cricfree.xyz/cycling
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cycling HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 26 Oct 2022 21:54:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 26 Oct 2022 22:54:21 GMT
Location: https://cricfree.xyz/cycling
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B9g202PNWdvuChHyGEC%2BUepnijBmQ7V4EEACtXTmDFZi8jaYMfMJ3hICxojHo314hxu8hROy87U60AGChniK5M8gmgiQJ8fH3DaJgE607ty%2F3AbCfsi8Z8cGHUQ5uNY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76066e11bf8d0b55-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c9ec202b798d350b6582220b7bb8457
d16ca24cd60b349231ad06fa5db32f54a3bc9e09
df036d315a613ac6396b77afb0a4ea5f793091786be0cbf3f3a0d043bc1d1d3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF036D315A613AC6396B77AFB0A4EA5F793091786BE0CBF3F3A0D043BC1D1D3C"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7550
Expires: Thu, 27 Oct 2022 00:00:11 GMT
Date: Wed, 26 Oct 2022 21:54:21 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6159
Cache-Control: max-age=134360
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 11:13:41 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 808
Cache-Control: max-age=129009
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 09:44:30 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13147
Expires: Thu, 27 Oct 2022 01:33:28 GMT
Date: Wed, 26 Oct 2022 21:54:21 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: wDzECaXLzTu6Jdp8hDU43zWtPJKB9y6tEAulsta9XJIkIyTslmRH2k3lyEC8mVGCc4mtxvK82kaJsDrJe8bjsA==
x-amz-request-id: DZRA187SJG31JGDN
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 21:09:32 GMT
age: 2689
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 4d47b997b29286a8694565dbc8288b65
b4012cfa6f7c43ee76a2ed399296e7ed5dd3151d
5ed9bcbc87eebc2d7617dc25f3bdd3190b96e70d20da835688a9243d79e2db31
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=108375
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Etag: "6358b0e4-116"
Expires: Fri, 28 Oct 2022 04:00:36 GMT
Last-Modified: Wed, 26 Oct 2022 04:00:36 GMT
Server: nginx
Content-Length: 278
cricfree.xyz/images/hdc.gif
200 OK 41 kB URL HTTP/2 cricfree.xyz/images/hdc.gif
IP
File type GIF image data, version 89a, 300 x 250\012- data
Hash 9b94a902d77c9381f2b79b07bfa4138a
e40da3ff7c5a22adb3d1de3a3edf93706a7632ae
f085cb7d62968b33caa123465f0028291263d23f9cb7e9c8ed99d9252b65c139
GET /images/hdc.gif HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/cycling
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: image/gif
content-length: 40706
last-modified: Thu, 27 Aug 2020 22:56:06 GMT
etag: "5f483a06-9f02"
expires: Mon, 14 Nov 2022 20:28:32 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 955549
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KcV08JiRq6Wz0Wa%2BZ6AxQ7EtKDDYAaktnDMWREuUtsL8aCSdNoH46Pwqn0xX%2FCpcURFLI%2F4JDMFNimvDBZLZhTt40SjP9kgIT%2BAgVzQDOMzc5b88%2FQGSm4ib77SqFkw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e162b9c0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116423 bytes)
Hash d5b9b7a3accd3b7b7de639c072ae3ee2
9583b5c046d78af5c6379d844219f828aa2222d0
648dad6716bb917c7d981e7772fca499d9583717fd83ffef47b0534cb9132b60
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116423
date: Wed, 26 Oct 2022 21:54:21 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f046e6113dd1e5e499c765516be08b17
c2253055e09b46209469853cad8720e64f84a1bf
18663a8f0b5d4d7581b771da6c2dc897bc2b82d51d7dac1a56d22f9bebab6fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7f1de4025eee44eed5a0ada1e998d6c
fd8bfad40b964ffd3534ac3aff68aaf31d38ba37
fba4107e5627b68a00dc9c31a657be714c85dc7c648b8e8e1c7373cc305f8228
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.impactradius-go.com/display-ad/5119-581753
200 OK 84 kB URL HTTP/2 a.impactradius-go.com/display-ad/5119-581753
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=250, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x250, components 3\012- data
Hash 28cab1dfc21c0edab126b6812a95b2b0
80b75396a3e9cbe2b54f30a33c0afc78c51f3959
4f50daf5199829f5c4c8fc52643f476df49340d0c09cefcbee64d39d9353e683
GET /display-ad/5119-581753 HTTP/1.1
Host: a.impactradius-go.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 84511
last-modified: Mon, 22 Aug 2022 19:21:47 GMT
accept-ranges: bytes
server: AmazonS3
date: Wed, 26 Oct 2022 21:54:21 GMT
cache-control: public,max-age=900,s-maxage=600
etag: "28cab1dfc21c0edab126b6812a95b2b0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: r80fxn7RSj8QMwpX-uJ124bjqlq7G_uYUG_ms9QvIAYFfUTN3ZThLA==
age: 34
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=
200 OK 37 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=
IP
File type ASCII text, with very long lines (1733)
Hash 7ab1c4c060cf271a31915823a3bc448f
7bb503bb86eaf7b76853e8e039a1be65876a01e0
76e69b65bd8f5110aade78f6381765ac6ac8051e26bf14126a6e2b5d47d1dba3
GET /gtag/js?id= HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 26 Oct 2022 21:54:21 GMT
expires: Wed, 26 Oct 2022 21:54:21 GMT
cache-control: private, max-age=900
last-modified: Wed, 26 Oct 2022 21:07:22 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 37393
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f046e6113dd1e5e499c765516be08b17
c2253055e09b46209469853cad8720e64f84a1bf
18663a8f0b5d4d7581b771da6c2dc897bc2b82d51d7dac1a56d22f9bebab6fb3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cricfree.xyz/css/styles.css
200 OK 2.2 kB URL HTTP/2 cricfree.xyz/css/styles.css
IP
File type assembler source, ASCII text
Hash 28a1fc21a64e57d5c5be6c4b1243af68
b2949c6025c5ce1a161c0a49765903493b9122fd
a1a1c2fb123d4940b5c2c48d19ac7ef855b104b677d37675b33cd8f95883065e
GET /css/styles.css HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/cycling
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: text/css
last-modified: Thu, 27 Aug 2020 23:00:10 GMT
etag: W/"5f483afa-15cf"
expires: Mon, 14 Nov 2022 20:28:30 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 955551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tFlyAjxHSoosRBqjsCWZhSCnyg3JCZRc3j5yH31ZBXvuK82vf9tq4jgbLukty4Uuyn9RGG73mjdyPhcvQL2SYBVtNyKn8L84yCf7NWqNP%2BMlHD0%2B3%2BqScJh3NTGv5lc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e162b920b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e7f1de4025eee44eed5a0ada1e998d6c
fd8bfad40b964ffd3534ac3aff68aaf31d38ba37
fba4107e5627b68a00dc9c31a657be714c85dc7c648b8e8e1c7373cc305f8228
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash dd283dfc036535bdeb8a8be1310ef930
d3b1c300dd75d7af630e0f3112e49d7492d66c17
578f9256faa188facb3f2d68b02b0c7fb2e30e02e2e74234d015429563cba7aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4405
Cache-Control: max-age=127550
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Etag: "6358ea97-1d7"
Expires: Fri, 28 Oct 2022 09:20:12 GMT
Last-Modified: Wed, 26 Oct 2022 08:06:47 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 278 B IP
Hash 4d47b997b29286a8694565dbc8288b65
b4012cfa6f7c43ee76a2ed399296e7ed5dd3151d
5ed9bcbc87eebc2d7617dc25f3bdd3190b96e70d20da835688a9243d79e2db31
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=108374
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Etag: "6358b0e4-116"
Expires: Fri, 28 Oct 2022 04:00:36 GMT
Last-Modified: Wed, 26 Oct 2022 04:00:36 GMT
Server: nginx
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash f904a1dfd429d9ecd4b8b41817cebdff
39581f45039898532c58b10d72a60591ef6a1c92
86bc561f6c7182c6c4913fe96ca6a0740cc92994782a37e69f5a356ae1f87ae9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 02:24:20 GMT
Expires: Tue, 01 Nov 2022 02:24:19 GMT
Etag: "39581f45039898532c58b10d72a60591ef6a1c92"
Cache-Control: max-age=447596,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e17a9f8b4ee-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfd9f82fa00d33d9f68c748a4dd9bc1d
574cd4860add5dd7a94461656433819b1e3c22b3
b4e7043c045d800d7428d1e2342c13ee5a69698a06225eb4af9ddfd4b2e057af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B4E7043C045D800D7428D1E2342C13EE5A69698A06225EB4AF9DDFD4B2E057AF"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2268
Expires: Wed, 26 Oct 2022 22:32:10 GMT
Date: Wed, 26 Oct 2022 21:54:22 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 5g6WdK8aeUIqVIMBI0CUrw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vZN9eYZDEl0xmKgUUD5dl2hSpeQ=
modificationdispatch.com/ca/78/c2/ca78c25d96f5006fc8f80e1593f9ff64.js
200 OK 20 kB URL HTTP/1.1 modificationdispatch.com/ca/78/c2/ca78c25d96f5006fc8f80e1593f9ff64.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59443), with no line terminators
Hash d7287519a43a7925c16034bf4a6ad481
2a7706343bfa268685b89b55cd231439c073d81f
a6c57dd679eb052abf156207432ea90956e4a8abf2d29d184df0c4b338a6e594
GET /ca/78/c2/ca78c25d96f5006fc8f80e1593f9ff64.js HTTP/1.1
Host: modificationdispatch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 21:54:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8fb7e156cf95082cd36bbc3214480714
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cricfree.xyz/images/1xbet1.gif
200 OK 279 B URL HTTP/2 cricfree.xyz/images/1xbet1.gif
IP
Hash de83fe1fa7e798cebe926db2a2252159
374bcd95e4884313157d31bb53b24252a8d27091
243710c2e7f62dbce9e64c6875cb83b2ada8c87807bffbb62cdc0e768a094e55
GET /images/1xbet1.gif HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/cycling
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: image/gif
content-length: 119952
last-modified: Thu, 27 Aug 2020 22:42:10 GMT
etag: "5f4836c2-1d490"
expires: Mon, 14 Nov 2022 20:28:32 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 955549
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fBf3plC%2B6BDbMylusqoe44iCdThSOYTkZ%2B2fpGt2IjDsDcRiGfHUyq%2BM3Li6IIMVA6FWF3l0e%2Fr6GutTKr98GRnh%2BrRK%2BxSrxtNFjTDEUl3LZsXxgZgQPdW3jLWd1nQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e162b9a0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Wed, 26 Oct 2022 21:54:22 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d14190b7d44355f74384008fc2bc965b
8899240507992ceba98f567c079650149cc583a4
2db73ab3dfce1101ff8aaa09fe7227ad8017486b3ec3f536b7f8a1102ec0c267
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
200 OK 13 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Hash b4a68b1e743ee317eaaf0bbadd131571
f24f7823d4e3830c7cfa5bcb33733d2897c00f13
ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 20 Oct 2022 06:06:20 GMT
expires: Fri, 20 Oct 2023 06:06:20 GMT
cache-control: public, max-age=31536000
age: 575282
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash c1b472c435c91c200437f23206c6692d
6e704d0163a248895ac70cec99bda13fcec81293
11ff47045a54eabc6aaf2c8f2a49adb2b37243bc2041c7beb191e277ff2665f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144492
Date: Wed, 26 Oct 2022 21:54:22 GMT
Etag: "63592880-1d7"
Expires: Fri, 28 Oct 2022 14:02:34 GMT
Last-Modified: Wed, 26 Oct 2022 12:30:56 GMT
Server: ECS (nyb/1D25)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z3FCVzIK2RTQrZpmvTBic3x6LCUdV3SnYS-lUDwe5qUGI3FmjcmE7w==
Age: 5498
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d14190b7d44355f74384008fc2bc965b
8899240507992ceba98f567c079650149cc583a4
2db73ab3dfce1101ff8aaa09fe7227ad8017486b3ec3f536b7f8a1102ec0c267
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d5032bfe35f55b5a57d98eeead6c3c4a
c45b270fc01d819a610181dcd759eff4101aa542
3a2a46faa69b7e3dcf857f7db9a3cce369ce12eb5caaa802645e318709b78b1a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
set-cookie: uid_id2=4311d427-16b8-4472-b925-1be737c91c10:1:1; expires=Sat, 23 Oct 2032 21:54:22 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
gloumsee.net/zone?pub=0&zone_id=3534295&is_mobile=false&domain=cricfree.xyz&var=&ymid=&var_3=
200 OK 678 B URL HTTP/2 gloumsee.net/zone?pub=0&zone_id=3534295&is_mobile=false&domain=cricfree.xyz&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (677)
Hash 7e17568dae9374bb40c65d344f105160
0e87b037327228ecdb8c90cfbab0320d9297b3fe
0bfc75561332c0a8c3ed6d7acc1946511d7bc6b4a691dcc9c7574cbd27e8fbf0
GET /zone?pub=0&zone_id=3534295&is_mobile=false&domain=cricfree.xyz&var=&ymid=&var_3= HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Origin: https://cricfree.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: application/json; charset=utf-8
content-length: 678
x-trace-id: 61014f241ef78405327c5d7368d036f3
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 82c7b4c91044f445e742608f7f44db84
41b53b473b729eb6a4eb17dc0d249f83bf485ded
94073fd8659c11394f9c866cae0f92df386d632ce4c53ba41d45e3aae8e91491
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 14:29:46 GMT
Expires: Sun, 30 Oct 2022 14:29:45 GMT
Etag: "41b53b473b729eb6a4eb17dc0d249f83bf485ded"
Cache-Control: max-age=318322,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e1b9d76b4ee-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5804700e4bcc1dde440184560270988f
8e06122d60bb587b8c7cb9bdd1d2d5da61344935
00121bf3a20cac84e4fe51f32b0fcf05086e2f9b548a59cc9b2e5b97e5481efd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00121BF3A20CAC84E4FE51F32B0FCF05086E2F9B548A59CC9B2E5B97E5481EFD"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6208
