| advanceleadgeneration.com/unsubscribe.aspx |  188.114.97.1 | 301 Moved Permanently | 0 B |
URL HTTP/1.1advanceleadgeneration.com/unsubscribe.aspx IP188.114.97.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /unsubscribe.aspx HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 11:58:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 12:58:44 GMT
Location: https://advanceleadgeneration.com/unsubscribe.aspx
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BCr0y7kfSYQOtZAR6yAh7cHE0QvQirF2bxZ9z4q7u2HuzK3tYSV1UyrXjUd4DnFWMh3H2Jn7i7YSAxOn6Lkd%2BknIT8wOiSKl40LzPuVloGAwsBqvM5yjDjXejzD%2BdoJqQoXUtNd8GY6m4F24"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c7127aafda0b31-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash97d7dde89cca188d19690d7bf759d034 7ec36525c8b5e8e278f0c5f26da3316687d89041 f8b500f9b1e8188807aab20f8e2540b5b2e888b13ff5f6f6211bbc28056f23e8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F8B500F9B1E8188807AAB20F8E2540B5B2E888B13FF5F6F6211BBC28056F23E8"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3758
Expires: Mon, 20 Feb 2023 13:01:23 GMT
Date: Mon, 20 Feb 2023 11:58:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash13d4983fb8a0ee2cb855663cc9d8f6a0 1f85fc46435f86d7f414e310670c9afe27ea9532 f4bc8150273c4fc6e90c9df8e074823a78dc8409bfcc00616265e24d7d663498
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4BC8150273C4FC6E90C9DF8E074823A78DC8409BFCC00616265E24D7D663498"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4872
Expires: Mon, 20 Feb 2023 13:19:57 GMT
Date: Mon, 20 Feb 2023 11:58:45 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb44c4b5daa307a355e7bab1c83c1ca82 dbd14cd873f1dd4502f277b3f51cb7bc8da0c080 fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Feb 2023 11:38:00 GMT
content-type: application/json
age: 1245
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3c926acb3daeb63b5374bdc352bbb679 167a2af5a3c8d1ec6d16c8f7ef1e063ce14ed481 e0bbf50d7d572d0b16ba4be51b190c4776777ecb572db9b25574b66d8e56ce36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0BBF50D7D572D0B16BA4BE51B190C4776777ECB572DB9B25574B66D8E56CE36"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4575
Expires: Mon, 20 Feb 2023 13:15:00 GMT
Date: Mon, 20 Feb 2023 11:58:45 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashe76071a28ee566dababb3834f46d68ed aebb4e68c1ba2de0f90025283e8ed8470944fde0 78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 1ScK717iSL7Bf8Qogt4ElM7TpjhaoV6FseOkMqRDNZDFddf/SwotO6qjGresVvO0nr7lG3cRoy4=
x-amz-request-id: 9YW8274DGAWTCJEE
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Mon, 20 Feb 2023 11:52:07 GMT
age: 398
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
content-length: 5348
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/s/gts1p5/0vJxsi0KL7U | 142.250.74.131 | 200 OK | 472 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/0vJxsi0KL7U IP142.250.74.131:0
Hash44e84f123aafd4df7ac9db51c34dde02 7f1d8e301e2152d21244f185c4a3089e8148a84f 5d1f122c5897a813d2b819ec95743ff3fcb4970c093e048e1438d8f4426036f8
POST /s/gts1p5/0vJxsi0KL7U HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 11:58:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/s/gts1p5/0vJxsi0KL7U | 142.250.74.131 | 200 OK | 472 B |
URL HTTP/1.1ocsp.pki.goog/s/gts1p5/0vJxsi0KL7U IP142.250.74.131:0
Hash44e84f123aafd4df7ac9db51c34dde02 7f1d8e301e2152d21244f185c4a3089e8148a84f 5d1f122c5897a813d2b819ec95743ff3fcb4970c093e048e1438d8f4426036f8
POST /s/gts1p5/0vJxsi0KL7U HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 11:58:45 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| advanceleadgeneration.com/template/HTML/css/custom.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/custom.css IP188.114.96.1:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/custom.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
content-length: 0
cf-bgj: minify
cf-polished: origSize=43
etag: "0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ofOPPff4f7W5%2F7uEo0DLro4cpchqrymT4Xn6Vfw0pyNUsQi5VDMz7hqh%2FhcVyvDuAzUFzJC%2FCgRsZMdqa9Uvxm1h2NT3%2FjnlcvL4u8NdftUuOXin4WNyVkMEIl%2Bk2pp%2BCm060XxZmatrU6G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c7127edbfa0b65-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 2.2 kB |
