PstwhOHm2FcbbkxE
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
cache-control: max-age=31536000
expires: Sat, 10 May 2025 06:29:45 GMT
date: Fri, 10 May 2024 06:29:45 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|