Expires: Wed, 26 Oct 2022 23:37:50 GMT
Date: Wed, 26 Oct 2022 21:54:22 GMT
Connection: keep-alive
fubotv.pxf.io/i/2399476/581753/5119
302 Found 206 B URL HTTP/2 fubotv.pxf.io/i/2399476/581753/5119
IP
File type HTML document, ASCII text
Hash c46f80a37c25feab64fc938272951d82
430dbe5aa812896a83f8d7821947f244889c1347
f0db5b760e4c586f55cda913490f4eacd8cd4d1640ca59581d8e27e1e77b9550
GET /i/2399476/581753/5119 HTTP/1.1
Host: fubotv.pxf.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 26 Oct 2022 21:54:22 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
location: https://www.ojrq.net/p/?return=https%3A%2F%2Ffubotv.pxf.io%2Fi%2F2399476%2F581753%2F5119%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fcricfree.xyz%252F&cid=5119&tpsync=no
content-type: text/html; charset=utf-8
content-length: 206
date: Wed, 26 Oct 2022 21:54:22 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 625ad6aa33dda47097bff081ac75bf05
5f5bc1b567c8322e09f8f4fac2a542d063f83421
d9f85e2da8a3f517763eada5449029a0285aea770bb16be15de5a70d154f9565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5739
Cache-Control: max-age=169582
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Etag: "63598991-117"
Expires: Fri, 28 Oct 2022 21:00:44 GMT
Last-Modified: Wed, 26 Oct 2022 19:25:05 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash 3a1cbfcd06b8df30ad147e0dcd6761b6
3eed47568cd97c6f1f9364530df30e33784e6f12
53766f63cbdb5d90ee9e2b365da40d079840c265c6b4af6dfc70a293b02a7e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=144410
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Etag: "63593da8-116"
Expires: Fri, 28 Oct 2022 14:01:12 GMT
Last-Modified: Wed, 26 Oct 2022 14:01:12 GMT
Server: nginx
Content-Length: 278
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 12264966
expires: Mon, 16 Oct 2023 21:54:22 GMT
accept-ranges: bytes
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 76066e1d5812b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 625ad6aa33dda47097bff081ac75bf05
5f5bc1b567c8322e09f8f4fac2a542d063f83421
d9f85e2da8a3f517763eada5449029a0285aea770bb16be15de5a70d154f9565
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5739
Cache-Control: max-age=169582
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:22 GMT
Etag: "63598991-117"
Expires: Fri, 28 Oct 2022 21:00:44 GMT
Last-Modified: Wed, 26 Oct 2022 19:25:05 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 279
widget.streamthunder.to/?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en
301 Moved Permanently 278 B URL HTTP/2 widget.streamthunder.to/?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en
IP
Hash 3a1cbfcd06b8df30ad147e0dcd6761b6
3eed47568cd97c6f1f9364530df30e33784e6f12
53766f63cbdb5d90ee9e2b365da40d079840c265c6b4af6dfc70a293b02a7e25
GET /?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en HTTP/1.1
Host: widget.streamthunder.to
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Wed, 26 Oct 2022 21:54:22 GMT
location: https://widget.streamthunder.org/?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en
cache-control: max-age=3600
expires: Wed, 26 Oct 2022 22:54:22 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=330pD8m%2Fi2Y2Iej%2BRF5ckkdG2BWHqkLYQ78OVTDgX54o5Vi7g9Ou7PHsDwD5EYu6ZxSqCSbYJvZUkRrWIbHmS77tzp%2BOFPWwSe56zqdisu9g71beSA67g9XyQQVjQis5TV939pmwQPvv6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1d5d89b4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 82c7b4c91044f445e742608f7f44db84
41b53b473b729eb6a4eb17dc0d249f83bf485ded
94073fd8659c11394f9c866cae0f92df386d632ce4c53ba41d45e3aae8e91491
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:22 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 23 Oct 2022 14:29:46 GMT
Expires: Sun, 30 Oct 2022 14:29:45 GMT
Etag: "41b53b473b729eb6a4eb17dc0d249f83bf485ded"
Cache-Control: max-age=318322,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e1d4f05b4ee-OSL
modificationdispatch.com/47/2d/cb/472dcb7c1e79bf360a00ed584fd0d72c.js
200 OK 13 kB URL HTTP/1.1 modificationdispatch.com/47/2d/cb/472dcb7c1e79bf360a00ed584fd0d72c.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37136), with no line terminators
Hash 0925cb8b0457a763db60d861e8087408
dc95c9cd77c570e2143a12328b7ec99df16a6f54
b2e8f28f65806a7adf9308ec264616e367f511d488503b71d8f3ab82ebd0eb8f
GET /47/2d/cb/472dcb7c1e79bf360a00ed584fd0d72c.js HTTP/1.1
Host: modificationdispatch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 21:54:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 798c8f660afb808374ccd0da9d7cbeb9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 13c51695bfc0986bc4e4efc19d0845f1
431a0175f4735f8fa8c0e54eba8d2515fcf22d76
a0b6128d03df09119f28ea616e0442d008b708922c173fdfc4824f86c11a8296
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A0B6128D03DF09119F28EA616E0442D008B708922C173FDFC4824F86C11A8296"
Last-Modified: Mon, 24 Oct 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3213
Expires: Wed, 26 Oct 2022 22:47:56 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d5032bfe35f55b5a57d98eeead6c3c4a
c45b270fc01d819a610181dcd759eff4101aa542
3a2a46faa69b7e3dcf857f7db9a3cce369ce12eb5caaa802645e318709b78b1a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: uid_id2=4311d427-16b8-4472-b925-1be737c91c10:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://cdn.sport-play.live
access-control-allow-credentials: true
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9ae85aedb0a7779ff6b8099ad9d3167f
a4ad6ced78e454db03abe28bc6bc22327a769041
1773be48e8e71284680c31e53edc836a1b20dbebdb787bd6c99b6cdcdac35ad1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1773BE48E8E71284680C31E53EDC836A1B20DBEBDB787BD6C99B6CDCDAC35AD1"
Last-Modified: Wed, 26 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11957
Expires: Thu, 27 Oct 2022 01:13:40 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5efae59c3362f74053b237c1119ceff2
2befe800c46fc41c5d30cb42859dd264c838e1b2
7d00cfcfb36685946282b837d9843a0f48a5711110edcee88f1e02d08da5d0c5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D00CFCFB36685946282B837D9843A0F48A5711110EDCEE88F1E02D08DA5D0C5"
Last-Modified: Wed, 26 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12596
Expires: Thu, 27 Oct 2022 01:24:19 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 26 Oct 2022 14:07:32 GMT
expires: Thu, 26 Oct 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 28011
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 26 Oct 2022 19:34:08 GMT
expires: Thu, 26 Oct 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 8415
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4d97d238129e7366302ef162ace8ff2e
b554889053429d507d895199b454f3751c33e670
b9a796c5ef4369c299b674c6ade2082ad9588a58ae846c78a9a6a968cdab38be
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 17:55:49 GMT
Expires: Tue, 01 Nov 2022 17:55:48 GMT
Etag: "b554889053429d507d895199b454f3751c33e670"
Cache-Control: max-age=503484,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e1d6d5cb4f3-OSL
www.ojrq.net/p/?return=https%3A%2F%2Ffubotv.pxf.io%2Fi%2F2399476%2F581753%2F5119%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fcricfree.xyz%252F&cid=5119&tpsync=no
302 Found 0 B URL HTTP/2 www.ojrq.net/p/?return=https%3A%2F%2Ffubotv.pxf.io%2Fi%2F2399476%2F581753%2F5119%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fcricfree.xyz%252F&cid=5119&tpsync=no
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/?return=https%3A%2F%2Ffubotv.pxf.io%2Fi%2F2399476%2F581753%2F5119%3Flevel%3D1%26srcref%3Dhttps%253A%252F%252Fcricfree.xyz%252F&cid=5119&tpsync=no HTTP/1.1
Host: www.ojrq.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Wed, 26 Oct 2022 21:54:23 GMT
p3p: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
set-cookie: brwsr=c072f867-5578-11ed-9083-15adba50e298; Domain=.ojrq.net; Path=/; Secure; Max-Age=62208000; Expires=Tue, 15 Oct 2024 21:54:23 GMT; HttpOnly; SameSite=None
location: https://fubotv.pxf.io/i/2399476/581753/5119?level=1&srcref=https%3A%2F%2Fcricfree.xyz%2F&brwsr=c072f867-5578-11ed-9083-15adba50e298&brwsrsig=1e%3AQIp0pGzB2zki0OeSNZ0Tb0hOypd
content-length: 0
date: Wed, 26 Oct 2022 21:54:23 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash cfe0867f80f776ac150aae45a7103e67
0192944487d765eaf2b633e03dff9ca3013145d7
642426824d163830140a17aec1ddf44dddd49ecce20023d5d54ba5eb821dc048
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=130332
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:23 GMT
Etag: "635906ab-116"
Expires: Fri, 28 Oct 2022 10:06:35 GMT
Last-Modified: Wed, 26 Oct 2022 10:06:35 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 280 B IP
Hash 2e27a60e22bb2aab224ebc9904cea480
b9a96d7716ae7259e6ee201f7269cbcbff3a1912
24b26f4f06f88d5b95adc7a557296d0d6ee1dc675f089f1503a8a7c8ece2bd95
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=132155
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:23 GMT
Etag: "63590dca-118"
Expires: Fri, 28 Oct 2022 10:36:58 GMT
Last-Modified: Wed, 26 Oct 2022 10:36:58 GMT
Server: nginx
Content-Length: 280
live-sport.stream/img/soccer2.jpg
200 OK 162 kB URL HTTP/2 live-sport.stream/img/soccer2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x800, components 3\012- data
Size 162 kB (162293 bytes)
Hash a722625220c458cc283f9a1a8caf2f76
0ce036705fc9a1d203f82320e8bb6a1699c66073
365daa20eb6a8d7fd7d4e1df6aa8b180f851b4809d686e847d25aa8771d0487e
GET /img/soccer2.jpg HTTP/1.1
Host: live-sport.stream
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: image/jpeg
content-length: 162293
last-modified: Sun, 10 Mar 2019 11:54:10 GMT
etag: "5c84fae2-279f5"
expires: Tue, 01 Nov 2022 17:48:43 GMT
cache-control: max-age=2592000, public
pragma: public
cf-cache-status: HIT
age: 2088340
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fncvoArFKKEfVE0Non0aCWqZAd5rUD%2FucH2riKEa0IFVBq7BghJFuo4s%2Fnr6jn2LsbMOhHeSC7TUXFFr5Twfv2IuQU%2FW4O5ikyVnIFeRCj%2BDE5LRtWJ5WMMQgRrX1EKdFvYXOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1f49e91c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
irrelevantassassinclaim.com/pixel/purst?dl=0&th=0&sc=0&rs=1658&rd=1658&fd=911&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 irrelevantassassinclaim.com/pixel/purst?dl=0&th=0&sc=0&rs=1658&rd=1658&fd=911&bv=22.8.v.1&tmpl=70
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1658&rd=1658&fd=911&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: irrelevantassassinclaim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:23 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 13c51695bfc0986bc4e4efc19d0845f1
431a0175f4735f8fa8c0e54eba8d2515fcf22d76
a0b6128d03df09119f28ea616e0442d008b708922c173fdfc4824f86c11a8296
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "A0B6128D03DF09119F28EA616E0442D008B708922C173FDFC4824F86C11A8296"
Last-Modified: Mon, 24 Oct 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3213
Expires: Wed, 26 Oct 2022 22:47:56 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 2e27a60e22bb2aab224ebc9904cea480
b9a96d7716ae7259e6ee201f7269cbcbff3a1912
24b26f4f06f88d5b95adc7a557296d0d6ee1dc675f089f1503a8a7c8ece2bd95
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3629
Cache-Control: max-age=135784
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:23 GMT
Etag: "63590dca-118"
Expires: Fri, 28 Oct 2022 11:37:27 GMT
Last-Modified: Wed, 26 Oct 2022 10:36:58 GMT
Server: ECS (amb/6B80)
X-Cache: HIT
Content-Length: 280
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 9ae85aedb0a7779ff6b8099ad9d3167f
a4ad6ced78e454db03abe28bc6bc22327a769041
1773be48e8e71284680c31e53edc836a1b20dbebdb787bd6c99b6cdcdac35ad1
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1773BE48E8E71284680C31E53EDC836A1B20DBEBDB787BD6C99B6CDCDAC35AD1"
Last-Modified: Wed, 26 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11957
Expires: Thu, 27 Oct 2022 01:13:40 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
gloumsee.net/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
OPTIONS /custom HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://cricfree.xyz/
Origin: https://cricfree.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash cfe0867f80f776ac150aae45a7103e67
0192944487d765eaf2b633e03dff9ca3013145d7
642426824d163830140a17aec1ddf44dddd49ecce20023d5d54ba5eb821dc048
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5902
Cache-Control: max-age=136234
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:23 GMT
Etag: "635906ab-116"
Expires: Fri, 28 Oct 2022 11:44:57 GMT
Last-Modified: Wed, 26 Oct 2022 10:06:35 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 278
modificationdispatch.com/38/97/fd/3897fd93fda51213bcf7e9dda0c4ca28.js
200 OK 20 kB URL HTTP/1.1 modificationdispatch.com/38/97/fd/3897fd93fda51213bcf7e9dda0c4ca28.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59401), with no line terminators
Hash 58df45e640be38826cd4e6b3605bac98
87f5c16b1a88a801f6ace8a3b931bd44da66c26d
9113f427e10fd38a92c208770d8fe61e2ac4ec31a44877253a53e77480e12987