IP142.250.74.131:0
Hash3e42f2ea1be082710e3e2172cf1be07d dc515b468422741fce2c7c8b047d0e886ae0dba6 de7d225bd10a1d0f99fe2a175f7c9fd35f49eca41c07d549e4c73cfa2e80b960
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 11:58:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 2.2 kB |
IP142.250.74.131:0
Hashcc44b6cba47da12b116e83833cc08855 a74e72cd09a89e2577f2c02c8a0edf2c0a4df826 acc2fdbcb6a8fd30c5beae706c681b3d1c03255c7e7df0fa1b5f4493717e785c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 11:58:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/recaptcha/api.js?render=6LehLNgUAAAAAH593xSr1ObioyODx87XaE6ULK_Q | 142.250.74.132 | 400 Bad Request | 119 B |
URL HTTP/2www.google.com/recaptcha/api.js?render=6LehLNgUAAAAAH593xSr1ObioyODx87XaE6ULK_Q IP142.250.74.132:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text Hash96612d2b1b529ecfcf09798c3eb100bf 4f32d5d3ccf4d44ae71309dfa8d6f9d396614a27 7c58bfa17d0c600b7455e6bfb3d8371fbf93da20a7a53ed1efad37d692f1cba0
GET /recaptcha/api.js?render=6LehLNgUAAAAAH593xSr1ObioyODx87XaE6ULK_Q HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 400 Bad Request
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Mon, 20 Feb 2023 11:58:45 GMT
expires: Mon, 20 Feb 2023 11:58:45 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 119
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/recaptcha/api.js | 142.250.74.132 | 200 OK | 553 B |
URL HTTP/2www.google.com/recaptcha/api.js IP142.250.74.132:0
File typeASCII text, with very long lines (850), with no line terminators Hash61528f87bc619dc1651c50dbe59bef65 da28ca3199ea9bbad3891014b80c2e9172fce73a a0b5d93845a5c4077e9c6392002ed0e816e8e0e01f1b0bee485f419c6644aa06
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 20 Feb 2023 11:58:45 GMT
date: Mon, 20 Feb 2023 11:58:45 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 8.2 kB |
IP142.250.74.131:0
Hash7c23f9a40eae3ab97dc3247ffd86c86d 1d1f96f82e5f187313bd6ee8d47b75dee3745cb3 fc9fa5a0141dc277a0c35ec65af8d7d7c7cb756f72d3e6f6f0867c6e1fd7feef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 11:58:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, Alert, Content-Length, Backoff, ETag, Cache-Control, Retry-After, Last-Modified, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Feb 2023 11:20:34 GMT
age: 2291
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashaea9630f88377d01e5cebab9de9c3b89 18c6603c6e63b79d45031e960dddd31b227f0de5 853e5bb59efe99054d86bbacf7c2f1f2483ad9c05d35cc9d8ea5dd9909cb38fb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853E5BB59EFE99054D86BBACF7C2F1F2483AD9C05D35CC9D8EA5DD9909CB38FB"
Last-Modified: Mon, 20 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4335
Expires: Mon, 20 Feb 2023 13:11:01 GMT
Date: Mon, 20 Feb 2023 11:58:46 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash9d05d51b48728fdcd100d5ad8ce645e7 da63db3fe51d74b7776cd6ce770c6937cbede853 3c77d0fc549913b4a1606ae27a05c67fecceb6ed0ce49be12a6c5a692d5a8e4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 11:58:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/recaptcha/releases/O4xzMiFqEvA4YhWjk5t8Xuas/recaptcha__en.js | 142.250.74.67 | 200 OK | 165 kB |
URL HTTP/2www.gstatic.com/recaptcha/releases/O4xzMiFqEvA4YhWjk5t8Xuas/recaptcha__en.js IP142.250.74.67:0
File typeASCII text, with very long lines (557) Size165 kB (164853 bytes) Hashbde872ce764ca70494c65b6b34a1c88e 27e1b13cd255fac03519429a0efdd797671eacde 2fff53e7a1bb12f09930778b6f6c0142f048b1a03068cf775ceebaa28072898b
GET /recaptcha/releases/O4xzMiFqEvA4YhWjk5t8Xuas/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://advanceleadgeneration.com
Connection: keep-alive
Referer: https://advanceleadgeneration.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164853
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Feb 2023 03:34:06 GMT
expires: Tue, 20 Feb 2024 03:34:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Feb 2023 05:01:25 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 30280
