www.upload.ee/download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar
439 B URL www.upload.ee/download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (439), with no line terminators
Hash 9f082906a8ea5b3900aed20633e8e33c
6eefcec21d4266663dd37cc83eaaba733c1737f7
5f43cfca7dcd7f99349a65de67279245b5650faef124b4e415af45fba4b4d734
GET /download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 10 Sep 2023 11:16:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 439
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
www.upload.ee/download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar
439 B URL www.upload.ee/download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (439), with no line terminators
Hash 9f082906a8ea5b3900aed20633e8e33c
6eefcec21d4266663dd37cc83eaaba733c1737f7
5f43cfca7dcd7f99349a65de67279245b5650faef124b4e415af45fba4b4d734
GET /download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 10 Sep 2023 11:16:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 439
Connection: keep-alive
Keep-Alive: timeout=5
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
200 OK 9.0 kB URL User Request GET HTTP/1.1 www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
IP
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4526)
Hash f7cf8a6d78c3cb45ae3e4f8278f9b480
b9e648f2ed6521c810adf1604eafdc083fac35c6
658d8ad8119496759a7866d70e7737cae33d2b3da0a2509eea2cc411f2f145ca
GET /files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/download/15256190/7295cbf385ae1d843ea0/FoxitPDFEditor-2023-Patch.rar
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 10 Sep 2023 11:16:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 9013
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Sun, 10 Sep 2023 14:16:01 +0300
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1
P3P: CP="CAO PSA OUR"
Set-Cookie: lng=eng; expires=Sun, 08-Oct-2023 11:16:01 GMT; path=/; domain=www.upload.ee; secure; httponly; SameSite=None
Content-Encoding: gzip
www.upload.ee/static/ubr__style.css
200 OK 2.9 kB URL GET HTTP/1.1 www.upload.ee/static/ubr__style.css
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (591), with CRLF line terminators
Hash 3ba04e290212b44bcca8f10a60a4e879
a9b021c9019bdbb28250836039b2372a1b4d0f0f
f618b1c7be10c3203620d44c6f323be5b61ac10e67588d96cb69988b3173c7d2
GET /static/ubr__style.css HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 10 Sep 2023 11:16:01 GMT
Content-Type: text/css
Last-Modified: Fri, 04 Oct 2013 10:02:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
ETag: W/"524e9233-25a0"
Expires: Sun, 17 Sep 2023 11:16:01 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Content-Encoding: gzip
www.upload.ee/js/js__file_upload.js
200 OK 27 kB URL GET HTTP/1.1 www.upload.ee/js/js__file_upload.js
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (1853)
Hash 617f6d5a2744bc8c02e3d2c67544bd68
f57c068257c8bc85644d3be1e845c36506cd4625
62a3bb4d9d2b5a55b6d821a75d7b155fac47def3c241e4f1215d17e022f02658
GET /js/js__file_upload.js HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 10 Sep 2023 11:16:01 GMT
Content-Type: application/javascript
Content-Length: 27351
Last-Modified: Thu, 07 May 2020 19:13:28 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "5eb45dd8-6ad7"
Expires: Sun, 17 Sep 2023 11:16:01 GMT
Cache-Control: max-age=604800
Vary: Accept-Encoding
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash c837d5056b9424a7006e574bfc7c03ae
a47e514b93e12d1e333ff23ac9e7977ca1cd07bc
76e19e4cf87ceffa781f75bcaf8343f625c82242facbd389bd54ed288d9199e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 11:16:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.upload.ee/images/dl_.png
200 OK 1.9 kB URL GET HTTP/1.1 www.upload.ee/images/dl_.png
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type PNG image data, 154 x 32, 8-bit colormap, non-interlaced\012- data
Hash f3e8f284a4e98cdb91b6abfc142d94a4
fa9e618c2f56bea752ddd7e45a372c5539dadda9
2f13919383f54ca21e5b87f5644df8a875b99815c821dcbbabea352d854c6882
GET /images/dl_.png HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 10 Sep 2023 11:16:02 GMT
Content-Type: image/png
Content-Length: 1900
Last-Modified: Thu, 01 Dec 2016 09:37:27 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "583fef57-76c"
Expires: Sun, 17 Sep 2023 11:16:02 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
www.upload.ee/images/arrow.gif
200 OK 59 B URL GET HTTP/1.1 www.upload.ee/images/arrow.gif
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 6 x 9\012- data
Hash 6675f814b94f13f91f1383707b250e36
31452650e8fce2095613a2010799bdb7548bdd51
061d01a0b85f948c6ec464870ecec4654c4bd2ff15cacda941bbbf16225ec411
GET /images/arrow.gif HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Cookie: lng=eng
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 10 Sep 2023 11:16:02 GMT
Content-Type: image/gif
Content-Length: 59
Last-Modified: Sun, 14 Apr 2013 07:15:01 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "516a5775-3b"
Expires: Sun, 17 Sep 2023 11:16:02 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=UA-6703115-1
200 OK 51 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=UA-6703115-1