GET /38/97/fd/3897fd93fda51213bcf7e9dda0c4ca28.js HTTP/1.1
Host: modificationdispatch.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 21:54:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 834b97cfd37482643359155ef8bd0d71
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
gloumsee.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert fortinet Malware
POST /custom HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Content-Type: application/json
Origin: https://cricfree.xyz
Content-Length: 368
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 89116574b46408de287637ceb2c15ccd
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 91b74d6ae217958f13ebc358f22f561d
3f77d30d7eaf3c53fc45594dbf932353b06c2873
9ec534d559ceb1575554743f2bc9ade643e5d5e5a7e32355699eee8cb67460d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2132
Cache-Control: max-age=117750
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:23 GMT
Etag: "6358cd31-116"
Expires: Fri, 28 Oct 2022 06:36:53 GMT
Last-Modified: Wed, 26 Oct 2022 06:01:21 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.sectigo.com/
200 OK 471 B IP
Hash 4d97d238129e7366302ef162ace8ff2e
b554889053429d507d895199b454f3751c33e670
b9a796c5ef4369c299b674c6ade2082ad9588a58ae846c78a9a6a968cdab38be
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 17:55:49 GMT
Expires: Tue, 01 Nov 2022 17:55:48 GMT
Etag: "b554889053429d507d895199b454f3751c33e670"
Cache-Control: max-age=503484,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e1f0896b4ee-OSL
streamthunder.org/js/jquery.scrolling-tabs.js
200 OK 13 kB URL HTTP/2 streamthunder.org/js/jquery.scrolling-tabs.js
IP
File type HTML document text\012- exported SGML document, ASCII text
Hash a8358fa455ace4c5229461dcb8319318
81c3cb7aceef6c053db2a6131d36bab0113ebbea
7ba0f3c4bf6e1f901512fdb3f1cbd2d1bd040f6456c61b92b1a2fcf960196998
GET /js/jquery.scrolling-tabs.js HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: application/javascript
last-modified: Fri, 30 Aug 2019 21:38:28 GMT
etag: W/"5d699754-ec08"
expires: Thu, 27 Oct 2022 23:18:35 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 2500548
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gVTkFog0FNsTyhhh59IuSVv0z7JFMpsY8GDXOydwBwtURufAKGlRn3axC608lsgCjEiFCCya5%2BRzjnxEhDvG6yRPWkbxQLdbUojiZXK2%2F97Mes83OZcQ1YB2I6Zfxd8xTr7tZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fe82fb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
widget.streamthunder.org/?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en
200 OK 11 kB URL HTTP/2 widget.streamthunder.org/?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1688)
Hash 0e91d4ff0bd362c5833c717626af5ec6
cf77f31a49950a59d83285539081d8a884834dd6
ef0e22c47c2c108c0f35e9b0066fc6868b2730465f144a026bc7c64e1ab37247
GET /?sport=cycling&d=1&s=1&tm=FFFFFF&tmb=333&brr=3px&fs=12px&ft=12&l=https://cricfree.xyz%2Fwatch%2F%3Ft%3D<=1&l2=&l2=https%3A%2F%2Fsport-play.live%2Fregister%2F&l2t=1&l2sp=1&l2co=1&l2cy=1&l2da=1&lk=1&r=_en HTTP/1.1
Host: widget.streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FJxaMCkMlcFcqBMDASGBh0L1m3mvoTvBuZAC9osH4jR2RkLWihGpWyu8tfR2GQR1XuWGN1aKsPUD2g%2B45cIcujUbKW%2BKenMUE95HBvs1DMlQR%2FXhYckV5%2BgLlfkT92qUMlhP%2BrX7c48aL1c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76066e1eff1eb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=27500
date: Wed, 26 Oct 2022 21:54:23 GMT
X-Firefox-Spdy: h2
v1.addthisedge.com/live/boost/ra-59ee4cf75002f929/_ate.track.config_resp
200 OK 1.3 kB URL HTTP/2 v1.addthisedge.com/live/boost/ra-59ee4cf75002f929/_ate.track.config_resp
IP
File type ASCII text, with very long lines (5070), with no line terminators
Hash 153d74f17f9f6debca894604a1e8dbeb
96721cbe2fbb20dd0829c38ecb4bb56048a7daa9
4a653ac98bddf7c583d5438db9cd318159808d2068083a99dc02352020ce2449
GET /live/boost/ra-59ee4cf75002f929/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 1349
etag: -812435379--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=10, s-maxage=86400
date: Wed, 26 Oct 2022 21:54:23 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
200 OK 78 kB URL HTTP/2 s7.addthis.com/static/layers.fa6cd1947ce26e890d3d.js
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9a77dff666eebb6cf4bbc4c67c7b563b
9e98d7824a7b4e34665c2690d6f52caddad1fe4b
6cdf8e597f3cbe759531153fd926d51aeaebd836a1c9bc1436e079645bfd3ad7
GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Wed, 26 Oct 2022 21:54:23 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
s7.addthis.com/static/custom-messages.5799ddf75a30812a3d49.js
200 OK 29 kB URL HTTP/2 s7.addthis.com/static/custom-messages.5799ddf75a30812a3d49.js
IP
File type Unicode text, UTF-8 text, with very long lines (60526)
Hash f4a430f112d94f56cbeddcde217f69b6
01c1580d462c4977c7194746540f813e6b5675ce
f8999cbfee6629cf5f2f77d325a508f30a1adc6f1ab7506c462bf467930f36da
GET /static/custom-messages.5799ddf75a30812a3d49.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-1c9fc"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 28570
date: Wed, 26 Oct 2022 21:54:23 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
streamthunder.org/js/bootstrap.min.js
200 OK 11 kB URL HTTP/2 streamthunder.org/js/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 72bea0e68b58c231cd2547f07b2bc93b
31cc35d43df3be3125739397f7472112f71f0565
1d165678b1b3442e8e6f3bc9c8b37b1079b668f677dd0868db8e253e0031dc00
GET /js/bootstrap.min.js HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: application/javascript
last-modified: Fri, 30 Aug 2019 21:38:28 GMT
etag: W/"5d699754-90b5"
expires: Thu, 03 Nov 2022 23:02:20 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 1896723
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6e%2FjkiQRR%2B0S2LCR7s7k3SzY%2FXdnKatX3iwqJQcOWr3acyoOSxJOnl30Fi5znPuYZOOFzKzio7mjtV1jG3Swz2rqz2qIV%2Bb2HYJ9IK9qNuTQYiGEiulKsFBeTrEC1uX4VBiR7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fe82cb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 55 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
File type ASCII text, with very long lines (2776)
Hash d5bb28fc078b803ff1a9f65cef7bc0cb
95d4a5c84e899f76a40db03ba7436535b0b17637
6d9a7f9b7623667f1c2e40a4df70e2e669e5f464795ca36b88c902016a2fb389
GET /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 26 Oct 2022 21:54:23 GMT
expires: Wed, 26 Oct 2022 21:54:23 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 2481483094462348312
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 55232
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.sport-play.live/sports/vplayer/sf1/?t=&q=Cycling%20with%20no%20ADS%20(Free%20Trial)&tt=Watch%20Cycling%20with%20no%20ADS%20(For%20Free)&s=Cycling&l=&c=&d=
200 OK 62 kB URL HTTP/2 cdn.sport-play.live/sports/vplayer/sf1/?t=&q=Cycling%20with%20no%20ADS%20(Free%20Trial)&tt=Watch%20Cycling%20with%20no%20ADS%20(For%20Free)&s=Cycling&l=&c=&d=
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (309)
Hash e591fd237e1484f90dcffff02deefa7c
f4764a523e891754dcb1e095c9850c058eba77a9
6fcf9e6fc58bb5f43276b048be77cf2efe2ee2f28bfd7a2b5bcae79461fe304b
GET /sports/vplayer/sf1/?t=&q=Cycling%20with%20no%20ADS%20(Free%20Trial)&tt=Watch%20Cycling%20with%20no%20ADS%20(For%20Free)&s=Cycling&l=&c=&d= HTTP/1.1
Host: cdn.sport-play.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zh2sfMkA8p0h2rVoWd%2F1jckaxUUQAHJxAFMjZt06xdA%2Fym0qQArGYpY84hQe5qLuz2GXt739TOI2dfmJz8OuHjMX3GoyvmLg1bhpoBKTJTL30RzCrlvzpbGOzHHZ%2Bh5x2IQzNI%2Bu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76066e1c18a0b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat
200 OK 17 kB URL HTTP/2 fonts.googleapis.com/css?family=Montserrat
IP
Hash ea9230fe15a4aad872bc6f50cd61d7df
8983bf72965c4d6f68f1246d2b7032a0c7d19d6f
900994c732d73ac9cc5e53c6046ff9adf2b79091c1377dc023d7621192674274
GET /css?family=Montserrat HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 26 Oct 2022 21:54:21 GMT
date: Wed, 26 Oct 2022 21:54:21 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=6359ac8e284924ad&bkl=0&bl=1&pdt=749&sid=6359ac8e284924ad&pub=ra-59ee4cf75002f929&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=cricfree.xyz&fp=cycling&fr=&of=0&pd=0&irt=0&vcl=0&md=2&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Cricfree%20live%20cycling%2CCricfree%20cycling%20live%2CCricfree%20cycling%20streaming%2CCricfree%20cycling%20online%2CCricfree%20cycling%20online%2CCricfree%20live%20cycling%20streaming%2CCricfree%20watch%20cycling%20online&colc=1666821262648&jsl=1&uvs=6359ac8e8277365c000&skipb=1&callback=addthis.cbs.jsonp__61297517755236120
200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=6359ac8e284924ad&bkl=0&bl=1&pdt=749&sid=6359ac8e284924ad&pub=ra-59ee4cf75002f929&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=cricfree.xyz&fp=cycling&fr=&of=0&pd=0&irt=0&vcl=0&md=2&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Cricfree%20live%20cycling%2CCricfree%20cycling%20live%2CCricfree%20cycling%20streaming%2CCricfree%20cycling%20online%2CCricfree%20cycling%20online%2CCricfree%20live%20cycling%20streaming%2CCricfree%20watch%20cycling%20online&colc=1666821262648&jsl=1&uvs=6359ac8e8277365c000&skipb=1&callback=addthis.cbs.jsonp__61297517755236120
IP
File type ASCII text, with no line terminators
Hash fc284cd5cd1ce317d1c5c02bea2ed470
4886795ca1d7ac5016142f3f6b005f0e419de4a5
426c29edb93b90d269aa494fd84adb6faf7f3ca7a9e2833e4fbfc5d01b085872
GET /live/red_lojson/300lo.json?si=6359ac8e284924ad&bkl=0&bl=1&pdt=749&sid=6359ac8e284924ad&pub=ra-59ee4cf75002f929&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=cricfree.xyz&fp=cycling&fr=&of=0&pd=0&irt=0&vcl=0&md=2&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Cricfree%20live%20cycling%2CCricfree%20cycling%20live%2CCricfree%20cycling%20streaming%2CCricfree%20cycling%20online%2CCricfree%20cycling%20online%2CCricfree%20live%20cycling%20streaming%2CCricfree%20watch%20cycling%20online&colc=1666821262648&jsl=1&uvs=6359ac8e8277365c000&skipb=1&callback=addthis.cbs.jsonp__61297517755236120 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Wed, 26 Oct 2022 21:54:23 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Wed, 26 Oct 2022 23:25:37 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Wed, 26 Oct 2022 23:25:37 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (587)
Hash 6bb9990fc521832208f25ccf5261b719
be8acfb80dfc034d5cbd7dabb318ea8853762c10
677f03256dacdc519c12971fd422fe1afa0ecca3864f4e8f7aa0bed4eecd9c38
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73397
date: Wed, 26 Oct 2022 21:54:23 GMT
access-control-allow-origin: *
etag: "63575841-11eb5"
expires: Wed, 26 Oct 2022 22:54:23 GMT
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Wed, 26 Oct 2022 23:25:37 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Wed, 26 Oct 2022 23:25:37 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5474
Expires: Wed, 26 Oct 2022 23:25:37 GMT
Date: Wed, 26 Oct 2022 21:54:23 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3ae78510434fd68063fc144bf614382
3bb87ca5274ce9f6d81da60ab940d23ccd12843b
f42d89328435cb37cba1111903a6bd5e900857d0942e1506ea2115b4e6301541
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7929
x-amzn-requestid: 6324abd6-8e27-4903-8bfc-a0fc6a8625be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alK9LEeoIAMF5mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585854-2900343b1ae208a903fe58fd;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:42:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5MR4UzoW6rVsSpEyPAWrcFb2LCRICaG-toy3JflaXRrzZwcgMs48VQ==
via: 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:49:35 GMT
age: 288
etag: "3bb87ca5274ce9f6d81da60ab940d23ccd12843b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 05:07:50 GMT
age: 60393
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OV7g4Y4fcQGijljebzHQtnpKdcPKw6LTxqORxxBJL2lFPYQLLoyNuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:34:40 GMT
age: 76783
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db946866312c734e0c5f91ca76255b2f
e8b8236baab9106a426a415eb01494cc4cc91ad1
a695e7bc87da2c6d9f5669c09e662fe22982e69cb139466efa5093429fe19866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8439
x-amzn-requestid: e0eed725-0725-4f5a-9c91-fec13ad0ebe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ajKYQGWhIAMFdhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63578a9b-2a0115120e75f5271cea992f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 07:04:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: WVz4PqWqT9Pk1juQ95Xzi-7HcEDBqKb5VAncjXxOYFfKTnjRbmodoA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 04:44:59 GMT
age: 61764
etag: "e8b8236baab9106a426a415eb01494cc4cc91ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5987bcd44ab0db5313aa4f409a8a212f
691a36cde98a9fe1660745dd811e0be2ae67036c
e47ce3587c647b52669f675dc7e84e21555f82138091fb04febc951b4c06ba30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 69931a9c-027e-428e-a88d-61c5fac64daa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2iEnzoAMFZAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-12c78c5157fb3fa41a13548c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9duxoaZUI6oX6_fQUG1cGY_sPKzqSrFuZxcjdLBvKMRhEs7orDtk8Q==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:46:51 GMT
