r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5854
Expires: Thu, 05 Jan 2023 22:48:08 GMT
Date: Thu, 05 Jan 2023 21:10:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce8af3d72e7e9af609039abee59c8b87
8e1b16591fbc632df35f15e23da55ee86af31bc3
52edddbda4a3a3b778f61a491b21e6ea439e9d8024189e636b1f37b2dd7226fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52EDDDBDA4A3A3B778F61A491B21E6EA439E9D8024189E636B1F37B2DD7226FC"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4913
Expires: Thu, 05 Jan 2023 22:32:27 GMT
Date: Thu, 05 Jan 2023 21:10:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da484f5e9c6805745e063b236fb81473
ae454bf4a7ae0e96935afc81ee0f89c049097b15
068d0da23acbe7f6b600c4e7dbe9c81d3ad78c8afd122255bbf3550e8a290686
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "068D0DA23ACBE7F6B600C4E7DBE9C81D3AD78C8AFD122255BBF3550E8A290686"
Last-Modified: Wed, 04 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6561
Expires: Thu, 05 Jan 2023 22:59:55 GMT
Date: Thu, 05 Jan 2023 21:10:34 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 20:41:16 GMT
content-type: application/json
age: 1758
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cYVb4lReoKTAscFpKm00YfIEoo92R/35Cu5tN3eRNQ2bgvfkiwe38fysFz7CEYpiRuxKdiCn8zA=
x-amz-request-id: YKXEDM13H9W96S82
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 21:01:53 GMT
age: 521
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 21:10:34 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 05 Jan 2023 20:33:38 GMT
age: 2217
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 73a99621729e1bc9e236a1085b98a0cf
5e1f71493085f6be7788f59987c1f0850b77d4d7
219d1a8d7d1a027553f72c8c024488863d8996457b31c78014002f81174f3ad1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2802
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 21:10:35 GMT
Last-Modified: Thu, 05 Jan 2023 20:23:53 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: VNuq7H2GLUQEg3z7mwOwgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kmt1tn50VFfySqItWQS3m8rco28=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5932
Expires: Thu, 05 Jan 2023 22:49:28 GMT
Date: Thu, 05 Jan 2023 21:10:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5932
Expires: Thu, 05 Jan 2023 22:49:28 GMT
Date: Thu, 05 Jan 2023 21:10:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5932
Expires: Thu, 05 Jan 2023 22:49:28 GMT
Date: Thu, 05 Jan 2023 21:10:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5932
Expires: Thu, 05 Jan 2023 22:49:28 GMT
Date: Thu, 05 Jan 2023 21:10:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5932
Expires: Thu, 05 Jan 2023 22:49:28 GMT
Date: Thu, 05 Jan 2023 21:10:36 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ce88a04d7f32ce0497bd84db44da8d4
761049019c342553004815ea394dcf282f2cc613
038aa4e5da1428524de833071814998d6c1d8b8b60d4e9c10e60d8a75f7b88fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5601
x-amzn-requestid: 54813ea9-9435-4355-910b-5b4d1eadf2ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGlhgHU1oAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b282d6-17e772ae5b70371367792063;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:08:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pigrktUzOcu_-Z-HnUPOnmF7yhHIdOv9bB9x7VVONHr7YZXwZAEvZA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:44:19 GMT
age: 51977
etag: "761049019c342553004815ea394dcf282f2cc613"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 23:39:12 GMT
age: 77484
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 165bf3d40f0584e3b9839304ede47c76
27da520440229f2239721371d9338eb81a8b4b93
00075a96a87b16edb302ccc862e0dc9691c7195ac227ae805bc88ebe8dd3ee52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5507a575-db90-4030-a625-ae482beacb61.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9690
x-amzn-requestid: eba6ad45-abca-4781-88d0-28514de35851
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePMB5GxGIAMFZcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f3a5-2f3844833b7ead4f7121ae11;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:46:13 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5I2Qz0M1_DD0wn5b_6HlkAlm_BAn9hiGSiXK_U01NxuXZ46ky280dg==
via: 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 22:17:38 GMT
age: 82378
etag: "27da520440229f2239721371d9338eb81a8b4b93"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 008614d302ad57bc6502ad5e07652378
968bc262d2939ec6f0dce9d852682c0aaf86d3d7
5eab9a2591f0f9761ba3b90a5a191b79b6326cccb1ee6b586b00dfc1517c8db6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4248
x-amzn-requestid: 41ee9ad4-ddfd-42a5-b66c-167c4bda9153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eCvUGHnlIAMFw8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0f8e6-4ac2abc739dc4ff640301707;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 03:07:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVwr9xaKtzkI-Lnp683K6kKaWfnnmPs0o6HG7PBuAc9QbcMqczguNw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:16:00 GMT
age: 53676
etag: "968bc262d2939ec6f0dce9d852682c0aaf86d3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cecd6a1a228ac55f193a180229d3a33
9e5fd5a101828d5491305deb539dc5836c5b3065
7bbd9e261625c2d2a700a817c2f10b779c8463baacda02f9f34161c08487ca31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8721
x-amzn-requestid: 1c24289e-6169-4088-a2b8-311e3640e4bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eAA7IGTdIAMFzCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afe1e0-561d5981260c41511219c673;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:16:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qoxCvnR2nVjlCdQJ6Wyq_Ot0p1SVdhl71LEKAm0-tkPMxWHGdIl42w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:31:55 GMT
age: 49121
etag: "9e5fd5a101828d5491305deb539dc5836c5b3065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7711a1490729319952a150b84e91a5d6
11fda31d48a4df3fd6346d92f45a680f500bff64