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintE6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (2271)
Hash 76762f484776edb17d22d84e204d9cd6
9b5cd4e505740a8c7945170ce0a1c51fbe8237e4
c014c353c02efa62c5c8ef4df0be1c1d915b90db4d8d41f52301fdcbec595c74
GET /gtag/js?id=UA-6703115-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 10 Sep 2023 11:16:02 GMT
expires: Sun, 10 Sep 2023 11:16:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 51093
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash c837d5056b9424a7006e574bfc7c03ae
a47e514b93e12d1e333ff23ac9e7977ca1cd07bc
76e19e4cf87ceffa781f75bcaf8343f625c82242facbd389bd54ed288d9199e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 11:16:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c
200 OK 85 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintE6:F7:82:C1:10:AC:08:76:A1:97:70:B7:56:B7:EF:92:30:BA:1E:12
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type ASCII text, with very long lines (3034)
Hash f6f0027ac1b342d184389968f34fd28b
e1f485f039d63ae261571c269168b6469e85e4bb
0a4aae27254ef51f569766d9a3cbd3c4a32b9ea70702f4295f6470b96fa6b193
GET /gtag/js?id=G-LT9YQX0N49&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 10 Sep 2023 11:16:02 GMT
expires: Sun, 10 Sep 2023 11:16:02 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85286
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
du0pud0sdlmzf.cloudfront.net/?dupud=997369
200 OK 118 kB URL GET HTTP/2 du0pud0sdlmzf.cloudfront.net/?dupud=997369
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (15948)
Size 118 kB (117761 bytes)
Hash dd14a9c1a7fee33f95d4960495bf59b0
536f03380abce7ad02fae6dfac77be4b436f706e
103b0911efd9028f72d3f834f4ad80cb93420df40fbb1d8e4119832efa416d23
GET /?dupud=997369 HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-length: 117761
date: Sun, 10 Sep 2023 11:16:02 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: T6DEvftJO4uO3vJOt5jqbA1XSHOkr2LgVsUu6OHbJ5fV_VNKDaQOng==
X-Firefox-Spdy: h2
ydevelelasticals.info/d1g0dnUWOlcbShZlVlAABTQJU0cxfQYwEQJoRAMRRytQGhgNPhoVGRgtUBAHGDZAWBsSLBFEMxwNcRoeOmtXDD8QKGIlNiY/dTdAODlsQyQ2aA1EPA88VzEmNWh8IywQGV0RMxEMWyMXDxp+M0dGbWUaTSAIXUMvMQp9U0c1E1gdNiIMcQI3EG1wEh8AHnAeGlJqcjsCRj5zDDMEDlogNhE2WDQ0IjwAOyMiG2EbODsJZTA9Jxt1PScQYQUTRCUUYEQsIA1TEiYuL0A0NCI7XSZFMhl6GzNCAGZHPRIPTCE0DxkFPRJOO2EbPCcOUzgyLhBYIDRHAgUTRFoKYj4cPit1GgInPGwFHDYzbh4vRgliNxhGbBIcBhg2REsMAg9mFxQ5FXA
200 OK 1.1 kB URL GET HTTP/2 ydevelelasticals.info/d1g0dnUWOlcbShZlVlAABTQJU0cxfQYwEQJoRAMRRytQGhgNPhoVGRgtUBAHGDZAWBsSLBFEMxwNcRoeOmtXDD8QKGIlNiY/dTdAODlsQyQ2aA1EPA88VzEmNWh8IywQGV0RMxEMWyMXDxp+M0dGbWUaTSAIXUMvMQp9U0c1E1gdNiIMcQI3EG1wEh8AHnAeGlJqcjsCRj5zDDMEDlogNhE2WDQ0IjwAOyMiG2EbODsJZTA9Jxt1PScQYQUTRCUUYEQsIA1TEiYuL0A0NCI7XSZFMhl6GzNCAGZHPRIPTCE0DxkFPRJOO2EbPCcOUzgyLhBYIDRHAgUTRFoKYj4cPit1GgInPGwFHDYzbh4vRgliNxhGbBIcBhg2REsMAg9mFxQ5FXA
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2991), with no line terminators
Hash c584507409191292f066da2af212ea6e
a5d59deb924bf9fa96f0114ed68aac392ed61e0e
6f7a556a2d436f3be0a36fe1a029a0c87ac586a86d86e411b81a658361e8e173
GET /d1g0dnUWOlcbShZlVlAABTQJU0cxfQYwEQJoRAMRRytQGhgNPhoVGRgtUBAHGDZAWBsSLBFEMxwNcRoeOmtXDD8QKGIlNiY/dTdAODlsQyQ2aA1EPA88VzEmNWh8IywQGV0RMxEMWyMXDxp+M0dGbWUaTSAIXUMvMQp9U0c1E1gdNiIMcQI3EG1wEh8AHnAeGlJqcjsCRj5zDDMEDlogNhE2WDQ0IjwAOyMiG2EbODsJZTA9Jxt1PScQYQUTRCUUYEQsIA1TEiYuL0A0NCI7XSZFMhl6GzNCAGZHPRIPTCE0DxkFPRJOO2EbPCcOUzgyLhBYIDRHAgUTRFoKYj4cPit1GgInPGwFHDYzbh4vRgliNxhGbBIcBhg2REsMAg9mFxQ5FXA HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1149
date: Sun, 10 Sep 2023 11:16:02 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rBFdt8RbceOVxjxhSkQKItGxg1SO06E6RxOpoXmSc5YgIcvCzGWkRA==
X-Firefox-Spdy: h2
ydevelelasticals.info/c3Z0NjMSFBdbDBJLFhBGARpJEwE1U0ZwVwZGBENXQwUQWl4JEFpVXxwDEFBBHBgAGF0WAlEEdSAjRHhCJh0hQX8yJ0RTWhAHMFsKSxcaZGkpPgwHeCEdTX1KPVNGdHoePyB9YDpTRnR7N0ZRBHEpJEBZeiRDDmJ3Rx0kZWErEjd3CjowEFxqCT8adXRKDhBiUBImJwNGPw4TBXkJPw5zd0sDOnFmFTtHURZBNDh0ckQ9IA5aJ0Q1cmkeRxVSABccFU55GRI8bEQ4PhAFagpOMGZ3MgQuWlsaJiNCAj0hJk5XHTcbUgAXHDlkS0ASHHxKJBsARGpBBiRveyZGPlEeGEM/WGkLOjN0AioYOldqQCAdbF8bHz1MXAsyDmdCOEQub3U7JB1VWCEfLU9pVkQ2YURVHAdZXQNLPAZlCRcgeEse
200 OK 1.2 kB URL GET HTTP/2 ydevelelasticals.info/c3Z0NjMSFBdbDBJLFhBGARpJEwE1U0ZwVwZGBENXQwUQWl4JEFpVXxwDEFBBHBgAGF0WAlEEdSAjRHhCJh0hQX8yJ0RTWhAHMFsKSxcaZGkpPgwHeCEdTX1KPVNGdHoePyB9YDpTRnR7N0ZRBHEpJEBZeiRDDmJ3Rx0kZWErEjd3CjowEFxqCT8adXRKDhBiUBImJwNGPw4TBXkJPw5zd0sDOnFmFTtHURZBNDh0ckQ9IA5aJ0Q1cmkeRxVSABccFU55GRI8bEQ4PhAFagpOMGZ3MgQuWlsaJiNCAj0hJk5XHTcbUgAXHDlkS0ASHHxKJBsARGpBBiRveyZGPlEeGEM/WGkLOjN0AioYOldqQCAdbF8bHz1MXAsyDmdCOEQub3U7JB1VWCEfLU9pVkQ2YURVHAdZXQNLPAZlCRcgeEse
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3013), with no line terminators
Hash c75955be936884e6f4db717a86a70aaf
282f31bf55c297e47157aca00f1a154e67622dd3
e2d108cd40490e6533df46291429742ea143b3025b17701d35e84d4e747dabac
GET /c3Z0NjMSFBdbDBJLFhBGARpJEwE1U0ZwVwZGBENXQwUQWl4JEFpVXxwDEFBBHBgAGF0WAlEEdSAjRHhCJh0hQX8yJ0RTWhAHMFsKSxcaZGkpPgwHeCEdTX1KPVNGdHoePyB9YDpTRnR7N0ZRBHEpJEBZeiRDDmJ3Rx0kZWErEjd3CjowEFxqCT8adXRKDhBiUBImJwNGPw4TBXkJPw5zd0sDOnFmFTtHURZBNDh0ckQ9IA5aJ0Q1cmkeRxVSABccFU55GRI8bEQ4PhAFagpOMGZ3MgQuWlsaJiNCAj0hJk5XHTcbUgAXHDlkS0ASHHxKJBsARGpBBiRveyZGPlEeGEM/WGkLOjN0AioYOldqQCAdbF8bHz1MXAsyDmdCOEQub3U7JB1VWCEfLU9pVkQ2YURVHAdZXQNLPAZlCRcgeEse HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html