age: 452
etag: "691a36cde98a9fe1660745dd811e0be2ae67036c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cc61ad4b1d66ab4bce27288ee690e12
324e13ad5c99f628d713e55a2994ad4042ece70e
62cd88bc19bc1f0be2a37c3e990897158acd3d55aa3ddd299144d4f9596ba34e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6831
x-amzn-requestid: cc6f38ff-ab33-4b18-8cae-aa6bc061962f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjPH7ToAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857ae-3db2790d0e6c5fab6c4bc81f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:39:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tiWbOUwlRzaT2EnCWIgoFaT_ho55s3tgRxalb7yBbI21Pv0BhfLJOg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 21:52:54 GMT
age: 89
etag: "324e13ad5c99f628d713e55a2994ad4042ece70e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/html/r20221025/r20190131/zrt_lookup.html
200 OK 4.3 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20221025/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1731)
Hash bcacf311c477be41ad2c041711518f98
2035e85b614733ed4c63ee2dbc8bfb2e845b30ca
4ec30b6910bacb2cfb6ed162c3e5d95c6f54a19ffef55018730777bf094d1b92
GET /pagead/html/r20221025/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4270
x-xss-protection: 0
date: Tue, 25 Oct 2022 23:29:58 GMT
expires: Tue, 08 Nov 2022 23:29:58 GMT
cache-control: public, max-age=1209600
etag: 9671129459699598864
content-type: text/html; charset=UTF-8
age: 80665
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c263a9cbd716927fb7ddf07249807c34
c6ec1ec9477a16adca65c70e42f8aefbf148b935
972a4fcaa2f29c6fcc8c8c6961ce2b62b3b8667e0457e791ed71d368853e1f86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "972A4FCAA2F29C6FCC8C8C6961CE2B62B3B8667E0457E791ED71D368853E1F86"
Last-Modified: Wed, 26 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6518
Expires: Wed, 26 Oct 2022 23:43:02 GMT
Date: Wed, 26 Oct 2022 21:54:24 GMT
Connection: keep-alive
s7.addthis.com/static/159.1c3fceccbc80f2a3615f.js
200 OK 394 B URL HTTP/2 s7.addthis.com/static/159.1c3fceccbc80f2a3615f.js
IP
File type ASCII text, with very long lines (564), with no line terminators
Hash 09d6e31790596b5636e4332b45864d33
078bdaadd33f7e19f624e403959dca3eef1a73d4
42805621588148ebf5f6329a1ff74711c44dd93a4f592264f953ca7f88422b82
GET /static/159.1c3fceccbc80f2a3615f.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-234"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 394
date: Wed, 26 Oct 2022 21:54:24 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 26 Oct 2022 21:54:24 GMT
access-control-allow-origin: *
etag: "63575841-2b"
expires: Wed, 26 Oct 2022 22:54:24 GMT
accept-ranges: bytes
last-modified: Tue, 25 Oct 2022 06:30:09 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 414291d4efb3e45cb5159c713c22bc8a
884275c8c6cbbb0fa2597db5afee071c074cddf4
8d079e8b76e04da709626a654ee9524e1de331120a781e80a6506e77c9968b00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8D079E8B76E04DA709626A654EE9524E1DE331120A781E80A6506E77C9968B00"
Last-Modified: Mon, 24 Oct 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3159
Expires: Wed, 26 Oct 2022 22:47:03 GMT
Date: Wed, 26 Oct 2022 21:54:24 GMT
Connection: keep-alive
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b13d632b02afe1cac43ff8eadcea0064
4c2e81369c980413a1cd211db4079c0b05f9e2f7
3cd8bb381ac9cc3fe93347ecf27c09fbe55101720492b1b7dc3a33477409e688
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 30 Oct 2022 19:23:04 GMT
ETag: "4c2e81369c980413a1cd211db4079c0b05f9e2f7"
Last-Modified: Wed, 26 Oct 2022 19:23:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1180
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76066e24fb35b4f4-OSL
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash b13d632b02afe1cac43ff8eadcea0064
4c2e81369c980413a1cd211db4079c0b05f9e2f7
3cd8bb381ac9cc3fe93347ecf27c09fbe55101720492b1b7dc3a33477409e688
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Sun, 30 Oct 2022 19:23:04 GMT
ETag: "4c2e81369c980413a1cd211db4079c0b05f9e2f7"
Last-Modified: Wed, 26 Oct 2022 19:23:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1180
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76066e251b47b4f4-OSL
withholdsubsequently.com/pixel/purst?dl=0&th=0&sc=0&rs=671&rd=671&fd=474&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/purst?dl=0&th=0&sc=0&rs=671&rd=671&fd=474&bv=22.8.v.1&tmpl=70
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=671&rd=671&fd=474&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce5d09bafa968f66bc7828927cb90e05
d6445e57629d1fcb89ac2fefdc5071cf82f71a59
e6b4e02dcd04a13ac1c6ce72819b8f20b1b5555a516151264b9a685532c38632
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 26e60c83d7af169687cbd74f7ca924e0
00f7ceb935fe1cc423f95718a04076e4f5eca150
a041e2901d418b289c3129ce7c07a66e598f6d3ac076732635b0a9ac6fbabb89
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vk.com/share.php?act=count&index=0&url=https%3A%2F%2Fcricfree.xyz%2Fcycling
200 OK 41 B URL HTTP/2 vk.com/share.php?act=count&index=0&url=https%3A%2F%2Fcricfree.xyz%2Fcycling
IP
File type ASCII text, with no line terminators
Hash 6de86497641c67868bfddcbf5a8bf434
6065bb53c9addbda818a6b172597326ebc31e8dc
51d446e1b704e289975e53c6945dee986d432bb439d02a2afcee7ce1b5bddcf8
GET /share.php?act=count&index=0&url=https%3A%2F%2Fcricfree.xyz%2Fcycling HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/html; charset=windows-1251
content-length: 41
x-powered-by: KPHP/7.4.112521
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Wed, 25 Oct 2023 16:02:10 GMT; path=/; domain=.vk.com
remixstlid=9087502993166710231_maCz7npmK3n8hT3zkvuthjkCo4uDeEaq01jx9W7z6FP; expires=Thu, 26 Oct 2023 21:54:24 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220206
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
vk.com/share.php?act=count&index=1&url=http%3A%2F%2Fcricfree.xyz%2Fcycling
200 OK 41 B URL HTTP/2 vk.com/share.php?act=count&index=1&url=http%3A%2F%2Fcricfree.xyz%2Fcycling
IP
File type ASCII text, with no line terminators
Hash 3f77d16e5ee6f885ace889f41c568ce7
0cda01541b407a0ec1f1e38156451b3b5a0744da
5888e8718fb8a45511011f83f29a0af4c5c112e437170374a2ed6bbbc5f21023
GET /share.php?act=count&index=1&url=http%3A%2F%2Fcricfree.xyz%2Fcycling HTTP/1.1
Host: vk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: kittenx
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/html; charset=windows-1251
content-length: 41
x-powered-by: KPHP/7.4.112521
set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly
remixlang=3; expires=Thu, 02 Nov 2023 03:20:11 GMT; path=/; domain=.vk.com
remixstlid=9077651368981850910_MZt4pfRDAkPLCxdit8818QahlFy0fW9yxEK6Zoy2gWX; expires=Thu, 26 Oct 2023 21:54:24 GMT; path=/; domain=.vk.com; secure
cache-control: no-store
content-encoding: gzip
x-frontend: front220206
strict-transport-security: max-age=15768000
access-control-expose-headers: X-Frontend
X-Firefox-Spdy: h2
adservice.google.no/adsid/integrator.js?domain=widget.streamthunder.org
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=widget.streamthunder.org
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=widget.streamthunder.org HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 26 Oct 2022 21:54:24 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043="googleads.g.doubleclick.net:443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,43",quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=widget.streamthunder.org
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=widget.streamthunder.org
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=widget.streamthunder.org HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 26 Oct 2022 21:54:24 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fcricfree.xyz%2Fcycling
200 OK 2 B URL HTTP/2 api-public.addthis.com/url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fcricfree.xyz%2Fcycling
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Fcricfree.xyz%2Fcycling HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
content-length: 2
cache-control: no-transform, max-age=0, s-maxage=14400
surrogate-key: sFbt=https://cricfree.xyz/cycling
last-modified: Wed, 26 Oct 2022 21:00:00 GMT
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
date: Wed, 26 Oct 2022 21:54:24 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ce5d09bafa968f66bc7828927cb90e05
d6445e57629d1fcb89ac2fefdc5071cf82f71a59
e6b4e02dcd04a13ac1c6ce72819b8f20b1b5555a516151264b9a685532c38632
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.reddit.com/api/info.json?url=https%3A%2F%2Fcricfree.xyz%2Fcycling&jsonp=_ate.cbs.rcb_c7kp0
200 OK 144 B URL HTTP/2 www.reddit.com/api/info.json?url=https%3A%2F%2Fcricfree.xyz%2Fcycling&jsonp=_ate.cbs.rcb_c7kp0
IP
File type ASCII text, with no line terminators
Hash acb9d8c8ca602f91c71c7ef44d9b39f8
cb07b1e68ce11a519b08bfeb19ccf0a8b4f92f7a
327106db6d0a1e568effc0092a96f93edf796da3724706c351959ad9f3e80545
GET /api/info.json?url=https%3A%2F%2Fcricfree.xyz%2Fcycling&jsonp=_ate.cbs.rcb_c7kp0 HTTP/1.1
Host: www.reddit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
x-ua-compatible: IE=edge
expires: -1
cache-control: private, s-maxage=0, max-age=0, must-revalidate, no-store
x-ratelimit-remaining: 299
x-ratelimit-used: 1
x-ratelimit-reset: 336
access-control-allow-origin: *
access-control-expose-headers: X-Moose
x-moose: majestic
accept-ranges: bytes
date: Wed, 26 Oct 2022 21:54:24 GMT
via: 1.1 varnish
strict-transport-security: max-age=31536000; includeSubdomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
set-cookie: csv=2; Max-Age=63072000; Domain=.reddit.com; Path=/; Secure; SameSite=None
edgebucket=2XbxQ5GlBmHrLPeuz0; Domain=reddit.com; Max-Age=63071999; Path=/; secure
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.2, "failure_fraction": 0.2}
content-length: 144
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 26e60c83d7af169687cbd74f7ca924e0
00f7ceb935fe1cc423f95718a04076e4f5eca150
a041e2901d418b289c3129ce7c07a66e598f6d3ac076732635b0a9ac6fbabb89
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.reddit.com/api/info.json?url=http%3A%2F%2Fcricfree.xyz%2Fcycling&jsonp=_ate.cbs.rcb_69ez0
200 OK 144 B URL HTTP/2 www.reddit.com/api/info.json?url=http%3A%2F%2Fcricfree.xyz%2Fcycling&jsonp=_ate.cbs.rcb_69ez0
IP
File type ASCII text, with no line terminators
Hash 9201aa2763aad885957d4c096b6ba500
b0f1f699950614198cc55d34b9b3bf632f7f4b52
c1a4fe69d00fb71fda115595240a5963be714754bf42bb0763606dde90603945
GET /api/info.json?url=http%3A%2F%2Fcricfree.xyz%2Fcycling&jsonp=_ate.cbs.rcb_69ez0 HTTP/1.1
Host: www.reddit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
x-ua-compatible: IE=edge
expires: -1
cache-control: private, s-maxage=0, max-age=0, must-revalidate, no-store
x-ratelimit-remaining: 298
x-ratelimit-used: 2
x-ratelimit-reset: 336
access-control-allow-origin: *
access-control-expose-headers: X-Moose
x-moose: majestic
accept-ranges: bytes
date: Wed, 26 Oct 2022 21:54:24 GMT
via: 1.1 varnish
strict-transport-security: max-age=31536000; includeSubdomains
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
set-cookie: csv=2; Max-Age=63072000; Domain=.reddit.com; Path=/; Secure; SameSite=None
edgebucket=BQ46DdS8l5KJi0qsM0; Domain=reddit.com; Max-Age=63071999; Path=/; secure
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.2, "failure_fraction": 0.2}
content-length: 144
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 4.1 kB IP
File type gzip compressed data, from Unix\012- data
Hash 8e893b9875ed9d8b98e2a23c6a0d637a
561c5c2d01c68ac4db8a1b71afeee42a18c7e2cd
fda5634811662c6e59b866f65d1d089db44e71a4bd58e50cea97e397a1183ce2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 4022ee7b53654f65608ad9a3ba759687
cc243d089a8a77c0a7123434746ea36b054634dd
7af6243905b2256cb4f8fe0e77386c274592c322fb23b11784ecf86d250c7e09
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 1211
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "f26384f93da6974ed577808dfa1fede5+gzip"
Last-Modified: Wed, 28 Sep 2022 20:05:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
x-amzn-internal-status: 304
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29223
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 727f7c2989fef797e23d5415c13d3474
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ab0372fbd4e9d389119ccc12be968eb
0e48ffd21d7abf1cf59a471feba8da1f26b934fc
090ac22163a5cc5471bd4220bc6ebe686b115c15378c5eb9066f0767066af57d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1687
Cache-Control: max-age=108659
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "6358ab6c-1d7"
Expires: Fri, 28 Oct 2022 04:05:23 GMT
Last-Modified: Wed, 26 Oct 2022 03:37:16 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 7900b629ec9e00d30bc3ce23040ad243
decbbf23e758d4a250cd51733c2a286ddf98a307
