r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 048cda18c6dbe7c4e4b106f5e1104b0a
1bd6f3367ccf446263b00ad8c1ece15a4164730b
66a680d9b8e454db94e14d2c4a466891e538b2d83ccee0dc65be62163992b4e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "66A680D9B8E454DB94E14D2C4A466891E538B2D83CCEE0DC65BE62163992B4E0"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10775
Expires: Thu, 22 Dec 2022 03:43:48 GMT
Date: Thu, 22 Dec 2022 00:44:13 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b8fbcd7ca1a893d05677318a8a198e7a
0851654c21f6e3741887e7deab8098c1dc56f33c
edbade5913ace2fcbb932922e9af69acb2e8759474a2eeaec216307247fea361
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDBADE5913ACE2FCBB932922E9AF69ACB2E8759474A2EEAEC216307247FEA361"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11337
Expires: Thu, 22 Dec 2022 03:53:10 GMT
Date: Thu, 22 Dec 2022 00:44:13 GMT
Connection: keep-alive
www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
76.76.21.123308 Permanent Redirect 576 B URL HTTP/1.0 www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
IP 76.76.21.123:0
Hash a5248dc0709ec584dc568fdde7609ee1
e9e460cb0a9d18533f51a4061161e71fc54d097f
ca8deda184ae6b1baac94ed6cf423a4c1c19b7b0e1536fb1f6eb2038045c33d0
GET /download/63920b7284ac6a3e6c66b5a6 HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.0 308 Permanent Redirect
Content-Type: text/plain
Location: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Refresh: 0;url=https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
server: Vercel
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 22 Dec 2022 00:34:39 GMT
content-type: application/json
age: 574
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qTYPUtqjBg/L8RDwEHD9CeM1ZYUmCNPCrfwhigCe8v9KggJ7NObHdEAB7k2WIgjV04OC+mUU3TyjA3YDRCK7wA==
x-amz-request-id: BRVVWQMKAXN9QATB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 21 Dec 2022 23:55:33 GMT
age: 2920
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Dec 2022 00:44:13 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 22 Dec 2022 00:08:02 GMT
age: 2171
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 859d899d982bb69df5fb16b8393fa119
580215f1d4f81cda04012c0889cfd9b18ba11863
38159dd549e94d45798b614efa5f968de7b74830c845220d1b6c1435f3940a94
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 76
Cache-Control: max-age=116632
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Etag: "63a2ccaa-1d7"
Expires: Fri, 23 Dec 2022 09:08:06 GMT
Last-Modified: Wed, 21 Dec 2022 09:06:50 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
www.dogefiles.io/_next/static/GlwrefQKkWln6meNA1Dg2/_buildManifest.js
76.76.21.164200 OK 948 B URL HTTP/2 www.dogefiles.io/_next/static/GlwrefQKkWln6meNA1Dg2/_buildManifest.js
IP 76.76.21.164:0
File type ASCII text, with very long lines (948), with no line terminators
Hash 11a123f26ec2d2679ccf0cb4cba25f9a
ea20e5ff172dde66fbe1c9eb3365da8192f3b0c3
91effc833204ff90d7ea01b8835765830b15f62ccbce42fefddc12ed7d600e3a
GET /_next/static/GlwrefQKkWln6meNA1Dg2/_buildManifest.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 4698497
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_buildManifest.js"
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: "11a123f26ec2d2679ccf0cb4cba25f9a"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/GlwrefQKkWln6meNA1Dg2/_buildManifest.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::8bhl2-1671669854444-f24ca6053e41
content-length: 948
X-Firefox-Spdy: h2
www.dogefiles.io/_next/static/GlwrefQKkWln6meNA1Dg2/_ssgManifest.js
76.76.21.164200 OK 77 B URL HTTP/2 www.dogefiles.io/_next/static/GlwrefQKkWln6meNA1Dg2/_ssgManifest.js
IP 76.76.21.164:0
File type ASCII text, with no line terminators
Hash b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
GET /_next/static/GlwrefQKkWln6meNA1Dg2/_ssgManifest.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 4660491
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_ssgManifest.js"
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: "b6652df95db52feb4daf4eca35380933"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/GlwrefQKkWln6meNA1Dg2/_ssgManifest.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::qdsj5-1671669854445-cb3ba497fc60
content-length: 77
X-Firefox-Spdy: h2
www.dogefiles.io/pop.js
76.76.21.164200 OK 34 kB IP 76.76.21.164:0
Hash de8639c608607c457a9ab85b26b60202
b6d3c1b08dc42e084af53f7730ec47b82ad0f53d
83ddc7b8e136cb0fbc2cdb066e151fd348573b072ef627636be9cebdecca7cd1
GET /pop.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 4688849
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="pop.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: W/"f851d80504b70d6e987d67e9d8c80342"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /pop.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::8bhl2-1671669854438-f78d1773f75c
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.163.49.154101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.163.49.154:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: z0rbdKRYKvBojRejY9eEUw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WI461LMNHRmzI/As659ZMfgMV9s=
www.googletagmanager.com/gtag/js?id=G-7CNY7SNMM1
142.250.74.168200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-7CNY7SNMM1
IP 142.250.74.168:0
File type ASCII text, with very long lines (20080)
Hash 90a9a9c3956e19bcf4b794592ff9701b
fb5941ce509c3d3906f9b89be02c49415bc542b4
e6e8315abef0a43eb20b5b95204aac71dfd2e35daf670ad363b46c64b84b30a2
GET /gtag/js?id=G-7CNY7SNMM1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 22 Dec 2022 00:44:14 GMT
expires: Thu, 22 Dec 2022 00:44:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76258
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash d30907d8b4e8f5c7644a5f3ade244746
b4897a3b75cde46af816f8edf2ad1238739c15cf
054586891a1e335abf433826d90fae3f561874d3ae9bf27587d5706d34d1d3af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dba9ytko5p72r.cloudfront.net/?tyabd=948540
143.204.42.112200 OK 116 kB URL HTTP/2 dba9ytko5p72r.cloudfront.net/?tyabd=948540
IP 143.204.42.112:0
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 116 kB (116222 bytes)
Hash 74d8a434d71cfb9da77fb20cf4850918
c526b6195e0afded193f77dac6c20c4a58c3ac97
8fa1e1c245f1d8c56566cd3d4cea7ac49a861bd9adfdb06fb4c5d3b4aac1f784
GET /?tyabd=948540 HTTP/1.1
Host: dba9ytko5p72r.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 116222
date: Thu, 22 Dec 2022 00:44:14 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sph1A9XvYwPN0VPG5ZDb_1aHgV4e6d-lVms2J82QTQkWtuPGM0nS_w==
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
IP 142.250.74.131:0
Hash 4013ff6655e50a1a7b7ab9d9892159ad
e29025cb7fcffcbe372999cb79c3f31ff9f8833a
5d96321ad0a7963a9f5af826c0e6a49ca10b5cff96f3eed2e74399fe9434f4a8
POST /s/gts1p5/0hx5Qbo2aiM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
IP 142.250.74.131:0
Hash 4013ff6655e50a1a7b7ab9d9892159ad
e29025cb7fcffcbe372999cb79c3f31ff9f8833a
5d96321ad0a7963a9f5af826c0e6a49ca10b5cff96f3eed2e74399fe9434f4a8
POST /s/gts1p5/0hx5Qbo2aiM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
IP 142.250.74.131:0
Hash 4013ff6655e50a1a7b7ab9d9892159ad
e29025cb7fcffcbe372999cb79c3f31ff9f8833a
5d96321ad0a7963a9f5af826c0e6a49ca10b5cff96f3eed2e74399fe9434f4a8
POST /s/gts1p5/0hx5Qbo2aiM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
IP 142.250.74.131:0
Hash 4013ff6655e50a1a7b7ab9d9892159ad
e29025cb7fcffcbe372999cb79c3f31ff9f8833a
5d96321ad0a7963a9f5af826c0e6a49ca10b5cff96f3eed2e74399fe9434f4a8
POST /s/gts1p5/0hx5Qbo2aiM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wouldnotspea.info/aVZxMVFGaRJCbD88O2gEPjIWcwYrPydcACw0JlkHMBcBQQsFH1dFOA1rSAVpX2VEFyEAMkwAdxoiEEUkGmtAFzgHMB4Mdx9rQB9iXXhCAH9bcAQMYE8iAVA2VGdXQSUdOkwAZ15nRwdoUWNFB2JY
104.21.95.28204 No Content 0 B URL HTTP/2 wouldnotspea.info/aVZxMVFGaRJCbD88O2gEPjIWcwYrPydcACw0JlkHMBcBQQsFH1dFOA1rSAVpX2VEFyEAMkwAdxoiEEUkGmtAFzgHMB4Mdx9rQB9iXXhCAH9bcAQMYE8iAVA2VGdXQSUdOkwAZ15nRwdoUWNFB2JY
IP 104.21.95.28:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /aVZxMVFGaRJCbD88O2gEPjIWcwYrPydcACw0JlkHMBcBQQsFH1dFOA1rSAVpX2VEFyEAMkwAdxoiEEUkGmtAFzgHMB4Mdx9rQB9iXXhCAH9bcAQMYE8iAVA2VGdXQSUdOkwAZ15nRwdoUWNFB2JY HTTP/1.1
Host: wouldnotspea.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 22 Dec 2022 00:44:14 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lrh%2Bns3aw%2BxSRoUuqfG2U9G57XLrF%2BmX%2B2PC0gJlY%2BGLM4coOagjEx2DzWfZ6PUGHsQPzqrpXfBUzTjVWL%2BdjRvzoqxYHiz4aERRtoTrqiVw%2FacDad87F0kPowiiHae25I7dvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d4d3f0f82f0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/0hx5Qbo2aiM
IP 142.250.74.131:0
Hash 4013ff6655e50a1a7b7ab9d9892159ad
e29025cb7fcffcbe372999cb79c3f31ff9f8833a
5d96321ad0a7963a9f5af826c0e6a49ca10b5cff96f3eed2e74399fe9434f4a8
POST /s/gts1p5/0hx5Qbo2aiM HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wouldnotspea.info/Um9GbzR9UCUcCQQ5Igd6OD0sNWIDKwQodjo6IVdyCAIcNnYDNmAbXTZSf1sMZ1t3SUQ7C3teDHQcMg5AJxx7XhI7ASAACXQZe14aYkF0QQZ0GnteEiYfJwgJY0k2G0A+UndZA2NZcFYMZ1twXQc
104.21.95.28204 No Content 0 B URL HTTP/2 wouldnotspea.info/Um9GbzR9UCUcCQQ5Igd6OD0sNWIDKwQodjo6IVdyCAIcNnYDNmAbXTZSf1sMZ1t3SUQ7C3teDHQcMg5AJxx7XhI7ASAACXQZe14aYkF0QQZ0GnteEiYfJwgJY0k2G0A+UndZA2NZcFYMZ1twXQc
IP 104.21.95.28:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Um9GbzR9UCUcCQQ5Igd6OD0sNWIDKwQodjo6IVdyCAIcNnYDNmAbXTZSf1sMZ1t3SUQ7C3teDHQcMg5AJxx7XhI7ASAACXQZe14aYkF0QQZ0GnteEiYfJwgJY0k2G0A+UndZA2NZcFYMZ1twXQc HTTP/1.1
Host: wouldnotspea.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Thu, 22 Dec 2022 00:44:15 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ngqb2C7I2u8HxOfkS%2B%2BempCYKeD7z3eUruDac2lyd7wsf7BdKtKw1buIRE7kz7mKGQY1ETq4%2B5X6z4jUI%2FfJKnepLaMINv%2F07MvxVjjdW2%2BUWfrEN2xgyPAtf%2B8rUOYBOQEsig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d4d3f138570b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-7CNY7SNMM1>m=2oebu0&_p=108928047&cid=1499854364.1671669854&ul=en-us&sr=1280x1024&_s=1&sid=1671669854&sct=1&seg=0&dl=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&dt=Graphics-Hook64.Dll.Zip%20-%20Dogefiles&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.page_path=%2Fdownload%2F63920b7284ac6a3e6c66b5a6
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-7CNY7SNMM1>m=2oebu0&_p=108928047&cid=1499854364.1671669854&ul=en-us&sr=1280x1024&_s=1&sid=1671669854&sct=1&seg=0&dl=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&dt=Graphics-Hook64.Dll.Zip%20-%20Dogefiles&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.page_path=%2Fdownload%2F63920b7284ac6a3e6c66b5a6
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7CNY7SNMM1>m=2oebu0&_p=108928047&cid=1499854364.1671669854&ul=en-us&sr=1280x1024&_s=1&sid=1671669854&sct=1&seg=0&dl=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&dt=Graphics-Hook64.Dll.Zip%20-%20Dogefiles&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.page_path=%2Fdownload%2F63920b7284ac6a3e6c66b5a6 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.dogefiles.io