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/owl.carousel/assets/owl.theme.default.min.css | 188.114.96.1 | 200 OK | 50 kB |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/owl.carousel/assets/owl.theme.default.min.css IP188.114.96.1:0
File typeASCII text, with very long lines (1142), with no line terminators Hash3bad9c3795f0947e3cb53df444f2c0f0 6a6366f307a6a810bf8b5ad13d7065f3f3501f80 4921a6f0e16cf6a9c151bf5a1182ba2083a40435295222a2684e46d5f92d8fbe
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/owl.carousel/assets/owl.theme.default.min.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
last-modified: Tue, 22 Dec 2020 15:20:58 GMT
etag: W/"0a969c76d8d61:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NfFOY8eOQMV4oQ%2FhT2Bx8FOs%2BXzNPArXfGlIO4jXBnMA9PX6oI4YibOAfGeAQwiP7uGa08VuWqvoV5QYNslcp0ksCLrKx6KAcmy2s70CyQmyTsiKfdwth7pQUz3VhHPa80PfOgnAXEunq2ju"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c7127edbe40b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.186.209.73 | 101 Switching Protocols | 10 kB |
URL HTTP/1.1push.services.mozilla.com/ IP54.186.209.73:0
Hash2273b3cc788f3fa5419ab1c41b5589fd 008817ad1025e42597bfd6979055852b987e299d a2222efce8750152c4a93c877f8ac69245f2c63bb7a9e467d557226e3b42cef3
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4lb8zfBCrqFdYgazWK4iFA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TNjgRB5hYnl4HyMUGVGYKx6lJh4=
|
|
| fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.35 | 200 OK | 15 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data Hash5d4aeb4e5f5ef754e307d7ffaef688bd 06db651cdf354c64a7383ea9c77024ef4fb4cef8 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Feb 2023 21:48:03 GMT
expires: Fri, 16 Feb 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 310243
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3cb7960c629af2d4a5325cec8696f40b eb04e882f528f56fc09206f741d490a4b091a6dd df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17536
Expires: Mon, 20 Feb 2023 16:51:03 GMT
Date: Mon, 20 Feb 2023 11:58:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3cb7960c629af2d4a5325cec8696f40b eb04e882f528f56fc09206f741d490a4b091a6dd df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17536
Expires: Mon, 20 Feb 2023 16:51:03 GMT
Date: Mon, 20 Feb 2023 11:58:47 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3cb7960c629af2d4a5325cec8696f40b eb04e882f528f56fc09206f741d490a4b091a6dd df3a27c510b477ae3411c0c178fb36d8291503db40f64d22a3fa18061c0ec2b0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF3A27C510B477AE3411C0C178FB36D8291503DB40F64D22A3FA18061C0EC2B0"
Last-Modified: Mon, 20 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17536
Expires: Mon, 20 Feb 2023 16:51:03 GMT
Date: Mon, 20 Feb 2023 11:58:47 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb02e00ed-8b65-4e64-ae13-5e9680255939.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb02e00ed-8b65-4e64-ae13-5e9680255939.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe0339a3229fb01cf8dbaf91de6b7e6f8 33f779cf037dbb8739630f9fb3ffc825678633bf e9aa58bd52abfc440d1817a86176887835cb920261fda1e9d5205645e30e2f4a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb02e00ed-8b65-4e64-ae13-5e9680255939.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5985
x-amzn-requestid: 972f1e7b-eeec-41ab-aa97-7e23b2456746
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmypVFybIAMFsnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f297d5-1a9dbd562ec347113f4d6527;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:42:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EjYedA-lt6VjwQtgSlbL-SGD6qRLmXE1dQooY7OPliotQ31IOe30sg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:58:16 GMT
age: 50431
etag: "33f779cf037dbb8739630f9fb3ffc825678633bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1fb795dc1da607d7abd375588fd5b870 2d2ac3b1203a7256bd9f425ec32e569f262547dd ed323b2ee3701a082f9016d13c6fb34d7df2a208407d4d10d0d70cdeddac14e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7153
x-amzn-requestid: e923bb08-b66c-4a50-a40e-f77d3afdd11c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxiPHJtoAMFofA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f2960e-2f12021e701506482d3d08d7;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Gz1cNXmGoddIdVs0Zjsw7G0uuIGCOFz-886BaBbUOapkKTyzFGczYQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:41:38 GMT
