firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-stale=0
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 14:02:43 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tr34cE80tVsO5vGnFc4ga_d1fLx3WBWbL8J7fHwfSX4xgqDyiC5rDg==
Age: 2976
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9955bda9c9ef64bc5700a14af0bae25e
8de7b7469e905af0374bdfcc3006bbb844f13e94
1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8002
Expires: Tue, 04 Oct 2022 17:05:41 GMT
Date: Tue, 04 Oct 2022 14:52:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pA1N7W6SCs8X6R0Yudx8JufIn6KTMX07f-rOsoz6wDyexaXkxFdMTg==
age: 33832
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/
190.115.18.159301 Moved Permanently 568 B IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Hash 2761b98db33884ab29711096ab315edb
8cea6e53464aea178b72e06a906205d040f14ca5
9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: ddos-guard
Date: Tue, 04 Oct 2022 14:52:19 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://www.poocoiln-aqpp.us/
Content-Type: text/html; charset=utf8
Content-Length: 568
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 14:52:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c25ea1972f55c6fb02cf081e44eac697
7852d6673fdc74639cc45ebbcfea5a612e681fd9
2bfc2da24f4fda40a222c0ae754ac790831dd59d1df7eb3f3e274ecca211a4e1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2BFC2DA24F4FDA40A222C0AE754AC790831DD59D1DF7EB3F3E274ECCA211A4E1"
Last-Modified: Mon, 03 Oct 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 04 Oct 2022 20:52:19 GMT
Date: Tue, 04 Oct 2022 14:52:19 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 14:29:33 GMT
Expires: Tue, 04 Oct 2022 14:31:25 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oO20JO-ZRwW1cbA8eZhaQXRrtvW9zuo6Gf2yMUXTgrOOQ551wrXy-w==
Age: 1366
www.poocoiln-aqpp.us/
190.115.18.159200 OK 5.1 kB IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (926)
Hash 2d9ca996ed82289243971643a7dc9931
8973cf49caad1e78845a4759e27cbe5ed2d6ca39
865bc62b2d5c7a816e86385072de9a8ce9a77a12aac0abf42380cd43927fdc8c
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=Zr26dpAVrt51v90WOWlI; Domain=.poocoiln-aqpp.us; HttpOnly; Path=/; Expires=Wed, 04-Oct-2023 14:52:19 GMT
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:47 GMT
etag: "3936-5e9e9d962bc0d-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5149
content-type: text/html
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 16ebfb2aa621547ecf581e26fc828a7d
f78993331f6f5b8af6409a9ad2fc50b77070f68a
0f81fd1d6be9ccc04b74f0348aafe642c7b9ab7dffb7e8a679b5d67cc2e5fac3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5233
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 14:52:19 GMT
Last-Modified: Tue, 04 Oct 2022 13:25:06 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 14:52:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 9e40b2c69615f45f2bc898334ab3e343
6a569648ed10564e126d3bbf3f91352e6b3f6d4f
4f1d0982c58b9bbeaa266b99292baa1a00c9e39280f73d5a525722c851e15981
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 14:52:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.poocoiln-aqpp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670
190.115.18.159200 OK 1.0 kB URL HTTP/2 www.poocoiln-aqpp.us/ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (757)
Hash 527596b9914f7c946e7271a224e46f7c
5487ee6b60acba543b8f7985cd20e1afca849c81
edf4f2d3d355369fbb5714016e590005ed8152f2f7915e068ad5a4ac07315860
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/ext?id=f86c1b475f0cea8668420bb05ee9a670 HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 1041
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2
190.115.18.159200 OK 31 kB URL HTTP/2 www.poocoiln-aqpp.us/ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (65447)
Hash 31d53c8cdce8012a24abc8e84aa972e5
7287b1ec5d88304ba44fc1958b8de9596274c4e3
1b72bc7f54bc9170e605f6c4bb5529668c4ee3efeee602fdb63036b45b49f41c
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/ext?id=1b7352fa0c25f70e314d29a96982f8b2 HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 30902
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab
190.115.18.159200 OK 6.0 kB URL HTTP/2 www.poocoiln-aqpp.us/ajax/ext?id=6d9ab90147be5f890eff071374fd38ab
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (15218), with no line terminators
Hash 829a29ed367fc8e36a089af20f9b72e5