content-length: 1169
date: Sun, 10 Sep 2023 11:16:02 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L8qiyCwkgH6Egy97OdqlPyFSGNcRyMxgi62gnGadFdN802cUrP-fjQ==
X-Firefox-Spdy: h2
ydevelelasticals.info/VllXREQ3OzQpezdkNWIxJDVqYXYQfGUCICNpJzEgZiozKCksP3knKDksMyI2OTcjaiozLXJ2AgELDzQyBQECKQIHHCEXLhMNFHcWGz8SdSYzHBEuARQuOgM+ABEHBXQvPQYrEx8bYy4VZjJuAD0QEQ92fAwTFRUNMh8aIwIXIWcWAxs7FD0wHzoBMyYZCzgxFiEUYAEHNTsfPgkPFT91DgYbBXACIRgtDAc9DhMpPB4YZ30GMw8Vdxc9Oi8WDAQ/DwUwBz1nKwAfGyQzBT0pYBYQZxoAFh4SOgF9JxVoFXcXPmlydgIDEQ5zHDg1GiV0Jh41ASBnEQZpKycRPjQiDghuDCADLTEhEQRoBHQ0YQsECRAeCiAQDzETHCE+GGkEdXE4CwAJFAM3MGIuJTY5NHkFHRB0NC8wPCJ9
200 OK 1.2 kB URL GET HTTP/2 ydevelelasticals.info/VllXREQ3OzQpezdkNWIxJDVqYXYQfGUCICNpJzEgZiozKCksP3knKDksMyI2OTcjaiozLXJ2AgELDzQyBQECKQIHHCEXLhMNFHcWGz8SdSYzHBEuARQuOgM+ABEHBXQvPQYrEx8bYy4VZjJuAD0QEQ92fAwTFRUNMh8aIwIXIWcWAxs7FD0wHzoBMyYZCzgxFiEUYAEHNTsfPgkPFT91DgYbBXACIRgtDAc9DhMpPB4YZ30GMw8Vdxc9Oi8WDAQ/DwUwBz1nKwAfGyQzBT0pYBYQZxoAFh4SOgF9JxVoFXcXPmlydgIDEQ5zHDg1GiV0Jh41ASBnEQZpKycRPjQiDghuDCADLTEhEQRoBHQ0YQsECRAeCiAQDzETHCE+GGkEdXE4CwAJFAM3MGIuJTY5NHkFHRB0NC8wPCJ9
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3015), with no line terminators
Hash 061f3d2b5515d62240781653afb1e456
50bbda3132be58d9ffa6da4b079892499c77dc6e
deb541c8dc9050a5f29f7e7864fe4df32d1fa8fb765545f785f1d92b31209b9c
GET /VllXREQ3OzQpezdkNWIxJDVqYXYQfGUCICNpJzEgZiozKCksP3knKDksMyI2OTcjaiozLXJ2AgELDzQyBQECKQIHHCEXLhMNFHcWGz8SdSYzHBEuARQuOgM+ABEHBXQvPQYrEx8bYy4VZjJuAD0QEQ92fAwTFRUNMh8aIwIXIWcWAxs7FD0wHzoBMyYZCzgxFiEUYAEHNTsfPgkPFT91DgYbBXACIRgtDAc9DhMpPB4YZ30GMw8Vdxc9Oi8WDAQ/DwUwBz1nKwAfGyQzBT0pYBYQZxoAFh4SOgF9JxVoFXcXPmlydgIDEQ5zHDg1GiV0Jh41ASBnEQZpKycRPjQiDghuDCADLTEhEQRoBHQ0YQsECRAeCiAQDzETHCE+GGkEdXE4CwAJFAM3MGIuJTY5NHkFHRB0NC8wPCJ9 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1170
date: Sun, 10 Sep 2023 11:16:02 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4-S-M4a8QUs5DQ68K9MoFOrqg4PG0skV_loOIfC23zDfjbzGT20ZEA==
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/WkVWcUR1ejUCeQsvAEMnai0vMy8UDTM5NxIXZjNwPiIMIRc0cXAFLT54b0hzaXNvVzQzIWtAYikxNwUxKXhnVy00IzlMYix4Z193bmtlRWpqYyNMdXwxJhAjZ3RwATAuKWtAcmNxZUVwb3NkRnZr
204 No Content 0 B URL GET HTTP/2 fwukoulnhdlukik.info/WkVWcUR1ejUCeQsvAEMnai0vMy8UDTM5NxIXZjNwPiIMIRc0cXAFLT54b0hzaXNvVzQzIWtAYikxNwUxKXhnVy00IzlMYix4Z193bmtlRWpqYyNMdXwxJhAjZ3RwATAuKWtAcmNxZUVwb3NkRnZr
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /WkVWcUR1ejUCeQsvAEMnai0vMy8UDTM5NxIXZjNwPiIMIRc0cXAFLT54b0hzaXNvVzQzIWtAYikxNwUxKXhnVy00IzlMYix4Z193bmtlRWpqYyNMdXwxJhAjZ3RwATAuKWtAcmNxZUVwb3NkRnZr HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 11:16:02 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t%2FAA5B2QGmZNUJyotU5I1fzdPzzY4MNibE511bsrx81oqffpgIoJp3rLnXsvdDOrWd%2B1RNyiOzLqyb9Mmb%2BUoG1MWqUdp2mTosPW4fVR%2F%2BbZN7SvwmKx1NIOHuhqhXUHrMPNMYyhMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 804741ad1decb515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/a2xvQjZEUwwxCwgpPXF4LhgsJmMqIgkHbBI+GDoTWSo+LHwvLTcpEB8FC38PUltbcwJNHAYmC1pKHDZXHxkcfwdNBQEkWVZKGX8HRV9bbAVfQl9kQ1ZdSTZGCgtScxAbGBsuC1paVnYFX1hadARcWVk
204 No Content 0 B URL GET HTTP/2 fwukoulnhdlukik.info/a2xvQjZEUwwxCwgpPXF4LhgsJmMqIgkHbBI+GDoTWSo+LHwvLTcpEB8FC38PUltbcwJNHAYmC1pKHDZXHxkcfwdNBQEkWVZKGX8HRV9bbAVfQl9kQ1ZdSTZGCgtScxAbGBsuC1paVnYFX1hadARcWVk
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /a2xvQjZEUwwxCwgpPXF4LhgsJmMqIgkHbBI+GDoTWSo+LHwvLTcpEB8FC38PUltbcwJNHAYmC1pKHDZXHxkcfwdNBQEkWVZKGX8HRV9bbAVfQl9kQ1ZdSTZGCgtScxAbGBsuC1paVnYFX1hadARcWVk HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 11:16:02 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LjezPhVskTcQ5hV9KC%2F3UHaSejZ4doeK%2Fk3H5p8dRrWSIURP%2Bc7M3YBHTav8wsVsnH0zNv67eltQF6Naq8SWXEl56jktYiDYnfMWsisBf%2F5MGdeS6OUqj54M%2BPwTuHs2Dd3NSGOhEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 804741ad2df2b515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/dnlrNkFZRghFfDgTA10jDBItdQcwGC9RGDkvWkEPNB5aZxYROE1CKBJEUg92QklTEDEfHVYHeVAKH1c1AwpWB2cfFw1ZfFAPVgdvRldZGHVQDFYHZwIJClF8R18bQjUaRFoAeEJKXwJ0QEtcAnA
204 No Content 0 B URL GET HTTP/2 fwukoulnhdlukik.info/dnlrNkFZRghFfDgTA10jDBItdQcwGC9RGDkvWkEPNB5aZxYROE1CKBJEUg92QklTEDEfHVYHeVAKH1c1AwpWB2cfFw1ZfFAPVgdvRldZGHVQDFYHZwIJClF8R18bQjUaRFoAeEJKXwJ0QEtcAnA
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /dnlrNkFZRghFfDgTA10jDBItdQcwGC9RGDkvWkEPNB5aZxYROE1CKBJEUg92QklTEDEfHVYHeVAKH1c1AwpWB2cfFw1ZfFAPVgdvRldZGHVQDFYHZwIJClF8R18bQjUaRFoAeEJKXwJ0QEtcAnA HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 11:16:02 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YJJF%2BlfklwxD9%2FvnSu15CRZ8sOP2a%2BFpYsu52xHprWRmfPPXM791wAOakEYBe3OTorlxZTesFHwtNc9nGXUYDFSccSKoEDiEfKP7NrlOkeZ53Kt4UgPaS%2BtCKs%2F7%2BumMau%2FplIQEsQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 804741ad1deab515-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.upload.ee/favicon.ico
200 OK 1.2 kB URL GET HTTP/1.1 www.upload.ee/favicon.ico
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerDigiCert, Inc.