date: Thu, 22 Dec 2022 00:44:15 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash df14a5a19530790137bd1d8b6008f549
48eab5f519538754132270d4477da9317105e8a3
f900680f537c031d21de4f6289bc29beecfaeb48cf5cb14bc53ce05f5f2af053
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F900680F537C031D21DE4F6289BC29BEECFAEB48CF5CB14BC53CE05F5F2AF053"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4182
Expires: Thu, 22 Dec 2022 01:53:57 GMT
Date: Thu, 22 Dec 2022 00:44:15 GMT
Connection: keep-alive
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26937), with no line terminators
Hash 77a3ba221a4a15e100d60e7fadcad500
13773a494a5f5b1be8671fb2fde4db5225830d48
edc2eb2711a16282882df6275adaa5c37ded48fade1104c2a61bd5bad8120bd4
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a44d30e4407684d06b94c4381972a629
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3288
Expires: Thu, 22 Dec 2022 01:39:03 GMT
Date: Thu, 22 Dec 2022 00:44:15 GMT
Connection: keep-alive
www.dogefiles.io/_next/static/chunks/pages/_app-3c08df96fed6c8a7b833.js
76.76.21.164200 OK 111 kB URL HTTP/2 www.dogefiles.io/_next/static/chunks/pages/_app-3c08df96fed6c8a7b833.js
IP 76.76.21.164:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 111 kB (111442 bytes)
Hash 46d0536fe78a6dab7618c07eb20bd521
90b967a530513fcbc954797e7fff6e5077b75594
cc01bcb86fe4086f7d0efc90da2ad048f8cd6f38edca64b425c51a389ea72240
GET /_next/static/chunks/pages/_app-3c08df96fed6c8a7b833.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 4696763
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="_app-3c08df96fed6c8a7b833.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: W/"2ed87e2450c5ca5960bcb397eb93329d"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/pages/_app-3c08df96fed6c8a7b833.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::79r5t-1671669854446-748380b0327c
X-Firefox-Spdy: h2
www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
76.76.21.164200 OK 60 kB URL HTTP/2 www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
IP 76.76.21.164:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (41791)
Hash 1e50bb81bb8c976a2d0ddb17d2c3ed7c
4901eb628afaf41302abca751cae4701183e0e72
e0f3d955e35e485e177291cd9632526d6557742646dcc30431bba84bac46ea9b
GET /download/63920b7284ac6a3e6c66b5a6 HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
age: 0
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
content-encoding: br
content-type: text/html; charset=utf-8
date: Thu, 22 Dec 2022 00:44:13 GMT
etag: W/"143b2-SZzGAYuQJO/kn5bOHZkZYU0KAuM"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /download/[id]
x-powered-by: Next.js
x-vercel-cache: MISS
x-vercel-id: arn1::iad1::8bhl2-1671669853546-6d487991a5e2
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3288
Expires: Thu, 22 Dec 2022 01:39:03 GMT
Date: Thu, 22 Dec 2022 00:44:15 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash db151f8790fc80bb535b13560972296a
768a8261c1529ccdd5f7ecd2f3b4e65d8e6fa0d1
36b57f1a1229e6700cef5491018a90ec4fe375a4c7bb8e3c7ac8a4cf2ad73d5a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36B57F1A1229E6700CEF5491018A90EC4FE375A4C7BB8E3C7AC8A4CF2AD73D5A"
Last-Modified: Tue, 20 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3288
Expires: Thu, 22 Dec 2022 01:39:03 GMT
Date: Thu, 22 Dec 2022 00:44:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe214af9e-bbea-4c56-8594-6c13fa8e8658.jpeg
34.120.237.76200 OK 4.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe214af9e-bbea-4c56-8594-6c13fa8e8658.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f10f083831869d290396d5b9066449fb
9752d6ec06f3e55ae86d60d27911d8c82ff4a9c4
4a0a255f740bce3f6515b37dba1c94dfd7869088e1a2043a8ea5b3790de1fb4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe214af9e-bbea-4c56-8594-6c13fa8e8658.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4081
x-amzn-requestid: b589c193-565b-4069-83f9-47cceac1c56d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhCNkGykoAMF0Mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37d89-74877b0e74988a776c55561f;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:41:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: bAdhstYbD52w6YX3KsTt8q5nRiBJBkafqewhDw6Yj5GYmEi-ZskoXA==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 21:54:30 GMT
etag: "9752d6ec06f3e55ae86d60d27911d8c82ff4a9c4"
content-type: image/jpeg
age: 10185
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b67d0976563ea9460d94e27ff920f9da
f1998577eb3bc2214f195f72a8a1b4ad8aa6bc92
c7ec3c4b87b700796008690562a6033481a7ad826fb2f45875cd6add06189568
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10154
x-amzn-requestid: f317432b-7dda-439b-bc02-9c76412e9de1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_DGlfoAMF5Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-13a5af4c477a1019544222f4;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: yS1XNU_l77CARyxOVmXl2YjyC7BzXEZbqtuFMMwp4KAYN34454O20g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 6bdc2963c9ed59b475ec36c35e5932a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 21:50:13 GMT
age: 10442
etag: "f1998577eb3bc2214f195f72a8a1b4ad8aa6bc92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff640338c-cf29-4eb6-9aad-b99dd40c4d34.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff640338c-cf29-4eb6-9aad-b99dd40c4d34.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8208a2deed09ac48b336e5ad4efea2f2
be822f21b3e19161cd47d08ec0421c7203d41362
5fbbdd64f9e46a7d49d606696e72dad4ff56c74f2a48e931a269eea5b1fc2c5e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff640338c-cf29-4eb6-9aad-b99dd40c4d34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8343
x-amzn-requestid: 7e5f0260-2d92-4b94-aad2-a3a80671250e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dfChFGc4oAMFVSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a2b139-70a623353e18025a7f91e082;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 07:09:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 4VkRZZLGOvViwhmdUR-9E_fEvYdssrAoKzMmkGoNDUnS67wbY1jwfg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 07:35:57 GMT
age: 61698
etag: "be822f21b3e19161cd47d08ec0421c7203d41362"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5dd6622433d537fbb91a04bd3b57d873
552f216608b819b4f65f0574e421f4a761f0d721
5e9b03133d928378a775ab52ec6e58cd7753aa2975a4966534353c0d6bc46af5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11471
x-amzn-requestid: 20d9459a-710b-4fcf-bfce-9f0c5f513740
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEqGPnoAMFcDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12884-4a93ab9047181db109d328e2;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xFAMnDLgSqUyyYrU_e2d_teB4Z0rLA3A6DddLY3rhbX3c0XvE6MTkA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 03:27:41 GMT
age: 76594
etag: "552f216608b819b4f65f0574e421f4a761f0d721"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb884452-5df2-48ab-a4ec-32115997faa9.webp
34.120.237.76200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb884452-5df2-48ab-a4ec-32115997faa9.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f7de42ebe61ecc6711724d27f95eb4c
6ce397b409ef839c0dc05f8b252de815ebd8c8a1
19717a5dcc74517c24f1262ab65461a76318bce3f65f35588c4012dc84d7fddc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb884452-5df2-48ab-a4ec-32115997faa9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8077
x-amzn-requestid: c66fc249-f713-4224-9c5a-520f048ff2ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhCLGGv2IAMFisw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37d7a-2ccd93dd6cd5b63c6cd49bff;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:41:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JlHIruMi5cz1WtmAEBy7KglSf86UutzNegeeZyKgCJnmovtNLDjYnQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 22:00:56 GMT
age: 9799
etag: "6ce397b409ef839c0dc05f8b252de815ebd8c8a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
wouldnotspea.info/popunder.gif
104.21.95.28200 OK 8.9 kB URL HTTP/2 wouldnotspea.info/popunder.gif
IP 104.21.95.28:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash aec7953b0aec9f35a7c83c40fd86d86e
a7c2bcfbec65a944eb81cbd4584c2a768ae54ec0
257c78a5e880c45c8804069975455d7e82ceef77f98aa23ecec725be15cf9538
GET /popunder.gif HTTP/1.1
Host: wouldnotspea.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:14 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 2133
last-modified: Thu, 22 Dec 2022 00:08:41 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9IrwKKW9TUpFE1tPAsVTf2J45u07OjnGu5ICdK5EGQkH%2FRS27o9SaPoopxXG4h4%2FHqi6lRZtO5TmN3MMx9chwZuULb2vBAXPY3TUZbGgl2Vpz921pfjbIEF7yNB7OjeocufXZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d3f0e82d0b45-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26955), with no line terminators
Hash 615b52125dfd6806cd57106c9c8a01cf
3fd6569b376d71b769eee61351ebb9c7260648f8
0ef8f057d6599dbd3bad62313b2c5b8173b3790a0e3d1e2a2e12804f7150536a
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 94319e89f0e661fa7969e0805ab71518
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26945), with no line terminators
Hash 683d38858a218b6142b75850261d7e6b
791d079783bb3adc54e5846eb9e6e15c47056092
178d00a8ce08275255e3c928d2a8da97c28149ae0d2cd1fee9f5e009eddfc8a3
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 25aae7679ad7ef456f5b3a1af4b135c7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 276569e720bad12bf56aa27d65ab1a45
07586e8af42083adaf9e8b8f355e002f7764c68d
e4a0bb2006e4a9e13bd41765b247de4afba35f8cf8b16445c4c0cc8378cafcc6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135504
Date: Thu, 22 Dec 2022 00:44:15 GMT
Etag: "63a30a99-1d7"
Expires: Fri, 23 Dec 2022 14:22:39 GMT
Last-Modified: Wed, 21 Dec 2022 13:31:05 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _FwfpOTP7pzXsF6F32moyW6wOlMSrIN246s2qmjuLa0RAyKfIYzI0w==
Age: 3094
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 276569e720bad12bf56aa27d65ab1a45
07586e8af42083adaf9e8b8f355e002f7764c68d
e4a0bb2006e4a9e13bd41765b247de4afba35f8cf8b16445c4c0cc8378cafcc6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=135239
Date: Thu, 22 Dec 2022 00:44:15 GMT
Etag: "63a30a99-1d7"
Expires: Fri, 23 Dec 2022 14:18:14 GMT
Last-Modified: Wed, 21 Dec 2022 13:31:05 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 366N0-0Eda47nehaOg-Qfw66HfocTHc17jjyanDUQwXbHY9ahrMtlQ==
Age: 2829
simplewebanalysis.com/stats
3.71.139.39200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.71.139.39:0
File type ASCII text, with no line terminators
Hash 8ec558104062229316cc5948f93b9982
785e791757f2b4a25576cfaeb524a0ab7b04930a
66df84134383f21b0a7079626e3adf5501fa3ade6f8d52694b776600204202b6
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.dogefiles.io
access-control-allow-credentials: true
set-cookie: uid_id2=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194:3:1; expires=Sun, 19 Dec 2032 00:44:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
