| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash12bf1a23e28f4b6996d92ef0ce981624 78899bea571ec8198e710c1e798a394f83c5b46b c57667fc645403b94b531cbc75f5284ae4b4ab4410bf2afdd97619f7137ed6c5
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C57667FC645403B94B531CBC75F5284AE4B4AB4410BF2AFDD97619F7137ED6C5"
Last-Modified: Tue, 18 Jun 2024 01:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19234
Expires: Thu, 20 Jun 2024 07:58:02 GMT
Date: Thu, 20 Jun 2024 02:37:28 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9d139a09a36fce99ece1fb963d49d2a9 a7d96d8755d02c7204c147daade1b1168a6ddb73 f9a59ebef1ee608c709b274e1c7be1320323232cdc79b17bdbf453a5a5aead09
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F9A59EBEF1EE608C709B274E1C7BE1320323232CDC79B17BDBF453A5A5AEAD09"
Last-Modified: Mon, 17 Jun 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9255
Expires: Thu, 20 Jun 2024 05:11:44 GMT
Date: Thu, 20 Jun 2024 02:37:29 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash68d462af974340632b54e503868cc210 4832dc71176669fcdfdf9bf7d7e7c51485ea115f 17e8118c5c3b7168393951646a3c9aeb7dde52643bfeb23a6bd8a2dcddfe0b54
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "17E8118C5C3B7168393951646A3C9AEB7DDE52643BFEB23A6BD8A2DCDDFE0B54"
Last-Modified: Wed, 19 Jun 2024 16:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4039
Expires: Thu, 20 Jun 2024 03:44:48 GMT
Date: Thu, 20 Jun 2024 02:37:29 GMT
Connection: keep-alive
|
|
| www.protege-torrent.com/cdn-cgi/apps/head/l8tXNewr8ZTCgRAFwUXhEPHSvNQ.js |  104.21.26.61 | 200 OK | 1.6 kB |
URL GET HTTP/3www.protege-torrent.com/cdn-cgi/apps/head/l8tXNewr8ZTCgRAFwUXhEPHSvNQ.js IP104.21.26.61:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerGoogle Trust Services LLC Subjectprotege-torrent.com FingerprintE5:61:D4:18:A6:18:41:9D:71:1F:DF:50:99:6E:D2:7C:6B:2B:5A:05 ValiditySat, 27 Apr 2024 02:07:02 GMT - Fri, 26 Jul 2024 02:07:01 GMT
File typeJavaScript source, ASCII text, with very long lines (470) Hashd97739f7d0416daa1254a4bab151da18 acd4c37acbd81a1bf92c214fc787884b20b7652a 64eefbfea735a0eea7d8cc193b5841413a2b17b52f319c2475912762db5ad84e
GET /cdn-cgi/apps/head/l8tXNewr8ZTCgRAFwUXhEPHSvNQ.js HTTP/1.1
Host: www.protege-torrent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 20 Jun 2024 02:37:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 1559
x-amz-id-2: viVHLCFtw/JjgEpZBeNZQZrBa6+saFlXnEjrJ4b51IbbiDUviLBWjWNLIvM//Uz4imLtSBk5xME=
x-amz-request-id: K8JA0BT0AF3M9PFP
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Sat, 13 Apr 2024 19:04:18 GMT
x-amz-version-id: 9Hjz2pUV5DHaCyWe57pN_s7suEYg5U95
etag: "3096e790b9571ecd703d0b6c0d234e97"
cf-cache-status: HIT
age: 139436
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v44E2hGC1WAjFXgol6jtNbmIYBH3WhJwp35c9GmegqOSvnRKs0sOcMN4keutcJQzN309BYYhtN6T0oh1YMmvFr7gynPDDdLhOzWkMkEpYNORVQuRiah0nFK984o%2FFstKwCXwDB3GzQ1yGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 896860958d9ab51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.protege-torrent.com/cdn-cgi/apps/body/cr8VzHFBv1QmNMHGhRC3Vd94gfA.js | 104.21.26.61 | 200 OK | 1.3 kB |
URL GET HTTP/3www.protege-torrent.com/cdn-cgi/apps/body/cr8VzHFBv1QmNMHGhRC3Vd94gfA.js IP104.21.26.61:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerGoogle Trust Services LLC Subjectprotege-torrent.com FingerprintE5:61:D4:18:A6:18:41:9D:71:1F:DF:50:99:6E:D2:7C:6B:2B:5A:05 ValiditySat, 27 Apr 2024 02:07:02 GMT - Fri, 26 Jul 2024 02:07:01 GMT