dc20ab2dce4b52b1ba3752155d302fd5adb9fcfb
3072412aec91e0cf18298178684bc57c0b418fce1c98bbd3020e170f280f6a39
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/ext?id=6d9ab90147be5f890eff071374fd38ab HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
vary: Accept-Encoding
content-encoding: gzip
content-length: 6034
content-type: application/javascript; charset=utf-8
X-Firefox-Spdy: h2
metamask.io/icons/icon-256x256.png
185.199.108.153200 OK 8.0 kB URL HTTP/2 metamask.io/icons/icon-256x256.png
IP 185.199.108.153:0
File type PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f1e6b56059a85e4037c274c0d3fde27
50d3443c39ed8fff82e68277a2214640572465da
c8bad732ba3e66232cc638880859fb94beb242bc82ac197565d2d6783064f8b1
GET /icons/icon-256x256.png HTTP/1.1
Host: metamask.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: GitHub.com
content-type: image/png
last-modified: Tue, 04 Oct 2022 02:50:57 GMT
access-control-allow-origin: *
etag: "633b9f91-1f63"
expires: Tue, 04 Oct 2022 11:55:05 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0806:2F17:9931C1:9DD2FC:633C1CC1
accept-ranges: bytes
date: Tue, 04 Oct 2022 14:52:20 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1664895140.975349,VS0,VE116
vary: Accept-Encoding
x-fastly-request-id: 0586665a7e5f83e4c43d48d9503570e558649f33
content-length: 8035
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.43.58.150101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.43.58.150:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: lUI8thvJ0Dat5iCf1cx5Pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vKOw7eHknQqNlhMc9TDzN0ZSaR4=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8466
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 14:52:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8466
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 14:52:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8466
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 14:52:21 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ff433c9569a3557d806b1480aeafece9
20bbd46383b85326837f45290ff87df708b3b310
e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8466
Expires: Tue, 04 Oct 2022 17:13:27 GMT
Date: Tue, 04 Oct 2022 14:52:21 GMT
Connection: keep-alive
fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
142.250.74.10200 OK 6.9 kB URL HTTP/2 fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap
IP 142.250.74.10:0
Hash bbd7ff744e7ed38cd85f5abfddda630a
5d00cf55d06965d8bea1f89be9d8aded4758fbd6
ccc7d64e0469b0a4e382b8f0511f5340d7e52027e9dfa9bf5cb8ac6f853c79dc
GET /css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 14:52:19 GMT
date: Tue, 04 Oct 2022 14:52:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/static/css/5.ccb64771.chunk.css
190.115.18.159200 OK 8.2 kB URL HTTP/2 www.poocoiln-aqpp.us/static/css/5.ccb64771.chunk.css
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (19582)
Hash 28898ca65d6376c13b1f1cb93018e4f2
46ab70cafbc53a7d21e3c37964620a0e841927dd
b279cfa2662baea01780af19e7c79a74614dd6931bfe3f359dad0aac61768a0d
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/5.ccb64771.chunk.css HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:49 GMT
etag: W/"4d5d-5e9e9d987c869-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/css
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/static/css/main.2c6bf9ed.chunk.css
190.115.18.159200 OK 72 kB URL HTTP/2 www.poocoiln-aqpp.us/static/css/main.2c6bf9ed.chunk.css
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (57239)
Hash 55165aff879e01987353007735f7e602
847436b1ce84b8bb189babda3722047e6848b5be
a0c6674612a52effbced9a750edb5632d37ca591f34b6fc6a184146cbbdb4612
Analyzer Verdict Alert quad9 Sinkholed
GET /static/css/main.2c6bf9ed.chunk.css HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:49 GMT
etag: W/"70d92-5e9e9d9898d89-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/css
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/static/js/main.73ab8857.chunk.js
190.115.18.159200 OK 138 kB URL HTTP/2 www.poocoiln-aqpp.us/static/js/main.73ab8857.chunk.js
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (6857)
Size 138 kB (137597 bytes)
Hash 4507e957d68e0aa748fca38d1fdb9d17
9b32e16891ed7347ecd278ae8b2bdd6daf4c16bd
61af34b42a57a41e0eec054cdb66ec705dc84683e6de3611ad0f3dffead70680
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/main.73ab8857.chunk.js HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:50 GMT