Subjectwww.upload.ee
Fingerprint50:32:93:34:C8:04:2F:84:49:77:0D:C4:DD:CA:79:C9:CB:3E:C0:F4
ValidityThu, 02 Mar 2023 00:00:00 GMT - Mon, 01 Apr 2024 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f299cf2e651c19e48d27900ced493ccb
c2d1086d517d7a26292e0d7b32da7c55b166c23b
115c8eb4840245f7aed0cb2a17fa7e91b86f79bb2f223a25af8cc533e1dedff1
GET /favicon.ico HTTP/1.1
Host: www.upload.ee
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Cookie: lng=eng; _ga_LT9YQX0N49=GS1.1.1694344562.1.0.1694344562.0.0.0; _ga=GA1.1.1067419986.1694344562
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 10 Sep 2023 11:16:03 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Tue, 16 Dec 2008 17:17:25 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "4947e2a5-47e"
Expires: Sun, 17 Sep 2023 11:16:03 GMT
Cache-Control: max-age=604800
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
472 B IP
Hash 43d1b0c36a3cd563b001b3f3be1823ba
08772d005eba2778e63f84b02ade416dfbd81eaa
be2785faa89e68455b5f2786bbce579a6768bffb835e1cb73a40aef764932bd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 11:16:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 43d1b0c36a3cd563b001b3f3be1823ba
08772d005eba2778e63f84b02ade416dfbd81eaa
be2785faa89e68455b5f2786bbce579a6768bffb835e1cb73a40aef764932bd6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 11:16:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ydevelelasticals.info/utx?cb=NMizkE6GrEW6&top=www.upload.ee&tid=997414
204 No Content 0 B URL GET HTTP/2 ydevelelasticals.info/utx?cb=NMizkE6GrEW6&top=www.upload.ee&tid=997414
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=NMizkE6GrEW6&top=www.upload.ee&tid=997414 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 11:16:03 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://www.upload.ee
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sun, 10 Sep 2023 11:17:03 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bMUVIXT8bgjcD4oDVbfHRYJcuDLyv9xE-iOBNZuhML1slkL84V2xjQ==
X-Firefox-Spdy: h2
ydevelelasticals.info/utx?cb=HE27zWXGBI88&top=www.upload.ee&tid=997369
204 No Content 0 B URL GET HTTP/2 ydevelelasticals.info/utx?cb=HE27zWXGBI88&top=www.upload.ee&tid=997369
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subjectydevelelasticals.info
Fingerprint2D:1F:C0:0B:48:81:ED:8D:54:FD:AE:CF:40:D3:05:36:8F:71:72:2B
ValidityMon, 04 Sep 2023 00:00:00 GMT - Wed, 02 Oct 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=HE27zWXGBI88&top=www.upload.ee&tid=997369 HTTP/1.1
Host: ydevelelasticals.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Sun, 10 Sep 2023 11:16:03 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://www.upload.ee
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Sun, 10 Sep 2023 11:17:03 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bF305HFrXjQYkSO3NhgYYK0OLswc1hNJV63enjP2dQ3lcj16psNr-Q==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:40dBvjvLzHe-sJ-9Rwt9UP3hwc3WEw:_qhlr6gGmlkEaX_C; Expires=Tue, 09-Sep-2025 11:16:03 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 11:16:03 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdCFvQdNgtuvB0QqgaaEP9maezppwD5iSJSGz584g7fkvje3mVhul835PStvWv6Px0KuXmS
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy: unsafe-none
content-security-policy: script-src 'nonce-9shZZ1-RdnaDyDslnbb7dQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:9yOHibLU1ujZUx76fTyoRHfysK-2_g:IqIvmijQSwjgTbfk; Expires=Tue, 09-Sep-2025 11:16:03 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 11:16:03 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhct7wDA8lC2y9IkEiTH4gySurEDb5qgB3sKfHKgB0cZVi9wMFhmtWzU0dBkczP1r2pJU4rE
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-exmFqeWkqeN715nAngUBfg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 2493dac4863c9b8db5f23a37692ef71b
cca29fa30ba8ee3a86a1ef6a7151244908dba399
00b54431d117fc86713b52c9e0962a39b970d33e163f5551bc770ede78ab5efb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 10 Sep 2023 11:16:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdCFvQdNgtuvB0QqgaaEP9maezppwD5iSJSGz584g7fkvje3mVhul835PStvWv6Px0KuXmS
302 Found 397 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdCFvQdNgtuvB0QqgaaEP9maezppwD5iSJSGz584g7fkvje3mVhul835PStvWv6Px0KuXmS
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (392)
Hash 140b86b47fcb319c8421f75fb8583173
17e72b8bfe53a68f702dbe952273a8804f523b9b
2290a66522f8c117245904980e619f5eab19737e958b3838cb39cf139339873f
GET /InteractiveLogin?continue=https://www.google.com/favicon.ico&hl=en&passive=true&service=mail&uilel=3&ifkv=AYZoVhdCFvQdNgtuvB0QqgaaEP9maezppwD5iSJSGz584g7fkvje3mVhul835PStvWv6Px0KuXmS HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:YliqeBVJiu019SrsDjOOhoKl4LRzzg:EH5n3LOP6FKfQwh_;Path=/;Expires=Tue, 09-Sep-2025 11:16:03 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 11:16:03 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcMIRoklqOugsKsapYiVSpvR5bjGS4zIyUIjqd-aGmrZoJ-oPcddWHvG54dIf_vAoUmiY1W&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S252287080%3A1694344563241698&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-KrhQytMmCR2KoZfVfjAsdA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 397
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhct7wDA8lC2y9IkEiTH4gySurEDb5qgB3sKfHKgB0cZVi9wMFhmtWzU0dBkczP1r2pJU4rE
302 Found 409 B URL GET HTTP/2 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhct7wDA8lC2y9IkEiTH4gySurEDb5qgB3sKfHKgB0cZVi9wMFhmtWzU0dBkczP1r2pJU4rE
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint75:5C:17:06:78:FB:DD:37:D1:56:96:14:FC:26:4B:66:26:5F:D9:9D
ValidityMon, 14 Aug 2023 08:23:05 GMT - Mon, 06 Nov 2023 08:23:04 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (399)
Hash d97a8b77bec5609ad41e3a6391b140db
e4f290db95fc4fc3f4398e848f96587ae088f073
df4557d4450b04025ffaee970969814de6e25322ff7521375c0db4b9fc52a316