File typeJavaScript source, ASCII text, with very long lines (939) Hash27ff8adb017921007cb147b5e749f355 6b1f46551152db2d1ef5b8248f000c18f017c794 e8f7b394c5a06230fdddcade94e16e79dfb93e28971af03ef7c8527f83258567
GET /cdn-cgi/apps/body/cr8VzHFBv1QmNMHGhRC3Vd94gfA.js HTTP/1.1
Host: www.protege-torrent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 20 Jun 2024 02:37:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 1316
x-amz-id-2: SozxrtkCy3er7yw2xuu4bxocboqosuSHTt3xLBpTZLQ2VTdg3WqpOW7NKMsHYnKbFFu6nyqwlm4=
x-amz-request-id: PAXKQFW4CZNA5SBB
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Sat, 13 Apr 2024 19:04:17 GMT
x-amz-version-id: msjs0iuXBF7heLtRkXqbBaI1IX2wT0Uj
etag: "dc897f9006085ad06ecbcaaf204e17b8"
cf-cache-status: HIT
age: 139435
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qEk0PegGxGGF%2F1aXya%2B8uthFWeHMErRlZ5Me7LrrBnD5Gjx6T9BBGRw3373FEhLehHdzoDHqZYy2x0urBouiNbXQAM17IM5SaerZW9h761p2WWu%2Bvu4YGVBNuCvuIPxRqsIsSriVv5to2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 89686095cdadb51e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| bourrepardale.com/1clkn/56862 |  23.109.170.31 | 200 OK | 26 B |
URL GET HTTP/1.1bourrepardale.com/1clkn/56862 IP23.109.170.31:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectbourrepardale.com Fingerprint74:24:0A:B1:D7:19:20:6A:56:64:1A:98:0F:2E:58:82:A6:8E:0A:FA ValidityMon, 13 May 2024 23:49:49 GMT - Sun, 11 Aug 2024 23:49:48 GMT
File typeASCII text, with no line terminators Hash9082dc37e5e8046929da411544ad071a 41e0e3963ed94e59e8a2f115994c382712411537 b7848d86edc8dc3b5bc6a5c666069f9a31e000cee51575d3b6083951607e1550
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /1clkn/56862 HTTP/1.1
Host: bourrepardale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Jun 2024 02:37:30 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
Set-Cookie: GL_UI4=eJw9jUtug0AQRPljJ4akJQ7gIxgUjL3MJivfAQ0zDZ4Ypq1mjJ3bZxIp2dUrPVV5nhcUL%2BAvyRrCm6hhe1R9s5dYojyUVVW%2BHSrZ151o%2BlJVTVnvYK3n1opuRBvBap4E29YuEWwGNMhatpIUZvDqrL%2FmYuhuIog7FkZlEE%2FOGDNIO6b7jFyEEBkxIaQfmrGnhzPEJzEEx72L2rjo7yCguQjzJ4hP2twe%2BSbx8jzx4Pk6CtsTT61WDuOBhULw32ElhcWB%2BAtShfPF0hWARtX%2B%2B7%2Bf8fizBonCRUuHZM%2FI38wATrY%3D; expires=Fri, 21-Jun-2024 02:37:30 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwNw0sOgjAUBdC%2BN2jUEJMbWQArqEBwwNDPwIHBASsAbLSBUNJC1d3rSY4QguMIbCZEZabKVBW5yg4F6Amu7uBuhKysezdfkAOnOdiNWB177fxr8aAOm6sNpk%2BCdj3IYHsazCep7bDMxo4e%2FL8%2BN%2B2g95f6BpokgWcrGewfsQAFufsB2S8fFw%3D%3D; expires=Fri, 21-Jun-2024 02:37:30 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| www.googletagmanager.com/gtag/js?id=G-J7PN0XBP50 |  142.250.74.168 | 200 OK | 97 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-J7PN0XBP50 IP142.250.74.168:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint3B:2D:9B:5D:FC:63:04:40:77:0B:39:21:BE:1F:0A:0A:9F:C4:2F:52 ValidityMon, 27 May 2024 06:34:50 GMT - Mon, 19 Aug 2024 06:34:49 GMT
File typeJavaScript source, ASCII text, with very long lines (3222) Hash65bea601ef048f89a8ea0074a265b950 3ea186beb9036568641812ddd82602d3f9e0cfc5 eaa3d69e9b74ea49e5ebbe80e9ed433d7e00d890fb52313f7d875cadf8436db9
GET /gtag/js?id=G-J7PN0XBP50 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 20 Jun 2024 02:37:30 GMT
expires: Thu, 20 Jun 2024 02:37:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 96905
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| specificationfingertip.com/903ed65596905faf1df9ee6ab9adbdab/invoke.js | 192.243.61.227 | 200 OK | 12 kB |