d9a87931359c07e550e7a1ddac27feab1df934446896567c7a21c5c7b5f80ad1
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 66807feac4429630a7fe931ccfcd7db4
etag: "da3aeceed85ed050ac1177262c593cd7"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 26 Oct 2022 21:54:35 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: eQC2KeyeANMLw84jBArSQw==
x-fb-debug: cIH9wAbYq8iyW3wy9CNaecfrNWuzQruQWy2m0wIbkWr09NtiIHIsQFnHQ00XIJTlT3odZWyFrY4Oc4kZ4eAPhA==
content-length: 1686
x-fb-trip-id: 1904183273
date: Wed, 26 Oct 2022 21:54:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d5032bfe35f55b5a57d98eeead6c3c4a
c45b270fc01d819a610181dcd759eff4101aa542
3a2a46faa69b7e3dcf857f7db9a3cce369ce12eb5caaa802645e318709b78b1a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: uid_id2=4311d427-16b8-4472-b925-1be737c91c10:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://cdn.sport-play.live
access-control-allow-credentials: true
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d5032bfe35f55b5a57d98eeead6c3c4a
c45b270fc01d819a610181dcd759eff4101aa542
3a2a46faa69b7e3dcf857f7db9a3cce369ce12eb5caaa802645e318709b78b1a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: uid_id2=4311d427-16b8-4472-b925-1be737c91c10:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://cdn.sport-play.live
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 9ab0372fbd4e9d389119ccc12be968eb
0e48ffd21d7abf1cf59a471feba8da1f26b934fc
090ac22163a5cc5471bd4220bc6ebe686b115c15378c5eb9066f0767066af57d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2626
Cache-Control: max-age=109598
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "6358ab6c-1d7"
Expires: Fri, 28 Oct 2022 04:21:02 GMT
Last-Modified: Wed, 26 Oct 2022 03:37:16 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
platform.twitter.com/widgets/widget_iframe.7dae38096d06923d683a2a807172322a.html?origin=https%3A%2F%2Fcricfree.xyz
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.7dae38096d06923d683a2a807172322a.html?origin=https%3A%2F%2Fcricfree.xyz
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 800140747b9eaa618eb76779a72b8653
9b01fddea24a63b76d645398229523baae849fae
b4bc244dee0f2df26990afae0ccd9297f203e9757bc0a18445793ef4bb678dd2
GET /widgets/widget_iframe.7dae38096d06923d683a2a807172322a.html?origin=https%3A%2F%2Fcricfree.xyz HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 558628
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 28 Sep 2022 20:04:27 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F704)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
connect.facebook.net/en_US/sdk.js?hash=56b8a51eed0885cc50370c58a9962a8a
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=56b8a51eed0885cc50370c58a9962a8a
IP
File type ASCII text, with very long lines (13192)
Hash ccd9f28850d5d87c0bb5c2b311a57754
b94d96f49b67946cca5849184e66ae0a60beea7e
4d7bcd26b6f086fb1b6ad4a47619d4a58435659da4f50fd5c80e0ec1fa8d4785
GET /en_US/sdk.js?hash=56b8a51eed0885cc50370c58a9962a8a HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 74ea3ea17f539b1b310a50e72be8e61a
etag: "d70553a62ecc9595c77419a9bbb1d835"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 26 Oct 2023 20:10:22 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: zNnyiFDV2HwLtcKzEaV3VA==
x-fb-debug: dMMk95umlkzkvCfzR+3gwrHrQoTJeE31gy9xF0uxt2nLshcUpf8CX2rfweCs28CmlFrkMMfDOeK9bnfRAcm2jQ==
priority: u=3,i
content-length: 86932
x-fb-trip-id: 1904183273
date: Wed, 26 Oct 2022 21:54:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fcricfree.xyz%2Fcycling&callback=_ate.cbs.rcb_hvfr0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fcricfree.xyz%2Fcycling&callback=_ate.cbs.rcb_hvfr0
IP
File type ASCII text, with no line terminators
Hash ebf62c6d658189c48ae3a5371b7c4b3a
ba81efbc0549bfb6cd5efbb25bb2b0572315862a
493f7808bc7d5850c82f731db8f30e57b6a923b065d90e3ca531bcfec472c515
GET /url/shares.json?url=https%3A%2F%2Fcricfree.xyz%2Fcycling&callback=_ate.cbs.rcb_hvfr0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: cricfree.xyz/cycling
last-modified: Wed, 26 Oct 2022 21:54:24 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Wed, 26 Oct 2022 21:54:24 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=http%3A%2F%2Fcricfree.xyz%2Fcycling&callback=_ate.cbs.rcb_cohc0
200 OK 53 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=http%3A%2F%2Fcricfree.xyz%2Fcycling&callback=_ate.cbs.rcb_cohc0
IP
File type ASCII text, with no line terminators
Hash f0cc1674c16f50f28579e705375478f8
7447c9f70d70196a25a0a3a3bd695053147f808d
9a05c59489726feb7451244ccf798cc16bbd9aaf73a1c2f236b8456fa7a57cce
GET /url/shares.json?url=http%3A%2F%2Fcricfree.xyz%2Fcycling&callback=_ate.cbs.rcb_cohc0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: cricfree.xyz/cycling
last-modified: Wed, 26 Oct 2022 21:54:24 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Wed, 26 Oct 2022 21:54:24 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300vi.png?cad=ecpu%3Dm5hw&positions=m5hw%3Dcenter&goals=m5hw%3Demail&first=1&rv=0&uvs=6359ac8e8277365c&pub=ra-59ee4cf75002f929&dp=cricfree.xyz&rev=v8.28.8-wp
204 No Content 0 B URL HTTP/2 m.addthis.com/live/red_lojson/300vi.png?cad=ecpu%3Dm5hw&positions=m5hw%3Dcenter&goals=m5hw%3Demail&first=1&rv=0&uvs=6359ac8e8277365c&pub=ra-59ee4cf75002f929&dp=cricfree.xyz&rev=v8.28.8-wp
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /live/red_lojson/300vi.png?cad=ecpu%3Dm5hw&positions=m5hw%3Dcenter&goals=m5hw%3Demail&first=1&rv=0&uvs=6359ac8e8277365c&pub=ra-59ee4cf75002f929&dp=cricfree.xyz&rev=v8.28.8-wp HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
expires: Wed, 26 Oct 2022 21:54:24 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Wed, 26 Oct 2022 21:54:24 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 312 B IP
Hash f29c78102cc3b552e305610c1ae555f9
ec478d4fb7fc5b665d4415819ebaa56333e1ebf5
470fb056ad1acd601481aa050c27ccefdb52776c4f786110f8bff5e8e2080d8c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5538
Cache-Control: max-age=114259
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "6358b241-138"
Expires: Fri, 28 Oct 2022 05:38:43 GMT
Last-Modified: Wed, 26 Oct 2022 04:06:25 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 312
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d5032bfe35f55b5a57d98eeead6c3c4a
c45b270fc01d819a610181dcd759eff4101aa542
3a2a46faa69b7e3dcf857f7db9a3cce369ce12eb5caaa802645e318709b78b1a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Cookie: uid_id2=4311d427-16b8-4472-b925-1be737c91c10:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
X-Firefox-Spdy: h2
gloumsee.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert fortinet Malware
POST /custom HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Content-Type: application/json
Origin: https://cricfree.xyz
Content-Length: 732
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 760292d61fc40172da1b7ef172e913cf
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash a4b3701122d28fe359976728d8af5ac2
29e0362f4f3779a37e7a2cd2b0a11ead2b273012
51deec505226df55e1695d9fd02b1e98b69ea15dc7d2681bc9071b12c3b92b2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6378
Cache-Control: max-age=126648
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "6358df5e-117"
Expires: Fri, 28 Oct 2022 09:05:12 GMT
Last-Modified: Wed, 26 Oct 2022 07:18:54 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 278 B IP
Hash cb4e8803e99b0f2f6adb09689650c0f0
59cc3cb87fd97844822fd3bac734aae78beec1a4
1b6f2428525e53cfe8372d0154f1f55ec0ec6bd91508ee226104d78a565a3cd2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6046
Cache-Control: max-age=162688
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "63596d72-116"
Expires: Fri, 28 Oct 2022 19:05:52 GMT
Last-Modified: Wed, 26 Oct 2022 17:25:06 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e771a11a17c7d1108652bbf763703a3e
0431e93bcc537ae9024dfadccbe67ced7530c6c4
f96ca2569eec5e0f6bead6a6cb0e2337ff4f62d3c3f79e5122517ab6b9d46174
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash a4b3701122d28fe359976728d8af5ac2
29e0362f4f3779a37e7a2cd2b0a11ead2b273012
51deec505226df55e1695d9fd02b1e98b69ea15dc7d2681bc9071b12c3b92b2a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6378
Cache-Control: max-age=126648
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 21:54:24 GMT
Etag: "6358df5e-117"
Expires: Fri, 28 Oct 2022 09:05:12 GMT
Last-Modified: Wed, 26 Oct 2022 07:18:54 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279
withholdsubsequently.com/pixel/pure
204 No Content 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/pure
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
OPTIONS /pixel/pure HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://cdn.sport-play.live/
Origin: https://cdn.sport-play.live
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
withholdsubsequently.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skxRvGq3dz%2BML3pK6HFYQ5Kuiku2fSPeOCizFGgtnNuqusHkSrq2omZaq7mqr%2BMclBgouy6MER%2F4HOM8mG1SgKXl1kZiGHgDDjKQfzN7gIe%2FIgMwZHXyje963nOXzet%2BrTvfyMuMjp6co1vSOVootLdbf23Dued6W2LpO8V%2Bu1gveD5pWaKV5qB3X3%2Bdrrgm3pRd%2F1XNdzvdqqNKKje4tTETI9anv1tltv%2BnVvqYme%2BW9vcweWOuDFGXkSkk8WHjqXINkQSfz9irBbmU5feC3OFc20QcEP3062El0miOdlxzjoJIfnbmg7Xn0AnRzMcKGLf4yRnBDn%2BAGi5PAcElGxP%2BOMFESCiP8fZTGEUENIOgTTdyD5mACM4%2FoGkvjedW1Kug1JR2B0qk7IwuM%2FIMsJWfjtEpL4u2Ule7VbWuWZ1IlFr1NB9oaQ3SHSfIRs5wJkOQLLPobkv5DFx%2BtI4v0NqzQkr2azSzmE7AyhRB%2FUOsinRzrIOw7y1EHMT2vM87zQ5Yy6rTZjDR6KKOCuR8OORz03aCFnU7w%2BsrQPpvpgZhep2cWW%2FGrsHIwvfza%2B%2BAVM%2FjPsZgXLHdhsQpw3d1HwCqUgKC1BSQlKSVBmBGVRHXBlfVvd48rmkXee%2FfPcqAY66%2B7RA511RUL20jPyxGxBj9b72BKntWbocxaFzBNhO%2Bo0Ape6ruBLrWaHuzz0GaysIO2F2cw7ckKe%2Fvw9pHL88jEiOoJVIzD5FGj%2BLGg5CH0XdHPQbLnYSb61qTbZi6mi2%2FWsANcV0mwB2bazp87I5RlG4%2FbvEOzk6gfRtcmj%2B3%2BCmQqpqfChfEjQVXcHN3VJ9m%2Fq0pIfNtJMxnKHTt%2FwVkYzcfHrN8R2qQ1fW7H9%2B6%2BwqTAtj94SNlunCZdJ15JvliXnwqxqwwT5ac3eFtGN3G4u5ybJ0%2FUbr66uxakR1kqdDEHlhJDjEzA5If%2F78WD2PZ%2F55CNIM4TJK8T5CTkPSD0CS3dh0zm%2F1QRGzT1R6qDMq4Hxo%2FmlkgRKzHsaVbD%2F6qN5vWfvomsc0OwOkrhCYSoUqgJVfdj84iBLzcnVXxuzQKScQaSMsx8po778e7lWntbCRsOlQXvJC0MqwqjptzqBxyn1m4EfBLSBzE7Yu0f9vwAAAP%2F%2FAQAA%2F%2F%2B3fQU4aQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 withholdsubsequently.com/ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skxRvGq3dz%2BML3pK6HFYQ5Kuiku2fSPeOCizFGgtnNuqusHkSrq2omZaq7mqr%2BMclBgouy6MER%2F4HOM8mG1SgKXl1kZiGHgDDjKQfzN7gIe%2FIgMwZHXyje963nOXzet%2BrTvfyMuMjp6co1vSOVootLdbf23Dued6W2LpO8V%2Bu1gveD5pWaKV5qB3X3%2Bdrrgm3pRd%2F1XNdzvdqqNKKje4tTETI9anv1tltv%2BnVvqYme%2BW9vcweWOuDFGXkSkk8WHjqXINkQSfz9irBbmU5feC3OFc20QcEP3062El0miOdlxzjoJIfnbmg7Xn0AnRzMcKGLf4yRnBDn%2BAGi5PAcElGxP%2BOMFESCiP8fZTGEUENIOgTTdyD5mACM4%2FoGkvjedW1Kug1JR2B0qk7IwuM%2FIMsJWfjtEpL4u2Ule7VbWuWZ1IlFr1NB9oaQ3SHSfIRs5wJkOQLLPobkv5DFx%2BtI4v0NqzQkr2azSzmE7AyhRB%2FUOsinRzrIOw7y1EHMT2vM87zQ5Yy6rTZjDR6KKOCuR8OORz03aCFnU7w%2BsrQPpvpgZhep2cWW%2FGrsHIwvfza%2B%2BAVM%2FjPsZgXLHdhsQpw3d1HwCqUgKC1BSQlKSVBmBGVRHXBlfVvd48rmkXee%2FfPcqAY66%2B7RA511RUL20jPyxGxBj9b72BKntWbocxaFzBNhO%2Bo0Ape6ruBLrWaHuzz0GaysIO2F2cw7ckKe%2Fvw9pHL88jEiOoJVIzD5FGj%2BLGg5CH0XdHPQbLnYSb61qTbZi6mi2%2FWsANcV0mwB2bazp87I5RlG4%2FbvEOzk6gfRtcmj%2B3%2BCmQqpqfChfEjQVXcHN3VJ9m%2Fq0pIfNtJMxnKHTt%2FwVkYzcfHrN8R2qQ1fW7H9%2B6%2BwqTAtj94SNlunCZdJ15JvliXnwqxqwwT5ac3eFtGN3G4u5ybJ0%2FUbr66uxakR1kqdDEHlhJDjEzA5If%2F78WD2PZ%2F55CNIM4TJK8T5CTkPSD0CS3dh0zm%2F1QRGzT1R6qDMq4Hxo%2FmlkgRKzHsaVbD%2F6qN5vWfvomsc0OwOkrhCYSoUqgJVfdj84iBLzcnVXxuzQKScQaSMsx8po778e7lWntbCRsOlQXvJC0MqwqjptzqBxyn1m4EfBLSBzE7Yu0f9vwAAAP%2F%2FAQAA%2F%2F%2B3fQU4aQQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1SSz2skxRvGq3dz%2BML3pK6HFYQ5Kuiku2fSPeOCizFGgtnNuqusHkSrq2omZaq7mqr%2BMclBgouy6MER%2F4HOM8mG1SgKXl1kZiGHgDDjKQfzN7gIe%2FIgMwZHXyje963nOXzet%2BrTvfyMuMjp6co1vSOVootLdbf23Dued6W2LpO8V%2Bu1gveD5pWaKV5qB3X3%2Bdrrgm3pRd%2F1XNdzvdqqNKKje4tTETI9anv1tltv%2BnVvqYme%2BW9vcweWOuDFGXkSkk8WHjqXINkQSfz9irBbmU5feC3OFc20QcEP3062El0miOdlxzjoJIfnbmg7Xn0AnRzMcKGLf4yRnBDn%2BAGi5PAcElGxP%2BOMFESCiP8fZTGEUENIOgTTdyD5mACM4%2FoGkvjedW1Kug1JR2B0qk7IwuM%2FIMsJWfjtEpL4u2Ule7VbWuWZ1IlFr1NB9oaQ3SHSfIRs5wJkOQLLPobkv5DFx%2BtI4v0NqzQkr2azSzmE7AyhRB%2FUOsinRzrIOw7y1EHMT2vM87zQ5Yy6rTZjDR6KKOCuR8OORz03aCFnU7w%2BsrQPpvpgZhep2cWW%2FGrsHIwvfza%2B%2BAVM%2FjPsZgXLHdhsQpw3d1HwCqUgKC1BSQlKSVBmBGVRHXBlfVvd48rmkXee%2FfPcqAY66%2B7RA511RUL20jPyxGxBj9b72BKntWbocxaFzBNhO%2Bo0Ape6ruBLrWaHuzz0GaysIO2F2cw7ckKe%2Fvw9pHL88jEiOoJVIzD5FGj%2BLGg5CH0XdHPQbLnYSb61qTbZi6mi2%2FWsANcV0mwB2bazp87I5RlG4%2FbvEOzk6gfRtcmj%2B3%2BCmQqpqfChfEjQVXcHN3VJ9m%2Fq0pIfNtJMxnKHTt%2FwVkYzcfHrN8R2qQ1fW7H9%2B6%2BwqTAtj94SNlunCZdJ15JvliXnwqxqwwT5ac3eFtGN3G4u5ybJ0%2FUbr66uxakR1kqdDEHlhJDjEzA5If%2F78WD2PZ%2F55CNIM4TJK8T5CTkPSD0CS3dh0zm%2F1QRGzT1R6qDMq4Hxo%2FmlkgRKzHsaVbD%2F6qN5vWfvomsc0OwOkrhCYSoUqgJVfdj84iBLzcnVXxuzQKScQaSMsx8po778e7lWntbCRsOlQXvJC0MqwqjptzqBxyn1m4EfBLSBzE7Yu0f9vwAAAP%2F%2FAQAA%2F%2F%2B3fQU4aQQAAA%3D%3D HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c49f09945bf2c528a364c79a3dcd838f
Strict-Transport-Security: max-age=0; includeSubdomains
syndication.twitter.com/settings?session_id=ffe9bd903f0072d5ed73bff136d08a8d76a08055