3.71.139.39200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.71.139.39:0
File type ASCII text, with no line terminators
Hash c1d75252f0bc9866c2dba45efd0fef5f
2ecf650d07c1a0473fcf582fc66a3d67463c54a9
4219cbb5d78a2cb85c4b00c2a3150c711264dd82ed2ad08b6f30485c6effb8f1
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.dogefiles.io
access-control-allow-credentials: true
set-cookie: uid_id2=75d7723a-1eee-476d-9a7c-37dc541e48e3:2:1; expires=Sun, 19 Dec 2032 00:44:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
3.71.139.39200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.71.139.39:0
File type ASCII text, with no line terminators
Hash 8d2d887cfd80ec9467a9b22d9c1437c9
a868a0abc69e66995aff40bf0493f3ebc8fd96bc
8003b1def0f723546f7307342eafd6e301bee1e73e43bf47d9e459777c94aa32
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:15 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.dogefiles.io
access-control-allow-credentials: true
set-cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Sun, 19 Dec 2032 00:44:15 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26945), with no line terminators
Hash 683d38858a218b6142b75850261d7e6b
791d079783bb3adc54e5846eb9e6e15c47056092
178d00a8ce08275255e3c928d2a8da97c28149ae0d2cd1fee9f5e009eddfc8a3
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:15 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 16405c50b681980e531f44244efe1af7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
3.71.139.39200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.71.139.39:0
File type ASCII text, with no line terminators
Hash 8d2d887cfd80ec9467a9b22d9c1437c9
a868a0abc69e66995aff40bf0493f3ebc8fd96bc
8003b1def0f723546f7307342eafd6e301bee1e73e43bf47d9e459777c94aa32
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:16 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.dogefiles.io
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26955), with no line terminators
Hash 615b52125dfd6806cd57106c9c8a01cf
3fd6569b376d71b769eee61351ebb9c7260648f8
0ef8f057d6599dbd3bad62313b2c5b8173b3790a0e3d1e2a2e12804f7150536a
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b6cdf2567265948b24e2de3e14e48e69
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26957), with no line terminators
Hash f0537c77b8c8f600a70a4942f2bc10f1
1d8b3493f8fc6890ab43c365e69437356cd18e81
0f9be2a7b1323b176be0b295a7efb472f31d76fd329a99b14496175841802f10
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0e13469086f6c7b1bf33426e7f9c52b3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f0ffac4f8b0bdf7781c9870d5559dafb
455e9431aed5706059fe9fc578bcce7a1f76b316
afbeaaf2870183e7026a779055dab53dff0fac852de3cd657cb08c47052a4db9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AFBEAAF2870183E7026A779055DAB53DFF0FAC852DE3CD657CB08C47052A4DB9"
Last-Modified: Wed, 21 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13045
Expires: Thu, 22 Dec 2022 04:21:41 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash edd1ef1f0129793b4b2e4ce3e1462331
92165b9638409d9a2376ec2b3198c7b20ad6974c
5a2bb319fed569310548ea9a54b3b9b7804a7b1970c3cb8bdecb27d2c0a8f1cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2BB319FED569310548EA9A54B3B9B7804A7B1970C3CB8BDECB27D2C0A8F1CD"
Last-Modified: Mon, 19 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5666
Expires: Thu, 22 Dec 2022 02:18:42 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash dd46c644087083c04f493f23d8378f63
81ce14f3ba74cadfbef0a40b57536b1e33a80ac6
8aea4c7ebdbbd3a5e2a162f0abc57e73048d979bcbf21b99c33e32cacbf81f55
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e43da0e3deb5deb52b0315eb90c6d504
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a549d0976b275d0cc76b6d9cc4e46b66
0b567314200077ab1330029f16bb145218a73e68
ce855b1e8322b8464acac100b26e0f87a2342caef775eb93997bc3a3af88c65c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE855B1E8322B8464ACAC100B26E0F87A2342CAEF775EB93997BC3A3AF88C65C"
Last-Modified: Tue, 20 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3646
Expires: Thu, 22 Dec 2022 01:45:02 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
marvelselectedheron.com/watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
173.233.137.52307 Temporary Redirect 0 B URL HTTP/1.1 marvelselectedheron.com/watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1 HTTP/1.1
Host: marvelselectedheron.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://marvelselectedheron.com/watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=cf14126a4a2aa851426b62380e53c48840785c48f3d4c194801c2099fc38bc6d05c5a032cf0991b63eb5bad5d57ed5b29359c2172d5d7e783ef27e1e93c3bde3255195a4932b4a2870a56b51dc95279a4e2d467a8ee5e3f4e4ff316e00d059b56fa818&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fe50a04dd41d5a70e04f7789b5e6f16a
Strict-Transport-Security: max-age=0; includeSubdomains
www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
173.233.139.164200 OK 9.8 kB URL HTTP/1.1 www.topdisplayformat.com/e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js
IP 173.233.139.164:0
File type exported SGML document, ASCII text, with very long lines (26943), with no line terminators
Hash 333413b6bc0697b63aef4524333800f4
77c225ccaab17757164d89c6499f0239959673aa
8b6a8fbdbaccea81ebfef98fe0dc4f0a0c4325ac5a84e924861d76fb4e8051ca
GET /e4176cde5c7a653fe9b1c6dea79cdc6d/invoke.js HTTP/1.1
Host: www.topdisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0f3aa13bd25153c9611166897fbb835f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
marvelselectedheron.com/watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
173.233.137.52307 Temporary Redirect 0 B URL HTTP/1.1 marvelselectedheron.com/watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1 HTTP/1.1
Host: marvelselectedheron.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://marvelselectedheron.com/watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=65ce05f358b3efad419ff9af89547fc21fcf33692737a2e0e2eadc551aa686cbde6dcca1fe095b4759ccf841c2d28f33315a9121a71f59993c95fc564fd16fcbd6c6a110f723f3b05f0367fb06427b21d8840aa349ffce4cfb12968037a74d&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fa66fc6b6006f6ced8d0c78b405a5063
Strict-Transport-Security: max-age=0; includeSubdomains
repentbits.com/watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1
173.233.137.36307 Temporary Redirect 0 B URL HTTP/1.1 repentbits.com/watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1
IP 173.233.137.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1 HTTP/1.1
Host: repentbits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://repentbits.com/watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1&shu=77e094764d0895611e417bb4aea3a8f6d488b5fc83dae10879978c98e565ae6db318ad3c1ae5b44da0a48d70fe8bd5d53ee5a2284ead9fbf46fa074bb7dd8dcbafe22f3fdff8261aaac8632e866d1391ea5ecbdf2126a6407ecf2e63b162fe1c2a&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzMzMzYxMiwiayI6ImU0MTc2Y2RlNWM3YTY1M2ZlOWIxYzZkZWE3OWNkYzZkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODgzMDYwLCJwaWQiOjQ4MjYxOCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyMywicHQiOjQsInBrIjoieXYxNzh0M3prNyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5kb2dlZmlsZXMuaW8vZG93bmxvYWQvNjM5MjBiNzI4NGFjNmEzZTZjNjZiNWE2In19.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ac0dd318e82bb8c5d506a858b75cbd8d
Strict-Transport-Security: max-age=0; includeSubdomains
marvelselectedheron.com/watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=cf14126a4a2aa851426b62380e53c48840785c48f3d4c194801c2099fc38bc6d05c5a032cf0991b63eb5bad5d57ed5b29359c2172d5d7e783ef27e1e93c3bde3255195a4932b4a2870a56b51dc95279a4e2d467a8ee5e3f4e4ff316e00d059b56fa818&pst=1671669916&rmtc=t
173.233.137.52200 OK 640 B URL HTTP/1.1 marvelselectedheron.com/watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=cf14126a4a2aa851426b62380e53c48840785c48f3d4c194801c2099fc38bc6d05c5a032cf0991b63eb5bad5d57ed5b29359c2172d5d7e783ef27e1e93c3bde3255195a4932b4a2870a56b51dc95279a4e2d467a8ee5e3f4e4ff316e00d059b56fa818&pst=1671669916&rmtc=t
IP 173.233.137.52:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (601)
Hash 504981f189a08d4ed8d093de1ec24fd7
9aa2abc6471637aa27ada1a68050f67dfc16a481
dc16ee91ea74037a27cc323f98034157cf7fdf30bd013ba78f5cd8532549d6a7
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1647630258302.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=cf14126a4a2aa851426b62380e53c48840785c48f3d4c194801c2099fc38bc6d05c5a032cf0991b63eb5bad5d57ed5b29359c2172d5d7e783ef27e1e93c3bde3255195a4932b4a2870a56b51dc95279a4e2d467a8ee5e3f4e4ff316e00d059b56fa818&pst=1671669916&rmtc=t HTTP/1.1
Host: marvelselectedheron.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
iprc75e4b90c8d214f9967fc4009de980ae0=2717343; expires=Fri, 23 Dec 2022 02:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4b9bd6664783e976013e05a612eccd6f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
marvelselectedheron.com/watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=65ce05f358b3efad419ff9af89547fc21fcf33692737a2e0e2eadc551aa686cbde6dcca1fe095b4759ccf841c2d28f33315a9121a71f59993c95fc564fd16fcbd6c6a110f723f3b05f0367fb06427b21d8840aa349ffce4cfb12968037a74d&pst=1671669916&rmtc=t
173.233.137.52200 OK 2.1 kB URL HTTP/1.1 marvelselectedheron.com/watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=65ce05f358b3efad419ff9af89547fc21fcf33692737a2e0e2eadc551aa686cbde6dcca1fe095b4759ccf841c2d28f33315a9121a71f59993c95fc564fd16fcbd6c6a110f723f3b05f0367fb06427b21d8840aa349ffce4cfb12968037a74d&pst=1671669916&rmtc=t
IP 173.233.137.52:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2649)
Hash 116cbd6cf8f42959a7e472a299453c61
ec4fbeda11bbebf2a706fcc49c492dbee4516bba
914ee4bc0ed970f80fdddc38ca0e6df4b9fe9e47358d45c702cffc9be1ba4155
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.32865146746.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=65ce05f358b3efad419ff9af89547fc21fcf33692737a2e0e2eadc551aa686cbde6dcca1fe095b4759ccf841c2d28f33315a9121a71f59993c95fc564fd16fcbd6c6a110f723f3b05f0367fb06427b21d8840aa349ffce4cfb12968037a74d&pst=1671669916&rmtc=t HTTP/1.1
Host: marvelselectedheron.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
iprca6dc014cfd9e6d09d1b7d046a658ebac=3569808; expires=Thu, 22 Dec 2022 04:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6fb02ebc75cb444ca3943747cd145367
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ea0dc343d65cfe12f68e919a0c7a866e
d5bf6950432065a0728e77d757eb30e43aca8878
8bec42f8e2016adc686f486f40598e3df32ad4dc0d119a052f2da2043b2ec668
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BEC42F8E2016ADC686F486F40598E3DF32AD4DC0D119A052F2DA2043B2EC668"
Last-Modified: Mon, 19 Dec 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7630
Expires: Thu, 22 Dec 2022 02:51:26 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1ed25a8691896bf013aa0e9e09e9a21b
fc8654bcb1650d02d8bf5902372d0dd7db57a605
f52c749093b53930139fc82f5ba9b87ad91c7da45c69a631b5ae51d8ccd76390