URL GET HTTP/1.1specificationfingertip.com/903ed65596905faf1df9ee6ab9adbdab/invoke.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectspecificationfingertip.com Fingerprint95:C9:2B:F9:00:44:EE:69:CB:36:6D:29:4F:04:E5:AB:CF:1E:31:3A ValidityWed, 29 May 2024 08:47:50 GMT - Tue, 27 Aug 2024 08:47:49 GMT
File typeJavaScript source, ASCII text, with very long lines (31268), with no line terminators Hash3a50c31e60d2b78a4181fb0ef5359024 30b9a1d8205f8dbe4926fc33e5832e1c8719a393 331443ecb821f448c95fdc112c76c2414d0c35ca399880612258165a2e4b7b84
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /903ed65596905faf1df9ee6ab9adbdab/invoke.js HTTP/1.1
Host: specificationfingertip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 02:37:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: cf2e3b413e51265b12776a47387210b7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| specificationfingertip.com/c564fd473d509e9cb01294ecd15cd97c/invoke.js | 192.243.61.227 | 200 OK | 12 kB |
URL GET HTTP/1.1specificationfingertip.com/c564fd473d509e9cb01294ecd15cd97c/invoke.js IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectspecificationfingertip.com Fingerprint95:C9:2B:F9:00:44:EE:69:CB:36:6D:29:4F:04:E5:AB:CF:1E:31:3A ValidityWed, 29 May 2024 08:47:50 GMT - Tue, 27 Aug 2024 08:47:49 GMT
File typeJavaScript source, ASCII text, with very long lines (31238), with no line terminators Hash9fca9586a0727686ef5af40e75c45f1d 4692366a165bced2fa9a6705220dfab7d2e904c5 99ff49f860f1647416729b641f33a4ee7cc24842e614574a69e382db963bbde1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /c564fd473d509e9cb01294ecd15cd97c/invoke.js HTTP/1.1
Host: specificationfingertip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 02:37:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f2382c7a246bfd81026ddb61cb5ef1e1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash4d787dffafb15324bd81f70a44ce162e 5538b1dd80458d5ea1bd6cb007d6ace233c1e042 ef9985ec0545375abcc74c1e2ae30ba3fe0849008afd3dd7ef134d4fbf743ff8
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 20 Jun 2024 02:37:30 GMT
Last-Modified: Thu, 20 Jun 2024 01:57:08 GMT
Server: ECAcc (ska/F775)
X-Cache: Miss from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: AeNVThr2TfOF_XzAJMEl7LFi6Wqt3JLqFZRI4gZ_GzfS3JNvt9Y3Ig==
Age: 2422
|
|
| ocsp.r2m03.amazontrust.com/ | 143.204.53.97 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP143.204.53.97:0
Hash4d787dffafb15324bd81f70a44ce162e 5538b1dd80458d5ea1bd6cb007d6ace233c1e042 ef9985ec0545375abcc74c1e2ae30ba3fe0849008afd3dd7ef134d4fbf743ff8
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Thu, 20 Jun 2024 02:37:30 GMT
Last-Modified: Thu, 20 Jun 2024 01:57:07 GMT
Server: ECAcc (ska/F776)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: uK0QU3W7pNRARBf-jq_uhYVmIXq3rPdDRuHccoVSFD8b6QrNQQnbUg==
Age: 2423
|
|
| proftrafficcounter.com/stats |  18.194.54.118 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.194.54.118:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hasha13ab29c9a83080062533d0acaaf2795 1bdf81807467d5008660814077f9a8f3ef855171 995de826ce9ade371078ed4909489960eddb974024a4f12fc1034d72a74abe90
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.protege-torrent.com