etag: W/"107730-5e9e9d9971a48-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js
172.64.156.26200 OK 11 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js
IP 172.64.156.26:0
Hash 9c789fc8d6b01e66ca57a29fcb77d99d
e8aa2e12963e85f74c61986699b962ad210a5e58
c273bcb7de7d6b8fe125d604f82ea6b3100326409fc158137ba53fd345efe7bf
GET /beacon.min.js HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:19 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ebda09e80b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/static/js/5.8d78701f.chunk.js
190.115.18.159200 OK 987 kB URL HTTP/2 www.poocoiln-aqpp.us/static/js/5.8d78701f.chunk.js
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type ASCII text, with very long lines (317)
Size 987 kB (986718 bytes)
Hash 1c1cdfe6cc750c5be76ded18706feec3
28cc84431ebe90608e6cec6fe4d92bb9c0b94087
26e65a572e07bb76b82be461645cb752ae191def0425d097a75bd83a44e929b1
Analyzer Verdict Alert quad9 Sinkholed
GET /static/js/5.8d78701f.chunk.js HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:58 GMT
etag: W/"84f71e-5e9e9da05d1fe-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 3
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ff07f370a73e1e1ef6c142858bcf03f1
474b0fdc5cad9d91d1b36a0a614aa97e1fd803ce
e66709a8a2f684a491a9bffb807462f0533346a318b2c3fc4a4cec9503f18fef
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E66709A8A2F684A491A9BFFB807462F0533346A318B2C3FC4A4CEC9503F18FEF"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4106
Expires: Tue, 04 Oct 2022 16:00:48 GMT
Date: Tue, 04 Oct 2022 14:52:22 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 14:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ff07f370a73e1e1ef6c142858bcf03f1
474b0fdc5cad9d91d1b36a0a614aa97e1fd803ce
e66709a8a2f684a491a9bffb807462f0533346a318b2c3fc4a4cec9503f18fef
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E66709A8A2F684A491A9BFFB807462F0533346A318B2C3FC4A4CEC9503F18FEF"
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1327
Expires: Tue, 04 Oct 2022 15:14:29 GMT
Date: Tue, 04 Oct 2022 14:52:22 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 14:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
api1.poocoin.app/ads
172.67.27.213200 OK 0 B IP 172.67.27.213:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /ads HTTP/1.1
Host: api1.poocoin.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://poocoin.app
access-control-allow-headers: *,Accept,Content-Type,Content-Length,Accept-Encoding,Origin,Referer,User-Agent
access-control-allow-methods: *,GET,POST,OPTIONS
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ebdadafc7b521-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
216.58.207.195200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 17:10:21 GMT
expires: Wed, 27 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 596521
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/images/logo/poocoin512.png
190.115.18.159200 OK 36 kB URL HTTP/2 www.poocoiln-aqpp.us/images/logo/poocoin512.png
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash ac9f1ca0c655226c6e7ee8ac5daea6ce
dbd1f44751a0cd7cc79bd53ab5084a6b7375a217
b66b609676de60e3f5292ac6ff0165e8fa8cd26c1195c09b7bf2e3f485fb199b
Analyzer Verdict Alert quad9 Sinkholed
GET /images/logo/poocoin512.png HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 07:43:58 GMT
last-modified: Fri, 30 Sep 2022 19:17:49 GMT
accept-ranges: bytes
content-length: 36527
content-type: image/png
etag: "8eaf-5e9e9d97c7dca"
age: 25705
ddg-cache-status: MISS,HIT
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.195200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 17:10:21 GMT
expires: Wed, 27 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 596521
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 0ac04f7c449093fff4f846a7ae56cd4f
50aeb5664545a0dec4173920a274e906bcbcdf6f
18eff2566317aba7b70ee558e8cba42231eb4eae31e903501dc122c751d6993b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 14:52:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash a237a81766d54a0fecff9a691e9dca92
5938dcb9f9b66f03c1c74fa91dbfbaaef082b931
acb8a60c9534605f932ba3ed512438f18902ad148d628fe91c7905aff95789f2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 14:52:22 GMT
Last-Modified: Tue, 04 Oct 2022 13:22:52 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5JIY147JDImAg-bniymHX-i3RkdopUWMH6EcMzNATy-HKNdK81iYwA==