e9663e981c6716c243b58ac99549dfbe6dd8371c42d50add46457b5911f63529
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11381
x-amzn-requestid: f30a66f8-72cb-44a6-b87d-55d501050dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKzmH6soAMFZOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1b0-6fc1643036a4012935a38bb3;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iJNA1pytmUSUBG4YeU7rcEKCs04k9rPEuQ6o6FP5bWaQ25M7yGrySA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:49:59 GMT
age: 84037
etag: "11fda31d48a4df3fd6346d92f45a680f500bff64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Inter%3A400%2C300%2C600%2C800&ver=6.1.1
200 OK 655 B URL HTTP/1.1 fonts.googleapis.com/css?family=Inter%3A400%2C300%2C600%2C800&ver=6.1.1
IP
Hash 2473752aba08696a286a8a9067fda5fe
e26588db291275b24f0dff4ea82f363569c8ae30
63b90e3b82f9c8315a1759bc6a7ab4666f15d61eed846663f3f3d9943f0cb6b8
GET /css?family=Inter%3A400%2C300%2C600%2C800&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 05 Jan 2023 21:10:37 GMT
Date: Thu, 05 Jan 2023 21:10:37 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
acacdn.com/script/atg.js
200 OK 32 kB IP
File type Unicode text, UTF-8 text, with very long lines (37217), with NEL line terminators
Hash bbe941a2501a7d01667a94d8ba9c432d
fa28f30ecf2f0ebcfe1e8fc28e602fff84836b56
b3c3ff2e9a94f132ab7bf6ef5bfe975d3ef44e0b6b99d123abbeae5b5ab0b06a
GET /script/atg.js HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdvXJuPkUH_bVMsuVvMkdPzZb-0N3QMAumiMFtT0q_8Qbphn0yikwVAQngsKBfmWNYCJwMpslcRdZbkHUXfQGXIBkecvXI-k
x-goog-generation: 1670939538081813
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97045
x-goog-hash: crc32c=zwlEeg==, md5=K8TvAKQxg8M4VQ0fZF2v2g==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Thu, 05 Jan 2023 20:59:18 GMT
Cache-Control: public, max-age=14400
Last-Modified: Tue, 13 Dec 2022 13:52:18 GMT
ETag: W/"2bc4ef00a43183c338550d1f645dafda"
Age: 1329
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ws8UiMD%2BXLb%2BqvhRR31Mlj3bSCrGx0kJ4EJxwkpyDkKcB7KuP1IP13lUdF0PtMkTaIphVEUBR90UwmKXq839tsDLuG06%2BbLxkFN3zhS4TeB1UhLbbWnhgKCFiw4l"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784f33a49abb0b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ineedsjobs.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
vary: User-Agent
dexpredict.com/a/display.php?r=6562314
204 No Content 0 B URL HTTP/1.1 dexpredict.com/a/display.php?r=6562314
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /a/display.php?r=6562314 HTTP/1.1
Host: dexpredict.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 204 No Content
Server: openresty
Date: Thu, 05 Jan 2023 21:10:37 GMT
Access-Control-Allow-Origin: *
Via: 1.1 google
ineedsjobs.com/wp-includes/css/classic-themes.min.css?ver=1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/css/classic-themes.min.css?ver=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/css/classic-themes.min.css?ver=1
vary: User-Agent
ineedsjobs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92
vary: User-Agent
ineedsjobs.com/wp-includes/css/dashicons.min.css?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/css/dashicons.min.css?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/css/dashicons.min.css?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11
vary: User-Agent
ineedsjobs.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/dark.css?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/dark.css?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/dark.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/dark.css?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/style.css?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/style.css?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/style.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/style.css?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/responsive.css?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/responsive.css?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/responsive.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/responsive.css?ver=6.1.1
vary: User-Agent
pl17882759.highcpmrevenuenetwork.com/138623c76c8d9be6d2bd2f89415afad1/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl17882759.highcpmrevenuenetwork.com/138623c76c8d9be6d2bd2f89415afad1/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25100), with no line terminators
Hash a3c6a8a66119bd6864a22245aaaae856
5ad01e40873ca5aa8788005c25daaa6b74c101c8
1f445887c244d307cb0fe5513da1276d161c5d7be9db463e3dd29e241394623e
Analyzer Verdict Alert quad9 Sinkholed
GET /138623c76c8d9be6d2bd2f89415afad1/invoke.js HTTP/1.1
Host: pl17882759.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 75f244a501419bf446f40959b92fa429
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pl18062922.highcpmrevenuenetwork.com/17/08/a9/1708a94aaaa6628b875721ea011f8398.js
200 OK 13 kB URL HTTP/1.1 pl18062922.highcpmrevenuenetwork.com/17/08/a9/1708a94aaaa6628b875721ea011f8398.js
IP
File type ASCII text, with very long lines (37128), with no line terminators
Hash 1604823024ee76bc5784bd7e7fdff1cf
37099b8dbe5744c58e81a5dd0201e4f058eab709
30d971a36b82848062e6860796f30c2770b2800586f9bf0b594b366f3e4f5b44
Analyzer Verdict Alert quad9 Sinkholed
GET /17/08/a9/1708a94aaaa6628b875721ea011f8398.js HTTP/1.1
Host: pl18062922.highcpmrevenuenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d6d3fd0cba7c1bedfc3da06655f01469
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ineedsjobs.com/wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
vary: User-Agent
ineedsjobs.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
vary: User-Agent
ineedsjobs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
vary: User-Agent
ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92
vary: User-Agent
ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92
vary: User-Agent
ineedsjobs.com/wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408
vary: User-Agent