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&hl=en&passive=true&service=youtube&uilel=3&ifkv=AYZoVhct7wDA8lC2y9IkEiTH4gySurEDb5qgB3sKfHKgB0cZVi9wMFhmtWzU0dBkczP1r2pJU4rE HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:STAYrmfb-NPWPjegoQFtdKDVvXsGDg:9SUx_aFpHTYxt779;Path=/;Expires=Tue, 09-Sep-2025 11:16:03 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 11:16:03 GMT
location: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhc0GxS_u5e3qvZgOvi1CPlsabWE2r-QnfxstG8CiAkaAwR7UuyXmD34_PRvCQyCdIZzHyqPxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1208846559%3A1694344563285523&theme=glif
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-JXDh4okK6CtYZJShHsReqg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 409
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
du0pud0sdlmzf.cloudfront.net/SU0NqUkUwLAQ0eicqDm98anRZZHx1KRk9KyN+ImITKSI+HD0+ZR4oIW5zTD4kPSRXdCA9IFdjYzInCG9xdTcaPS5uLxg3JzIzED8uNGUfM3g+LBA7KT8iT2ADZm1ad3djaxJjdHZwKHd3Yy8DPDArZlhiPWt1NWRxdnAod3djMRx3dhJyWmtrY2pPYHU0Jg-k5KnZxLGB1YnNaY3ViZlhiIzoxDzQqK2ZYFHRickRiYyZ+Ww
609 B URL du0pud0sdlmzf.cloudfront.net/SU0NqUkUwLAQ0eicqDm98anRZZHx1KRk9KyN+ImITKSI+HD0+ZR4oIW5zTD4kPSRXdCA9IFdjYzInCG9xdTcaPS5uLxg3JzIzED8uNGUfM3g+LBA7KT8iT2ADZm1ad3djaxJjdHZwKHd3Yy8DPDArZlhiPWt1NWRxdnAod3djMRx3dhJyWmtrY2pPYHU0Jg-k5KnZxLGB1YnNaY3ViZlhiIzoxDzQqK2ZYFHRickRiYyZ+Ww
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (869), with no line terminators
Hash 8c6becc0df33dee5746663db8a573a03
f2ca1c78993fa675bd817b6362bd01b99489e727
456ee73367baa2be4a7ed20aa7749c65497601375d37c1f10148a04de945d76d
GET /SU0NqUkUwLAQ0eicqDm98anRZZHx1KRk9KyN+ImITKSI+HD0+ZR4oIW5zTD4kPSRXdCA9IFdjYzInCG9xdTcaPS5uLxg3JzIzED8uNGUfM3g+LBA7KT8iT2ADZm1ad3djaxJjdHZwKHd3Yy8DPDArZlhiPWt1NWRxdnAod3djMRx3dhJyWmtrY2pPYHU0Jg-k5KnZxLGB1YnNaY3ViZlhiIzoxDzQqK2ZYFHRickRiYyZ+Ww HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 609
date: Sun, 10 Sep 2023 11:16:03 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Y90kxuNzBFKLvUo66ArSnJO63iNZbWPWpOkUlVf9k_nreo0GQc-koQ==
X-Firefox-Spdy: h2
du0pud0sdlmzf.cloudfront.net/WRXpvSXUmFQEvSjETC3RMfE1beEFjEBwmGzVHPA0ydQoWIB4jQ0k9DyFHX28ZJBQIdFMgFAx0RGMbCytIcVwbORouRwM7ECcbHzMYLh1JPBR4FwAzHCkWDmxHA09BeVB3SkcxRHRfXAtQd0oDIBswAkp7RT1CWRZDcV9cC1B3Sh0/UHY7XnlMa0pGbEd1HQ-oqHipfXQ9HdUtfeUR1S0p7RSMTHSwTKgJKezN0S15nRWMPUng
576 B URL du0pud0sdlmzf.cloudfront.net/WRXpvSXUmFQEvSjETC3RMfE1beEFjEBwmGzVHPA0ydQoWIB4jQ0k9DyFHX28ZJBQIdFMgFAx0RGMbCytIcVwbORouRwM7ECcbHzMYLh1JPBR4FwAzHCkWDmxHA09BeVB3SkcxRHRfXAtQd0oDIBswAkp7RT1CWRZDcV9cC1B3Sh0/UHY7XnlMa0pGbEd1HQ-oqHipfXQ9HdUtfeUR1S0p7RSMTHSwTKgJKezN0S15nRWMPUng
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (802), with no line terminators
Hash a75485a151780935d55fcb086c478f1d
d237c266764a0248046630b17ebf8e1ec5d08410
a20f7fba5a7203a9c243a1da2651a54dc00926d638744118d570d69f84671d10
GET /WRXpvSXUmFQEvSjETC3RMfE1beEFjEBwmGzVHPA0ydQoWIB4jQ0k9DyFHX28ZJBQIdFMgFAx0RGMbCytIcVwbORouRwM7ECcbHzMYLh1JPBR4FwAzHCkWDmxHA09BeVB3SkcxRHRfXAtQd0oDIBswAkp7RT1CWRZDcV9cC1B3Sh0/UHY7XnlMa0pGbEd1HQ-oqHipfXQ9HdUtfeUR1S0p7RSMTHSwTKgJKezN0S15nRWMPUng HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 576
date: Sun, 10 Sep 2023 11:16:03 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -DF1oc6xnF4KQKGgXFfwKewujFGV_fJntcR_bGr1iJe4WQQUbHSNqg==
X-Firefox-Spdy: h2
du0pud0sdlmzf.cloudfront.net/kUElkM3czJgpVSCQgAA5OaX5QA092IxdcGSB0HUYgAigFfToUbxBJE215Ql8WPi5ZFRI+KlkCUTEtBg5DdjwFDho/Mw1fGzFsVnVCfnlBAUd4MVUCUmMLQQFHPCAKRg91e1RLT2YWUgdSYwtBAUciP0EANmF5XR1HeWxWAxA1Kg9cUmIPVgNGYHlVA0Z1e1-RVHiIsAlwPdXsiAkZhZ1QVAm14
192 B URL du0pud0sdlmzf.cloudfront.net/kUElkM3czJgpVSCQgAA5OaX5QA092IxdcGSB0HUYgAigFfToUbxBJE215Ql8WPi5ZFRI+KlkCUTEtBg5DdjwFDho/Mw1fGzFsVnVCfnlBAUd4MVUCUmMLQQFHPCAKRg91e1RLT2YWUgdSYwtBAUciP0EANmF5XR1HeWxWAxA1Kg9cUmIPVgNGYHlVA0Z1e1-RVHiIsAlwPdXsiAkZhZ1QVAm14
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with no line terminators
Hash e141126f47204d5fc825ccfbe51e24b4
d85c63ae36273da3d1db20ea70f4e9a7b0b1bf4a
60cb222891041c85a3d285e9eaecfce7b399ec3fdb68c6c55910cce8a0584c59
GET /kUElkM3czJgpVSCQgAA5OaX5QA092IxdcGSB0HUYgAigFfToUbxBJE215Ql8WPi5ZFRI+KlkCUTEtBg5DdjwFDho/Mw1fGzFsVnVCfnlBAUd4MVUCUmMLQQFHPCAKRg91e1RLT2YWUgdSYwtBAUciP0EANmF5XR1HeWxWAxA1Kg9cUmIPVgNGYHlVA0Z1e1-RVHiIsAlwPdXsiAkZhZ1QVAm14 HTTP/1.1
Host: du0pud0sdlmzf.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ydevelelasticals.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 192
date: Sun, 10 Sep 2023 11:16:03 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7TTmUsCoF0RWm8R1xJoZ6QiIUwZB7cAsKmZvOUXKqDLw6K7yqSnZgw==
X-Firefox-Spdy: h2
fwukoulnhdlukik.info/popunder.gif
200 OK 1.4 kB URL GET HTTP/3 fwukoulnhdlukik.info/popunder.gif
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subjectfwukoulnhdlukik.info
Fingerprint3F:13:EC:26:8F:2F:BF:BA:64:76:6C:68:5B:FA:39:E9:19:92:14:F3
ValidityMon, 04 Sep 2023 06:53:29 GMT - Sun, 03 Dec 2023 06:53:28 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash e13afa0a602135db971480e9648d109d
d2503f57f43bacf7ca40e7e23314dcadbd07c7c2
1fb7c8e4801154a9020d93139e7721199b745155239d607addb80c1fd742098a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /popunder.gif HTTP/1.1
Host: fwukoulnhdlukik.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 10 Sep 2023 11:16:03 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 205560
last-modified: Fri, 08 Sep 2023 02:10:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ybA0DQZcFVbLIsc2v62Qh5G5d%2FevKhn%2Fps0SeXWW6YTK3Cpz60Hc7fBWflv0k%2BozDipk1WWD0LVZGa0aUVEswvbhoZKh4rYjIUZxwgWdEMPZkHCar6gDShcrvnokTxXU0gF%2FC%2Fo4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 804741b02fce5695-OSL
alt-svc: h3=":443"; ma=86400
static.bepolite.eu/scripts/saresponsive.js
200 OK 175 kB URL GET HTTP/2 static.bepolite.eu/scripts/saresponsive.js
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
FingerprintB7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD
ValidityMon, 04 Sep 2023 21:06:47 GMT - Sun, 03 Dec 2023 21:06:46 GMT
File type ASCII text, with very long lines (32077), with CRLF line terminators
Size 175 kB (174934 bytes)
Hash 1bf7f467e8e0d7bbc53585aad8ea467c
9a438e3c801182c612d82ecbec28d6dc5a643b93