age: 51429
etag: "2d2ac3b1203a7256bd9f425ec32e569f262547dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b808831-2e6e-4d7f-98ef-5fa5f424c7e8.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b808831-2e6e-4d7f-98ef-5fa5f424c7e8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe60104db998ac91d382708a10169a348 7ca99ed68c938e67ff19a7ad6b86aadda8f66701 d039faba58498f62413f416bf012c28371ebd461a3a8556c5fb83164220147c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b808831-2e6e-4d7f-98ef-5fa5f424c7e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10094
x-amzn-requestid: 3aa04ec2-1d3e-43b3-b38b-7d3976f37422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmyVfGdoIAMFasQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f29756-14d8379e6b2f160e6951ba34;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:40:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4YAY1ga0cqpfn9LoboqGNhyIHkFhiYlIuTmmv2z0rYtK0ZXa8uQhNQ==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:58:16 GMT
etag: "7ca99ed68c938e67ff19a7ad6b86aadda8f66701"
content-type: image/jpeg
age: 50431
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9c5a0bab7d34e51ee6476be179b356ba 87917d3cf520d73b7b1029f44505e7700413d51d 136e727a99409218318247b645558fad485ed84bcd90bd43a5895492cb317d89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6879
x-amzn-requestid: 18c46562-f8d9-4f7f-8ea0-1bb46e206f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANnahEWgIAMFwYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e885dc-50a7cfe4693b4efb038ce1a7;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 06:23:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwK1XWOYMXy8qna9sVCV7q__QKMko9KXa8towbYhIj1EolPbqEuIHQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Mon, 20 Feb 2023 09:13:17 GMT
age: 9930
etag: "87917d3cf520d73b7b1029f44505e7700413d51d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d39b125-1e85-400d-99fc-58419687c8e2.png | 34.120.237.76 | 200 OK | 14 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d39b125-1e85-400d-99fc-58419687c8e2.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash99783aaf5b36d64a78c116c4119494a8 2b322c573bd993dc12803e5d34176d3da3e2be79 0ec2e9ecafad2d3e7cae2f31191290672f49244f2a999ba296a4efa90227490e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d39b125-1e85-400d-99fc-58419687c8e2.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14135
x-amzn-requestid: 025343ab-0d68-43f5-a555-729d6b2c20aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxcdHqXIAMFZyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f295e9-296e9a6803e2b9ca4aecc361;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:34:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N2OYm4LlpS1MqfaDAXLevyQo1kMN54c27fyYej-hKt1-x406EQAznA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:45:24 GMT
age: 51203
etag: "2b322c573bd993dc12803e5d34176d3da3e2be79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F272e1475-5bb2-4e05-a554-ff035f0a3e88.jpeg | 34.120.237.76 | 200 OK | 7.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F272e1475-5bb2-4e05-a554-ff035f0a3e88.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash79a00f0894dff828f176f7c4ff73aea4 27c1e1c37ae87e4f7afc8d236248ceb3213a8919 5087bfce27855e0e9ca5fcc8117a826b4e6ea1e356a94220fbd4183dfea8f864
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F272e1475-5bb2-4e05-a554-ff035f0a3e88.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7108
x-amzn-requestid: 79b493a4-70b6-4b77-ab99-a3c9a8010c6e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxcdGZHIAMFm-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f295e9-1082279b4cf3c1b210364868;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:34:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8nUft-G9jz-PF60qtzr_OJ7U8Nzg8i9NzJAw3EiN2XxLgjhZE9Gh9g==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:41:38 GMT
age: 51429