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 20 Jun 2024 02:37:30 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.protege-torrent.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=7c7393ff-115d-40d6-a755-b8eff8e70ff3:3:1; expires=Sun, 18 Jun 2034 02:37:30 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| proftrafficcounter.com/stats | 18.194.54.118 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP18.194.54.118:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash08d48a6358dfc8740175d89e43aa225b 2853e45c3eff8affa5e0847f4daff5183d68884b 491d646e08d9cc79ed6841583c99c27744caccebe7ee701dc5ab59a94e261d63
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.protege-torrent.com
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 20 Jun 2024 02:37:30 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.protege-torrent.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=89290c01-de36-4cc4-9e59-285b3cc04e6c:2:1; expires=Sun, 18 Jun 2034 02:37:30 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| ryeprior.com/watch.1674379166151.js?key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&tz=0&dev=e&res=14.2071&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1 | 172.240.108.76 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1ryeprior.com/watch.1674379166151.js?key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&tz=0&dev=e&res=14.2071&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1 IP172.240.108.76:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectryeprior.com Fingerprint0B:45:E0:71:91:A0:89:C6:D5:E8:30:52:6C:2C:79:D7:BB:B0:A8:FF ValiditySun, 02 Jun 2024 08:59:06 GMT - Sat, 31 Aug 2024 08:59:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1674379166151.js?key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&tz=0&dev=e&res=14.2071&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1 HTTP/1.1
Host: ryeprior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.protege-torrent.com
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 02:37:30 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.protege-torrent.com
Access-Control-Allow-Origin: https://www.protege-torrent.com
Access-Control-Allow-Credentials: true
Location: https://ryeprior.com/watch.1674379166151.js?dev=e&key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851110&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=e2fa194fcb76891463db1ef847d783164db8d6353de69bf9cd2239d467e4f6faf511d619435e7859c1c1896e9831e5ac9c168ec977c68480a3799d0dd1fb46aea3902fc12a25f1ed632dbeb2c73fe0e524f16e875285cfbd9fae17114c5eb35163&tz=0&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1
Set-Cookie: u_pl=17243234; expires=Fri, 21 Jun 2024 02:37:30 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.8f2vSmOS_j-5GkA_NGWRfq97Q0ZxsWpe8TLl4FqDPaY; expires=Thu, 20 Jun 2024 02:38:30 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: eb2b17530938a5273f304d2cc281d9de
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| joiningindulgeyawn.com/watch.1049630080823.js?key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&tz=0&dev=e&res=14.2071&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1 | 172.240.108.68 | 307 Temporary Redirect | 0 B |
URL GET HTTP/1.1joiningindulgeyawn.com/watch.1049630080823.js?key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&tz=0&dev=e&res=14.2071&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1 IP172.240.108.68:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectjoiningindulgeyawn.com Fingerprint59:E6:70:6D:B2:FC:00:52:A7:D8:48:FA:6A:58:2D:F0:3B:0C:9D:21 ValidityMon, 03 Jun 2024 09:00:17 GMT - Sun, 01 Sep 2024 09:00:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1049630080823.js?key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&tz=0&dev=e&res=14.2071&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1 HTTP/1.1