08af140297a6c256dcd10d0b815e41b80217789ebe5ac9558a24546432adddeb
GET /scripts/saresponsive.js HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
accept-ranges: bytes
etag: "82624809"
last-modified: Mon, 14 Aug 2023 20:11:50 GMT
content-length: 174934
date: Sun, 10 Sep 2023 11:15:58 GMT
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 96811225
age: 0
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash 95a3752ba73c5b50f44775870782edcc
99b95276e508cb563de84ac1dacab5943da61e62
986d5a6ff8fd499a1e60eab5f098ffb25e92e3ac2d4d2a12ca9991fc91c3cece
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 10 Sep 2023 11:16:04 GMT
Last-Modified: Sun, 10 Sep 2023 09:32:42 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EQwj9bZqzQDDPlNQKeRxFbCSflyPtC-iPncF4z-LSxn_irV3b6geMQ==
Age: 6202
banner.hookusbookus.com/config/config.js?v=1
200 OK 75 B URL GET HTTP/2 banner.hookusbookus.com/config/config.js?v=1
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
Hash ee16e21326dec006274a554647c4d759
8e4389c35e12ea6d1e4d7214c174fda343047865
5ccb649c18765165e7128191ea14ab53d8de87d6ad7eea29328b681d455d7a4f
GET /config/config.js?v=1 HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: application/javascript
content-length: 75
server: nginx/1.15.12
last-modified: Tue, 24 Jan 2023 14:19:47 GMT
etag: "63cfe903-4b"
accept-ranges: bytes
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/fonts/greycliff-cf-regular.woff
200 OK 53 kB URL GET HTTP/2 banner.hookusbookus.com/assets/fonts/greycliff-cf-regular.woff
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 53104, version 1.500\012- data
Hash 4f5975fe17a8ca74963be0165ff6a443
4bca2ab6c3da2b6ae09602601adeac22e7a90381
5b8f98e0c93afef19bd64c3dea2a16d60dc1574e5a4a79b788ef03b9eb3c22df
GET /assets/fonts/greycliff-cf-regular.woff HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/assets/css/index_300x600.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: font/woff
content-length: 53104
server: nginx/1.15.12
last-modified: Thu, 22 Apr 2021 07:20:15 GMT
etag: "608123af-cf70"
accept-ranges: bytes
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/js/jquery.min.js
200 OK 84 kB URL GET HTTP/2 banner.hookusbookus.com/assets/js/jquery.min.js
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 5fc88f7eaa383a2d7249b6ae242a3e5d
e0e1e418f3b271102a2083ce997303cd5a5d3fce
688c45a2ecfcd68bc0e3e2e6871f80003beb2387ebd25a845a142a31b68c87e3
GET /assets/js/jquery.min.js HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: application/javascript
server: nginx/1.15.12
last-modified: Thu, 22 Apr 2021 07:20:15 GMT
vary: Accept-Encoding
etag: W/"608123af-15d84"
content-encoding: gzip
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 197 kB IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 197 kB (197416 bytes)
Hash 5788287c209cef7a80787d9030a412d9
77138be2ac67485931864be1b44d6714ece40aa3
283d664bf734d160b54777e9cfb08ad509b33b1f6f4afa3a788723fc183ebe20
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:03 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 6334
last-modified: Sun, 10 Sep 2023 09:30:29 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2BSJ5qP0gEt1%2BeJRQ1IB0yV1Oc8vCADrIJ9I2piyjvuytsTg4PTMs675fdU8HZt%2BW5Ze4mRkSJSpHWMVWV9t%2BWuomT5p1EydPlHt6paUm4pfdEwnxjNjEfwF%2F5MpoF1n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 804741af3a1656ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcMIRoklqOugsKsapYiVSpvR5bjGS4zIyUIjqd-aGmrZoJ-oPcddWHvG54dIf_vAoUmiY1W&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S252287080%3A1694344563241698&theme=glif
403 Forbidden 2.3 kB URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcMIRoklqOugsKsapYiVSpvR5bjGS4zIyUIjqd-aGmrZoJ-oPcddWHvG54dIf_vAoUmiY1W&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S252287080%3A1694344563241698&theme=glif
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
File type gzip compressed data, max compression\012- data
Hash 86035ca7991c5a5ece5395ca1828daeb
73d962b561397f96e9915d4a5a5202a6c7e09d99
e67b6f85373b1ec178e034bea884df4af7e6ee0b145ba61ae3bcad5d11ca2c17
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhcMIRoklqOugsKsapYiVSpvR5bjGS4zIyUIjqd-aGmrZoJ-oPcddWHvG54dIf_vAoUmiY1W&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S252287080%3A1694344563241698&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 11:16:03 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-yIiOBd-5COnwDh31JPtGjQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
200 OK 0 B URL GET HTTP/2 serving.bepolite.eu/event?key=FYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
FingerprintB7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD
ValidityMon, 04 Sep 2023 21:06:47 GMT - Sun, 03 Dec 2023 21:06:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /event?key=FYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnf_8e5-90sra7UBdR4oM89g HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Cookie: bepolite_id=13ce54db341f1af286f0c0690d02b4b3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-length: 0
date: Sun, 10 Sep 2023 11:15:58 GMT
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 96811264
age: 0
accept-ranges: bytes
X-Firefox-Spdy: h2
dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/I3Qfj8e7MckxIXbz78mw.jpg
200 OK 56 kB URL GET HTTP/2 dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/I3Qfj8e7MckxIXbz78mw.jpg
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x230, components 3\012- data
Hash cddd4b220dbfd2c4641572afbcc3bbf9
2bf3de058bcb45d5a133c9e768a4e8fcdb6ec6c8
54c4a1b842c44277f35ff895c7be82711edf0591dd660744d3e18c3a62f236ce
GET /hotelliveeb/images/general/1/I3Qfj8e7MckxIXbz78mw.jpg HTTP/1.1
Host: dskwugy0u6y9l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 55749
date: Sat, 09 Sep 2023 19:39:29 GMT
last-modified: Mon, 20 Dec 2021 05:01:30 GMT
etag: "cddd4b220dbfd2c4641572afbcc3bbf9"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: S_BTkOLRRvHswvMWl26EbEqDvPpY1Wt8kLZXXc1SthUSpfGtuTqKLg==
age: 56202
X-Firefox-Spdy: h2
dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/Jorw2Rp4VOD7k5ZbHjql.jpg