ineedsjobs.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
200 OK 537 B URL HTTP/2 ineedsjobs.com/wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0
IP
Hash 912417e2f1dc528315cd897c614a4728
b1a691de86c05ef439850bf18cc5747b1c777d0a
ff745eec876a0fe33c5b164e90a1196970ee2c5ce79a269002d6b928b993f469
GET /wp-content/plugins/wp-automatic/css/wp-automatic.css?ver=1.0.0 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Sun, 04 Dec 2022 19:13:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 537
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/themes/shapebox/dark.css?ver=6.1.1
200 OK 2.1 kB URL HTTP/2 ineedsjobs.com/wp-content/themes/shapebox/dark.css?ver=6.1.1
IP
File type CSV text\012- , ASCII text
Hash c09a5e0fb4dd6ea6f2861a7e6248ee0f
a9afedfb0c42d64cba594f46d9b4d8f4e57960a2
55e0d1e7f158ce4891d593aedaaea50bcb5a8a80f8b8ff58324457b99149c455
GET /wp-content/themes/shapebox/dark.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Sat, 03 Dec 2022 08:12:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 2147
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3
200 OK 925 B URL HTTP/2 ineedsjobs.com/wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3
IP
File type ASCII text, with very long lines (3484), with CRLF line terminators
Hash 75b17c343a3dcddd88576ecdb51800bc
7503b291a4bed50fb4895e637b718ad0191ca1ac
7bb681282aaffee6ae29866899f39a51713a69a646d0c10d8c2b5b3c298e8bae
GET /wp-content/plugins/wp-show-posts/css/wp-show-posts-min.css?ver=1.1.3 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Thu, 27 Oct 2022 06:33:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 925
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/themes/shapebox/responsive.css?ver=6.1.1
200 OK 1.9 kB URL HTTP/2 ineedsjobs.com/wp-content/themes/shapebox/responsive.css?ver=6.1.1
IP
File type ASCII text, with CRLF line terminators
Hash f2171c5602315779bde9604acbb519ba
7979c8049ddbc5812815f0ee5130158e49c65a5e
e13531bf5daff52954b6da80e1e385c43db8807f48d71f555895d4c5c5b9d38a
GET /wp-content/themes/shapebox/responsive.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Sat, 03 Dec 2022 08:12:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1924
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ineedsjobs.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 ineedsjobs.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash c4d7cc056b49b00e05cc29cc59aa3d5a
48c426bec60099d2a8628df430ed682c72aab42a
8009c12f2674a8d38401f4b5faad1fef2cfcd18a8c927ed2561ae9d7de9b57b5
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 06:16:57 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 11616
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/themes/shapebox/style.css?ver=6.1.1
200 OK 15 kB URL HTTP/2 ineedsjobs.com/wp-content/themes/shapebox/style.css?ver=6.1.1
IP
File type HTML document, ASCII text, with very long lines (411), with CRLF line terminators
Hash d55057990d215a5c78719e7ebd9477ca
7a220a642940b2dec87776b4675141ce47b64828
45ec500030291ecec4dee62826832a8e135cdfe4f4a07ccc2b076c7ee7498444
GET /wp-content/themes/shapebox/style.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Sat, 03 Dec 2022 08:12:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 15314
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 ineedsjobs.com/wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (58942), with CRLF line terminators
Hash acd92c8ed83b05b2397567666780e23c
6471c599b5c393bd9368c0d1bf30d5ec3cd9fa32
4ace79afed3a598728fddf06c29e5e32c02441b3924bb94b46e36caae1950f65
GET /wp-content/themes/shapebox/fonts/all.min.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Sat, 03 Dec 2022 08:12:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 12368
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-includes/css/classic-themes.min.css?ver=1
200 OK 144 B URL HTTP/2 ineedsjobs.com/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash fcbd239f30d9a6dd1f3637f291143d37
2871bf7d98af3f43e42f7fa32808048e7134fabf
c2f98e9d71f782b7a3266cd337c61ae6c8dcbb7203669c07852aa2ab65ab6144
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 05:57:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 144
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92
200 OK 1.8 kB URL HTTP/2 ineedsjobs.com/wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92
IP
Hash d772afb9c49f78d7d2c32c0568bc1ebf
26357cfd334c2b5c35df693cc30f7dd3b98b0024
f5252c7dfab3d3d11e9b7eeff0a096f7e46713379dac571a291b8d9b7b8fde2e
GET /wp-content/plugins/adfoxly/public/css/adfoxly-public.css?ver=1.7.92 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 15:46:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1818
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 4.6 kB URL HTTP/2 ineedsjobs.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash 0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Tue, 12 Apr 2022 11:26:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 4619
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
200 OK 419 B URL HTTP/2 ineedsjobs.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
IP
File type ASCII text, with very long lines (404)
Hash 5866de4bf195861d3cc11eb3a0e26321
9533c5723d4a639f01d3fbb2aaec8c3ad3b5e34e
e0341ec3e1c468a4d763658867394e85cdaac804de6f11bdbdfca2c3f20f9662
GET /wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Thu, 27 Oct 2022 07:25:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 419
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11
200 OK 150 B URL HTTP/2 ineedsjobs.com/wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11
IP
File type ASCII text, with CR line terminators
Hash f5d39500994a676c5a9cbbeabd484b25
2ce98c5e09fcf1e68721be33f31675c2669dafb8
6d4657477d2c7741300700642d6e0785beb142c27aba9c9f3dc6d84d549a04e0
GET /wp-content/plugins/post-views-counter/css/frontend.css?ver=1.3.11 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Fri, 23 Sep 2022 13:04:33 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 150