200 OK 355 B URL HTTP/2 syndication.twitter.com/settings?session_id=ffe9bd903f0072d5ed73bff136d08a8d76a08055
IP
File type JSON data\012- , ASCII text, with very long lines (851), with no line terminators
Hash 7cac009f8121486bc6c44991cf606190
ddae6074c908031f09b586d38a022e0e4add23b5
7825444c58d1293285c059256fb6e04dcd4bf7dff5a6a65972f65d55286b1e89
GET /settings?session_id=ffe9bd903f0072d5ed73bff136d08a8d76a08055 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Wed, 26 Oct 2022 21:54:24 GMT
content-length: 355
content-encoding: gzip
x-transaction-id: 610ea52ee1808b62
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 105
x-connection-hash: 102776ccfd55a80f35dff274d77707403955f87f536caa1deb0fa1af19fa3b8b
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Wed, 26 Oct 2022 21:54:24 GMT
expires: Wed, 26 Oct 2022 21:54:24 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
withholdsubsequently.com/pixel/pure
204 No Content 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/pure
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
OPTIONS /pixel/pure HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://cdn.sport-play.live/
Origin: https://cdn.sport-play.live
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
www.facebook.com/v2.6/plugins/like.php?action=like&app_id=172525162793917&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3bc92d786b86b2%26domain%3Dcricfree.xyz%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fcricfree.xyz%252Ff3b98de59866292%26relation%3Dparent.parent&container_width=0&font=arial&height=25&href=https%3A%2F%2Fcricfree.xyz%2Fcycling&layout=button_count&locale=en_US&sdk=joey&send=false&share=false&show_faces=false&width=90
200 OK 0 B URL HTTP/2 www.facebook.com/v2.6/plugins/like.php?action=like&app_id=172525162793917&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3bc92d786b86b2%26domain%3Dcricfree.xyz%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fcricfree.xyz%252Ff3b98de59866292%26relation%3Dparent.parent&container_width=0&font=arial&height=25&href=https%3A%2F%2Fcricfree.xyz%2Fcycling&layout=button_count&locale=en_US&sdk=joey&send=false&share=false&show_faces=false&width=90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2.6/plugins/like.php?action=like&app_id=172525162793917&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3bc92d786b86b2%26domain%3Dcricfree.xyz%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fcricfree.xyz%252Ff3b98de59866292%26relation%3Dparent.parent&container_width=0&font=arial&height=25&href=https%3A%2F%2Fcricfree.xyz%2Fcycling&layout=button_count&locale=en_US&sdk=joey&send=false&share=false&show_faces=false&width=90 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: 0amLBJ8I0mM0nrQ7nA5kCpQ49BzjoG4fSRbRnKPJLtoui08ncbvMKATmVQarpv9mez3z7xvshMY5sBHce2h+KA==
content-length: 0
date: Wed, 26 Oct 2022 21:54:24 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
withholdsubsequently.com/pixel/pure
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/pure
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /pixel/pure HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 72
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f74e3528778e2edb53b3165026eb9fa2
8431bd77ec41a40c838c205fa77d1e3ed911fbc6
3fa250112546154bf2ecb2addf7ec37ffc059623a265ba2d1ef2a902418f0a61
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3FA250112546154BF2ECB2ADDF7EC37FFC059623A265BA2D1EF2A902418F0A61"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7755
Expires: Thu, 27 Oct 2022 00:03:39 GMT
Date: Wed, 26 Oct 2022 21:54:24 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f74e3528778e2edb53b3165026eb9fa2
8431bd77ec41a40c838c205fa77d1e3ed911fbc6
3fa250112546154bf2ecb2addf7ec37ffc059623a265ba2d1ef2a902418f0a61
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3FA250112546154BF2ECB2ADDF7EC37FFC059623A265BA2D1EF2A902418F0A61"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7755
Expires: Thu, 27 Oct 2022 00:03:39 GMT
Date: Wed, 26 Oct 2022 21:54:24 GMT
Connection: keep-alive
withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Findex.html&l=2230&fd=84
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Findex.html&l=2230&fd=84
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Findex.html&l=2230&fd=84 HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
withholdsubsequently.com/pixel/pure
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/pure
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
POST /pixel/pure HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 72
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/index.html
200 OK 1.1 kB URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/index.html
IP
File type HTML document, ASCII text
Hash 530214b0c096c8dfdd721bc6e9999e7b
4a4394863311f57bba3293383ae61f94c29e826d
d9d90c237b2b4eefcbf1e863d5b713d32e0aec079320b2d3cee773f0eee79a8f
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/html
last-modified: Wed, 09 Feb 2022 14:12:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1402444
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RPRYWxWkyjX5SfBZ8ZpHE%2FkyeIKjzLIeLqgvZjK0vCjHfiR2gFU9p2dKM4k3wBlwh2ydhLJyrjqa2WDv%2FQr76%2Fki2oNSU%2Faislcdp24BsYSIZzF2VYGCB6966W%2FWFiEVWAhKvZY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e2888ef1c16-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash da275afef2c120cef63dae40154284da
569947d789ce819632a881cb49b16b79ef6353ec
d5efa3c3f1c8e805662f74e42a3fac2993f0c8dd03129f28a9e6930cd98e98e1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 01:33:16 GMT
Expires: Tue, 01 Nov 2022 01:33:15 GMT
Etag: "569947d789ce819632a881cb49b16b79ef6353ec"
Cache-Control: max-age=444530,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e299a3bb4f3-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash e4e9602f1062e692c3df5dc1eec489cb
ab47ab5548fed1ea1e145becb03a9885eacf7ddb
036e9d4e5c9e9bc75cbb78389fbcc4a5cdfa3463feddd5db8a11375b8c964af0
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 24 Oct 2022 06:25:20 GMT
Expires: Mon, 31 Oct 2022 06:25:19 GMT
Etag: "ab47ab5548fed1ea1e145becb03a9885eacf7ddb"
Cache-Control: max-age=375654,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76066e28aacfb4ee-OSL
www.google.com/recaptcha/api2/aframe
200 OK 513 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 2532b9089fb95fb2397af199984bed74
2f6f24e3dc53732672856ef4fad537fe04714f79
f980208c11576f211b3c826b3a47b43bb1ae38adbf9fbb8f9f15b317fc14284e
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 26 Oct 2022 21:54:24 GMT
date: Wed, 26 Oct 2022 21:54:24 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-H9iPHJccLRdGUiA-T3m67g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 513
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1180
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 26 Oct 2022 21:54:24 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://cricfree.xyz
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
my.rtmark.net/gid.js?userId=19e20432dd7c4ca3acc710856f9427e9
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=19e20432dd7c4ca3acc710856f9427e9
IP
File type JSON data\012- , ASCII text
Hash 6e53af34af7c5a38b1a46b7d1b6d4eae
3053bad8cf7b0fd576887fa9988e00ac23b7290d
b8ec89c9e38f7caa6824da34270b81c37d87961294fb638fe3950afe94f87444
GET /gid.js?userId=19e20432dd7c4ca3acc710856f9427e9 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://cricfree.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=19e20432dd7c4ca3acc710856f9427e9; expires=Thu, 26 Oct 2023 21:54:24 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
IP
File type ASCII text, with very long lines (7017), with no line terminators
Hash 5d0940862723a20bb4f2dab2b7af9bb4
c1aab96ed293f46fb5a53aa6b1109dd280c430b3
dbe59da44cbbbc83c10daf0c0a53d1c4c53105f82b77fecd0beb84a67c13525a
GET /js/button.d2f864f87f544dc0c11d7d712a191c1f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 558629
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Wed, 26 Oct 2022 21:54:25 GMT
Etag: "7bb2d17ac20be3bd6ec1079356afecd9+gzip"
Last-Modified: Wed, 28 Sep 2022 20:04:20 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2362
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f74e3528778e2edb53b3165026eb9fa2
8431bd77ec41a40c838c205fa77d1e3ed911fbc6
3fa250112546154bf2ecb2addf7ec37ffc059623a265ba2d1ef2a902418f0a61
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "3FA250112546154BF2ECB2ADDF7EC37FFC059623A265BA2D1EF2A902418F0A61"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7754
Expires: Thu, 27 Oct 2022 00:03:39 GMT
Date: Wed, 26 Oct 2022 21:54:25 GMT
Connection: keep-alive
platform.twitter.com/widgets/tweet_button.7dae38096d06923d683a2a807172322a.en.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.7dae38096d06923d683a2a807172322a.en.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32033)
Hash dcb83b699eb06319b25d6358a99ebf24
b3e7a54a54ff64f7ab997a0695eb3edec5efc180
ca69f6c092f02935c8dbf6bd7ba33325e6343052396cff6b4e08f544194a5a16
GET /widgets/tweet_button.7dae38096d06923d683a2a807172322a.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 558628
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Wed, 26 Oct 2022 21:54:25 GMT
Etag: "5f5bf2b99100f854c01f4f321282f861+gzip"
Last-Modified: Wed, 28 Sep 2022 20:04:24 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13753
withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fcss%2Fanimate.css&l=79249&fd=160
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fcss%2Fanimate.css&l=79249&fd=160
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fcss%2Fanimate.css&l=79249&fd=160 HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fcss%2Fstyle.css&l=9494&fd=161
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fcss%2Fstyle.css&l=9494&fd=161
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fcss%2Fstyle.css&l=9494&fd=161 HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/css/style.css
200 OK 2.8 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/css/style.css
IP
Hash 460a168697f8e7a7a7f1e4922768f75e
1a430223bce3071ab62cc20a0d2e29170b58615a
b647e915910246436eb41184eaddc6a0e9209cfc8b392ed366acabce53848364
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/css
last-modified: Mon, 31 Jan 2022 14:46:40 GMT
etag: W/"61f7f650-2516"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 182711
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q64UQ1APDc16MABNN6hjHG7NotTv5eKb37LGf%2BC157asC%2FCZ%2FBLLL9fB%2BxJkmO7ha472LcNEK1%2BLv0v1TSJL2a6AbZF6aXFWTJnsOf4Ztav9iJ3guXKT9%2BiJob%2FjV7HdlOg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e29cb8e7417-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fcricfree.xyz%2Fcycling%22%2C%22widget_frame%22%3Afalse%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1666821265050%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221c23387b1f70c%3A1664388199485%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=ffe9bd903f0072d5ed73bff136d08a8d76a08055
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fcricfree.xyz%2Fcycling%22%2C%22widget_frame%22%3Afalse%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1666821265050%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221c23387b1f70c%3A1664388199485%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=ffe9bd903f0072d5ed73bff136d08a8d76a08055
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fcricfree.xyz%2Fcycling%22%2C%22widget_frame%22%3Afalse%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1666821265050%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%221c23387b1f70c%3A1664388199485%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=ffe9bd903f0072d5ed73bff136d08a8d76a08055 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:25 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Wed, 26 Oct 2022 21:54:25 GMT
content-length: 43
x-transaction-id: 6708ddff872af79a
strict-transport-security: max-age=631138519
x-response-time: 116
x-connection-hash: 102776ccfd55a80f35dff274d77707403955f87f536caa1deb0fa1af19fa3b8b
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=rcSfhQ70jVJqJ_GEFgDggAtnVDHfa9GyOV2wrmHLsyJwSNTuYWDIW3O-z1BpP1BdXkgH334ep1RV3zr5GY1lj6nh8INo-M16SsVNeWczuV1yRMAVTjEWGwj3wrCmScbAEMOLNJN8Ad6izlezvbgDoSNMu_Ejm6a6yDDKedBmbpDi_8jEfHCRw6rN_fPqmMkppZAfIHjFch1P7uy9WliKmg%3D%3D&request_ab2=0&zoneid=3512690&js_build=iclick-v1.438.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fcricfree.xyz%2Fcycling&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.438.0&bs=c7ceaa39-e3e0-4082-a666-4fbc176443c9&userId=19e20432dd7c4ca3acc710856f9427e9&m=link
200 OK 2.2 kB URL HTTP/2 onmarshtompor.com/?rb=rcSfhQ70jVJqJ_GEFgDggAtnVDHfa9GyOV2wrmHLsyJwSNTuYWDIW3O-z1BpP1BdXkgH334ep1RV3zr5GY1lj6nh8INo-M16SsVNeWczuV1yRMAVTjEWGwj3wrCmScbAEMOLNJN8Ad6izlezvbgDoSNMu_Ejm6a6yDDKedBmbpDi_8jEfHCRw6rN_fPqmMkppZAfIHjFch1P7uy9WliKmg%3D%3D&request_ab2=0&zoneid=3512690&js_build=iclick-v1.438.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fcricfree.xyz%2Fcycling&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.438.0&bs=c7ceaa39-e3e0-4082-a666-4fbc176443c9&userId=19e20432dd7c4ca3acc710856f9427e9&m=link