71 kB URL dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/Jorw2Rp4VOD7k5ZbHjql.jpg
IP
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x230, components 3\012- data
Hash b0b5dcdd6349f7b94fc70a7a3f4d17a3
5a00369565eb2d0be87ff05b220b12718374105b
44f9bb8492c393640d67a0a140254c3adc42007584db9314e7e8694305e39ddd
GET /hotelliveeb/images/general/1/Jorw2Rp4VOD7k5ZbHjql.jpg HTTP/1.1
Host: dskwugy0u6y9l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 71161
date: Sat, 09 Sep 2023 11:26:39 GMT
last-modified: Wed, 14 Dec 2022 11:00:05 GMT
etag: "b0b5dcdd6349f7b94fc70a7a3f4d17a3"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xR4V1i1IVLfma1d8TpdBY1JYR_mtDAxtXqvvc_UJRZqJyEdr5RfRJw==
age: 85778
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/image/svg/hb-logo.svg
200 OK 15 kB URL GET HTTP/2 banner.hookusbookus.com/assets/image/svg/hb-logo.svg
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (15333), with no line terminators
Hash bf6baf947f924bf8d67e947a025def06
9ac9fccb0351b41c1545714153ed5fa2c4bfef3a
64efdaebd020c39ec366f473c831cb51e8cd5d5b1afde13a9695d1f2dae4e60e
GET /assets/image/svg/hb-logo.svg HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: image/svg+xml
server: nginx/1.15.12
last-modified: Mon, 05 Jul 2021 19:56:59 GMT
vary: Accept-Encoding
etag: W/"60e3640b-3be5"
content-encoding: gzip
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/css/index_300x600.css
200 OK 7.2 kB URL GET HTTP/2 banner.hookusbookus.com/assets/css/index_300x600.css
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
File type ASCII text, with very long lines (7402), with no line terminators
Hash ef4576b025213d57cd958c234d61a8a1
5dd8d741efe63291e503bb6bf23e603c810b9030
69478abb1501f6c8fb03f774621b5f0275d59f55b3fc4f24d95bade9e277efdb
GET /assets/css/index_300x600.css HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: text/css
server: nginx/1.15.12
last-modified: Mon, 05 Jul 2021 19:56:59 GMT
vary: Accept-Encoding
etag: W/"60e3640b-1c4f"
content-encoding: gzip
X-Firefox-Spdy: h2
serving.bepolite.eu/script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c&type=direct&page_id=8741264&screen_width=1280&screen_height=1024&os=Linux%20x86_64&refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F15256190%2F7295cbf385ae1d843ea0%2FFoxitPDFEditor-2023-Patch.rar&pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F15256190%2FFoxitPDFEditor-2023-Patch.rar.html%3Fmsg%3Dsess_error&rnd=1694344562120
0 B URL GET serving.bepolite.eu/script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c&type=direct&page_id=8741264&screen_width=1280&screen_height=1024&os=Linux%20x86_64&refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F15256190%2F7295cbf385ae1d843ea0%2FFoxitPDFEditor-2023-Patch.rar&pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F15256190%2FFoxitPDFEditor-2023-Patch.rar.html%3Fmsg%3Dsess_error&rnd=1694344562120
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
FingerprintB7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD
ValidityMon, 04 Sep 2023 21:06:47 GMT - Sun, 03 Dec 2023 21:06:46 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script?space=50dd7b0f-4105-441f-8f60-18cc3fcb090c&type=direct&page_id=8741264&screen_width=1280&screen_height=1024&os=Linux%20x86_64&refurl=https%3A%2F%2Fwww.upload.ee%2Fdownload%2F15256190%2F7295cbf385ae1d843ea0%2FFoxitPDFEditor-2023-Patch.rar&pageurl=https%3A%2F%2Fwww.upload.ee%2Ffiles%2F15256190%2FFoxitPDFEditor-2023-Patch.rar.html%3Fmsg%3Dsess_error&rnd=1694344562120 HTTP/1.1
Host: serving.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, must-revalidate, max-age=0
vary: accept-encoding
content-encoding: gzip
content-type: text/plain;charset=ISO-8859-1
date: Sun, 10 Sep 2023 11:15:49 GMT
set-cookie: bepolite_id=13ce54db341f1af286f0c0690d02b4b3; Max-Age=7776000; Expires=Sat, 09-Dec-2023 11:15:50 GMT; SameSite=None; Secure
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 98277880
age: 0
accept-ranges: bytes
content-length: 1344
X-Firefox-Spdy: h2
banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
200 OK 6.0 kB URL GET HTTP/2 banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6183), with no line terminators
Hash e6203b2e0919f42103d8a3367bbc9b32
08d251797a13b125ec05294116373d90493045dd
e893c3c55f767327f9d5723610d23852fc9f34827dda3bd918575f75f5ef6e0b
GET /index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: text/html
server: nginx/1.15.12
last-modified: Tue, 24 Jan 2023 14:19:47 GMT
vary: Accept-Encoding
etag: W/"63cfe903-1761"
content-encoding: gzip
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 27 B IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash c40169c03bdb5f13aaaf9d0ce2805e8a
5fbad327e842915869adfb88561ead4a46d26cea
4cf568c6c0c08184680a0f94f56403069bd88c180d156ab756d329689fa47aa5
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:03 GMT
content-type: text/plain
set-cookie: csu=1667425147615485@1@1694344563; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pg8uwBoTB0Q3ewulOerqx0KCOoGv6S8LSUb5WH5DNVTHcj51Oitqj4jX5gUH4dV%2BqEuXzBjxZQdYMMobQD2BipoKQUAgPJ6Xxyl9ew%2FtzG8j5vbtaUdpI2mX81FBgbIt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 804741af3a1056ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhc0GxS_u5e3qvZgOvi1CPlsabWE2r-QnfxstG8CiAkaAwR7UuyXmD34_PRvCQyCdIZzHyqPxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1208846559%3A1694344563285523&theme=glif
403 Forbidden 0 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhc0GxS_u5e3qvZgOvi1CPlsabWE2r-QnfxstG8CiAkaAwR7UuyXmD34_PRvCQyCdIZzHyqPxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1208846559%3A1694344563285523&theme=glif
IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E
ValidityMon, 14 Aug 2023 08:16:28 GMT - Mon, 06 Nov 2023 08:16:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&ifkv=AYZoVhc0GxS_u5e3qvZgOvi1CPlsabWE2r-QnfxstG8CiAkaAwR7UuyXmD34_PRvCQyCdIZzHyqPxA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1208846559%3A1694344563285523&theme=glif HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 10 Sep 2023 11:16:03 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-JW_7Y0x4FFcjRJdOP9nZ8Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/B7IwTxkHR5fkysoQaj01.jpg