Host: joiningindulgeyawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.protege-torrent.com
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 02:37:31 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.protege-torrent.com
Access-Control-Allow-Origin: https://www.protege-torrent.com
Access-Control-Allow-Credentials: true
Location: https://joiningindulgeyawn.com/watch.1049630080823.js?dev=e&key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851111&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=1890af9bddf509a112b9be9681107d85334176f5f461b758d2c05bd2b8b96917099668cac55088b60efa3e4ac2ee9bd3a8e14f205fbdedea00365118631b5d3ab1d1741014940e8aafe75d609681270aaed13f270baf4eac654e5a06f2fe61&tz=0&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1
Set-Cookie: u_pl=17243251; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.blbDMxF1vnE7wecuHUIPo6m9xwZKRY7yIJzpNT2TicE; expires=Thu, 20 Jun 2024 02:38:31 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 048962ac249a74ebd9a25577798a093a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| ryeprior.com/watch.1674379166151.js?dev=e&key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851110&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=e2fa194fcb76891463db1ef847d783164db8d6353de69bf9cd2239d467e4f6faf511d619435e7859c1c1896e9831e5ac9c168ec977c68480a3799d0dd1fb46aea3902fc12a25f1ed632dbeb2c73fe0e524f16e875285cfbd9fae17114c5eb35163&tz=0&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1 | 172.240.108.76 | 200 OK | 2.0 kB |
URL GET HTTP/1.1ryeprior.com/watch.1674379166151.js?dev=e&key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851110&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=e2fa194fcb76891463db1ef847d783164db8d6353de69bf9cd2239d467e4f6faf511d619435e7859c1c1896e9831e5ac9c168ec977c68480a3799d0dd1fb46aea3902fc12a25f1ed632dbeb2c73fe0e524f16e875285cfbd9fae17114c5eb35163&tz=0&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1 IP172.240.108.76:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectryeprior.com Fingerprint0B:45:E0:71:91:A0:89:C6:D5:E8:30:52:6C:2C:79:D7:BB:B0:A8:FF ValiditySun, 02 Jun 2024 08:59:06 GMT - Sat, 31 Aug 2024 08:59:05 GMT
File typeJavaScript source, ASCII text, with very long lines (2523) Hash32682aab4451c22bd6943666404301eb d3635d2b07d309dc7509a4b26958447ed777153e 6943474374910fdeac6d3a162cd0bcff7b943052eddc78e57bd06062c7bfd916
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1674379166151.js?dev=e&key=c564fd473d509e9cb01294ecd15cd97c&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851110&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=e2fa194fcb76891463db1ef847d783164db8d6353de69bf9cd2239d467e4f6faf511d619435e7859c1c1896e9831e5ac9c168ec977c68480a3799d0dd1fb46aea3902fc12a25f1ed632dbeb2c73fe0e524f16e875285cfbd9fae17114c5eb35163&tz=0&uuid=7c7393ff-115d-40d6-a755-b8eff8e70ff3%3A3%3A1 HTTP/1.1
Host: ryeprior.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.protege-torrent.com
Referer: https://www.protege-torrent.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=17243234; ain=eyJhbGciOiJIUzI1NiJ9.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.8f2vSmOS_j-5GkA_NGWRfq97Q0ZxsWpe8TLl4FqDPaY