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F52C749093B53930139FC82F5BA9B87AD91C7DA45C69A631B5AE51D8CCD76390"
Last-Modified: Tue, 20 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13431
Expires: Thu, 22 Dec 2022 04:28:07 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
repentbits.com/watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1&shu=77e094764d0895611e417bb4aea3a8f6d488b5fc83dae10879978c98e565ae6db318ad3c1ae5b44da0a48d70fe8bd5d53ee5a2284ead9fbf46fa074bb7dd8dcbafe22f3fdff8261aaac8632e866d1391ea5ecbdf2126a6407ecf2e63b162fe1c2a&pst=1671669916&rmtc=t
173.233.137.36200 OK 2.1 kB URL HTTP/1.1 repentbits.com/watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1&shu=77e094764d0895611e417bb4aea3a8f6d488b5fc83dae10879978c98e565ae6db318ad3c1ae5b44da0a48d70fe8bd5d53ee5a2284ead9fbf46fa074bb7dd8dcbafe22f3fdff8261aaac8632e866d1391ea5ecbdf2126a6407ecf2e63b162fe1c2a&pst=1671669916&rmtc=t
IP 173.233.137.36:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (2658)
Hash edc5d74e039c58f52d9f577e6d2bc901
2f22662f1d2298abbfd8ba2aa06bef94730f86cd
7df7b2754d4584b46dd325b2d2706481ebe6924d41033598ac2bdcea0fb31d7b
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.631197742692.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=75d7723a-1eee-476d-9a7c-37dc541e48e3%3A2%3A1&shu=77e094764d0895611e417bb4aea3a8f6d488b5fc83dae10879978c98e565ae6db318ad3c1ae5b44da0a48d70fe8bd5d53ee5a2284ead9fbf46fa074bb7dd8dcbafe22f3fdff8261aaac8632e866d1391ea5ecbdf2126a6407ecf2e63b162fe1c2a&pst=1671669916&rmtc=t HTTP/1.1
Host: repentbits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=75d7723a-1eee-476d-9a7c-37dc541e48e3:2:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
iprca6dc014cfd9e6d09d1b7d046a658ebac=3569808; expires=Thu, 22 Dec 2022 04:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 773250ba36668ed5467b0d46784bce7f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1ed25a8691896bf013aa0e9e09e9a21b
fc8654bcb1650d02d8bf5902372d0dd7db57a605
f52c749093b53930139fc82f5ba9b87ad91c7da45c69a631b5ae51d8ccd76390
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F52C749093B53930139FC82F5BA9B87AD91C7DA45C69A631B5AE51D8CCD76390"
Last-Modified: Tue, 20 Dec 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13431
Expires: Thu, 22 Dec 2022 04:28:07 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
sponsorlustrestories.com/watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
173.233.137.60307 Temporary Redirect 0 B URL HTTP/1.1 sponsorlustrestories.com/watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
IP 173.233.137.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1 HTTP/1.1
Host: sponsorlustrestories.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://sponsorlustrestories.com/watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=df84f6838683576b1100c0868acb84a96def2fbdeb93a89e40bd58311746ddfbee65a7a389c8dd2d88fc545050bac91fa4c2d07a28fec3361342c906e782754bb64d504059256f6a608ef7ba32536801084ea0c207175256817e4bbe436c26b8bd&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzMzMzYxMiwiayI6ImU0MTc2Y2RlNWM3YTY1M2ZlOWIxYzZkZWE3OWNkYzZkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODgzMDYwLCJwaWQiOjQ4MjYxOCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyMywicHQiOjQsInBrIjoieXYxNzh0M3prNyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5kb2dlZmlsZXMuaW8vZG93bmxvYWQvNjM5MjBiNzI4NGFjNmEzZTZjNjZiNWE2In19.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 85bf4d78495b2ad894bbe3b2c43c434b
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5abbe30b09a9f98890c57b70d3160d11
4e020574687d008f377e5f9a07bc98b90a0a7f30
e0bc4cda216dd7e8e842dea6d3131fb50f5016639a93d23c222eae333d5c245e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E0BC4CDA216DD7E8E842DEA6D3131FB50F5016639A93D23C222EAE333D5C245E"
Last-Modified: Wed, 21 Dec 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4296
Expires: Thu, 22 Dec 2022 01:55:52 GMT
Date: Thu, 22 Dec 2022 00:44:16 GMT
Connection: keep-alive
officialbanisters.com/watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
173.233.139.164307 Temporary Redirect 0 B URL HTTP/1.1 officialbanisters.com/watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1 HTTP/1.1
Host: officialbanisters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://officialbanisters.com/watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=fee83246d7a4b44200de5c605efc49761095ee47c0e54fba32a80ed40b0bb269c00f73489d59535d8c1dcc2c29079e985df2dabe7d587859a47d5a38eed560ce2d263cd0862c0194f2aa9a5d48f8951c852251bb366c07be2f38be36a72f992e9a&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6cc26441fdb1510ba4a8d0b66663d4f7
Strict-Transport-Security: max-age=0; includeSubdomains
www.dogefiles.io/images/dogefiles_logo.png
76.76.21.164200 OK 17 kB URL HTTP/2 www.dogefiles.io/images/dogefiles_logo.png
IP 76.76.21.164:0
File type PNG image data, 306 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 69b139262889368507c3bb3f62e50d05
f7eb616801a763cb796f786b3dc528661e6673aa
fb19cff065a16383bbac81ff93f2c473d6aa2cb0b9bbb8e4f9fb8aaa96f9b4bf
GET /images/dogefiles_logo.png HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Cookie: _ga_7CNY7SNMM1=GS1.1.1671669854.1.0.1671669854.0.0.0; _ga=GA1.1.1499854364.1671669854; dom3ic8zudi28v8lr6fgphwffqoz0j6c=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 4692474
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="dogefiles_logo.png"
content-type: image/png
date: Thu, 22 Dec 2022 00:44:16 GMT
etag: "69b139262889368507c3bb3f62e50d05"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /images/dogefiles_logo.png
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::bvdrb-1671669856830-c8c7168d11f1
content-length: 16816
X-Firefox-Spdy: h2
spinalmultiple.com/watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
192.243.59.12307 Temporary Redirect 0 B URL HTTP/1.1 spinalmultiple.com/watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1 HTTP/1.1
Host: spinalmultiple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://spinalmultiple.com/watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=6e80ed0605de0af7cbff0e2e4621bb02819f0cb833a4d558a292d32c8e00516215b9088641aba58f5ba427366e27182b6455c2d666d63e38bde9bc46cd01a7f32af4bfa065762c9e3af95c3315403ce1153639&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3aa12b6952663088a4ab6d073bdb0caf
Strict-Transport-Security: max-age=0; includeSubdomains
spinalmultiple.com/watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1
192.243.59.12307 Temporary Redirect 0 B URL HTTP/1.1 spinalmultiple.com/watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1 HTTP/1.1
Host: spinalmultiple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://spinalmultiple.com/watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1&shu=11f8a1b977e6bdd8856f120467245b817426b46dbecd30a1f88af5a95207a1b2f711fd9b9b73db00c48f294f118919ee44f41dd6c45c8d1eec8ee0f8794c9d3b4db0b111864d60fdcff117e604892b69be2c086f&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c3361e0825778372f43ee2523c995b67
Strict-Transport-Security: max-age=0; includeSubdomains
itineraryborn.com/watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
173.233.137.52307 Temporary Redirect 0 B URL HTTP/1.1 itineraryborn.com/watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1 HTTP/1.1
Host: itineraryborn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Location: https://itineraryborn.com/watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=42d81340c34a9f61145d3c67007fd96177078fa859a540ec610088c140c38a3a56cbbdb713a6b4b4c311c613c906aa34cc74687f19a9559040244bee00e1ee134a8f6ca1af58a08d4f7f199593ad1187a2d293ab632b4d6873b1b57ae40c32eb&pst=1671669916&rmtc=t
Set-Cookie: u_pl=17333612; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os; expires=Thu, 22 Dec 2022 00:45:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a1536356cb5ed745f55c411872cff8d7
Strict-Transport-Security: max-age=0; includeSubdomains
sponsorlustrestories.com/watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=df84f6838683576b1100c0868acb84a96def2fbdeb93a89e40bd58311746ddfbee65a7a389c8dd2d88fc545050bac91fa4c2d07a28fec3361342c906e782754bb64d504059256f6a608ef7ba32536801084ea0c207175256817e4bbe436c26b8bd&pst=1671669916&rmtc=t
173.233.137.60200 OK 2.1 kB URL HTTP/1.1 sponsorlustrestories.com/watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=df84f6838683576b1100c0868acb84a96def2fbdeb93a89e40bd58311746ddfbee65a7a389c8dd2d88fc545050bac91fa4c2d07a28fec3361342c906e782754bb64d504059256f6a608ef7ba32536801084ea0c207175256817e4bbe436c26b8bd&pst=1671669916&rmtc=t
IP 173.233.137.60:0
File type HTML document, ASCII text, with very long lines (2573)
Hash 73e3d591bf13cd206cf778d3d8fcfc30
18a57ce188a94bd32d8d8a435c85ae98b3dc5da6
2236e4383713f8f7c5fce3fe93ea5bfb896372807b7735967fc4640b81d5b468
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1233594172796.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=df84f6838683576b1100c0868acb84a96def2fbdeb93a89e40bd58311746ddfbee65a7a389c8dd2d88fc545050bac91fa4c2d07a28fec3361342c906e782754bb64d504059256f6a608ef7ba32536801084ea0c207175256817e4bbe436c26b8bd&pst=1671669916&rmtc=t HTTP/1.1
Host: sponsorlustrestories.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cfcff036176a15d580d24ba1feb67035
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
officialbanisters.com/watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=fee83246d7a4b44200de5c605efc49761095ee47c0e54fba32a80ed40b0bb269c00f73489d59535d8c1dcc2c29079e985df2dabe7d587859a47d5a38eed560ce2d263cd0862c0194f2aa9a5d48f8951c852251bb366c07be2f38be36a72f992e9a&pst=1671669916&rmtc=t
173.233.139.164200 OK 2.1 kB URL HTTP/1.1 officialbanisters.com/watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=fee83246d7a4b44200de5c605efc49761095ee47c0e54fba32a80ed40b0bb269c00f73489d59535d8c1dcc2c29079e985df2dabe7d587859a47d5a38eed560ce2d263cd0862c0194f2aa9a5d48f8951c852251bb366c07be2f38be36a72f992e9a&pst=1671669916&rmtc=t
IP 173.233.139.164:0
File type HTML document, ASCII text, with very long lines (2544)
Hash e907f37b6e2f37996d0b97002a408847
991f2efec48eeb9594ece9ee009986dfe4377663
f5eedaaba9f480233a946073b1b531e390bdf9bed6b5dba0414d09245ffb9af5
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.994007249273.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=fee83246d7a4b44200de5c605efc49761095ee47c0e54fba32a80ed40b0bb269c00f73489d59535d8c1dcc2c29079e985df2dabe7d587859a47d5a38eed560ce2d263cd0862c0194f2aa9a5d48f8951c852251bb366c07be2f38be36a72f992e9a&pst=1671669916&rmtc=t HTTP/1.1
Host: officialbanisters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzMzMzYxMiwiayI6ImU0MTc2Y2RlNWM3YTY1M2ZlOWIxYzZkZWE3OWNkYzZkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxODgzMDYwLCJwaWQiOjQ4MjYxOCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyMSwiYWlkIjoyMywicHQiOjQsInBrIjoieXYxNzh0M3prNyIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL3d3dy5kb2dlZmlsZXMuaW8vZG93bmxvYWQvNjM5MjBiNzI4NGFjNmEzZTZjNjZiNWE2In19.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0649bb3ae75cf8adedaa5167fda98f8e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 29e83abe95f141d771e44531d3bddbfe