421 Misdirected Request 64 kB URL GET HTTP/2 dskwugy0u6y9l.cloudfront.net/hotelliveeb/images/general/1/B7IwTxkHR5fkysoQaj01.jpg
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x230, components 3\012- data
Hash d972a34b1a1b834989b84bac0782a6ae
8fd9e3ad378bc036c7d52f8e00520f2a1a86c6de
41d582f52c7efdb1cfe4352b10a881bc05f4f2e88bead954adcf3e8efd179179
GET /hotelliveeb/images/general/1/B7IwTxkHR5fkysoQaj01.jpg HTTP/1.1
Host: dskwugy0u6y9l.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 421 Misdirected Request
server: CloudFront
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: text/html
content-length: 1003
x-cache: Error from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0QIcW-CBJRfsnVmY_6JFYoV0PGoHPasifnpxx9RfX06IVMbasLh7yg==
X-Firefox-Spdy: h2
banner.hookusbookus.com/assets/fonts/greycliff-cf-bold.woff
200 OK 53 kB URL GET HTTP/2 banner.hookusbookus.com/assets/fonts/greycliff-cf-bold.woff
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
File type Web Open Font Format, TrueType, length 53208, version 1.500\012- data
Hash c03dece8ec0635406a35b888337dca8f
b72706815dccadd44dba1693ed8865b41782b14f
092416b2a5cbe9f6596ff7ee177db702262c64326231a3664a34a65c861601b1
GET /assets/fonts/greycliff-cf-bold.woff HTTP/1.1
Host: banner.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/assets/css/index_300x600.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: font/woff
content-length: 53208
server: nginx/1.15.12
last-modified: Thu, 22 Apr 2021 07:20:15 GMT
etag: "608123af-cfd8"
accept-ranges: bytes
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 27 B IP
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash ec4f478a1b2713657fec14ba3c1f9098
6483bd97877f5c0e4f68939e2a846c0fda955b27
8c5dd7bdf4c8c56e22873da983a3e467528fafdcd0e54e63610a3d2760a37df8
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.upload.ee/
Origin: https://www.upload.ee
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:03 GMT
content-type: text/plain
set-cookie: csu=1930809920463834@1@1694344563; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://www.upload.ee
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0UoZIo0VpxQx1pFe4ablsyV7HZpDsvtBoygvyGLkeQMZmwBbHOqCDhUg6AYwSiMRe9URIbXHQWLJsEGYEWncYgscQkM61Cw4tezyQwFoQEt0bwGjGh83kas6hQnndoyO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 804741af3a1356ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
banner-server.hookusbookus.com/package-feed?language=et_ee&utmSource=allmedia
200 OK 25 kB URL GET HTTP/2 banner-server.hookusbookus.com/package-feed?language=et_ee&utmSource=allmedia
IP
Requested by https://banner.hookusbookus.com/index_300x600.html?language=et_ee&utmSource=allmedia&click_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3Dhttp%253A%252F%252Fsmartad.ee&dynamic_url=https%3A%2F%2Fserving.bepolite.eu%2Fevent%3Fkey%3DFYFWuDany3hwv6rfuoAYF9F85k3fU5-N0RUNHY314-HZmGWCMiYhQs66HsrJgledF9I6ut1tdp3AA8Wv6wNpE0PdpiAKUGBpUgsLzaAKmW1XuimnPv3YYhplKgtyHoiI6BDaEO1qsyP51-UuwOg8riyozKC5etXifI2BCZE3OAXzp3ZdgWtH0MKue5p5AGKHXJxXiVJEh1Vfgxn38rgFo-tSrOiriedI-Oi3R5i8w-2KEKyCRIfPP1ktkR_a1xBEN4Mp3hCHV2gL5wIlp7AQSx5xbztKZEP3IVdh-WxRkrPa5hY8OvOxWaQQS9P0iYfnngZXtFEp1ljuqs475VAp1Q%26clink%3D&f=https%3A%2F%2Fbanner.hookusbookus.com%2Findex_300x600.html%3Flanguage%3Det_ee%26utmSource%3Dallmedia&clink=https%3A%2F%2Fsmartad.ee&banner_id=3b881495c84042deb0d0288185da231350dd7b0f4105441f8f6018cc3fcb090c&bg=black&w=300&h=600&locale=Display%20Estonia-EST&info=https%3A%2F%2Fdigital.tv3.ee%2Fbepolite-id%2F%3Futm_src%3Dbanner
Certificate IssuerAmazon
Subject*.hookusbookus.com
FingerprintCD:CD:3C:03:66:21:F8:A9:21:BC:F8:C8:3C:DC:88:0A:C5:19:F1:7A
ValiditySun, 07 May 2023 00:00:00 GMT - Tue, 04 Jun 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /package-feed?language=et_ee&utmSource=allmedia HTTP/1.1
Host: banner-server.hookusbookus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://banner.hookusbookus.com
DNT: 1
Connection: keep-alive
Referer: https://banner.hookusbookus.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 10 Sep 2023 11:16:04 GMT
content-type: application/json
access-control-allow-origin: https://banner.hookusbookus.com
access-control-allow-methods: POST, PUT, GET, PATCH, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: origin, authorization, accept, content-type, x-requested-with, Pragma, Cache-Control, If-Modified-Since, X-Auth-Token, X-Client-Certificate
access-control-allow-credentials: true
access-control-expose-headers: X-Auth-Token, Content-Disposition, Content-Length
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
X-Firefox-Spdy: h2
static.bepolite.eu/files/close-gray.png
200 OK 1.5 kB URL GET HTTP/2 static.bepolite.eu/files/close-gray.png
IP
ASN #3327 CITIC Telecom CPC Netherlands B.V.
Requested by https://www.upload.ee/files/15256190/FoxitPDFEditor-2023-Patch.rar.html?msg=sess_error
Certificate IssuerLet's Encrypt
Subjectstatic.bepolite.eu
FingerprintB7:1B:BB:35:5B:E5:6E:92:4D:DE:79:2E:0E:C8:1F:0D:CE:28:88:FD
ValidityMon, 04 Sep 2023 21:06:47 GMT - Sun, 03 Dec 2023 21:06:46 GMT
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 41d9676ab94bece3f7a549b4769ddbe2
521f14490fc57fea51e2e5bf00e2299dce51561b
c2f89787bda82263fceb9ec11d398fa83a5f22abf248956df29bdee2987d2f34
GET /files/close-gray.png HTTP/1.1
Host: static.bepolite.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.upload.ee/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
accept-ranges: bytes
etag: "1971769258"
last-modified: Fri, 08 Apr 2022 18:07:56 GMT
content-length: 1497
date: Sun, 10 Sep 2023 11:15:58 GMT
cache-control: must-revalidate, private
expires: -1
p3p: CP='BePolite does not have a P3P policy'
x-varnish: 98802362
age: 0
X-Firefox-Spdy: h2
51.91.30.159
143.204.42.211
3.123.83.244
188.114.97.1
212.47.222.22
104.21.34.51
0.0.0.0