IP
Hash 1c0454a25b0718940ec91cba48314c8c
6712479409f10df61cfb9ecfc84ef741ac2dcb52
05808fc4bb9dbd20967510b49f27a800738d84097706b1c1a82f926c92f2f996
GET /?rb=rcSfhQ70jVJqJ_GEFgDggAtnVDHfa9GyOV2wrmHLsyJwSNTuYWDIW3O-z1BpP1BdXkgH334ep1RV3zr5GY1lj6nh8INo-M16SsVNeWczuV1yRMAVTjEWGwj3wrCmScbAEMOLNJN8Ad6izlezvbgDoSNMu_Ejm6a6yDDKedBmbpDi_8jEfHCRw6rN_fPqmMkppZAfIHjFch1P7uy9WliKmg%3D%3D&request_ab2=0&zoneid=3512690&js_build=iclick-v1.438.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=4&pl=https%3A%2F%2Fcricfree.xyz%2Fcycling&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.438.0&bs=c7ceaa39-e3e0-4082-a666-4fbc176443c9&userId=19e20432dd7c4ca3acc710856f9427e9&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Origin: https://cricfree.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:25 GMT
content-type: application/json
x-trace-id: b4d5d2270102295002608a0b02eefa54
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=19e20432dd7c4ca3acc710856f9427e9; expires=Thu, 26 Oct 2023 21:54:25 GMT; path=/; secure; SameSite=None
oaidts=1666821265; expires=Thu, 26 Oct 2023 21:54:25 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 02 Nov 2022 21:54:25 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fjs%2Fscript.js&l=711&fd=37
200 OK 317 B URL HTTP/1.1 withholdsubsequently.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fjs%2Fscript.js&l=711&fd=37
IP
Hash 4761ad2393202bfabef11ba0db779752
f67daa266767f3528ac554901f32ca9b43da00ff
92fdc96ed03a7abaff8750ca48f8f19cd769784927289cbd2544b9c642acf55c
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fsimple_bubbleicon%2F15%2Fjs%2Fscript.js&l=711&fd=37 HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
unseenreport.com/pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=72d67910a8ee07737c08ec4a7ef2f980&te=b0143518e841b2470af84d86e1b09d3b&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=1&pk=472dcb7c1e79bf360a00ed584fd0d72c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=72d67910a8ee07737c08ec4a7ef2f980&te=b0143518e841b2470af84d86e1b09d3b&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=1&pk=472dcb7c1e79bf360a00ed584fd0d72c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=72d67910a8ee07737c08ec4a7ef2f980&te=b0143518e841b2470af84d86e1b09d3b&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=1&pk=472dcb7c1e79bf360a00ed584fd0d72c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c483800f3ee77a8be4dfa0c942119144
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=72d67910a8ee07737c08ec4a7ef2f980&te=b0143518e841b2470af84d86e1b09d3b&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=1&pk=3897fd93fda51213bcf7e9dda0c4ca28&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=72d67910a8ee07737c08ec4a7ef2f980&te=b0143518e841b2470af84d86e1b09d3b&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=1&pk=3897fd93fda51213bcf7e9dda0c4ca28&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=72d67910a8ee07737c08ec4a7ef2f980&te=b0143518e841b2470af84d86e1b09d3b&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=1&pk=3897fd93fda51213bcf7e9dda0c4ca28&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8d4d1fbdf759bf5c8dbb4f6e28be59e7
Strict-Transport-Security: max-age=0; includeSubdomains
withholdsubsequently.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 withholdsubsequently.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
withholdsubsequently.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSTWtkxRfG685k8Yf%2FSh0XIwi9VNDOvf0eBxyMMRLMTMYZZXQhWm%2B3U6burUvVfelkIcFBGXRhi1%2Fg5ulkwmgUBbcO0j2QRUDodpWF%2BQwOwqxcSLfB1gPFOaeeZ%2FE7p%2BrTveyM%2BMjo6co1s6O0povNql957p0guFJZV3HWq%2FQ6rfdbjSsVm7%2B01Kr6z1del3zLLNb8wPcDP6isKitD01ucilDJ0VJQXfKrjVo1aDbQs%2F%2FtXebBUQ8iPyNPQonJwkPvEhQfIo6%2BX5FuKzXJC69FmaapscjF4dvxVmyKGNG8DK2HMD48d8O48eoDmPhghguT%2F2NkakK84wdg8eE5JFi%2BP%2BNkGjIGE%2F9HkQ8h9RCKDsHNHSgxJgAXuL6BOLp33diCbkPRETidqhOy8PgPqGJCFn67hDj6blmrXuWW0VmqTOzQC0uo3hCqO0SSjZDuXIAqRuDpx1DiF7L4eB1xtL%2FhtIES5Wx2pYZQ4RBa9kGdh2x6lIcs9JAlHiJxWuFBELR9wanfWeK8LtqStYQf0HYY0MBvdZDxKV4fadIH131wu4vE7mJLfTX2DsaXPxtf%2FAI2%2Bxlus4QTHlw6Id6bu8hFiUISFI6goASFIihSgiIvD4R2NVfeE9plLDjPtfNcLwcm7e7RA5N2ZUz2kjPyxGxBj9b72JKnlUa7Jjhr80C2l1hYb%2FnU96Vodhqh8EW7xuFUCeUuzGbeURPy9OfvIVHjl4%2FB6AhOj8DVU6DZs6DFoF3zQTcHjY6Pnfhblxibvphoul1NcwhTIkkXkG57e%2FqMXJ5h1G%2F%2FDslPrn7Ark0e3f8T3JZIbIkP1UOCrr47uGkKsn%2FTFI78sJGkKlI7dPqGt1KayotfvyG3C2PF2orr33%2BFT4VpefSWdOk6jYWKu458s6yEkHbVWC7JT2vutmQ3Mre5nNk4S9ZvvLq6FiVWOqdMPARVE0KOT8DVhPzvx4PZ93zmk4%2Bg7BA2KxFlJ%2BQ8oMwIPNmFS%2Bb8zhBYPfewxEORlQNbY%2FNLrQi0nPeUlXD%2F6tm83nN30bUeaHoHcVQityVyXYLqPlx2cZAm9uTqr%2FVZgGlvwLT19pm2%2Bsu%2Fl%2BvUaaXuizaToWwz2Wg2QskFazaZz0PO6qLT4UjdhL971P8LAAD%2F%2FwEAAP%2F%2FN6nQ0GkEAAA%3D
200 OK 7 B URL HTTP/1.1 withholdsubsequently.com/impr.gif?sid=H4sIAAAAAAAC%2F1SSTWtkxRfG685k8Yf%2FSh0XIwi9VNDOvf0eBxyMMRLMTMYZZXQhWm%2B3U6burUvVfelkIcFBGXRhi1%2Fg5ulkwmgUBbcO0j2QRUDodpWF%2BQwOwqxcSLfB1gPFOaeeZ%2FE7p%2BrTveyM%2BMjo6co1s6O0povNql957p0guFJZV3HWq%2FQ6rfdbjSsVm7%2B01Kr6z1del3zLLNb8wPcDP6isKitD01ucilDJ0VJQXfKrjVo1aDbQs%2F%2FtXebBUQ8iPyNPQonJwkPvEhQfIo6%2BX5FuKzXJC69FmaapscjF4dvxVmyKGNG8DK2HMD48d8O48eoDmPhghguT%2F2NkakK84wdg8eE5JFi%2BP%2BNkGjIGE%2F9HkQ8h9RCKDsHNHSgxJgAXuL6BOLp33diCbkPRETidqhOy8PgPqGJCFn67hDj6blmrXuWW0VmqTOzQC0uo3hCqO0SSjZDuXIAqRuDpx1DiF7L4eB1xtL%2FhtIES5Wx2pYZQ4RBa9kGdh2x6lIcs9JAlHiJxWuFBELR9wanfWeK8LtqStYQf0HYY0MBvdZDxKV4fadIH131wu4vE7mJLfTX2DsaXPxtf%2FAI2%2Bxlus4QTHlw6Id6bu8hFiUISFI6goASFIihSgiIvD4R2NVfeE9plLDjPtfNcLwcm7e7RA5N2ZUz2kjPyxGxBj9b72JKnlUa7Jjhr80C2l1hYb%2FnU96Vodhqh8EW7xuFUCeUuzGbeURPy9OfvIVHjl4%2FB6AhOj8DVU6DZs6DFoF3zQTcHjY6Pnfhblxibvphoul1NcwhTIkkXkG57e%2FqMXJ5h1G%2F%2FDslPrn7Ark0e3f8T3JZIbIkP1UOCrr47uGkKsn%2FTFI78sJGkKlI7dPqGt1KayotfvyG3C2PF2orr33%2BFT4VpefSWdOk6jYWKu458s6yEkHbVWC7JT2vutmQ3Mre5nNk4S9ZvvLq6FiVWOqdMPARVE0KOT8DVhPzvx4PZ93zmk4%2Bg7BA2KxFlJ%2BQ8oMwIPNmFS%2Bb8zhBYPfewxEORlQNbY%2FNLrQi0nPeUlXD%2F6tm83nN30bUeaHoHcVQityVyXYLqPlx2cZAm9uTqr%2FVZgGlvwLT19pm2%2Bsu%2Fl%2BvUaaXuizaToWwz2Wg2QskFazaZz0PO6qLT4UjdhL971P8LAAD%2F%2FwEAAP%2F%2FN6nQ0GkEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1SSTWtkxRfG685k8Yf%2FSh0XIwi9VNDOvf0eBxyMMRLMTMYZZXQhWm%2B3U6burUvVfelkIcFBGXRhi1%2Fg5ulkwmgUBbcO0j2QRUDodpWF%2BQwOwqxcSLfB1gPFOaeeZ%2FE7p%2BrTveyM%2BMjo6co1s6O0povNql957p0guFJZV3HWq%2FQ6rfdbjSsVm7%2B01Kr6z1del3zLLNb8wPcDP6isKitD01ucilDJ0VJQXfKrjVo1aDbQs%2F%2FtXebBUQ8iPyNPQonJwkPvEhQfIo6%2BX5FuKzXJC69FmaapscjF4dvxVmyKGNG8DK2HMD48d8O48eoDmPhghguT%2F2NkakK84wdg8eE5JFi%2BP%2BNkGjIGE%2F9HkQ8h9RCKDsHNHSgxJgAXuL6BOLp33diCbkPRETidqhOy8PgPqGJCFn67hDj6blmrXuWW0VmqTOzQC0uo3hCqO0SSjZDuXIAqRuDpx1DiF7L4eB1xtL%2FhtIES5Wx2pYZQ4RBa9kGdh2x6lIcs9JAlHiJxWuFBELR9wanfWeK8LtqStYQf0HYY0MBvdZDxKV4fadIH131wu4vE7mJLfTX2DsaXPxtf%2FAI2%2Bxlus4QTHlw6Id6bu8hFiUISFI6goASFIihSgiIvD4R2NVfeE9plLDjPtfNcLwcm7e7RA5N2ZUz2kjPyxGxBj9b72JKnlUa7Jjhr80C2l1hYb%2FnU96Vodhqh8EW7xuFUCeUuzGbeURPy9OfvIVHjl4%2FB6AhOj8DVU6DZs6DFoF3zQTcHjY6Pnfhblxibvphoul1NcwhTIkkXkG57e%2FqMXJ5h1G%2F%2FDslPrn7Ark0e3f8T3JZIbIkP1UOCrr47uGkKsn%2FTFI78sJGkKlI7dPqGt1KayotfvyG3C2PF2orr33%2BFT4VpefSWdOk6jYWKu458s6yEkHbVWC7JT2vutmQ3Mre5nNk4S9ZvvLq6FiVWOqdMPARVE0KOT8DVhPzvx4PZ93zmk4%2Bg7BA2KxFlJ%2BQ8oMwIPNmFS%2Bb8zhBYPfewxEORlQNbY%2FNLrQi0nPeUlXD%2F6tm83nN30bUeaHoHcVQityVyXYLqPlx2cZAm9uTqr%2FVZgGlvwLT19pm2%2Bsu%2Fl%2BvUaaXuizaToWwz2Wg2QskFazaZz0PO6qLT4UjdhL971P8LAAD%2F%2FwEAAP%2F%2FN6nQ0GkEAAA%3D HTTP/1.1
Host: withholdsubsequently.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Cookie: u_pl=15813776; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec472dcb7c1e79bf360a00ed584fd0d72c=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c17e3da9599305a00988b0eb5fab864f
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=ca78c25d96f5006fc8f80e1593f9ff64&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=ca78c25d96f5006fc8f80e1593f9ff64&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=4311d427-16b8-4472-b925-1be737c91c10&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.31&b_frame=0&pk=ca78c25d96f5006fc8f80e1593f9ff64&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 21:54:25 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1a4853bf85ad584593279b8c347d59c4
Strict-Transport-Security: max-age=0; includeSubdomains
mc.yandex.ru/watch/55348636?wmode=7&page-url=https%3A%2F%2Fwidget.streamthunder.org%2F%3Fsport%3Dcycling%26d%3D1%26s%3D1%26tm%3DFFFFFF%26tmb%3D333%26brr%3D3px%26fs%3D12px%26ft%3D12%26l%3Dhttps%3A%2F%2Fcricfree.xyz%252Fwatch%252F%253Ft%253D%26lt%3D1%26l2%3D%26l2%3Dhttps%253A%252F%252Fsport-play.live%252Fregister%252F%26l2t%3D1%26l2sp%3D1%26l2co%3D1%26l2cy%3D1%26l2da%3D1%26lk%3D1%26r%3D_en&page-ref=https%3A%2F%2Fcricfree.xyz%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A945%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A415599564092%3Ahid%3A426509412%3Az%3A0%3Ai%3A20221026215426%3Aet%3A1666821267%3Arn%3A505500260%3Arqn%3A1%3Au%3A1666821264467796556%3Aw%3A900x10000%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C270%2C0%2C%2C178%2C5%2C1699%2C1699%2C4%2C820%3Ans%3A1666821262574%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666821267%3At%3ALive%20Stream%20cycling%20%7C%20StreamThunder&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
302 Found 419 B URL HTTP/2 mc.yandex.ru/watch/55348636?wmode=7&page-url=https%3A%2F%2Fwidget.streamthunder.org%2F%3Fsport%3Dcycling%26d%3D1%26s%3D1%26tm%3DFFFFFF%26tmb%3D333%26brr%3D3px%26fs%3D12px%26ft%3D12%26l%3Dhttps%3A%2F%2Fcricfree.xyz%252Fwatch%252F%253Ft%253D%26lt%3D1%26l2%3D%26l2%3Dhttps%253A%252F%252Fsport-play.live%252Fregister%252F%26l2t%3D1%26l2sp%3D1%26l2co%3D1%26l2cy%3D1%26l2da%3D1%26lk%3D1%26r%3D_en&page-ref=https%3A%2F%2Fcricfree.xyz%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A945%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A415599564092%3Ahid%3A426509412%3Az%3A0%3Ai%3A20221026215426%3Aet%3A1666821267%3Arn%3A505500260%3Arqn%3A1%3Au%3A1666821264467796556%3Aw%3A900x10000%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C270%2C0%2C%2C178%2C5%2C1699%2C1699%2C4%2C820%3Ans%3A1666821262574%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666821267%3At%3ALive%20Stream%20cycling%20%7C%20StreamThunder&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP
File type JSON data\012- , ASCII text, with very long lines (419), with no line terminators
Hash c83a05146af835b8818ea127141c0226
e3e55e46d0c973e33a0e033a47b7edba1b60b6a0
5e88f6812884a47ce1d937355a7153cb0b2e42e3bb78750dd584fffd6383a13e
GET /watch/55348636?wmode=7&page-url=https%3A%2F%2Fwidget.streamthunder.org%2F%3Fsport%3Dcycling%26d%3D1%26s%3D1%26tm%3DFFFFFF%26tmb%3D333%26brr%3D3px%26fs%3D12px%26ft%3D12%26l%3Dhttps%3A%2F%2Fcricfree.xyz%252Fwatch%252F%253Ft%253D%26lt%3D1%26l2%3D%26l2%3Dhttps%253A%252F%252Fsport-play.live%252Fregister%252F%26l2t%3D1%26l2sp%3D1%26l2co%3D1%26l2cy%3D1%26l2da%3D1%26lk%3D1%26r%3D_en&page-ref=https%3A%2F%2Fcricfree.xyz%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A945%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A415599564092%3Ahid%3A426509412%3Az%3A0%3Ai%3A20221026215426%3Aet%3A1666821267%3Arn%3A505500260%3Arqn%3A1%3Au%3A1666821264467796556%3Aw%3A900x10000%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C270%2C0%2C%2C178%2C5%2C1699%2C1699%2C4%2C820%3Ans%3A1666821262574%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666821267%3At%3ALive%20Stream%20cycling%20%7C%20StreamThunder&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://widget.streamthunder.org
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/55348636/1?wmode=7&page-url=https%3A%2F%2Fwidget.streamthunder.org%2F%3Fsport%3Dcycling%26d%3D1%26s%3D1%26tm%3DFFFFFF%26tmb%3D333%26brr%3D3px%26fs%3D12px%26ft%3D12%26l%3Dhttps%3A%2F%2Fcricfree.xyz%252Fwatch%252F%253Ft%253D%26lt%3D1%26l2%3D%26l2%3Dhttps%253A%252F%252Fsport-play.live%252Fregister%252F%26l2t%3D1%26l2sp%3D1%26l2co%3D1%26l2cy%3D1%26l2da%3D1%26lk%3D1%26r%3D_en&page-ref=https%3A%2F%2Fcricfree.xyz%2F&charset=utf-8&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahc77qkb9hqc2jb24budq4%3Afp%3A945%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A921%3Acn%3A1%3Adp%3A0%3Als%3A415599564092%3Ahid%3A426509412%3Az%3A0%3Ai%3A20221026215426%3Aet%3A1666821267%3Arn%3A505500260%3Arqn%3A1%3Au%3A1666821264467796556%3Aw%3A900x10000%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A0%2C0%2C0%2C%2C270%2C0%2C%2C178%2C5%2C1699%2C1699%2C4%2C820%3Ans%3A1666821262574%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1666821267%3At%3ALive%20Stream%20cycling%20%7C%20StreamThunder&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Wed, 26 Oct 2022 21:54:26 GMT
access-control-allow-origin: https://widget.streamthunder.org
set-cookie: yandexuid=5244257421666821266; Expires=Thu, 26-Oct-2023 21:54:26 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=5244257421666821266; Expires=Thu, 26-Oct-2023 21:54:26 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=695782921666821266; Path=/; SameSite=None; Secure