7392deae4c7ca9f39ab3c71b15932c2b7ab52b82
27f98d9851d1e1f58a3f23b240900e406a29608c16a7ab76e5c25a77917963a1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2792
Cache-Control: max-age=130135
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:16 GMT
Etag: "63a2f6cf-1d7"
Expires: Fri, 23 Dec 2022 12:53:11 GMT
Last-Modified: Wed, 21 Dec 2022 12:06:39 GMT
Server: ECS (amb/6BBE)
X-Cache: HIT
Content-Length: 471
itineraryborn.com/watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=42d81340c34a9f61145d3c67007fd96177078fa859a540ec610088c140c38a3a56cbbdb713a6b4b4c311c613c906aa34cc74687f19a9559040244bee00e1ee134a8f6ca1af58a08d4f7f199593ad1187a2d293ab632b4d6873b1b57ae40c32eb&pst=1671669916&rmtc=t
173.233.137.52200 OK 2.0 kB URL HTTP/1.1 itineraryborn.com/watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=42d81340c34a9f61145d3c67007fd96177078fa859a540ec610088c140c38a3a56cbbdb713a6b4b4c311c613c906aa34cc74687f19a9559040244bee00e1ee134a8f6ca1af58a08d4f7f199593ad1187a2d293ab632b4d6873b1b57ae40c32eb&pst=1671669916&rmtc=t
IP 173.233.137.52:0
File type HTML document, ASCII text, with very long lines (2493)
Hash 1cfe2a48173f09df376221d65eb86011
24b296a6516b92af5049594c763c65c7365c8602
9914bf8e51110683fac1e98256e48b5a8a46424b2abf5e70d999c8e37ad9afab
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1286954107170.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=42d81340c34a9f61145d3c67007fd96177078fa859a540ec610088c140c38a3a56cbbdb713a6b4b4c311c613c906aa34cc74687f19a9559040244bee00e1ee134a8f6ca1af58a08d4f7f199593ad1187a2d293ab632b4d6873b1b57ae40c32eb&pst=1671669916&rmtc=t HTTP/1.1
Host: itineraryborn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 39011f370726b126086347958567d29a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
spinalmultiple.com/watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1&shu=11f8a1b977e6bdd8856f120467245b817426b46dbecd30a1f88af5a95207a1b2f711fd9b9b73db00c48f294f118919ee44f41dd6c45c8d1eec8ee0f8794c9d3b4db0b111864d60fdcff117e604892b69be2c086f&pst=1671669916&rmtc=t
192.243.59.12200 OK 640 B URL HTTP/1.1 spinalmultiple.com/watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1&shu=11f8a1b977e6bdd8856f120467245b817426b46dbecd30a1f88af5a95207a1b2f711fd9b9b73db00c48f294f118919ee44f41dd6c45c8d1eec8ee0f8794c9d3b4db0b111864d60fdcff117e604892b69be2c086f&pst=1671669916&rmtc=t
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (601)
Hash 504981f189a08d4ed8d093de1ec24fd7
9aa2abc6471637aa27ada1a68050f67dfc16a481
dc16ee91ea74037a27cc323f98034157cf7fdf30bd013ba78f5cd8532549d6a7
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1161582636436.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194%3A3%3A1&shu=11f8a1b977e6bdd8856f120467245b817426b46dbecd30a1f88af5a95207a1b2f711fd9b9b73db00c48f294f118919ee44f41dd6c45c8d1eec8ee0f8794c9d3b4db0b111864d60fdcff117e604892b69be2c086f&pst=1671669916&rmtc=t HTTP/1.1
Host: spinalmultiple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=a0c0f246-6f6e-4c56-9ac5-4fe2f18e8194:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
iprc75e4b90c8d214f9967fc4009de980ae0=2717343; expires=Fri, 23 Dec 2022 02:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 19dc4eb28c9332176392e6fc30c05989
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
spinalmultiple.com/watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=6e80ed0605de0af7cbff0e2e4621bb02819f0cb833a4d558a292d32c8e00516215b9088641aba58f5ba427366e27182b6455c2d666d63e38bde9bc46cd01a7f32af4bfa065762c9e3af95c3315403ce1153639&pst=1671669916&rmtc=t
192.243.59.12200 OK 2.0 kB URL HTTP/1.1 spinalmultiple.com/watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=6e80ed0605de0af7cbff0e2e4621bb02819f0cb833a4d558a292d32c8e00516215b9088641aba58f5ba427366e27182b6455c2d666d63e38bde9bc46cd01a7f32af4bfa065762c9e3af95c3315403ce1153639&pst=1671669916&rmtc=t
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2505)
Hash accfdf7753884b1aad64390733e8560d
46ccfab9cda2e023fb7d78c0144d9272525f785e
1f47f7783c378b7254a490d005448da2da637ed8d2c5fbc730f0fc1442b88908
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.964734834580.js?key=e4176cde5c7a653fe9b1c6dea79cdc6d&kw=%5B%22graphics-hook64%22%2C%22dll%22%2C%22zip%22%2C%22-%22%2C%22dogefiles%22%5D&refer=https%3A%2F%2Fwww.dogefiles.io%2Fdownload%2F63920b7284ac6a3e6c66b5a6&tz=0&dev=e&res=12.1055&uuid=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1&shu=6e80ed0605de0af7cbff0e2e4621bb02819f0cb833a4d558a292d32c8e00516215b9088641aba58f5ba427366e27182b6455c2d666d63e38bde9bc46cd01a7f32af4bfa065762c9e3af95c3315403ce1153639&pst=1671669916&rmtc=t HTTP/1.1
Host: spinalmultiple.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.dogefiles.io
Referer: https://www.dogefiles.io/
Connection: keep-alive
Cookie: u_pl=17333612; ain=eyJhbGciOiJIUzI1NiJ9.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.XdXj9meyNhDXyVOFXyqbmToveo1BF7dXIXE2lR-S2os
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 22 Dec 2022 00:44:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.dogefiles.io
Access-Control-Allow-Origin: https://www.dogefiles.io
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=249beb1c-c2de-4290-8e70-ed0285f3f57c:3:1; expires=Thu, 29 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
pdhtkv23=true; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
uncs23=1; expires=Fri, 23 Dec 2022 00:44:16 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8aab441450624268b05d0e64b37c5920
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ab0a93bbc87b59f90512473dbdca6cc5
4b8924c9b41bcedb94a18330989c5324abd2092a
41fa5aecf990aa564c5be814aae91e38e552b9b3326a175343c09da1e956288f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41FA5AECF990AA564C5BE814AAE91E38E552B9B3326A175343C09DA1E956288F"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2630
Expires: Thu, 22 Dec 2022 01:28:07 GMT
Date: Thu, 22 Dec 2022 00:44:17 GMT
Connection: keep-alive
s3.eu-central-1.wasabisys.com/dogefiles-avatar/C0FnRKZH1IciAmfpmZz4Mb6psuE2/1%20(2).jpg-6777025a-8ece-48b1-abb0-849207616a14.jpeg
130.117.252.23200 OK 317 kB URL HTTP/1.1 s3.eu-central-1.wasabisys.com/dogefiles-avatar/C0FnRKZH1IciAmfpmZz4Mb6psuE2/1%20(2).jpg-6777025a-8ece-48b1-abb0-849207616a14.jpeg
IP 130.117.252.23:0
ASN #395717 BLUEARCHIVE-ZONE-1
File type JPEG image data, progressive, precision 8, 1080x1080, components 3\012- data
Size 317 kB (316612 bytes)
Hash 889cd0ca5d027657c8e7ad242835d3c5
624e59398df1c22fb5cbb65d3dab39862378dc55
641955ff4f928635607357bba1b51006679f0f2fc742002136414d48906dede3
GET /dogefiles-avatar/C0FnRKZH1IciAmfpmZz4Mb6psuE2/1%20(2).jpg-6777025a-8ece-48b1-abb0-849207616a14.jpeg HTTP/1.1
Host: s3.eu-central-1.wasabisys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 316612
Content-Type: image/jpeg
Date: Thu, 22 Dec 2022 00:44:17 GMT
ETag: "889cd0ca5d027657c8e7ad242835d3c5"
Last-Modified: Sat, 03 Jul 2021 18:03:42 GMT
Server: WasabiS3/7.10.1198-2022-12-14-39a7a2e69e (head12)
x-amz-id-2: Ix+GRLIhif61IroyUsyrPmy4kBzZDs3J20vGvRGUD9nkPPoxwcm2yQsplPWWVm6kZWrhUyNT9k9d
x-amz-request-id: 6266B6D4CE3A727A
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ae02736d592ff0f71082ae08f2ef94f1
2ef79e6cdc1eb940b5e9e836a44b52f8d50826ff
0aaa05b6df08dbac9b586f38fd46bfa453eb385788ff2432d861873306a8bc68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3101
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:17 GMT
Last-Modified: Wed, 21 Dec 2022 23:52:36 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 65f7a34a21ffcd606ac7c1196cc80a13
4099139a532afd0dcd7393c44db82b1b99db4efd
641dca7c2e874a7bba2efdf5088f4cc8528782bed33f8a3b409288af0ea55382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 65f7a34a21ffcd606ac7c1196cc80a13
4099139a532afd0dcd7393c44db82b1b99db4efd
641dca7c2e874a7bba2efdf5088f4cc8528782bed33f8a3b409288af0ea55382
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 06ab9ad46c08885ee1fe874df9655a7e
fc90ac5fce5358b98ecc13d07de62e35281f78b2
1dc4b708c1a0b4646cdf4b028a1a14f6f751abecb4837881c01706204908571f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1DC4B708C1A0B4646CDF4B028A1A14F6F751ABECB4837881C01706204908571F"
Last-Modified: Tue, 20 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3748
Expires: Thu, 22 Dec 2022 01:46:45 GMT
Date: Thu, 22 Dec 2022 00:44:17 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
143.204.42.156200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.156:0
Hash 67a1888c8b8f5c3488fbc0bcf6fad65f
7e0415b28adbc4e0a87b31016a33ec3bc843cb14
2503524fc0c7b40a6f72118f897fcaadc0df5a100bc2bd42e6b8030529e2b3bd
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=128621
Date: Thu, 22 Dec 2022 00:44:17 GMT
Etag: "63a2fb2e-1d7"
Expires: Fri, 23 Dec 2022 12:27:58 GMT
Last-Modified: Wed, 21 Dec 2022 12:25:18 GMT
Server: ECS (nyb/1D12)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GflzBh3HGmyuyuqRUP3tdcc7G2FX9CA2vQDyOJsm3j2xGlCglm_3zQ==
Age: 160
www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17333612
173.233.139.164200 OK 1.3 kB URL HTTP/1.1 www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17333612
IP 173.233.139.164:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 0274624e7266c3ea6b834c7f254317be
b1cdadc421a1559f389ca0de7b9ab6d659000b8f
913d3c4cbebc7672837468d01f005cbc1b9833624e3691986b6b79695333d553
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17333612 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:17 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Fri, 23 Dec 2022 00:44:17 GMT
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjEyMjY2MCwiayI6Ijg2MzcwNWJjYmI0YjZhNTU0ZGRiMzU5NjY1Mzk1YTZmIiwic2lkIjoiMTczMzM2MTIiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjE0NjQxNSwicGlkIjo5NzI5OSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI4LCJwdCI6NCwicGsiOiJkeWZjMWswOSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly93d3cuZG9nZWZpbGVzLmlvLyJ9fQ.TPnjTKQXsBdk_5b8BOg1VysFDKctK2oW_xp1Ua4fVjo; expires=Thu, 22 Dec 2022 00:45:17 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 42085408a010da0a7a7d0e0c92a871da
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.spikereekvelocity.com/dyfc1k09?shu=78007204603401ffc6494d854acd7d2ed52632dca682f5fba004396abb321ea6bb2c714a8d4b30af1854138de15edafbde366b355a7cb33cd47cabfc0f59dce7f5dc6efa6cf7a459c6fac177928c78c216d3c660c70635b6bd86b381a1b50084&pst=1671669917&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.dogefiles.io%2F&psid=17333612
173.233.139.164302 Found 0 B URL HTTP/1.1 www.spikereekvelocity.com/dyfc1k09?shu=78007204603401ffc6494d854acd7d2ed52632dca682f5fba004396abb321ea6bb2c714a8d4b30af1854138de15edafbde366b355a7cb33cd47cabfc0f59dce7f5dc6efa6cf7a459c6fac177928c78c216d3c660c70635b6bd86b381a1b50084&pst=1671669917&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.dogefiles.io%2F&psid=17333612