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1
200 OK 12 kB URL HTTP/2 ineedsjobs.com/wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1
IP
File type ASCII text, with very long lines (20360)
Hash ecfea953823e9f179d27658365913b18
c0b60c06a2cad8f11a6f3ccb3f2ee96fa984d175
561932cbb0444e327880f655c0824282dcd57240bb2e0ab496bd34f42c88f5ac
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 14:44:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 11889
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
200 OK 19 kB URL HTTP/2 ineedsjobs.com/wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1
IP
File type ASCII text, with very long lines (26725)
Hash e689fe62ca9827d67cd2760a1e6bf3a7
e9b173b787fbfc35b83ed4389f27beedbc36f06b
fe2b95ae5dfe5a85d31483a26718812b581c4f9dcc3a2304921b82de59f8f479
GET /wp-content/plugins/jetpack/_inc/social-logos/social-logos.min.css?ver=1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 14:44:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 18785
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 30 kB URL HTTP/2 ineedsjobs.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 3a1740685bd5c0bbd5f2b812e1eb7fb4
488e07695da787fed18361c50292aef35abb5e81
4a07aed2d8cf88afdec0b56b365b951c76d387db3459166b5a0d25e2e6cc95ef
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 05:57:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 30324
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 ineedsjobs.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 14:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3995
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92
200 OK 18 B URL HTTP/2 ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92
IP
File type ASCII text, with no line terminators
Hash caaa6ada9f5a21e5c1db106a6750b2b7
872ef9837f6565a4f0d0043ee15e8c6e7fdc7dea
eb270553c93880a7296ab5dda85fc3d0e8734751fc33cbc1522978505d95b790
GET /wp-content/plugins/adfoxly/public/js/adfoxly-public-ajax.js?ver=1.7.92 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 15:46:47 GMT
accept-ranges: bytes
content-length: 18
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92
200 OK 2.0 kB URL HTTP/2 ineedsjobs.com/wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92
IP
Hash 1a1fda7f43ab4806ecb940442545bec4
53a644bc1f8194c24633c8d741fd66ec23eedefb
460c1e06d0927681a540c0519a64ad78ea18d3e42ff54e195e1d9ed382ced4e9
GET /wp-content/plugins/adfoxly/public/js/adfoxly-public.js?ver=1.7.92 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 15:46:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1989
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1
200 OK 3.1 kB URL HTTP/2 ineedsjobs.com/wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (13060), with no line terminators
Hash 2ca19ec07e3ca7f978e762afa50e0843
99c7a3080d5cb2061f1b2171c9bf35ebf6a7fd3c
373e70495cf57eb8576e29509e5761c593202bcc4b482209d205f97c90b8b3b1
GET /wp-content/plugins/alx-extensions/js/jquery.sharrre.min.js?ver=1.0.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Sat, 03 Dec 2022 08:20:27 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3101
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-includes/css/dashicons.min.css?ver=6.1.1
200 OK 35 kB URL HTTP/2 ineedsjobs.com/wp-includes/css/dashicons.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (58981)
Hash 54c5bfb8a890d87139d9abfe01662c83
f9eddf5b8a3269e6d6fa40b4f13083705e6267c6
9685e5cabe4efc8c85e986725af8009b306416aad3ecc9086ca5bb12b84ce4ef
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: text/css
last-modified: Thu, 04 Mar 2021 02:46:22 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 35110
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/themes/shapebox/img/thumb-medium.png
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/img/thumb-medium.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/img/thumb-medium.png HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/img/thumb-medium.png
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408
200 OK 1.5 kB URL HTTP/2 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408
IP
File type ASCII text, with very long lines (4573)
Hash 5a024c03160cb81489a1cb0a7a1032ba
24bbd7c338c42f991af0168a48ffa58e481ea2ba
846b3bf5e9a11f3b890af3c6d109d1051c1f4919673d0dc32a45c0e924ee7f52
GET /wp-content/plugins/jetpack/_inc/build/related-posts/related-posts.min.js?ver=20150408 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:44:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 1511
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1
200 OK 316 B URL HTTP/2 ineedsjobs.com/wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1
IP
Hash 98562a00d396f4e497bd060365515379
b6e09dd87b22b6a7293551423b3e318d4a504ada
da6c3b5ec1baea8dfefe9a30abfa3ee6ba64464cb5ff44856d0704fb45323d40
GET /wp-content/plugins/wp-automatic/js/main-front.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Sun, 04 Dec 2022 19:13:58 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 316
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1
200 OK 11 kB URL HTTP/2 ineedsjobs.com/wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (32026), with CRLF line terminators
Hash fbfc9bfbd4a54fee619f9f620908e135
1eb0b25bb24e8b2465018d5b25e0d84b214b025b
d810d41700efbce6035bf213f30bce338f5f3a8bb56b84ae342da34cc2f5fd60
GET /wp-content/themes/shapebox/js/slick.min.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ineedsjobs.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 12 Jan 2023 21:10:38 GMT
content-type: application/javascript
last-modified: Sat, 03 Dec 2022 08:12:09 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 10662
date: Thu, 05 Jan 2023 21:10:38 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 38 kB URL HTTP/1.1 fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data
Hash e08be6d5d433944f7ad52902e4d24db5
e2600c1d60d12d397b3ee44411a021231d71e974
450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e
GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 37924
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Jan 2023 00:19:16 GMT
Expires: Thu, 04 Jan 2024 00:19:16 GMT
Cache-Control: public, max-age=31536000
Age: 161482
Last-Modified: Mon, 11 Jul 2022 20:54:46 GMT
Content-Type: font/woff2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d10bbfb1c3c508be586f28deb189881f
6e884b982f1e2167d0f3ee2a1746e140a212533f
e840dd6a2fbcbd84f79df107973a91e4ff21d247901750b51018fdae67f07c98
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148561
Date: Thu, 05 Jan 2023 21:10:38 GMT
Etag: "63b6d122-1d7"
Expires: Sat, 07 Jan 2023 14:26:39 GMT
Last-Modified: Thu, 05 Jan 2023 13:31:14 GMT
Server: ECS (nyb/1D16)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sDx-mevODYx3wPmN4t5pfDupJf7malC85_ybm5k_T2aqA2CyNnTt1A==
Age: 3325
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 7c67cc603c8d3cb8fed95affc6cc7b27
c69a8cecdcdada0cefac9ee40bbcc928002004e9
aae417cac247773cafb50f4b03c151e811782197b3faf9e3880470484f302306
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:38 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://ineedsjobs.com
access-control-allow-credentials: true
set-cookie: uid_id2=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d:1:1; expires=Sun, 02 Jan 2033 21:10:38 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash d10bbfb1c3c508be586f28deb189881f
6e884b982f1e2167d0f3ee2a1746e140a212533f
e840dd6a2fbcbd84f79df107973a91e4ff21d247901750b51018fdae67f07c98
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148497
Date: Thu, 05 Jan 2023 21:10:38 GMT
Etag: "63b6d122-1d7"
Expires: Sat, 07 Jan 2023 14:25:35 GMT
Last-Modified: Thu, 05 Jan 2023 13:31:14 GMT
Server: ECS (nyb/1D2C)
X-Cache: Miss from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vgdgKxbknRV-kVrPRfoTpHP4bpB5Izo3CPZRgeIvG0P_-ApJJIvryw==
Age: 3261
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 1c65ee9f074c4e9d66345a14d8dff207
18f3ebede04aa0c76a37c05e9b98e823ef529444
758f7c156844629dcfacbe93483e3fd93f60da817ce4f710a47ce41f08412fa7
Analyzer Verdict Alert fortinet Malware
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:39 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://ineedsjobs.com
access-control-allow-credentials: true
set-cookie: uid_id2=c69c8068-c0de-4dbf-9f3c-48d6b78749bc:1:1; expires=Sun, 02 Jan 2033 21:10:39 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 28 kB URL HTTP/1.1 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:39 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 3b302bdfda7b2076d92a49f8c0af0f79
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Thu, 05 Jan 2023 21:10:38 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9BIUB8tEhRazTMjWQIH3qA%2Bm8EEDlGzskQ3esmIujSdpwwnIIvyUg6Gk6nfC4wMlBNB5sNznKEM9fVdIGtABa5F0AZQUe7%2FQz1VcbDpYbFnaEHZv2lYgIDYNMHVkQ%2FH5chQWuTs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784f33acacd8778f-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ineedsjobs.com/wp-content/themes/shapebox/img/thumb-small.png
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/img/thumb-small.png
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/img/thumb-small.png HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/img/thumb-small.png
vary: User-Agent
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 294bb4df1cd5e3588480f49151905181
64263875314ec2eb974ba616321fc112e93cd9df
602b2c6f03ae12180f494c9b2507ddc0f5e0e083fa8a5f90dc954c02bf877be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "602B2C6F03AE12180F494C9B2507DDC0F5E0E083FA8A5F90DC954C02BF877BE4"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6406
Expires: Thu, 05 Jan 2023 22:57:25 GMT
Date: Thu, 05 Jan 2023 21:10:39 GMT
Connection: keep-alive
jeerinfluencemedical.com/ntv.json?key=138623c76c8d9be6d2bd2f89415afad1&vstc=1
200 OK 4.2 kB URL HTTP/1.1 jeerinfluencemedical.com/ntv.json?key=138623c76c8d9be6d2bd2f89415afad1&vstc=1
IP
File type JSON data\012- , ASCII text, with very long lines (4237), with no line terminators
Hash 2c284585649cc933cd356709d30d40b3
351d8c7547d56fca7a3d84640321ef435f6263f8
a5e03e7a8ff9e41ca994f880c4a9f74e967439a0f7669a04fe86577a18616568
GET /ntv.json?key=138623c76c8d9be6d2bd2f89415afad1&vstc=1 HTTP/1.1
Host: jeerinfluencemedical.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:39 GMT
Content-Type: application/json
Content-Length: 4237
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://ineedsjobs.com
Access-Control-Allow-Origin: http://ineedsjobs.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17782260; expires=Fri, 06 Jan 2023 21:10:39 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 06 Jan 2023 21:10:39 GMT; secure; SameSite=None
uncs=1; expires=Fri, 06 Jan 2023 21:10:39 GMT; secure; SameSite=None
pdhtkv49=true; expires=Fri, 06 Jan 2023 21:10:39 GMT; secure; SameSite=None
uncs49=1; expires=Fri, 06 Jan 2023 21:10:39 GMT; secure; SameSite=None
nlec138623c76c8d9be6d2bd2f89415afad1=[2229333]; expires=Thu, 05 Jan 2023 21:10:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 59352b8be101e6231ab4165e07520ded
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 18411d03bf5526fef2fe50a8321ecb76
8f116810c6e9e6b93f2c261d9cc1aadd93fde446
0b9ce9a3ca7cb9f492e13d0241351a04efaf7697d70acbccecd928bd9f600aab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B9CE9A3CA7CB9F492E13D0241351A04EFAF7697D70ACBCCECD928BD9F600AAB"
Last-Modified: Thu, 05 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4612
Expires: Thu, 05 Jan 2023 22:27:31 GMT
Date: Thu, 05 Jan 2023 21:10:39 GMT
Connection: keep-alive