etag: "27c1e1c37ae87e4f7afc8d236248ceb3213a8919"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/Scripts/jquery_1.11.1.min.js | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/Scripts/jquery_1.11.1.min.js IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /Scripts/jquery_1.11.1.min.js HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/javascript
last-modified: Thu, 10 Feb 2022 09:05:33 GMT
etag: W/"d07cc5c5d1ed81:0"
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rLjaa3f0Ecvx1hMkjOxNRXkSsa%2FgBlzBSzC0T3gmB6B1FDWnplSR2KC1PhbjzUTamTzxkCTqQh4S13memQSVzhxucV2U1jaJxLwIcPC1Kilh21a9IWlHO46GOKIasJXmUKZ4s7th7WjVFeFg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c7127eec070b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/bootstrap/css/bootstrap.min.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/bootstrap/css/bootstrap.min.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
last-modified: Tue, 22 Dec 2020 15:20:56 GMT
etag: W/"07c38b76d8d61:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GI43tX7%2Fkt65mB8JDSCSzDHUZlyj8aY67cEmj1kLNrz0O6iLy%2F%2BKrYOjH2VrX0ZL24C8KyzyluuRxIkh8LGRdoPquXJF6UFTtrQ%2Bm9UcuF6npHJSnNusVRG31eSF7qeIsR2z%2F3w2kxJE0%2FFI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbdc0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/modernizr/modernizr.min.js | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/modernizr/modernizr.min.js IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/modernizr/modernizr.min.js HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/javascript
last-modified: Tue, 22 Dec 2020 15:20:56 GMT
etag: W/"07c38b76d8d61:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tWrIOgMbZ2DrZKTUZ2BiYpXQt1Vwa%2F1xqEjYKHPJEnlal5v5OAGSlrvU2AwftmPAaV56H9O2wkIyCxKt6FnUx7g5L8C3d%2F49QAiyOg1PSoAcoq3HUm5wMCw9CqnsDKqH2c8YqFqpERtC4QTq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127eebfd0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/css/theme-animate.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/theme-animate.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/theme-animate.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=29110
etag: W/"0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zuTR3IRNWUxf5khz32LtPEiqgvDyNSigPQCQ%2BEyt3jw8OUxvlH37CtzK0jBIsQp8N9OuzXbJuvPGXrL8vozpGoshjMlV%2FiSWqmTke1GoSjCwDY7cjY5ruFAP9xs2jmCEtQu07DeHmjwktz9o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c7127edbf10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/rs-plugin/css/navigation.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/rs-plugin/css/navigation.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/rs-plugin/css/navigation.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=57265
etag: W/"0a969c76d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:58 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kBSlFi%2BwT3FMh31C%2FD%2Fw8RId7mz54m48TS%2B2hUUyZdaykfhHzdMYIOZP5gbAmTKpb2SuVxKx%2BRVJn72E5Tnru1M%2B4wbKkSMHbRDtZyF6PhLl%2FCeFEoCQNyIBmkvHQ0j8ViorptaX5RykE4vc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbf60b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1CBxxDfKZR4ADfAGXiSpqXrMqPKXbgM2u0fZZXftc5lm92TjOOr0BQn56Vr4T_vmTOYvVxCZkeR92_xXF05wYT_64f4fw6HruFnPg9bDbHNqLHCI6k3TQwB4Gplp5NmUiw2&t=2265eaa7 | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1CBxxDfKZR4ADfAGXiSpqXrMqPKXbgM2u0fZZXftc5lm92TjOOr0BQn56Vr4T_vmTOYvVxCZkeR92_xXF05wYT_64f4fw6HruFnPg9bDbHNqLHCI6k3TQwB4Gplp5NmUiw2&t=2265eaa7 IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ScriptResource.axd?d=nv7asgRUU0tRmHNR2D6t1CBxxDfKZR4ADfAGXiSpqXrMqPKXbgM2u0fZZXftc5lm92TjOOr0BQn56Vr4T_vmTOYvVxCZkeR92_xXF05wYT_64f4fw6HruFnPg9bDbHNqLHCI6k3TQwB4Gplp5NmUiw2&t=2265eaa7 HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/x-javascript
cache-control: public
expires: Tue, 20 Feb 2024 07:17:36 GMT
last-modified: Mon, 20 Feb 2023 07:17:36 GMT
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=45pElK9EsXLr8Rk7TskrwxFYwgvzrdM67YzFeZDoLWS14QVs8d1IaPOsWOat5keEFZqLems%2B1Yo1fWiBcnf9JCYZyoj%2Br5wylwMEyWBw5Nzck3kTUUqxqUnHoKJ36VJ%2BELg1cfFXSjgdz2j4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127eec100b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/unsubscribe.aspx | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/unsubscribe.aspx IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /unsubscribe.aspx HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/html; charset=utf-8