i=WSciwrKT3YndAhe/Y4ItccF1pcRM7QMGljDT1ZuvRpecqQCEzBl2DK/GBwR9T5YWHOYXBo8oFe+hGqEfQOzMxm2faAc=; Expires=Sat, 23-Oct-2032 21:54:19 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1698357266.yrts.1666821266#1698357266.yrtsi.1666821266; Expires=Thu, 26-Oct-2023 21:54:26 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 26-Oct-2022 21:54:26 GMT
last-modified: Wed, 26-Oct-2022 21:54:26 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
gloumsee.net/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert fortinet Malware
POST /custom HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Content-Type: application/json
Origin: https://cricfree.xyz
Content-Length: 376
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:30 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 50e76d74a1c26d37a323213999d57e81
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=09f38673d3f84a70bf750d307919547c&zoneId=3534295&checkDuplicate=true&ymid=&var=
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=09f38673d3f84a70bf750d307919547c&zoneId=3534295&checkDuplicate=true&ymid=&var=
IP
File type JSON data\012- , ASCII text
Hash 6e53af34af7c5a38b1a46b7d1b6d4eae
3053bad8cf7b0fd576887fa9988e00ac23b7290d
b8ec89c9e38f7caa6824da34270b81c37d87961294fb638fe3950afe94f87444
GET /gid.js?pub=0&userId=09f38673d3f84a70bf750d307919547c&zoneId=3534295&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Origin: https://cricfree.xyz
Connection: keep-alive
Cookie: ID=19e20432dd7c4ca3acc710856f9427e9
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:30 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://cricfree.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=19e20432dd7c4ca3acc710856f9427e9; expires=Thu, 26 Oct 2023 21:54:30 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap-glyphicons.css
200 OK 0 B URL HTTP/2 netdna.bootstrapcdn.com/bootstrap/3.0.0/css/bootstrap-glyphicons.css
IP
GET /bootstrap/3.0.0/css/bootstrap-glyphicons.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:03:55 GMT
cdn-cachedat: 2021-04-23 03:56:19
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: f8648649237ad816154eb5ff036f6538
cdn-cache: HIT
cf-cache-status: HIT
age: 14931602
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 76066e2049db0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gloumsee.net/pfe/current/tag.min.js?z=3534295
200 OK 0 B URL HTTP/2 gloumsee.net/pfe/current/tag.min.js?z=3534295
IP
GET /pfe/current/tag.min.js?z=3534295 HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: application/javascript
last-modified: Tue, 25 Oct 2022 09:56:56 GMT
etag: W/"6357b2e8-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 0 B URL HTTP/2 friendshipmale.com/sfp.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: c960204b5586618aadfb53631c13132e
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 26 Oct 2022 21:54:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=blUgkng6UEzpwNN6g4SE483AnwKswATOrdlVXfJUR1wPSJ%2FI9kcR1ab%2FO2QGDo%2FYohzrztajCpv3sksmSz35D9tR96rhqv3khDBc75WypXjyqKn9L7BXrO8rLwM29XsUfuxFj7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1e7eb571e6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/css/animate.css
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/css/animate.css
IP
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cdn.sport-play.live
Connection: keep-alive
Referer: https://cdn.sport-play.live/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: text/css
last-modified: Fri, 21 May 2021 10:10:46 GMT
etag: W/"60a78726-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 182711
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BT14ZHDBsmqGMQ%2BdfxA9PoQvxDBw6gHvmLGKERn94u%2FdGF2i%2Bwnptu5JhAGMEh2AVaLKPMKkeFBcZrkcmbxoSoqPbWHU34wbX036z7ewpjyyKoZ7uhEjaPDje6%2B0jZiteFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e29cb8a7417-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cricfree.xyz/js/jquery.js
200 OK 0 B URL HTTP/2 cricfree.xyz/js/jquery.js
IP
GET /js/jquery.js HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/cycling
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: application/javascript
last-modified: Wed, 04 Sep 2019 16:52:39 GMT
etag: W/"5d6febd7-17629"
expires: Mon, 14 Nov 2022 20:28:30 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 955551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NlJossbIDpcZHAp%2B2hX9f%2B%2BgGCrgqprSaT5OsRVm4Ad9%2FTzzG%2F11%2BXVYiHYnx3SzG6R11MO3Q%2FTkF1%2BEKlpDo%2B%2Ba3R6gEIsiA49HLKRN6l2Swxxc17o9le4vI53dv%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e162b950b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
iclickcdn.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: iclickcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 1fccb856b2ec0d4fe866f9afaccf6312
cache-control: max-age=86400
last-modified: Thu, 20 Oct 2022 13:16:57 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Thu, 27 Oct 2022 02:08:15 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 71167
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WTE0T%2Bn%2B32%2B3WoysdOXrryp3WoO%2ByIlauwqhFYunAgpvumLDj%2F85ePt4BOr92cmZzqjpB%2BjzTeJvbBh4WQr6iEjhSYFMOppLiDMMRDPKI%2FldPV0ADY%2FnrTRnZ3KZsaQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1bbdecb4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
bedrapiona.com/5/3512690/?oo=1&js_build=iclick-v1.438.0
200 OK 0 B URL HTTP/2 bedrapiona.com/5/3512690/?oo=1&js_build=iclick-v1.438.0
IP
GET /5/3512690/?oo=1&js_build=iclick-v1.438.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: application/json
x-trace-id: d3bed20ace3902e1b7027a8d045df3c8
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=5e77e9da1240488085aa20f485134c54; expires=Thu, 26 Oct 2023 21:54:22 GMT; path=/; secure; SameSite=None
oaidts=1666821262; expires=Thu, 26 Oct 2023 21:54:22 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
streamthunder.org/js/jquery.min.js
200 OK 0 B URL HTTP/2 streamthunder.org/js/jquery.min.js
IP
GET /js/jquery.min.js HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: application/javascript
last-modified: Fri, 30 Aug 2019 21:38:28 GMT
etag: W/"5d699754-17b8a"
expires: Thu, 03 Nov 2022 22:55:47 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 1897116
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gma%2FOdfc4nkDixAUnuuuDLK4p9gwzoDnz5F9di8UIvQAK%2FUiur44gUYFS4RZyRoPkg3HNVqiBLGHGx5%2BcxbtjzuLhM9ISNzKE4SSVuf3H132lJL6z%2Fc8WyfeJhX1n24JPL%2BA%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fe82ab4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
streamthunder.org/css/jquery.scrolling-tabs.css
200 OK 0 B URL HTTP/2 streamthunder.org/css/jquery.scrolling-tabs.css
IP
GET /css/jquery.scrolling-tabs.css HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/css
last-modified: Fri, 30 Aug 2019 21:38:28 GMT
etag: W/"5d699754-5a7"
expires: Thu, 27 Oct 2022 23:18:35 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 2500548
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oBkN4x8Qshmm4ezR9CN8BwSgtyqPRWFwAdjMjtnYg%2BH0c8NuyKnc77x6XKRA4TVFqW%2B3Vha0MRjQTZ7qy2To6HYFML3K5fSJ5latHi6rzYqCtbMKGK6f8pI4He9uEJs92AaQUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fe82eb4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cricfree.xyz/cycling
200 OK 0 B IP
GET /cycling HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=blfiZyX1nSj9aBpOaE5ghOhzmrMswy8FaK7B%2BeoFp6fbaieCAIOvROUEacFcv12yKRxTDOR5mIGTDzZO4THTtSot3q4XbiGTuHlIqKeCmZPl2fMZjMNoytWOQLl6GbA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76066e14faa60b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
gloumsee.net/pfe/current/universal.min.js?v=3.1.401
200 OK 0 B URL HTTP/2 gloumsee.net/pfe/current/universal.min.js?v=3.1.401
IP
GET /pfe/current/universal.min.js?v=3.1.401 HTTP/1.1
Host: gloumsee.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cricfree.xyz/
Origin: https://cricfree.xyz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: application/javascript
last-modified: Tue, 25 Oct 2022 09:56:56 GMT
etag: W/"6357b2e8-17e24"
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
bedrapiona.com/5/3512690/?oo=1&js_build=iclick-v1.438.0
200 OK 0 B URL HTTP/2 bedrapiona.com/5/3512690/?oo=1&js_build=iclick-v1.438.0
IP
GET /5/3512690/?oo=1&js_build=iclick-v1.438.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cricfree.xyz
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 21:54:22 GMT
content-type: application/json
x-trace-id: c497145f13a2bebdf17bbd7f1e352dc0
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://cricfree.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=19e20432dd7c4ca3acc710856f9427e9; expires=Thu, 26 Oct 2023 21:54:22 GMT; path=/; secure; SameSite=None
oaidts=1666821262; expires=Thu, 26 Oct 2023 21:54:22 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
streamthunder.org/jquery-ui-1.12.1.custom/jquery-ui.min.js
200 OK 0 B URL HTTP/2 streamthunder.org/jquery-ui-1.12.1.custom/jquery-ui.min.js
IP
GET /jquery-ui-1.12.1.custom/jquery-ui.min.js HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: application/javascript
last-modified: Fri, 30 Aug 2019 21:38:28 GMT
etag: W/"5d699754-433e"
expires: Tue, 08 Nov 2022 17:06:52 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 1486051
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kqEu6CouY6sVCoZ65huZQvLLi%2Bom0y7aqVwyYku5EvYh5x74mqYzV%2FaZNJnCRUGhOEMvrhoAXbnABSA1HIQ9NaN9wfJdcQglsaZUo4t16wycVHekeDayRcgsOnCb4x6e2qh69Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fe82db4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:24 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 2501
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wcvGQoEhV4iO08WKPvdPPSrrHjaA04C889lY3WTDpKEa2gR5vuf0KfxLHFZM4auJXJg38X57b1ZoSCQwjl9O9Xoesy6QqyoarzBXxbTiW8mBpIUIXeNaAvXG0OWIEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e285c72b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cricfree.xyz/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 cricfree.xyz/css/bootstrap.min.css
IP
GET /css/bootstrap.min.css HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/cycling
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: text/css
last-modified: Wed, 04 Sep 2019 16:52:47 GMT
etag: W/"5d6febdf-1e1cb"
expires: Sun, 13 Nov 2022 02:43:40 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 1105841
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xyl4RnTVsQ%2BoOMd4d%2BLH%2FYUfi9qhZuMnlkanhgRijEad6KNqHdVJWc6L0MZw31VB98j%2F%2Biklc3dwUoxKD4x3v%2BMiUktEfB0rvgRoMN3uH8ET0y7Jh0wWRoEwLV%2Fa2Q8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e161b910b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cricfree.xyz/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 cricfree.xyz/js/bootstrap.min.js
IP
GET /js/bootstrap.min.js HTTP/1.1
Host: cricfree.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cricfree.xyz/cycling
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:21 GMT
content-type: application/javascript
last-modified: Wed, 04 Sep 2019 16:52:39 GMT
etag: W/"5d6febd7-90b5"
expires: Fri, 25 Nov 2022 18:54:35 GMT
cache-control: public, max-age=2592000
pragma: public
cf-cache-status: HIT
age: 10786
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BsMt5PYonqD0HVwH9bx1ueLcx51%2FnVGpTpHFD8ffxOUMFxdjjt2U%2BhMjU3qRvl9qExxFi2fh4nvQDbQK5cSpmFul2bcgO7ubduwdG1bXoDBi2C6nzhLTZUaWcSQfrdw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e162b970b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
streamthunder.org/css/widget.css
200 OK 0 B URL HTTP/2 streamthunder.org/css/widget.css
IP
GET /css/widget.css HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/css
last-modified: Fri, 30 Aug 2019 21:38:28 GMT
etag: W/"5d699754-38c2"
expires: Tue, 01 Nov 2022 17:53:23 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 2088060
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ch6iZnQ1pwPV4YNKmXwpDt5L9ZDYIvZ%2BK8re4Ww5IcbiuE45afn1zghui%2BL4GA2KfZ31Dl%2FZlFm0unBk4zDjgMOyyAYO25vH%2FQqIscgN7GQevA6xl2q37337rQ2450E0NYkJ3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fc815b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
streamthunder.org/css/widgetframe.css
200 OK 0 B URL HTTP/2 streamthunder.org/css/widgetframe.css
IP
GET /css/widgetframe.css HTTP/1.1
Host: streamthunder.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://widget.streamthunder.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 21:54:23 GMT
content-type: text/css
last-modified: Mon, 16 Sep 2019 10:28:53 GMT
etag: W/"5d7f63e5-20fdb"
expires: Tue, 01 Nov 2022 17:53:30 GMT
cache-control: public, max-age=2592000
access-control-allow-origin: *
pragma: public
cf-cache-status: HIT
age: 2088053
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VeWiF9CVvjXlM8Xn5lLDAthfEtg8eV1q0hy3VTc0Gy9qGrHB3E0REMYJnZ7fCDrJ5Ja1%2F3TOnhl81%2BeF8FuGOPUNV%2Fs621N2fKGtrLBBLoz3tNCLshdHZmonaY8VXGAdNrcR3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76066e1fc814b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.33.116
104.18.10.207
142.250.74.35
31.13.72.12
37.48.68.71
93.158.134.119
139.45.195.8
23.38.200.123
18.193.142.27