Age: 5370
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash a237a81766d54a0fecff9a691e9dca92
5938dcb9f9b66f03c1c74fa91dbfbaaef082b931
acb8a60c9534605f932ba3ed512438f18902ad148d628fe91c7905aff95789f2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 04 Oct 2022 14:52:22 GMT
Last-Modified: Tue, 04 Oct 2022 13:55:31 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: KD334KunSYOWS1BISrwZwHnShwDlvSQlYUSdzcmfr73mSnKxOwMjBA==
Age: 3411
bsc-dataseed1.defibit.io/
13.248.174.76204 No Content 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 14:52:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76200 OK 23 kB URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
File type JSON data\012- , ASCII text, with very long lines (5414), with no line terminators
Hash 3402b891ffdbefe734fa3dca5f39d830
8de511b27c28592abb6fb552bc5e2c93d8c1794c
f7b9d9387f0dc92f3fe3c9fb3b63bd6e652a35a4a82bfeaf772528a27140679a
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 4168
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/static/media/fa-regular-400.7a333762.woff2
190.115.18.159200 OK 13 kB URL HTTP/2 www.poocoiln-aqpp.us/static/media/fa-regular-400.7a333762.woff2
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
File type Web Open Font Format (Version 2), TrueType, length 13224, version 331.-31196\012- data
Hash b91d376b8d7646d671cd820950d5f7f1
13517529affa39e2585c591acae6dc336b6aa917
e42a88444448ac3d60549cc7c1ff2c8a9cac721034c073d80a14a44e79730cca
Analyzer Verdict Alert quad9 Sinkholed
GET /static/media/fa-regular-400.7a333762.woff2 HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/static/css/main.2c6bf9ed.chunk.css
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:22 GMT
last-modified: Fri, 30 Sep 2022 19:17:52 GMT
etag: "33a8-5e9e9d9b233c5"
accept-ranges: bytes
content-length: 13224
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76204 No Content 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 14:52:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76204 No Content 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 14:52:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76204 No Content 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 04 Oct 2022 14:52:22 GMT
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
X-Firefox-Spdy: h2
cloudflareinsights.com/cdn-cgi/rum
172.64.156.26200 OK 0 B URL HTTP/2 cloudflareinsights.com/cdn-cgi/rum
IP 172.64.156.26:0
POST /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 7148
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
server: cloudflare
cf-ray: 754ebdaeea4db517-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/images/logos/telegram.svg
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/images/logos/telegram.svg
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /images/logos/telegram.svg HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:22 GMT
last-modified: Fri, 30 Sep 2022 19:17:48 GMT
etag: W/"2b5-5e9e9d97c106a"
accept-ranges: bytes
content-type: image/svg+xml
content-encoding: br
vary: Accept-Encoding
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76200 OK 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 328
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76200 OK 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 328
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/ajax/ext?id=9a998401d6af5d90b5bfb820e05b0c04
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/ajax/ext?id=9a998401d6af5d90b5bfb820e05b0c04
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/ext?id=9a998401d6af5d90b5bfb820e05b0c04 HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:22 GMT
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/charts1/datafeeds/udf/dist/polyfills.js
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/charts1/datafeeds/udf/dist/polyfills.js
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /charts1/datafeeds/udf/dist/polyfills.js HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:47 GMT
etag: W/"2595-5e9e9d967adac-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/ext?id=8c00fd7f84393f0105f5fcdc14ba4d95 HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:21 GMT
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
age: 2
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/charts1/charting_library/charting_library.js