cache-control: private
set-cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l; path=/; HttpOnly; SameSite=Lax
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3JbsO7M7pcbe1t%2FFvvgBQY1e9e7Py7SJHhAZny%2BDcU669dsAEjQadVv3eXOXEp0t6jguGONwS0OYItAZD3DIfkEG4VRcqghwcYJGiD2vuc4LvUMs7yEFwtKetKdyR5h7BfYmbCy6Vlo0nFE7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127d5a190b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/css/skins/default.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/skins/default.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/skins/default.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=120820
etag: W/"0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9nGn5qify5d4bxr9lQIAeam13VABr2P7YMMeSkdyooV7A68GZu4UXSW6Dq2IiVHosLSes8PCMoZLgbTcaPiV9j%2BWadEppNiWZj1GGRyHn8a29pjQP%2FDTTLY88TXtcdNUo5wI7Q4o9VdFtbco"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c7127edbf80b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/css/theme-elements.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/theme-elements.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/theme-elements.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=143339
etag: W/"0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RzSIBCHoHRPlUflfr7T54PWSreH%2F7XWMh0BNI%2FPB6nTG5i96qL05d4AsiRx2Ea9vEAYCBRzS0%2Blye%2BEGqzuNVXShw4QICp8i8gNGOuAr0BDMIuxlofH4ZaUsr40y7NhPCZ8gMMGbLoBN38Nm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbed0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/font-awesome/css/font-awesome.min.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/font-awesome/css/font-awesome.min.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
last-modified: Tue, 22 Dec 2020 15:20:56 GMT
etag: W/"07c38b76d8d61:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5v%2FFIAEVtBK6bHUC9tXFzddNtIzmAyyyQ26yeRyXSXce5Zo04boigiN8xew83BzYKFMevyk5a8g1QZ2P0nE67%2F%2BIPkIADcp4Nfn421%2B18LRSSTiUHG%2BAYYIRoaAHqCAaIXacqE%2FNTSaEAPoo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbdf0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/css/theme.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/theme.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/theme.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=101006
etag: W/"0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2Fb5SFI38opAkqPORi9cxlx4qGUy7uhib%2FeLQ%2FfpqBXxJoFgfuW5XFwY%2FZsoBDDNGLZuVRpeWBQWXp4yOP40m%2BQmXcGwh%2FkBnEVi8VEkMhbFJ63uOEN8hM%2BShQWxuPA0oGWAAxtSBi3eT8j9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbeb0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/css/theme-blog.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/theme-blog.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/theme-blog.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=6075
etag: W/"0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i30qTX8YhZCOyYarhWHyrDclh5Nl8HIYNsdKRDpDSWkrUD5LtkhXpxIVeP%2FUgNB%2F%2F3ZIjOqkp0jyGxYcLyX2%2FjzL8YqsDvaQnK7KUAI7952zbupXiWfYLviD0rsHCEq8E4T%2B9YThoDQjny7K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbee0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlWGULcvAg9FZnE40X6_8ahagJvPf4e-JxFnpJpLdSD9SGsZmxPdVy6IKu7a61bklQ2&t=637811549229275428 | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlWGULcvAg9FZnE40X6_8ahagJvPf4e-JxFnpJpLdSD9SGsZmxPdVy6IKu7a61bklQ2&t=637811549229275428 IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /WebResource.axd?d=JoBkLzP19aTuxbWOhHobYlWGULcvAg9FZnE40X6_8ahagJvPf4e-JxFnpJpLdSD9SGsZmxPdVy6IKu7a61bklQ2&t=637811549229275428 HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/x-javascript
cache-control: public
expires: Tue, 20 Feb 2024 07:17:37 GMT
last-modified: Wed, 23 Feb 2022 00:28:42 GMT
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZV4HFCpxRvsxtS05ARn0q77FXS0j7OSzXi8RbHz0MDE8dzYl852UUlwt5sH%2FBKpe%2FTvXVE2d1WY9grR%2Fw4MPKGBJQSXW%2Bont7xXXmjjcIVHqAwPcK4OzQZKeXstNnbGLk6q2FfHlPWvw9I7%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127efc230b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/magnific-popup/magnific-popup.min.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/magnific-popup/magnific-popup.min.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/magnific-popup/magnific-popup.min.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