jeerinfluencemedical.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9Nb%2F%2BgcSFnxtBpBAEBe1U9UfS7TgE4xgJjkmcmZCd8L6q8yav6xXvVXV1sgoOyCzbnYqLyulkgjoMDgi6EaQjDEMQmdqMWZg%2FQRBFXEp3GqIXqu5579wH59x7P9rLTkmAjJ6svWd2lNZ0tlkN%2FJc3VCxM7vyV634YVIOL%2FoaK5xoX%2Ff74Z3uvh0GzGrzivyP5lpmtBWEQhEHoLykrI9OfnbBQyZ12WG0H1UatGjYb6Nv%2Fnl3mwVEPondKnoYS5f83H9yD4iPE3a8vS7eVmuTVt7uZpqmx6InD9XgrNnmM7jmMrIcoPpxWw7iSkE8uwMSHUwcwvf2xAzBVEu9RCBYfTmWC9Q7OlDINGYOJx5H3RpB6BEVH4OYmlHhIAC6wsoq4e3vF2Jxun7F0zJak8tcfUHlJKr8%2Bi7h7d1Grvn%2FN6CxVJnboRwVUfwTVGSHJjpDueFD5EXj6IZQgiLsFlCgmrpUaQUUjaDkAdR6y8ac8ZJGHLPHQFSc%2BbbajIJiPWFSvtxqc83qd82ZrTjRFvdGKAmR8LGuANBmA6wG43UVid7GlBrDZD3CbBZzw4NKSeO%2FvoicK5JIgdwQ5JcgVQZ4S5L3iQGhXc8VtoV3GwmmuTXO9GJq0s0cPTNqRMdlLTslT4354T6z%2FiS154of11lytzufneEu0mZwTNSZqUavdCJs0oiKEUwWUuzCxuqNK8sL9X5Cokjz2XQ%2BMHsHpI3D1PGgWgubD%2BVoAujlstALsxHdVLKVwNwxzVW66EKZAklaQbnt7%2BpQ8N5nMi5V1SH68cH%2FmUjJ8NANuCyS2wA31I0FH3xpeNTnZv2pyR%2B6tJqnqqh06ntq1lKbyf1%2B%2BK7dzY8XyZTf44k0%2BJsbwznXp0is0FiruOPLVohJC2iVjuSTfL7sNydYyt7mY2ThLrqy9tbTcTax0Tpl4BKoerv4NrkpSeemZyT4%2B%2BdNvUHYEmxXoZsdkGlDmCDzZhUvO1TtDYPV5DUs85FkxtDV2fqlVSWarFWh5vPDBN%2F5rn%2F9%2BCZQVcPJfD8%2FxnruFjvVA05uTTezZAj1dgOoBXDYzTBN7vPDg03F8Bqa9IdPW22fa6o%2FP2uvUiS%2BbURDJoCZZ1GbRPA1EO2q0GW2Hcp41aYjUlfzbN37%2BBwAA%2F%2F8BAAD%2F%2F5MMzcFrBAAA
200 OK 7 B URL HTTP/1.1 jeerinfluencemedical.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9Nb%2F%2BgcSFnxtBpBAEBe1U9UfS7TgE4xgJjkmcmZCd8L6q8yav6xXvVXV1sgoOyCzbnYqLyulkgjoMDgi6EaQjDEMQmdqMWZg%2FQRBFXEp3GqIXqu5579wH59x7P9rLTkmAjJ6svWd2lNZ0tlkN%2FJc3VCxM7vyV634YVIOL%2FoaK5xoX%2Ff74Z3uvh0GzGrzivyP5lpmtBWEQhEHoLykrI9OfnbBQyZ12WG0H1UatGjYb6Nv%2Fnl3mwVEPondKnoYS5f83H9yD4iPE3a8vS7eVmuTVt7uZpqmx6InD9XgrNnmM7jmMrIcoPpxWw7iSkE8uwMSHUwcwvf2xAzBVEu9RCBYfTmWC9Q7OlDINGYOJx5H3RpB6BEVH4OYmlHhIAC6wsoq4e3vF2Jxun7F0zJak8tcfUHlJKr8%2Bi7h7d1Grvn%2FN6CxVJnboRwVUfwTVGSHJjpDueFD5EXj6IZQgiLsFlCgmrpUaQUUjaDkAdR6y8ac8ZJGHLPHQFSc%2BbbajIJiPWFSvtxqc83qd82ZrTjRFvdGKAmR8LGuANBmA6wG43UVid7GlBrDZD3CbBZzw4NKSeO%2FvoicK5JIgdwQ5JcgVQZ4S5L3iQGhXc8VtoV3GwmmuTXO9GJq0s0cPTNqRMdlLTslT4354T6z%2FiS154of11lytzufneEu0mZwTNSZqUavdCJs0oiKEUwWUuzCxuqNK8sL9X5Cokjz2XQ%2BMHsHpI3D1PGgWgubD%2BVoAujlstALsxHdVLKVwNwxzVW66EKZAklaQbnt7%2BpQ8N5nMi5V1SH68cH%2FmUjJ8NANuCyS2wA31I0FH3xpeNTnZv2pyR%2B6tJqnqqh06ntq1lKbyf1%2B%2BK7dzY8XyZTf44k0%2BJsbwznXp0is0FiruOPLVohJC2iVjuSTfL7sNydYyt7mY2ThLrqy9tbTcTax0Tpl4BKoerv4NrkpSeemZyT4%2B%2BdNvUHYEmxXoZsdkGlDmCDzZhUvO1TtDYPV5DUs85FkxtDV2fqlVSWarFWh5vPDBN%2F5rn%2F9%2BCZQVcPJfD8%2FxnruFjvVA05uTTezZAj1dgOoBXDYzTBN7vPDg03F8Bqa9IdPW22fa6o%2FP2uvUiS%2BbURDJoCZZ1GbRPA1EO2q0GW2Hcp41aYjUlfzbN37%2BBwAA%2F%2F8BAAD%2F%2F5MMzcFrBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzWsk1Rd9Nb%2F%2BgcSFnxtBpBAEBe1U9UfS7TgE4xgJjkmcmZCd8L6q8yav6xXvVXV1sgoOyCzbnYqLyulkgjoMDgi6EaQjDEMQmdqMWZg%2FQRBFXEp3GqIXqu5579wH59x7P9rLTkmAjJ6svWd2lNZ0tlkN%2FJc3VCxM7vyV634YVIOL%2FoaK5xoX%2Ff74Z3uvh0GzGrzivyP5lpmtBWEQhEHoLykrI9OfnbBQyZ12WG0H1UatGjYb6Nv%2Fnl3mwVEPondKnoYS5f83H9yD4iPE3a8vS7eVmuTVt7uZpqmx6InD9XgrNnmM7jmMrIcoPpxWw7iSkE8uwMSHUwcwvf2xAzBVEu9RCBYfTmWC9Q7OlDINGYOJx5H3RpB6BEVH4OYmlHhIAC6wsoq4e3vF2Jxun7F0zJak8tcfUHlJKr8%2Bi7h7d1Grvn%2FN6CxVJnboRwVUfwTVGSHJjpDueFD5EXj6IZQgiLsFlCgmrpUaQUUjaDkAdR6y8ac8ZJGHLPHQFSc%2BbbajIJiPWFSvtxqc83qd82ZrTjRFvdGKAmR8LGuANBmA6wG43UVid7GlBrDZD3CbBZzw4NKSeO%2FvoicK5JIgdwQ5JcgVQZ4S5L3iQGhXc8VtoV3GwmmuTXO9GJq0s0cPTNqRMdlLTslT4354T6z%2FiS154of11lytzufneEu0mZwTNSZqUavdCJs0oiKEUwWUuzCxuqNK8sL9X5Cokjz2XQ%2BMHsHpI3D1PGgWgubD%2BVoAujlstALsxHdVLKVwNwxzVW66EKZAklaQbnt7%2BpQ8N5nMi5V1SH68cH%2FmUjJ8NANuCyS2wA31I0FH3xpeNTnZv2pyR%2B6tJqnqqh06ntq1lKbyf1%2B%2BK7dzY8XyZTf44k0%2BJsbwznXp0is0FiruOPLVohJC2iVjuSTfL7sNydYyt7mY2ThLrqy9tbTcTax0Tpl4BKoerv4NrkpSeemZyT4%2B%2BdNvUHYEmxXoZsdkGlDmCDzZhUvO1TtDYPV5DUs85FkxtDV2fqlVSWarFWh5vPDBN%2F5rn%2F9%2BCZQVcPJfD8%2FxnruFjvVA05uTTezZAj1dgOoBXDYzTBN7vPDg03F8Bqa9IdPW22fa6o%2FP2uvUiS%2BbURDJoCZZ1GbRPA1EO2q0GW2Hcp41aYjUlfzbN37%2BBwAA%2F%2F8BAAD%2F%2F5MMzcFrBAAA HTTP/1.1
Host: jeerinfluencemedical.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Cookie: u_pl=17782260; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec138623c76c8d9be6d2bd2f89415afad1=[2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:39 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ad52d4e01c1619920a758fecccd27f00
Strict-Transport-Security: max-age=0; includeSubdomains
ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
200 OK 24 kB URL HTTP/1.1 ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9381), with CRLF, LF line terminators
Hash 3b2296615ef280e782f00afd69a24c78
82547f115b808923f6ebe6420a9c3bb1094d2443
157c71208e4b9c9452258a9eeb99682b97ab66524be9cd7c8ad79b3f94173de0
GET /investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/ HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
x-pingback: http://ineedsjobs.com/xmlrpc.php
set-cookie: pvc_visits[0]=1673039436b9748; expires=Fri, 06-Jan-2023 21:10:36 GMT; Max-Age=86400; path=/; HttpOnly
link: <https://ineedsjobs.com/wp-json/>; rel="https://api.w.org/", <https://ineedsjobs.com/wp-json/wp/v2/posts/9748>; rel="alternate"; type="application/json", <https://wp.me/peq1yY-2xe>; rel=shortlink
transfer-encoding: chunked
content-encoding: gzip
vary: Accept-Encoding,User-Agent
date: Thu, 05 Jan 2023 21:10:37 GMT
server: LiteSpeed
cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
200 OK 24 kB URL HTTP/1.1 cdn.cloudimagesb.com/cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash d71c872fb9f50bd9383abc0721d1d51e
1f69b40ef2f95798b4e0fd738d630ad4319cd739
6b4a622b9de1ffab8fe905fc8c4633994c732476664b5190ceedd62a3795ab08
GET /cti/5e/78/a9/5e78a94057ff65f06ec19e727c7be04f/1588233511.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:39 GMT
Content-Type: image/jpeg
Content-Length: 24518
Connection: keep-alive
Server: nginx/1.17.6
Last-Modified: Thu, 30 Apr 2020 07:58:34 GMT
ETag: "5eaa852a-5fc6"
Expires: Sat, 07 Jan 2023 21:10:39 GMT
Cache-Control: max-age=172800
X-Proxy-Cache: HIT
Accept-Ranges: bytes