IP 173.233.139.164:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?shu=78007204603401ffc6494d854acd7d2ed52632dca682f5fba004396abb321ea6bb2c714a8d4b30af1854138de15edafbde366b355a7cb33cd47cabfc0f59dce7f5dc6efa6cf7a459c6fac177928c78c216d3c660c70635b6bd86b381a1b50084&pst=1671669917&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.dogefiles.io%2F&psid=17333612 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spikereekvelocity.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjEyMjY2MCwiayI6Ijg2MzcwNWJjYmI0YjZhNTU0ZGRiMzU5NjY1Mzk1YTZmIiwic2lkIjoiMTczMzM2MTIiLCJpc2lkIjoyLCJhc2lkIjoxLCJ6aWQiOjE0NjQxNSwicGlkIjo5NzI5OSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjI4LCJwdCI6NCwicGsiOiJkeWZjMWswOSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly93d3cuZG9nZWZpbGVzLmlvLyJ9fQ.TPnjTKQXsBdk_5b8BOg1VysFDKctK2oW_xp1Ua4fVjo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Thu, 22 Dec 2022 00:44:17 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://us.slowww.xyz/postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2
Set-Cookie: pdhtkv=true; expires=Fri, 23 Dec 2022 00:44:17 GMT
uncs=1; expires=Fri, 23 Dec 2022 00:44:17 GMT
pdhtkv28=true; expires=Fri, 23 Dec 2022 00:44:17 GMT
uncs28=1; expires=Fri, 23 Dec 2022 00:44:17 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 00df7edf55870d43cc52d817f3dbb2c8
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash dd6945c52547df7f626d7dfb407399c6
1044559c6330393633888627430fa3be6e251507
8251dcfa7ab6cd60cac3c8e3729d4a8dbfcfb518974bd0f8ea3e4af694a68767
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8251DCFA7AB6CD60CAC3C8E3729D4A8DBFCFB518974BD0F8EA3E4AF694A68767"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2178
Expires: Thu, 22 Dec 2022 01:20:36 GMT
Date: Thu, 22 Dec 2022 00:44:18 GMT
Connection: keep-alive
us.slowww.xyz/postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2
38.100.129.11200 OK 2.1 kB URL HTTP/2 us.slowww.xyz/postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2
IP 38.100.129.11:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0b3bb6b2edbb174b9fd7d70800b57372
82cfb55f6c645619eacb5ec7d2c8c9e0791b4de5
90885774ceae7ab15e59bac3cdedac55689f37cfb3573ff0889b20c9d163a3a2
GET /postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2 HTTP/1.1
Host: us.slowww.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.15.8.3
date: Thu, 22 Dec 2022 00:44:18 GMT
content-type: text/html;charset=UTF-8
content-length: 2086
X-Firefox-Spdy: h2
us.slowww.xyz/postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2&token=e2166a4511e18ed7eb9ff672aa91d0fa&timezone=0&iframe_test=false&webdriver_test=false
38.100.129.11302 Found 0 B URL HTTP/2 us.slowww.xyz/postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2&token=e2166a4511e18ed7eb9ff672aa91d0fa&timezone=0&iframe_test=false&webdriver_test=false
IP 38.100.129.11:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2&token=e2166a4511e18ed7eb9ff672aa91d0fa&timezone=0&iframe_test=false&webdriver_test=false HTTP/1.1
Host: us.slowww.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://us.slowww.xyz/postback/click?key=v2-1671669857787-4-9875-999800-fb6eaf6e-b0b0-32a4-2472-10495ca354b2
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 302 Found
server: openresty/1.15.8.3
date: Thu, 22 Dec 2022 00:44:18 GMT
content-length: 0
set-cookie: platform_user_id=desktop:b9ce734ea0955fdbdaef46d4d37c6039
platform_user_id_3rd_party=desktop:b9ce734ea0955fdbdaef46d4d37c6039; SameSite=None; Secure; Max-Age=31556952
location: https://www.pricecomparedeals.com/no-no
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png
45.133.44.9200 OK 67 kB URL HTTP/2 cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png
IP 45.133.44.9:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 422f270f2cdf82b8b4e7bd9b09f69c70
5331899f93389cc6d0ba1ab9fa157a693a5c4162
669c46276185b9ceedf1e9bf18eaf00988eb0f44c1a36c9e149fadc9e0ab14cc
GET /cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:17 GMT
content-type: image/png
content-length: 105910
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:08:06 GMT
etag: "62e11c96-19db6"
expires: Sat, 24 Dec 2022 00:44:17 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 2.3 kB IP 93.184.220.29:0
Hash 7c5156bdd53c39d14e683149c04599ba
1b7b02f4b9989f24fab15f066dd49ff3dab86170
04b863e194bbe8756ae3307b7ea740b81b43c6e093aeda365d7b104bf0dc3454
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1073
Cache-Control: max-age=112237
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Etag: "63a2b79f-117"
Expires: Fri, 23 Dec 2022 07:54:56 GMT
Last-Modified: Wed, 21 Dec 2022 07:37:03 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3fdc5cc677f894c80994a40c9b3148fa
f25f8a337bf6c33a693a36193a1fb4c0c33dbd4e
3eb8fd2f2b2c847d3e9f6e610ff610ea1f4757c0bcf44bd513168843d90f5573
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1073
Cache-Control: max-age=112237
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Etag: "63a2b79f-117"
Expires: Fri, 23 Dec 2022 07:54:56 GMT
Last-Modified: Wed, 21 Dec 2022 07:37:03 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
cdn.dealsfor.life/420x210/GG202006050826060263000000000000_travel.jpg
188.114.96.1200 OK 18 kB URL HTTP/2 cdn.dealsfor.life/420x210/GG202006050826060263000000000000_travel.jpg
IP 188.114.96.1:0
File type JPEG image data, baseline, precision 8, 420x210, components 3\012- data
Hash d2e157616b039f93a4dc696b5b96938e
6e0e4a332b81a4388915f206f73d58dcde204b29
2cf032115b870ef9a2790db489949898c24d39f8b8e93ce82fe59adc9255405e
GET /420x210/GG202006050826060263000000000000_travel.jpg HTTP/1.1
Host: cdn.dealsfor.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: image/jpeg
content-length: 17960
x-amz-id-2: +jmNAUjjBw2hbB920mmdDVmSVrE7+aPyB7OpV4R5urq4cwxHFTmHcVfVf5hvJ9rh0pVjldA4qQQ=
x-amz-request-id: G0SS5X69TG09BDGC
last-modified: Fri, 05 Jun 2020 08:42:55 GMT
etag: "d2e157616b039f93a4dc696b5b96938e"
cache-control: max-age=86400
cf-cache-status: HIT
age: 2385
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SRHKErSAB7K8RkmA3QQJtmy2LM3teIymhEgp1E0rhdgU0gNIaf71wJxR55ccOmymb16VajwZ0cNsrJWE0eNCg6M9bnbSYWwfu%2Bm5vcBFrqkfqhBp7ieLBCsvg5S5gN%2F9zsJt%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d40b2fb1b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.dealsfor.life/210x210/GG202006090809160963000000000000_decoration.jpg
188.114.96.1200 OK 13 kB URL HTTP/2 cdn.dealsfor.life/210x210/GG202006090809160963000000000000_decoration.jpg
IP 188.114.96.1:0
File type JPEG image data, baseline, precision 8, 210x210, components 3\012- data
Hash a950c8fffccbf994e7eab4cbdc4afc79
0ae9de6c62eb474f9fc1d3fe74240c92d555711b
c430a67352d95e657b6f81cee177cb771a9b8b289a66043021386d8b069f20e1
GET /210x210/GG202006090809160963000000000000_decoration.jpg HTTP/1.1
Host: cdn.dealsfor.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: image/jpeg
content-length: 12794
x-amz-id-2: 6wnXaESSMB4fqASE7N+8ehTPOVbYvW3DlTDmjNmF7ppTk38+FuY2X/Q4Cz9O3q+wkmPY2nIV5dQ=
x-amz-request-id: G0SH0AH2J6PTJ52B
last-modified: Tue, 09 Jun 2020 08:22:03 GMT
etag: "a950c8fffccbf994e7eab4cbdc4afc79"
cache-control: max-age=86400
cf-cache-status: HIT
age: 375
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=28t5hMz9%2B9fxiN1Y83QLSh8qq3FaOwANmyHjqasIbm%2BcX1DLey8Fg0brBZB4ju8kE6Q9PTsSnBNkgYn1gldyGGJdhKRWnWUM0h%2Fn6%2F38t04x4xRCE0YZPRNNTtVeLST1aMPbCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d40b2fb2b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.dealsfor.life/630x525/GG202006090803570037000000000000_elektronics-v1.jpg
188.114.96.1200 OK 37 kB URL HTTP/2 cdn.dealsfor.life/630x525/GG202006090803570037000000000000_elektronics-v1.jpg
IP 188.114.96.1:0
File type JPEG image data, baseline, precision 8, 630x525, components 3\012- data
Hash 7f936cedd7e479eb865f1bfe1c63e945
4088966128f5171f9750dfd5f83ed2f8c517090e
cf3f17e5d372b10391a1ec46de26be3e83ca3c37f22d6103aee48e6d210d906a
GET /630x525/GG202006090803570037000000000000_elektronics-v1.jpg HTTP/1.1
Host: cdn.dealsfor.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: image/jpeg
content-length: 36766
x-amz-id-2: IMq+Sz4LUZ8TzgKFeRC0y762GUTn0rNSWCEjpr4iZLOb0//ZFbRumy9jOX7Bs0XWmwExjRcUDY8=
x-amz-request-id: G0SNKTHS1EEHKAYY
last-modified: Tue, 09 Jun 2020 08:22:04 GMT
etag: "7f936cedd7e479eb865f1bfe1c63e945"
cache-control: max-age=86400
cf-cache-status: HIT
age: 186
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CvNvQ%2F76z%2BiM2et%2Fk5J6tgBM648tfMo41XDmS0PJK4dbIFpgWxdx31eyIL9zUPmwXjtzq0i5sHz3lAwUvnxuZ1YpoMR3EE5CtiVzWv0XbPzYkZjAIARr%2FgRKDXvFYeYfGBHfCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d40b2fb4b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.dealsfor.life/630x315/GG202006050817010094000000000000_fashion.jpg
188.114.96.1200 OK 25 kB URL HTTP/2 cdn.dealsfor.life/630x315/GG202006050817010094000000000000_fashion.jpg
IP 188.114.96.1:0
File type JPEG image data, baseline, precision 8, 630x315, components 3\012- data
Hash e4f10f00dbdfc76dac0b06e12e76dd81
4b016a4493756924b8fb40a9f1391d1378c07cf3
a8bef644a63472bb106be50ae79c3eaf5e10d49f1f8c207564036e07b01781d9
GET /630x315/GG202006050817010094000000000000_fashion.jpg HTTP/1.1
Host: cdn.dealsfor.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: image/jpeg
content-length: 25059
x-amz-id-2: SFrxRe2sKqmtTHg2kUJx1wbyxEhgFybnCJYi5BNqrVrAbwkmvZEFyZiJuduYcLWF5JD3QgkVXHc=
x-amz-request-id: G0SVY3EKCWSRK22K
last-modified: Fri, 05 Jun 2020 08:42:55 GMT
etag: "e4f10f00dbdfc76dac0b06e12e76dd81"
cache-control: max-age=86400
cf-cache-status: HIT
age: 2618
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vK047WANWybVnxoktAABtC1W3EowHXGeCzCnUxzDr0GxpDcA2udChzMHw1uVCdNVNSL1sgmefVvuOOYWjcbx%2FpjruzWKXRhcWoemBF8D35%2BCLojRyemFZ6dBjjqRxOIr%2BBY6IA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d40b1fafb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.dealsfor.life/23x9/GG201910181329540253000000000000_bandeira_noruega.jpg
188.114.96.1200 OK 389 B URL HTTP/2 cdn.dealsfor.life/23x9/GG201910181329540253000000000000_bandeira_noruega.jpg
IP 188.114.96.1:0
File type PNG image data, 23 x 9, 8-bit/color RGB, non-interlaced\012- data
Hash 3985c40fe38e6b8cb2b7de1b2987cffe
7c0328120073e47ffe990c218a3318c8edd675c5
c82d89e379fa3c6a82fcf1b943144c7f61f007828904ff2beccfe127396e9369
GET /23x9/GG201910181329540253000000000000_bandeira_noruega.jpg HTTP/1.1
Host: cdn.dealsfor.life
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: image/png
content-length: 389
x-amz-id-2: IiusZnti6Fc7BErGOmKVn5uyZZ1stcsC2EzgNj+4XO4RSAaDs23tubfUnp2QwmDDN7MmZncjAhM=
x-amz-request-id: 5V2P1FFTF27KNSDX
last-modified: Thu, 28 Nov 2019 03:36:17 GMT
etag: "3985c40fe38e6b8cb2b7de1b2987cffe"
cache-control: max-age=86400
cf-cache-status: HIT
age: 2635
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vHw8AscI68ZFTiumglc3eJCxte0zvHwHExeR2zYTM6RDvy7S3YfXk97S6zRWPzvU%2BzcLssqQvCPLk0w%2FJV5JWX3ETa1CIDLR1YDKDnwOLph92A1QukPvu37PrPaTEkPOPEBSfA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d40b2fbab524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3fdc5cc677f894c80994a40c9b3148fa