last-modified: Tue, 22 Dec 2020 15:20:56 GMT
etag: W/"07c38b76d8d61:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ANNd8evlL%2Bvn5o%2BOsfST8p0NqPA4whjzaxQ1rvt6ICdjOmEu0%2FeuwIDQW3HuIh7wrHRy9RvtisNzFWGUEe%2F8EPj1lSG3WZwTjBEn18KTi3uv0oYhBbeEgzCMoGvyIHbjERp%2Bjk2HdHaasWR2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbe60b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/unsubscribe.aspx?_TSM_HiddenField_=toolkitScriptMaster_HiddenField&_TSM_CombinedScripts_=%3b%3bAjaxControlToolkit%2c+Version%3d3.5.60919.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d28f01b0e84b6d53e%3aen-US%3a311bfa99-1d92-41d7-aace-73bb01d14bf6%3a475a4ef5%3aeffe2a26%3a3ac3e789 | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/unsubscribe.aspx?_TSM_HiddenField_=toolkitScriptMaster_HiddenField&_TSM_CombinedScripts_=%3b%3bAjaxControlToolkit%2c+Version%3d3.5.60919.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d28f01b0e84b6d53e%3aen-US%3a311bfa99-1d92-41d7-aace-73bb01d14bf6%3a475a4ef5%3aeffe2a26%3a3ac3e789 IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /unsubscribe.aspx?_TSM_HiddenField_=toolkitScriptMaster_HiddenField&_TSM_CombinedScripts_=%3b%3bAjaxControlToolkit%2c+Version%3d3.5.60919.0%2c+Culture%3dneutral%2c+PublicKeyToken%3d28f01b0e84b6d53e%3aen-US%3a311bfa99-1d92-41d7-aace-73bb01d14bf6%3a475a4ef5%3aeffe2a26%3a3ac3e789 HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/x-javascript
cache-control: public
expires: Tue, 20 Feb 2024 11:58:45 GMT
last-modified: Mon, 23 Jan 2023 09:35:31 GMT
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iVy%2FaCPHPajIC3h4H6%2FV6RyUunvzuBu%2FO3AZ0B8kukLS3hBPsKjnUFjPSuWfjAw1I6wStiEy8zUTo8R%2BGm%2BmXwBzdhqcpSs4NgfBDkxmHxvrpu0bP10ZNVPv1RgGOKLosySBibeUWiocqAwC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127efc1a0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/ScriptResource.axd?d=x6wALODbMJK5e0eRC_p1LS5r1QcXqZoNZvyiHfrpdMpmqNCmK-r0pRAn0EUriugnH0EKcCs9pSmR7uffsjskwaihq19fKY9H4XYK3P-vuDitLuwTLiBUy3vv1-Ah4G0r0&t=60b7ac5d | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/ScriptResource.axd?d=x6wALODbMJK5e0eRC_p1LS5r1QcXqZoNZvyiHfrpdMpmqNCmK-r0pRAn0EUriugnH0EKcCs9pSmR7uffsjskwaihq19fKY9H4XYK3P-vuDitLuwTLiBUy3vv1-Ah4G0r0&t=60b7ac5d IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ScriptResource.axd?d=x6wALODbMJK5e0eRC_p1LS5r1QcXqZoNZvyiHfrpdMpmqNCmK-r0pRAn0EUriugnH0EKcCs9pSmR7uffsjskwaihq19fKY9H4XYK3P-vuDitLuwTLiBUy3vv1-Ah4G0r0&t=60b7ac5d HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/x-javascript
cache-control: public
expires: Tue, 20 Feb 2024 07:17:36 GMT
last-modified: Mon, 20 Feb 2023 07:17:36 GMT
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FKwf6jV04xRBFnjEwiUGAahPdhdly7%2FVKX1endcXoGNJ4puk6N77OOM6SJB65pb%2B7Cdu1dIsPx1fj21VXktSShzNr%2BVUYSLaa73%2FN%2FXqVYGrGokEk31WaW8u2ch5DMiKnq1y3dm2FEaCot55"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127efc170b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/owl.carousel/assets/owl.carousel.min.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/owl.carousel/assets/owl.carousel.min.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/owl.carousel/assets/owl.carousel.min.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
last-modified: Tue, 22 Dec 2020 15:20:58 GMT
etag: W/"0a969c76d8d61:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0AZv2Pek58dObUHxWQDF4AIkWf3Ar7BIx%2BFrKtjjc0gqa0cKrOKcJ8gmu56CYdUk2zjYZXZ9P%2F%2FVzmTpTK8E3eD3RT6f25T3gGp7h9a9WyGDpEI3FYGBpPW0v1rEDm7Wf6Lp8IaJAeGpj3QO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbe10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/rs-plugin/css/layers.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/rs-plugin/css/layers.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/rs-plugin/css/layers.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=115015