jeerinfluencemedical.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3t%2F8QNaDnxdBpBEEBZ10z0dmxnVZjGskuCZxd0NuQnVV9aQ21V1NVX9McgouyB7Hm4qHzjPJBnVZXBD0IshEWJYgsn1ZczB%2FgiCKeJSZDERf6H6fqucteJ73fT%2FazU6Ih4wer76nt6VSdK5d99yX12XMdWHd5euu79W9C%2B66jOdbF9zB5Gfy132vXfdecd8RbFPPNTzf83zPdxelEaEezE1ZyOROz6%2F3vHqrUffbLQzMf882c2CpA56fkKchefX%2FjQf3INkYcfT1ZWE3U528%2BnaUKZpqg5wfrMWbsS5iRGcwNA7C%2BGBWDW0rQj45Bx0fzBxA53sTBwhkRZxHPoL4YCYTQb5%2FqjRQEDEC%2FjiKfAyhxpB0DKZvQvKHBGAcyyuIo9vL2hR065SlE7Yitb%2F%2BgCwqUvv1WcTR3QUlB%2B41rbJU6thiEJaQgzFkf4wkO0S67UAWh2Dph5CcII5KSF5OXUs5hgzHUGIIah1kk086yEIHWeIg4scubfdCz%2BuEQdhsdluMsWaTsXZ3nrd5s9UNPWRsImuINBmCqSGY2UFidrAphzDZD7AbJSx3YNOKOO%2FvIOclCkFQWIKCEhSSoEgJirzc58o2bHmbK5sF%2Fiw3ZrlZjnTa36X7Ou2LmOwmJ%2BSpST%2BcJ9b%2BxKY4dv1md77RZJ151uW9QMzzRsAbYbfX8ts0pNyHlSWkPTe1ui0r8sL9X5DIijz2XY6AHsKqQzD5PGjmgxajTsMD3Ri1uh6247syFoLbGzqwdaYjcF0iSWtIt5xddUKem07mxdoaBDu6dP%2F8xWT06DyYKZGYEjfkjwR9dWt0VRdk76ouLLm3kqQyktt0MrVrKU3F%2F758V2wV2vCly3b4xZtsQkzgnevCpldozGXct%2BSrBcm5MIvaMEG%2BX7LrIljN7MZCZuIsubL61uJSlBhhrdTxGFQ%2BXPkbTFak9tIz03188qffIM0YJisRZUdkFpD6ECzZgU3O1FtNYNRZTZA4KLJyZBrB2aWSFZmr16DE0aUPvnFf%2B%2Fz3i6BBCSv%2B9fAM79pb6BsHNL053cTclMhVCaqGsNn5UZqYo0sPPp3EZwiUMwqUcfYCZdTHp%2B218tht%2By3RDbodxnkgGPc7jWa36XkNzludnvB7SG3Fvn3j538AAAD%2F%2FwEAAP%2F%2FhwRDJ2sEAAA%3D
200 OK 7 B URL HTTP/1.1 jeerinfluencemedical.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3t%2F8QNaDnxdBpBEEBZ10z0dmxnVZjGskuCZxd0NuQnVV9aQ21V1NVX9McgouyB7Hm4qHzjPJBnVZXBD0IshEWJYgsn1ZczB%2FgiCKeJSZDERf6H6fqucteJ73fT%2FazU6Ih4wer76nt6VSdK5d99yX12XMdWHd5euu79W9C%2B66jOdbF9zB5Gfy132vXfdecd8RbFPPNTzf83zPdxelEaEezE1ZyOROz6%2F3vHqrUffbLQzMf882c2CpA56fkKchefX%2FjQf3INkYcfT1ZWE3U528%2BnaUKZpqg5wfrMWbsS5iRGcwNA7C%2BGBWDW0rQj45Bx0fzBxA53sTBwhkRZxHPoL4YCYTQb5%2FqjRQEDEC%2FjiKfAyhxpB0DKZvQvKHBGAcyyuIo9vL2hR065SlE7Yitb%2F%2BgCwqUvv1WcTR3QUlB%2B41rbJU6thiEJaQgzFkf4wkO0S67UAWh2Dph5CcII5KSF5OXUs5hgzHUGIIah1kk086yEIHWeIg4scubfdCz%2BuEQdhsdluMsWaTsXZ3nrd5s9UNPWRsImuINBmCqSGY2UFidrAphzDZD7AbJSx3YNOKOO%2FvIOclCkFQWIKCEhSSoEgJirzc58o2bHmbK5sF%2Fiw3ZrlZjnTa36X7Ou2LmOwmJ%2BSpST%2BcJ9b%2BxKY4dv1md77RZJ151uW9QMzzRsAbYbfX8ts0pNyHlSWkPTe1ui0r8sL9X5DIijz2XY6AHsKqQzD5PGjmgxajTsMD3Ri1uh6247syFoLbGzqwdaYjcF0iSWtIt5xddUKem07mxdoaBDu6dP%2F8xWT06DyYKZGYEjfkjwR9dWt0VRdk76ouLLm3kqQyktt0MrVrKU3F%2F758V2wV2vCly3b4xZtsQkzgnevCpldozGXct%2BSrBcm5MIvaMEG%2BX7LrIljN7MZCZuIsubL61uJSlBhhrdTxGFQ%2BXPkbTFak9tIz03188qffIM0YJisRZUdkFpD6ECzZgU3O1FtNYNRZTZA4KLJyZBrB2aWSFZmr16DE0aUPvnFf%2B%2Fz3i6BBCSv%2B9fAM79pb6BsHNL053cTclMhVCaqGsNn5UZqYo0sPPp3EZwiUMwqUcfYCZdTHp%2B218tht%2By3RDbodxnkgGPc7jWa36XkNzludnvB7SG3Fvn3j538AAAD%2F%2FwEAAP%2F%2FhwRDJ2sEAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzWskxRuu3t%2F8QNaDnxdBpBEEBZ10z0dmxnVZjGskuCZxd0NuQnVV9aQ21V1NVX9McgouyB7Hm4qHzjPJBnVZXBD0IshEWJYgsn1ZczB%2FgiCKeJSZDERf6H6fqucteJ73fT%2FazU6Ih4wer76nt6VSdK5d99yX12XMdWHd5euu79W9C%2B66jOdbF9zB5Gfy132vXfdecd8RbFPPNTzf83zPdxelEaEezE1ZyOROz6%2F3vHqrUffbLQzMf882c2CpA56fkKchefX%2FjQf3INkYcfT1ZWE3U528%2BnaUKZpqg5wfrMWbsS5iRGcwNA7C%2BGBWDW0rQj45Bx0fzBxA53sTBwhkRZxHPoL4YCYTQb5%2FqjRQEDEC%2FjiKfAyhxpB0DKZvQvKHBGAcyyuIo9vL2hR065SlE7Yitb%2F%2BgCwqUvv1WcTR3QUlB%2B41rbJU6thiEJaQgzFkf4wkO0S67UAWh2Dph5CcII5KSF5OXUs5hgzHUGIIah1kk086yEIHWeIg4scubfdCz%2BuEQdhsdluMsWaTsXZ3nrd5s9UNPWRsImuINBmCqSGY2UFidrAphzDZD7AbJSx3YNOKOO%2FvIOclCkFQWIKCEhSSoEgJirzc58o2bHmbK5sF%2Fiw3ZrlZjnTa36X7Ou2LmOwmJ%2BSpST%2BcJ9b%2BxKY4dv1md77RZJ151uW9QMzzRsAbYbfX8ts0pNyHlSWkPTe1ui0r8sL9X5DIijz2XY6AHsKqQzD5PGjmgxajTsMD3Ri1uh6247syFoLbGzqwdaYjcF0iSWtIt5xddUKem07mxdoaBDu6dP%2F8xWT06DyYKZGYEjfkjwR9dWt0VRdk76ouLLm3kqQyktt0MrVrKU3F%2F758V2wV2vCly3b4xZtsQkzgnevCpldozGXct%2BSrBcm5MIvaMEG%2BX7LrIljN7MZCZuIsubL61uJSlBhhrdTxGFQ%2BXPkbTFak9tIz03188qffIM0YJisRZUdkFpD6ECzZgU3O1FtNYNRZTZA4KLJyZBrB2aWSFZmr16DE0aUPvnFf%2B%2Fz3i6BBCSv%2B9fAM79pb6BsHNL053cTclMhVCaqGsNn5UZqYo0sPPp3EZwiUMwqUcfYCZdTHp%2B218tht%2By3RDbodxnkgGPc7jWa36XkNzludnvB7SG3Fvn3j538AAAD%2F%2FwEAAP%2F%2FhwRDJ2sEAAA%3D HTTP/1.1
Host: jeerinfluencemedical.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Cookie: u_pl=17782260; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; nlec138623c76c8d9be6d2bd2f89415afad1=[2229333]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:39 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 25f6f036d9a6dc93e9fc435dbefdd225
Strict-Transport-Security: max-age=0; includeSubdomains
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/photon/photon.min.js?ver=20130122
301 Moved Permanently 2.8 kB URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/photon/photon.min.js?ver=20130122
IP
Hash 01920894cbb6cbe11b1c0e3f8e1ff046
8a4a62b5e4bed770a992cfb9506cd44ae666e012
7fb2927ea8093e42e559232b1f91520dc624be2ea73376964a312f7d339fb7cb
GET /wp-content/plugins/jetpack/_inc/build/photon/photon.min.js?ver=20130122 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/photon/photon.min.js?ver=20130122
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/modules/wpgroho.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/modules/wpgroho.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/js/jquery.fitvids.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/js/jquery.fitvids.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/js/jquery.fitvids.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/js/jquery.fitvids.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/js/jq-sticky-anything.min.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/js/jq-sticky-anything.min.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/js/jq-sticky-anything.min.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/js/jq-sticky-anything.min.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/js/theme-toggle.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/js/theme-toggle.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/js/theme-toggle.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/js/theme-toggle.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/js/scripts.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/js/scripts.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/js/scripts.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/js/scripts.js?ver=6.1.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/lazy-images/js/lazy-images.min.js?ver=6.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/lazy-images/js/lazy-images.min.js?ver=6.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/build/lazy-images/js/lazy-images.min.js?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/lazy-images/js/lazy-images.min.js?ver=6.6.1