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 02:37:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.protege-torrent.com
Access-Control-Allow-Origin: https://www.protege-torrent.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=7c7393ff-115d-40d6-a755-b8eff8e70ff3:3:1; expires=Thu, 27 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
iprcc7c9b5b2fe01c50838252db7564a9c4a=5191640; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
uncs=1; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 1898592bec47142b1ab14a076f812ad9
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| joiningindulgeyawn.com/watch.1049630080823.js?dev=e&key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851111&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=1890af9bddf509a112b9be9681107d85334176f5f461b758d2c05bd2b8b96917099668cac55088b60efa3e4ac2ee9bd3a8e14f205fbdedea00365118631b5d3ab1d1741014940e8aafe75d609681270aaed13f270baf4eac654e5a06f2fe61&tz=0&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1 | 172.240.108.68 | 200 OK | 2.1 kB |
URL GET HTTP/1.1joiningindulgeyawn.com/watch.1049630080823.js?dev=e&key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851111&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=1890af9bddf509a112b9be9681107d85334176f5f461b758d2c05bd2b8b96917099668cac55088b60efa3e4ac2ee9bd3a8e14f205fbdedea00365118631b5d3ab1d1741014940e8aafe75d609681270aaed13f270baf4eac654e5a06f2fe61&tz=0&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1 IP172.240.108.68:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectjoiningindulgeyawn.com Fingerprint59:E6:70:6D:B2:FC:00:52:A7:D8:48:FA:6A:58:2D:F0:3B:0C:9D:21 ValidityMon, 03 Jun 2024 09:00:17 GMT - Sun, 01 Sep 2024 09:00:16 GMT
File typeJavaScript source, ASCII text, with very long lines (2545) Hash53648f24a43aec4c3963b36a085314b3 54d40644a2e5ccf200f4b94e68594d976cfe9fed a4a2d773db94b218520ed373857d014873e0b3192f0cf54538b5c32e546164b7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /watch.1049630080823.js?dev=e&key=903ed65596905faf1df9ee6ab9adbdab&kw=%5B%22403%22%2C%22forbidden%22%5D&pst=1718851111&refer=https%3A%2F%2Fwww.protege-torrent.com%2F&res=14.2071&rmtc=t&shu=1890af9bddf509a112b9be9681107d85334176f5f461b758d2c05bd2b8b96917099668cac55088b60efa3e4ac2ee9bd3a8e14f205fbdedea00365118631b5d3ab1d1741014940e8aafe75d609681270aaed13f270baf4eac654e5a06f2fe61&tz=0&uuid=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1 HTTP/1.1
Host: joiningindulgeyawn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.protege-torrent.com
Referer: https://www.protege-torrent.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=17243251; ain=eyJhbGciOiJIUzI1NiJ9.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.blbDMxF1vnE7wecuHUIPo6m9xwZKRY7yIJzpNT2TicE
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 20 Jun 2024 02:37:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.protege-torrent.com
Access-Control-Allow-Origin: https://www.protege-torrent.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=89290c01-de36-4cc4-9e59-285b3cc04e6c:2:1; expires=Thu, 27 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
iprcc1ebf56f3f86e0064d205666abc37a2c=5191359; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
uncs=1; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
pdhtkv5=true; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
uncs5=1; expires=Fri, 21 Jun 2024 02:37:31 GMT; path=/; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7a1ac9328e54c2f96b743036c78a65e3