etag: W/"0a969c76d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:58 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uFZD3zlXnQSJAJ7rfXxaV8sxyg0ADTLq62HJu0EeX9SndSkAE3sZ0ZcnQ3h%2BfTttaj4IvxB78VS87bXzTEXGuHUZtoYv17O9hB91gwqM2lceDe1EJsYVVdZowLfDZm9LyBJHy56bCXhSnYHe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbf50b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/css/theme-shop.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/css/theme-shop.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/css/theme-shop.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=13399
etag: W/"0f5a4776d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:50 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NZ%2FivuL21nPEdyHJg%2Fu9Pi5tzLm1xP1NLrScyXxhJiHshS7%2BcIs%2BoqX0hVLeZ1jv2C4QqTIlZLOzS4hjStgz%2FKGMQOACnbPPgQwjNosU5PnU26NNrRbTTGatM09DBeZhIOqrGeo6l6KYco40"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbef0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZN2Rm0pkdU0yfav2i6OOugl2Ni9bTRzOXGws_1TiBIlxnUugxTqPozsjBIOUUQLvug2&t=637811549229275428 | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/WebResource.axd?d=pynGkmcFUV13He1Qd6_TZN2Rm0pkdU0yfav2i6OOugl2Ni9bTRzOXGws_1TiBIlxnUugxTqPozsjBIOUUQLvug2&t=637811549229275428 IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /WebResource.axd?d=pynGkmcFUV13He1Qd6_TZN2Rm0pkdU0yfav2i6OOugl2Ni9bTRzOXGws_1TiBIlxnUugxTqPozsjBIOUUQLvug2&t=637811549229275428 HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/x-javascript
cache-control: public
expires: Tue, 20 Feb 2024 07:17:36 GMT
last-modified: Wed, 23 Feb 2022 00:28:42 GMT
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o8tuGjw9RD2pqhvwazjtvfIW%2FMgsZcWXEy46gip%2FAruds0I%2BwRDNdIRFll92ljEKeXutNRRMbT5YH%2FAvotNW%2Bpwf1m12xEL%2BQ4HXrT9%2BZcjEkX0ExLStXiHc8hnqvw2vHYxQYwRoPskRy%2FmQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127eec0c0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/ScriptResource.axd?d=P5lTttoqSeZXoYRLQMIScEFhQC9OcWeEdfdEZQVXbEnLVrg1F1k3l7YMgRZPL_R4dX2LqQrFBpDDNkedJ17-S3jHomvgGdN3JeFVmntd9wzqmi-BVqLbj5zS27JzHifz0&t=60b7ac5d | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/ScriptResource.axd?d=P5lTttoqSeZXoYRLQMIScEFhQC9OcWeEdfdEZQVXbEnLVrg1F1k3l7YMgRZPL_R4dX2LqQrFBpDDNkedJ17-S3jHomvgGdN3JeFVmntd9wzqmi-BVqLbj5zS27JzHifz0&t=60b7ac5d IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /ScriptResource.axd?d=P5lTttoqSeZXoYRLQMIScEFhQC9OcWeEdfdEZQVXbEnLVrg1F1k3l7YMgRZPL_R4dX2LqQrFBpDDNkedJ17-S3jHomvgGdN3JeFVmntd9wzqmi-BVqLbj5zS27JzHifz0&t=60b7ac5d HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: application/x-javascript
cache-control: public
expires: Tue, 20 Feb 2024 07:17:36 GMT
last-modified: Mon, 20 Feb 2023 07:17:36 GMT
x-aspnet-version: 4.0.30319
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9FVh6kAHFzf7iBmzvlBeuDIBkTDQXLu4K4IKXurFJpGMlF8z8JyOXY5FOhYd%2BYyGZHAs7iUC2gTk3HjshWHX%2BvC5QoLsfE7mMmZEt3tyrY4S9%2FPT9ToiQlVuXA3CFJp3UCbhCDr3FfiVByvN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127efc190b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| advanceleadgeneration.com/template/HTML/vendor/rs-plugin/css/settings.css | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2advanceleadgeneration.com/template/HTML/vendor/rs-plugin/css/settings.css IP188.114.96.1:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /template/HTML/vendor/rs-plugin/css/settings.css HTTP/1.1
Host: advanceleadgeneration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://advanceleadgeneration.com/unsubscribe.aspx
Cookie: ASP.NET_SessionId=002oqft5jplbzftfogtngp5l
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 11:58:45 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=36409
etag: W/"0a969c76d8d61:0"
last-modified: Tue, 22 Dec 2020 15:20:58 GMT
vary: Accept-Encoding
x-powered-by: ASP.NET
cache-control: max-age=14400
cf-cache-status: HIT
age: 4551
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cJB3wWeClhhpYxYdOC7ymgxiZ2P%2Bq3K%2BQWh%2Bz8j1Mjxc6FRJKgN1TvF%2BOeFu%2FrCxggbEPVImotGgCQxYAIButf3mpHsEOYSrv%2FlaQCxPCa9N769fY%2FBywbYDpyDle8gl4De9OpJyQlIHAUUX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c7127edbf20b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
0.0.0.0