f25f8a337bf6c33a693a36193a1fb4c0c33dbd4e
3eb8fd2f2b2c847d3e9f6e610ff610ea1f4757c0bcf44bd513168843d90f5573
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1073
Cache-Control: max-age=112237
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Etag: "63a2b79f-117"
Expires: Fri, 23 Dec 2022 07:54:56 GMT
Last-Modified: Wed, 21 Dec 2022 07:37:03 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3fdc5cc677f894c80994a40c9b3148fa
f25f8a337bf6c33a693a36193a1fb4c0c33dbd4e
3eb8fd2f2b2c847d3e9f6e610ff610ea1f4757c0bcf44bd513168843d90f5573
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3516
Cache-Control: max-age=114679
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Etag: "63a2b79f-117"
Expires: Fri, 23 Dec 2022 08:35:38 GMT
Last-Modified: Wed, 21 Dec 2022 07:37:03 GMT
Server: ECS (amb/6B91)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3fdc5cc677f894c80994a40c9b3148fa
f25f8a337bf6c33a693a36193a1fb4c0c33dbd4e
3eb8fd2f2b2c847d3e9f6e610ff610ea1f4757c0bcf44bd513168843d90f5573
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1073
Cache-Control: max-age=112237
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Etag: "63a2b79f-117"
Expires: Fri, 23 Dec 2022 07:54:56 GMT
Last-Modified: Wed, 21 Dec 2022 07:37:03 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a677501b4490b3352220a1d60a3b88bf
9a5339c0bd6f3e1ae8af0116362efb71426807fc
4dea04acde2396c347e04123c6f97d0efc70695facc6a615a731b6dee801be18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:400,600,800
142.250.74.74200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,600,800
IP 142.250.74.74:0
Hash 04f688af5ce3cab28bc0194db2d58214
3cb38dac75e1f1f970c7d89753fcb86a9e4c6a41
fd02a0bf368f4ba8260ac7ca72c7359608196c04dc215d1ab7e33698e60bd862
GET /css?family=Open+Sans:400,600,800 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 22 Dec 2022 00:44:19 GMT
date: Thu, 22 Dec 2022 00:44:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.2/css/all.css
172.64.133.15200 OK 12 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.2/css/all.css
IP 172.64.133.15:0
File type ASCII text, with very long lines (54456), with no line terminators
Hash 316ee67c8079564a23b1e370cc9c94f8
bb2d97b81e16c477eee1bd25fa697b8550c69108
948fe97e60819db570cb592f4813f147b611b0d0180b711e1653e485f635fae6
GET /releases/v5.7.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pricecomparedeals.com
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: text/css
x-amz-id-2: 2dPCwOQaPEnK8UxMF7VZsKnYy476E4HQgtYmlbLidRxF567hUQJLZBwym5bXV3SKEFOpDdmZOJ0=
x-amz-request-id: KQ12XA63E7SQ5FBH
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:57 GMT
etag: W/"7b1d7f457d056ace7b230b587b9f3753"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IdOI4t56mSYHQIornecTeKM3d2j6ZnpJ8lDwf%2FgRzIizH8O6z9ZMsncUD9Ytg4fMEhPPr%2BKktyjPNC%2FXVm7LjpP1cn7v2VweVBgKTtPnFiCiVX6AfazKtf1te8tYplkoKcfm%2F4BV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d4d40b2a3772ae-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.7.2/webfonts/fa-solid-900.woff2
172.64.133.15200 OK 74 kB URL HTTP/2 use.fontawesome.com/releases/v5.7.2/webfonts/fa-solid-900.woff2
IP 172.64.133.15:0
File type Web Open Font Format (Version 2), TrueType, length 74348, version 329.31064\012- data
Hash 462806316fea535a6a57651bc2b000b0
80644191098f863f25be27841c0d92c452cf2327
4f9ee3d8f6e621642979e6a8f7e75c57cb9da34918cc08a38abfe178dbae1dd2
GET /releases/v5.7.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pricecomparedeals.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:19 GMT
content-type: font/woff2
content-length: 74348
x-amz-id-2: Slu2axdOZafMwnnvW/APY58jDaNF01J0E0OWnbJSQuj2kl0YvkAYmT4YPnHnEVOvdJZ9Ga310eQ=
x-amz-request-id: 8SXPRMQQBNQGC63B
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:46:18 GMT
etag: "462806316fea535a6a57651bc2b000b0"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 42752
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=watjSACiVrKah3sH1Tb3gFf%2BrmjqBVfr7M4D1ONvdTEgvoJi4p%2F8WD94rZp8%2BHBWr%2BWUsRPA7emhMUiUoMKSkXny9GOWy5ZBmXUUDGNIOMDo0CvNTzISxEy2HqJ3ibaAiXJEZTZA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d4d40e0bd872ae-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 1.3 kB IP 142.250.74.131:0
Hash cef24f2539af3b96e1955de610582180
72d0147f3e282a2f53515dd9c3aa503928ef0433
28eee09fc50f4802de72fe2601319cef2e966d82cee7ab24119258da13376080
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.pricecomparedeals.com/no-no
188.114.96.1200 OK 31 kB URL HTTP/2 www.pricecomparedeals.com/no-no
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1238), with CRLF, LF line terminators
Hash 39fcafed498ea0f5d4df35ed5d7433ea
8e8a688270dad4e88251aaa1d4abbbb4d5d228d7
73defd8607e2809cc5929b8e5547c07a0a9cbecbe2dda1eac1783a9644c3ba7c
GET /no-no HTTP/1.1
Host: www.pricecomparedeals.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://us.slowww.xyz/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 00:44:18 GMT
content-type: text/html;charset=UTF-8
cache-control: max-age=1800
cf-cache-status: HIT
age: 1528
last-modified: Thu, 22 Dec 2022 00:18:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kw4dahT5OrL9arrDixe7OZRK0rC8zcvGRwNQvcnqFN2WqzfnzT9NjdvysoJMmWHuW3d2%2ByahSg6cggwmqacwMmgeGpr3nl74IewXj5JEfJpiAJaqYWN21MDqX%2FTVg8pctomca9leIFQDrF%2Fh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d4d409f87d1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.227200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.pricecomparedeals.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:52:41 GMT
expires: Tue, 19 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 193898
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.dogefiles.io/file_icons/zip.png
76.76.21.164200 OK 25 kB URL HTTP/2 www.dogefiles.io/file_icons/zip.png
IP 76.76.21.164:0
Hash 305854c17fa091e58fb3d6a5c17d4c31
96d9ca0009220af1ac02f79523931929d0ca5af8
0e02a3f180354512e131b332622e20fb66a4ee1e4247c6f390a9e0db41793718
GET /file_icons/zip.png HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Cookie: _ga_7CNY7SNMM1=GS1.1.1671669854.1.0.1671669854.0.0.0; _ga=GA1.1.1499854364.1671669854; dom3ic8zudi28v8lr6fgphwffqoz0j6c=249beb1c-c2de-4290-8e70-ed0285f3f57c%3A3%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 4697844
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="zip.png"
content-type: image/png
date: Thu, 22 Dec 2022 00:44:16 GMT
etag: "b8e34c43c0c9be34d33bd41af72c5a11"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /file_icons/zip.png
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::bvdrb-1671669856861-b736079d75bc
content-length: 1049386
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ae02736d592ff0f71082ae08f2ef94f1
2ef79e6cdc1eb940b5e9e836a44b52f8d50826ff
0aaa05b6df08dbac9b586f38fd46bfa453eb385788ff2432d861873306a8bc68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3103
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Last-Modified: Wed, 21 Dec 2022 23:52:36 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/pt_BR/sdk.js
31.13.72.12200 OK 18 kB URL HTTP/2 connect.facebook.net/pt_BR/sdk.js
IP 31.13.72.12:0
Hash e56d0bf068340a515d4ba4870fd507c3
21b7ecf0dd796a53afb15d055f1790ec073613c6
bcc8d0325c81420b170786eb242db4f9ecf2961f250632bec58b9d98505c6d1a
GET /pt_BR/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pricecomparedeals.com
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 93e95543a50115b6f23131520fb6a32e
etag: "01ed175de0f5efd228482cee385441fe"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 22 Dec 2022 00:55:18 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: xttD0eNwhBhMltkYZRVtbA==
x-fb-debug: 7K/cmDGt5LPKrQlzrdCBNw4QcL6lNFsCxISZS2s1dDIkDWqm/ELpOGfwFMlsz3KyzgrW/lBvcyjM4FGzU+L2HQ==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 2074150462
date: Thu, 22 Dec 2022 00:44:19 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ae02736d592ff0f71082ae08f2ef94f1
2ef79e6cdc1eb940b5e9e836a44b52f8d50826ff
0aaa05b6df08dbac9b586f38fd46bfa453eb385788ff2432d861873306a8bc68
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3103
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 00:44:19 GMT
Last-Modified: Wed, 21 Dec 2022 23:52:36 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/pt_BR/sdk.js?hash=5a56ab0e60ffe49993c8afa322941a0f
31.13.72.12200 OK 105 kB URL HTTP/2 connect.facebook.net/pt_BR/sdk.js?hash=5a56ab0e60ffe49993c8afa322941a0f
IP 31.13.72.12:0
Size 105 kB (105071 bytes)
Hash 316b88184443c82e4ed5aa0bf88633f7
7f3e162c5facecae3a95740a3abc0a131c5ed19d
708cd3bb76050f2beaebb6161fc2905c937e02a479a60bd3aeea10db388e7260
GET /pt_BR/sdk.js?hash=5a56ab0e60ffe49993c8afa322941a0f HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.pricecomparedeals.com
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 7525667017191cefa0318e8d865050b7
etag: "4084e94f229d71e8ec2f0a837f558843"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 21 Dec 2023 23:15:12 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: KWKZuAn/M3466F0tGM7Qsw==
x-fb-debug: WmHfDeOw7lIqQjv9vwOtXlGhFDPTcx9CmHZz43MmuqnwpFN7QMncXrL/8JvygDGGGXdpN5ENUSouZuPl5LXhHw==
priority: u=3,i
content-length: 87063
x-fb-trip-id: 2074150462
date: Thu, 22 Dec 2022 00:44:19 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/K/L/K15392BL/K15392BL-1-7176-CfAU.jpg
54.230.111.24200 OK 27 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/K/L/K15392BL/K15392BL-1-7176-CfAU.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7ee2a601c2876be06a81412a605f1b6c
1df94b6c87358af447518b6092b8e27b51fcb177
06e542beeb9ebdaa157ee9b57f5531603ca212903b37400b849e73ad6d4c5bff
GET /product/xy/500/500/p/gu1/K/L/K15392BL/K15392BL-1-7176-CfAU.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 26946
x-amz-id-2: 1UHtDstHCVTp0GFZsTqkEbrjR0+aTz6Ykq0u5yw+0kBy735SnlGSJAcga+pnZjlk0kNzGNHuF5M=
x-amz-request-id: GCFNKSHR6DTM6JSQ
date: Thu, 08 Dec 2022 01:13:35 GMT
last-modified: Tue, 14 Jul 2020 02:47:30 GMT
etag: "7ee2a601c2876be06a81412a605f1b6c"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bGjo0cWS4JpTU2eO72GAuDilkBHahPlF16l8wO56EJrHjTZMtUGUUQ==
age: 1207846
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/E/1/E4850-1/E4850-1-1-ebe9-8FG1.jpg
54.230.111.24200 OK 23 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/E/1/E4850-1/E4850-1-1-ebe9-8FG1.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0d1d32059c98386bb3c4eae3924e0434
051c7ad70c0c01712cac673f841a26f5597e4651
ba482af346765eeaa430a46d537e49b1ada377e46e0b67a97d5cecb6428bfd6c
GET /product/xy/500/500/p/gu1/E/1/E4850-1/E4850-1-1-ebe9-8FG1.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 22742
x-amz-id-2: 46FRygILqaBHxSiheF4Z0cxBmy3SqXN0tv+7VObTraSgHW/6QMQZL/0FSRSVRAUI2VmdGDCUW7E=
x-amz-request-id: TG6R5B4BV6X3YXN4
date: Tue, 13 Dec 2022 00:47:14 GMT
last-modified: Thu, 25 Oct 2018 03:33:20 GMT