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| cdn.cloudimagesb.com/cti/4d/d9/00/4dd9001a8b835337ba6f030efe1c7f96/1711621579.jpg | 45.133.44.9 | 200 OK | 64 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/4d/d9/00/4dd9001a8b835337ba6f030efe1c7f96/1711621579.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC0:36:FD:5D:4E:7E:6F:E0:13:60:82:58:0C:BC:8B:40:A2:6B:2C:22 ValidityTue, 21 May 2024 05:00:31 GMT - Mon, 19 Aug 2024 05:00:30 GMT
File typeJPEG image data, baseline, precision 8, 728x90, components 3 Hashc416d00adf54f22a0a7059110288f1ba 041feade34f9021e60d153b9d82d3d2c5ac8c945 3d5e90fa0e3b161d4b31e354eefebe2e01913b4510ef7975a88be2a39a711d93
GET /cti/4d/d9/00/4dd9001a8b835337ba6f030efe1c7f96/1711621579.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 20 Jun 2024 02:37:31 GMT
content-type: image/jpeg
content-length: 63639
server: nginx/1.21.6
last-modified: Thu, 28 Mar 2024 10:26:28 GMT
etag: "660545d4-f897"
expires: Sat, 22 Jun 2024 02:37:31 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| cdn.cloudimagesb.com/cti/59/e2/73/59e273b873f0f7092b74f2766d60aebd/1711620525.jpg | 45.133.44.9 | 200 OK | 72 kB |
URL GET HTTP/2cdn.cloudimagesb.com/cti/59/e2/73/59e273b873f0f7092b74f2766d60aebd/1711620525.jpg IP45.133.44.9:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://www.protege-torrent.com/ CertificateIssuerLet's Encrypt Subjectcdn.cloudimagesb.com FingerprintC0:36:FD:5D:4E:7E:6F:E0:13:60:82:58:0C:BC:8B:40:A2:6B:2C:22 ValidityTue, 21 May 2024 05:00:31 GMT - Mon, 19 Aug 2024 05:00:30 GMT
File typeJPEG image data, baseline, precision 8, 300x250, components 3 Hash2d281de4129fb09c0e095c5b9beeb115 bf238757cb5055f99aeb9911d422850a56fe2c39 c8d22cd8ebf01584785595b2ef4f82c1b677742241f562a0aca5c775a4229980
GET /cti/59/e2/73/59e273b873f0f7092b74f2766d60aebd/1711620525.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 20 Jun 2024 02:37:31 GMT
content-type: image/jpeg
content-length: 71789
server: nginx/1.21.6
last-modified: Thu, 28 Mar 2024 10:08:53 GMT
etag: "660541b5-1186d"
expires: Sat, 22 Jun 2024 02:37:31 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha4a98cb7858bfd671309bced772b0095 703c86e6784782333c82f615335a6b5d6826607e 224e289334c48e0048c8e7805fae8e7b485ea11d278ed892156c67ce21e8e04c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "224E289334C48E0048C8E7805FAE8E7B485EA11D278ED892156C67CE21E8E04C"
Last-Modified: Tue, 18 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10623
Expires: Thu, 20 Jun 2024 05:34:34 GMT
Date: Thu, 20 Jun 2024 02:37:31 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha4a98cb7858bfd671309bced772b0095 703c86e6784782333c82f615335a6b5d6826607e 224e289334c48e0048c8e7805fae8e7b485ea11d278ed892156c67ce21e8e04c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "224E289334C48E0048C8E7805FAE8E7B485EA11D278ED892156C67CE21E8E04C"
Last-Modified: Tue, 18 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10623
Expires: Thu, 20 Jun 2024 05:34:34 GMT
Date: Thu, 20 Jun 2024 02:37:31 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha4a98cb7858bfd671309bced772b0095 703c86e6784782333c82f615335a6b5d6826607e 224e289334c48e0048c8e7805fae8e7b485ea11d278ed892156c67ce21e8e04c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "224E289334C48E0048C8E7805FAE8E7B485EA11D278ED892156C67CE21E8E04C"
Last-Modified: Tue, 18 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10623