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/charts1/charting_library/charting_library.js
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /charts1/charting_library/charting_library.js HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:47 GMT
etag: W/"31cc-5e9e9d961644d-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /ajax/ext?id=52bd2e74d8b078528d3c952ba6ffed94 HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
vary: Accept-Encoding
content-encoding: br
content-type: text/css; charset=utf-8
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/charts1/datafeeds/udf/dist/bundle.js
190.115.18.159200 OK 0 B URL HTTP/2 www.poocoiln-aqpp.us/charts1/datafeeds/udf/dist/bundle.js
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /charts1/datafeeds/udf/dist/bundle.js HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:19 GMT
last-modified: Fri, 30 Sep 2022 19:17:47 GMT
etag: W/"2f8d-5e9e9d967fbcc-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: application/javascript
age: 2
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;700;900&display=swap
IP 142.250.74.10:0
GET /css2?family=Roboto:wght@400;700;900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 04 Oct 2022 14:52:20 GMT
date: Tue, 04 Oct 2022 14:52:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cloudflareinsights.com/cdn-cgi/rum
172.64.156.26200 OK 0 B URL HTTP/2 cloudflareinsights.com/cdn-cgi/rum
IP 172.64.156.26:0
OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:28 GMT
content-type: text/plain
access-control-allow-origin: https://www.poocoiln-aqpp.us
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 754ebdd4ad2ab517-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/icons/favicon-16x16.png
190.115.18.159404 Not Found 0 B URL HTTP/2 www.poocoiln-aqpp.us/icons/favicon-16x16.png
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /icons/favicon-16x16.png HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:21 GMT
content-type: text/html; charset=iso-8859-1
content-encoding: br
vary: Accept-Encoding
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
www.poocoiln-aqpp.us/icons/android-icon-192x192.png
190.115.18.159404 Not Found 0 B URL HTTP/2 www.poocoiln-aqpp.us/icons/android-icon-192x192.png
IP 190.115.18.159:0
ASN #262254 DDOS-GUARD CORP.
Analyzer Verdict Alert quad9 Sinkholed
GET /icons/android-icon-192x192.png HTTP/1.1
Host: www.poocoiln-aqpp.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Cookie: __ddg1_=Zr26dpAVrt51v90WOWlI
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 04 Oct 2022 14:52:21 GMT
content-type: text/html; charset=iso-8859-1
content-encoding: br
vary: Accept-Encoding
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2
cloudflareinsights.com/cdn-cgi/rum
172.64.156.26200 OK 0 B URL HTTP/2 cloudflareinsights.com/cdn-cgi/rum
IP 172.64.156.26:0
OPTIONS /cdn-cgi/rum HTTP/1.1
Host: cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.poocoiln-aqpp.us/
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
content-type: text/plain
access-control-allow-origin: https://www.poocoiln-aqpp.us
access-control-allow-methods: POST,OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 754ebdaeda1bb517-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
bsc-dataseed1.defibit.io/
13.248.174.76200 OK 0 B URL HTTP/2 bsc-dataseed1.defibit.io/
IP 13.248.174.76:0
POST / HTTP/1.1
Host: bsc-dataseed1.defibit.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 328
Origin: https://www.poocoiln-aqpp.us
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:22 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 600
x-nr-trace-id: 00000000000000000000000000000000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: br
X-Firefox-Spdy: h2
unpkg.com/aos@2.3.1/dist/aos.css
104.16.124.175200 OK 0 B URL HTTP/2 unpkg.com/aos@2.3.1/dist/aos.css
IP 104.16.124.175:0
GET /aos@2.3.1/dist/aos.css HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poocoiln-aqpp.us/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 14:52:19 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Thu, 17 May 2018 22:11:13 GMT
etag: W/"65c5-BVfTdFS2f0LyyxAeV+UHD7EZNXA"
via: 1.1 fly.io
fly-request-id: 01G754J040XBCARD93ACQA76A4-fra
cf-cache-status: HIT
age: 7938812
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 754ebda07e9db51e-OSL
content-encoding: br
X-Firefox-Spdy: h2