etag: "0d1d32059c98386bb3c4eae3924e0434"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wIacIVMmNDR_4DuvhIpfzRhruGNRhk4JiAy0dI-IQdgJyATeleViEQ==
age: 777427
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/I/3/I8433/I8433-1-a679-gUAB.jpg
54.230.111.24200 OK 22 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/I/3/I8433/I8433-1-a679-gUAB.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 955a47cd5b9d1b232a22da1c1caaac01
55ec3ecb6c25623208d7ff1f3ba3d98bcd548973
08295d1ae38f22af27665178cc7b52f0aac9fdb948010c478e6e124bce0465cc
GET /product/xy/500/500/p/gu1/I/3/I8433/I8433-1-a679-gUAB.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 21906
x-amz-id-2: skg86oG0iwUBGw9t7SV5pbfoGYujIp6/oqNJ1Yw4jV6Az3bDJTC9srBm9hJ6l58mrPE1jH3SojE=
x-amz-request-id: C80PYJKTNSXGP56E
date: Wed, 14 Dec 2022 00:49:54 GMT
last-modified: Tue, 07 Sep 2021 11:09:09 GMT
etag: "955a47cd5b9d1b232a22da1c1caaac01"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zSdlwP7OGqby7Lm_KbofOPhU2y5Qw-uvdltKGKYKRMZF8AOIXUPbLg==
age: 690867
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/K/5/K6325/K6325-1-d9a4-2Qda.jpg
54.230.111.24200 OK 12 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/K/5/K6325/K6325-1-d9a4-2Qda.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash efd7cd4e81662cc5682187cd3389559a
e2e59d0f2ed9ca6a682aedfcc093265295cdaeba
1ec0c198d503ac6cf4c439bb0832b132a60b96ea841df671e6c2b69f7934ab96
GET /product/xy/500/500/p/gu1/K/5/K6325/K6325-1-d9a4-2Qda.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 12408
x-amz-id-2: a0lF6Or1Gp2KBQ/Mxc8F5iY0uyuJ4dKSxX/NxMeh6y+HjiFCfSCJpaQPUlqtfgbh2aaoPojYoPU=
x-amz-request-id: JSZY0F1PR9XR2EXJ
date: Fri, 02 Dec 2022 01:23:09 GMT
last-modified: Fri, 06 Apr 2018 08:43:35 GMT
etag: "efd7cd4e81662cc5682187cd3389559a"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xz43Lxx3huhyD2B1okCeQ1XRvxzvrUK_dsCqLr_3jI-fpmJjyzMx-Q==
age: 1725672
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/K/8/K6418/K6418-1-c58d-eQL9.jpg
54.230.111.24200 OK 18 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/K/8/K6418/K6418-1-c58d-eQL9.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9731e09d11a1418c77bd5bb782290db9
d04a0d7940766ffded00e40dc4ed7fe617f9f37e
4a8e9f08f9a62392c57c0d8d3d4416d27d099d358c63406dbcc1fd9bcabf62bc
GET /product/xy/500/500/p/gu1/K/8/K6418/K6418-1-c58d-eQL9.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 17968
x-amz-id-2: ZjMaYsgpOGqIZrWfoLfDoE1UQt3IGnYZ35KHfrhNTP2n0G+DHRp5p1zlbJ3oomXhW1k1tjYFV8w=
x-amz-request-id: 9A37J3KVMAV68K90
date: Sat, 10 Dec 2022 01:32:38 GMT
last-modified: Mon, 23 Apr 2018 10:11:23 GMT
etag: "9731e09d11a1418c77bd5bb782290db9"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S3-lZ5h3yN7WKT86WlcefQkDH7EGX7BFekTrrPJkMYLYvJFm_kkl7w==
age: 1033903
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/H/4/H39850-4/H39850-4-1-bd3e-T4is.jpg
54.230.111.24200 OK 29 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/H/4/H39850-4/H39850-4-1-bd3e-T4is.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3ec8c6ddbeab4b604b141c21b84bb656
10750ef253cc08587c51e8e8af8ac2748b4608ff
cab1838e9b3b200ee39c95e744b19bd4a0f24e08567eab9e300dbad615aad6d1
GET /product/xy/500/500/p/gu1/H/4/H39850-4/H39850-4-1-bd3e-T4is.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 28882
x-amz-id-2: LT5nG0cAS5HaGjafiO1hLCzZujvtcG3Hmk9t604X/peHfPoudS1tRwrn7SyiSRExSeKEN6wnLd8=
x-amz-request-id: E3QXAJYK9S0VZNSC
date: Fri, 25 Nov 2022 00:37:57 GMT
last-modified: Fri, 02 Apr 2021 01:52:38 GMT
etag: "3ec8c6ddbeab4b604b141c21b84bb656"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: aEYku4slKbIfaG9HBKM2owP1b0CP23M2b3tMvh1QemEEfrfwF_394g==
age: 2333184
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/I/2/I3552/I3552-1-70e5-SWTY.jpg
54.230.111.24200 OK 45 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/I/2/I3552/I3552-1-70e5-SWTY.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b754c1661985a3d9253f62acd69cd324
85f0733c9dbde7f09d8a81f292cbbf81187417f3
9864ef51db34c4acdf3c0ce5ea1e3d5ef901fac77196a01a2449b07398a01c9f
GET /product/xy/500/500/p/gu1/I/2/I3552/I3552-1-70e5-SWTY.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 44992
x-amz-id-2: qggqnFGmXnEJ2DdHIdrMvE/8sbh1cxH6uDMpdYOqYEXP6VA2uxIsuGltZgYwI5W77ryAkTk9bCM=
x-amz-request-id: ZCMTPRTVVYZCTZPH
date: Wed, 14 Dec 2022 01:21:21 GMT
last-modified: Wed, 23 May 2018 02:54:38 GMT
etag: "b754c1661985a3d9253f62acd69cd324"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dBECQ5BjnJgUiF_qIweWM71Kii7rtFLtw-eAO47trD8blJ2KnovnUw==
age: 688979
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/Y/1/Y9205R-11/Y9205R-11-1-fed9-tfGW.jpg
54.230.111.24200 OK 28 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/Y/1/Y9205R-11/Y9205R-11-1-fed9-tfGW.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3896efc1dcfea7c08d6675bfd5766f0f
f50fd470413af35421cb57e685dcf95f0bd12aba
168ce1f7dbc81c35c3845b550e03c62d7a868f3dd4a05b8af975a21c976c2c7b
GET /product/xy/500/500/p/gu1/Y/1/Y9205R-11/Y9205R-11-1-fed9-tfGW.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 27506
x-amz-id-2: elkcXhqBypZ7NxHTQy7lmHYNIU0+TXaLYMzXnHJTsennNXDqVeGxhdG4IjQZ7N1TTtbJL1Zm79k=
x-amz-request-id: XH5Q5QH4ZS1QQ3HQ
date: Mon, 05 Dec 2022 00:27:27 GMT
last-modified: Sat, 29 Sep 2018 03:29:36 GMT
etag: "3896efc1dcfea7c08d6675bfd5766f0f"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X0m9cKLyU_wTrC9Oyzz_hfdShV2lFL--ApdZwS0K0m2qx_xl8Q_52w==
age: 1469814
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/C/0/C4420/C4420-1-a836-RlZG.jpg
54.230.111.24200 OK 36 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/C/0/C4420/C4420-1-a836-RlZG.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a58104bf4a88be41a1888a013297b505
1c0e4367f8929e5d14afb655fd42e870c8dfb644
3b75be8914eb76ba11a1b2641df6df83f86131de3331054c95ee81dda12e1b25
GET /product/xy/500/500/p/gu1/C/0/C4420/C4420-1-a836-RlZG.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 36462
x-amz-id-2: SqzICYBlAD7BKVbGgpJTFS+mPiWLBawFRMxgnK3fEFuexv20wJVvtZ344hiX5GaQio/MGcZgm/A=
x-amz-request-id: Q25YVMC0A0N7ZJ91
date: Thu, 01 Dec 2022 01:16:44 GMT
last-modified: Wed, 23 May 2018 08:50:49 GMT
etag: "a58104bf4a88be41a1888a013297b505"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f-vRJuew3earZKmvGlvSQJcS9fXOKALQ_qpVh7DkheUVP_TIAsxjFA==
age: 1812457
X-Firefox-Spdy: h2
img.tttcdn.com/product/xy/500/500/p/gu1/V/5/V8665/V8665-1-31f2-lqFR.jpg
54.230.111.24200 OK 24 kB URL HTTP/2 img.tttcdn.com/product/xy/500/500/p/gu1/V/5/V8665/V8665-1-31f2-lqFR.jpg
IP 54.230.111.24:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6758e3bf1a38b99d917b68482c5becaf
c3109d816bc37b7c665f5f88eadf6ba1825535ad
86146536ee90cdb6687d9867c396c82c01733f688a9312f4409cbae121d48317
GET /product/xy/500/500/p/gu1/V/5/V8665/V8665-1-31f2-lqFR.jpg HTTP/1.1
Host: img.tttcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 23704
x-amz-id-2: NmczIzGO9mrw7rjLS579LP3qrXI2sZAl0v1qR2X9TBeyV3EqKlOAvETbsgBBjOeMY/vmc6GzHMg=
x-amz-request-id: T611Z7R09CT51B1X
date: Thu, 01 Dec 2022 01:12:08 GMT
last-modified: Wed, 19 May 2021 11:13:00 GMT
etag: "6758e3bf1a38b99d917b68482c5becaf"
cache-control: max-age=2592000
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n8AtIitf-1b_ZKCZcQ1Mm9Qk8qCb1MXDcRmykb4N9dcFWBPI539y7w==
age: 1812733
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=387357745142349&ev=fb_page_view&dl=https%3A%2F%2Fwww.pricecomparedeals.com%2Fno-no&rl=https%3A%2F%2Fus.slowww.xyz%2F&if=false&ts=1671669859866&sw=1280&sh=1024&at=
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=387357745142349&ev=fb_page_view&dl=https%3A%2F%2Fwww.pricecomparedeals.com%2Fno-no&rl=https%3A%2F%2Fus.slowww.xyz%2F&if=false&ts=1671669859866&sw=1280&sh=1024&at=
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=387357745142349&ev=fb_page_view&dl=https%3A%2F%2Fwww.pricecomparedeals.com%2Fno-no&rl=https%3A%2F%2Fus.slowww.xyz%2F&if=false&ts=1671669859866&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pricecomparedeals.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Thu, 22 Dec 2022 00:44:20 GMT
X-Firefox-Spdy: h2
www.dogefiles.io/_next/static/chunks/pages/download/%5Bid%5D-ac798d8c23ed5219c562.js
76.76.21.164200 OK 0 B URL HTTP/2 www.dogefiles.io/_next/static/chunks/pages/download/%5Bid%5D-ac798d8c23ed5219c562.js
IP 76.76.21.164:0
GET /_next/static/chunks/pages/download/%5Bid%5D-ac798d8c23ed5219c562.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 4676066
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="[id]-ac798d8c23ed5219c562.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: W/"7f88f49f47dcbc6a3027cf4ec7e098b9"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/pages/download/%5Bid%5D-ac798d8c23ed5219c562.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::bvdrb-1671669854443-11397fde489b
X-Firefox-Spdy: h2
www.dogefiles.io/_next/static/chunks/webpack-1d8564d2d19a2a5ef479.js
76.76.21.164200 OK 0 B URL HTTP/2 www.dogefiles.io/_next/static/chunks/webpack-1d8564d2d19a2a5ef479.js
IP 76.76.21.164:0
GET /_next/static/chunks/webpack-1d8564d2d19a2a5ef479.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 4696518
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="webpack-1d8564d2d19a2a5ef479.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: W/"e7ae0f6295b839013e073e6159bcf645"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/webpack-1d8564d2d19a2a5ef479.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::bvdrb-1671669854439-5d1d219b4445
X-Firefox-Spdy: h2
www.dogefiles.io/_next/static/chunks/main-cdc763525a8ea4696302.js
76.76.21.164200 OK 0 B URL HTTP/2 www.dogefiles.io/_next/static/chunks/main-cdc763525a8ea4696302.js
IP 76.76.21.164:0
GET /_next/static/chunks/main-cdc763525a8ea4696302.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 4698497
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="main-cdc763525a8ea4696302.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: W/"f3bb2926609450898849b72b92b7a183"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/main-cdc763525a8ea4696302.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::bnj2v-1671669854440-ef7817a537df
X-Firefox-Spdy: h2
www.dogefiles.io/_next/static/chunks/25-6de6c546ef51540ff6c4.js
76.76.21.164200 OK 0 B URL HTTP/2 www.dogefiles.io/_next/static/chunks/25-6de6c546ef51540ff6c4.js
IP 76.76.21.164:0
GET /_next/static/chunks/25-6de6c546ef51540ff6c4.js HTTP/1.1
Host: www.dogefiles.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.dogefiles.io/download/63920b7284ac6a3e6c66b5a6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 4654364
cache-control: public,max-age=31536000,immutable
content-disposition: inline; filename="25-6de6c546ef51540ff6c4.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Thu, 22 Dec 2022 00:44:14 GMT
etag: W/"d61fc38098941c9bb1b67b6fdb44753f"
server: Vercel
strict-transport-security: max-age=63072000
x-matched-path: /_next/static/chunks/25-6de6c546ef51540ff6c4.js
x-vercel-cache: HIT
x-vercel-id: arn1:arn1::qdsj5-1671669854441-983e3e754393
X-Firefox-Spdy: h2