Expires: Thu, 20 Jun 2024 05:34:34 GMT
Date: Thu, 20 Jun 2024 02:37:31 GMT
Connection: keep-alive
|
|
| www.protege-torrent.com/favicon.ico | 104.21.26.61 | 200 OK | 4.6 kB |
URL GET HTTP/3www.protege-torrent.com/favicon.ico IP104.21.26.61:443
Requested byhttps://www.protege-torrent.com/ CertificateIssuerGoogle Trust Services LLC Subjectprotege-torrent.com FingerprintE5:61:D4:18:A6:18:41:9D:71:1F:DF:50:99:6E:D2:7C:6B:2B:5A:05 ValiditySat, 27 Apr 2024 02:07:02 GMT - Fri, 26 Jul 2024 02:07:01 GMT
File typeHTML document, ASCII text, with CRLF, LF line terminators Hash1ac2cdf8275cdf66c422b9788908bf23 4ba4351525432047f201035e7f624ed2b7baca0b 605d264f66c3af9e03686f2eba4860563187b61dd83399cbb469bc663b67b2fa
GET /favicon.ico HTTP/1.1
Host: www.protege-torrent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.protege-torrent.com/
Cookie: _ga_J7PN0XBP50=GS1.1.1718851050.1.0.1718851050.0.0.0; _ga=GA1.1.865484739.1718851050; dom3ic8zudi28v8lr6fgphwffqoz0j6c=89290c01-de36-4cc4-9e59-285b3cc04e6c%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 20 Jun 2024 02:37:30 GMT
content-type: text/html
last-modified: Tue, 18 Jun 2024 18:19:42 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 877
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aCqbRfucZn%2BqdXmZowkXkqD8aJA60WSYiSSeJpGk5Z8uczsuSJzWPnusMHSUV7eeYoPCXLJ3Ftuf6X%2Bdgi2rozd%2B8z3kE4MFQ%2BjcM9NfPDaTI8e1J6K7dxr5%2BGlwNQ3sI0HezvdMt2ZQeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 8968609a8f76b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 104.21.26.61 | 200 OK | 1.0 kB |
URL User Request GET HTTP/2IP104.21.26.61:443
CertificateIssuerGoogle Trust Services LLC Subjectprotege-torrent.com FingerprintE5:61:D4:18:A6:18:41:9D:71:1F:DF:50:99:6E:D2:7C:6B:2B:5A:05 ValiditySat, 27 Apr 2024 02:07:02 GMT - Fri, 26 Jul 2024 02:07:01 GMT
File typeHTML document, ASCII text, with very long lines (1091), with no line terminators Hashb429375bdb9303dbd58d4f8d37472d9b 4d752185eccd3bcbb077f8787c26bc71ccd9ab76 a8b8528a4f4ce985988d591f3c4b468277372e571ecc412cac320fce40ddde12
GET / HTTP/1.1
Host: www.protege-torrent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 20 Jun 2024 02:37:29 GMT
content-type: text/html
last-modified: Tue, 18 Jun 2024 18:19:42 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2BjrXs2g%2BYQEhjnN%2FXJSx5BdJC1lXOj2BwjjSjsrMeUjDKjYI8rhy%2B4Uld8NK5SEhRTQb%2Bxsr9XWIcYK5iiKWXY5eFyEJ1mFwBzC1AuWW9tVpVaOLF%2B60OdFOfsA2Nl7tNV5dpDYX2H%2Fug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 896860927e9656ab-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| | 104.21.31.165 | 301 Moved Permanently | 1.0 kB |
URL User Request GET HTTP/2IP104.21.31.165:443
CertificateIssuerLet's Encrypt Subjectcpasbien.zip Fingerprint22:53:85:A0:39:5F:26:8F:4F:7C:4F:56:5C:6A:15:33:9B:A2:C6:45 ValidityMon, 22 Apr 2024 16:49:37 GMT - Sun, 21 Jul 2024 16:49:36 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.cpasbien.zip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Thu, 20 Jun 2024 02:37:29 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.protege-torrent.com/
cache-control: max-age=14400
cf-cache-status: HIT
age: 878
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2Bdj5AzFBIOLIayqQlntZaLC8KkwPfxUMpH9t6sCla28E%2B0fxSPUEw5i5wVVeTZjnvw56cD2CqOEO1W1K1ba2%2FpwzCbqGAI0zDh9Ssl%2F5vzai%2Bx7Tq6O6i3tZTvEQhS2GJ9t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 896860921ad57131-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|