vary: User-Agent
ineedsjobs.com/wp-content/themes/shapebox/js/nav.js?ver=1670055129
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/themes/shapebox/js/nav.js?ver=1670055129
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/themes/shapebox/js/nav.js?ver=1670055129 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/themes/shapebox/js/nav.js?ver=1670055129
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/postmessage.min.js?ver=6.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/postmessage.min.js?ver=6.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/build/postmessage.min.js?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/postmessage.min.js?ver=6.6.1
vary: User-Agent
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/jquery.jetpack-resize.min.js?ver=6.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/jquery.jetpack-resize.min.js?ver=6.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/build/jquery.jetpack-resize.min.js?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/jquery.jetpack-resize.min.js?ver=6.6.1
vary: User-Agent
ineedsjobs.com/wp-includes/js/comment-reply.min.js?ver=6.1.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-includes/js/comment-reply.min.js?ver=6.1.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-includes/js/comment-reply.min.js?ver=6.1.1
vary: User-Agent
s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202301
200 OK 4.6 kB URL HTTP/2 s0.wp.com/wp-content/js/devicepx-jetpack.js?ver=202301
IP
File type ASCII text, with very long lines (2788)
Hash a9035c1b18e010e1b06ded9d58fcf369
0cc36e490fc8951861cd9404e02cb6adbffef894
adca69c3ea71d0f5f5802c2e10645173839e1a0deb0990b253d4106e4555d0fe
GET /wp-content/js/devicepx-jetpack.js?ver=202301 HTTP/1.1
Host: s0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 21:10:39 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"5bffef65-52b6"
content-encoding: br
expires: Mon, 01 Jan 2024 23:32:21 GMT
cache-control: max-age=31536000
x-ac: 4.arn _dca MISS
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
timing-allow-origin: *
x-nc: HIT arn 1
X-Firefox-Spdy: h2
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/likes/queuehandler.min.js?ver=6.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/likes/queuehandler.min.js?ver=6.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/build/likes/queuehandler.min.js?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:39 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/likes/queuehandler.min.js?ver=6.6.1
vary: User-Agent
reposemarshknot.com/sbar.json?key=1708a94aaaa6628b875721ea011f8398&uuid=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d%3A1%3A1
200 OK 7.0 kB URL HTTP/1.1 reposemarshknot.com/sbar.json?key=1708a94aaaa6628b875721ea011f8398&uuid=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d%3A1%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (10462), with no line terminators
Hash 29185e0c5857cd1c21e53a21a809c803
b1a5dba54567c363c8c8acfa3557de28c6c8c4d5
5787f777b21637f17073edf273715d0e5d0f383f9027a20b5c59a1a71eeca889
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=1708a94aaaa6628b875721ea011f8398&uuid=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d%3A1%3A1 HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:40 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://ineedsjobs.com
Access-Control-Allow-Origin: http://ineedsjobs.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17962423; expires=Fri, 06 Jan 2023 21:10:39 GMT; secure; SameSite=None
uid_id2=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d:1:1; expires=Thu, 12 Jan 2023 21:10:39 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 06 Jan 2023 21:10:40 GMT; secure; SameSite=None
uncs=1; expires=Fri, 06 Jan 2023 21:10:40 GMT; secure; SameSite=None
pdhtkv29=true; expires=Fri, 06 Jan 2023 21:10:40 GMT; secure; SameSite=None
uncs29=1; expires=Fri, 06 Jan 2023 21:10:40 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b19fbdb50c0bd8e0bbb67d0dedd5fa9f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/sharedaddy/sharing.min.js?ver=6.6.1
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/sharedaddy/sharing.min.js?ver=6.6.1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /wp-content/plugins/jetpack/_inc/build/sharedaddy/sharing.min.js?ver=6.6.1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:40 GMT
server: LiteSpeed
location: https://ineedsjobs.com/wp-content/plugins/jetpack/_inc/build/sharedaddy/sharing.min.js?ver=6.6.1
vary: User-Agent
secure.gravatar.com/js/gprofiles.js?ver=2023Janaa
200 OK 10 kB URL HTTP/2 secure.gravatar.com/js/gprofiles.js?ver=2023Janaa
IP
File type ASCII text, with very long lines (24043), with no line terminators
Hash fec090f2085165eae9283770aa7ccce7
71ace478e8364dd86713f12780bc8ce8296fe7bb
f1742424a60b9102b81e55eef96a1381b9db5d3017893c31d235b708df1de97c
GET /js/gprofiles.js?ver=2023Janaa HTTP/1.1
Host: secure.gravatar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 21:10:39 GMT
content-type: application/javascript
last-modified: Thu, 15 Sep 2022 11:48:47 GMT
etag: W/"6323111f-5deb"
content-encoding: br
expires: Thu, 12 Jan 2023 21:10:39 GMT
cache-control: max-age=604800
X-Firefox-Spdy: h2
reposemarshknot.com/ren.gif?sid=H4sIAAAAAAAC%2F%2BRVW4gjWRmu7K4i%2BuSgD4quwUiry6Zz6lQqqZoxNN2dy2Qml57ubF%2FyMpxbJSep29SpSiVBcHFA9kVon3TfMn%2FPZVeXvTytCIL0CCL9ovFBe8FZEPFZUMRHSU%2Fr6L754JOnqDr%2Fz1dQ3%2Ff9H3W%2Bcy95oiFIyPlOO5hL1yUFcx1lv3YgfR6kKtvpZXW0jq5lD6RfKl7LTlePaHJVR%2BY6%2Bnq2Idg4KGCkI6QjPVuXkXCCaeECBRm%2BZevrNlov4nXdLMI0%2Bs9eJRlQJAN88kS7ApIvPzb85Xsg2Sn43rtVocZxEL5c8xKXxEEEE%2F7oFX%2FsB6kP3rPSiTLg%2BI8u34ZALTXtB89B4D%2B6VADB5P5KAVC51DK%2F1YH6jy5pAp08eMqUuiB8oPxTkE5OQbinIMkpsOAuSP5rDYBx6HTB9x52gigls6coWaFL7YW%2F%2FQVkutRe%2BP1nwPfe3nLlNLsXuEksA1%2FB1FmAnJ6CHJxCmDyGeJ4BmT4GFn8bJNfA9xYg%2BflXCDYItTHNU9O28kXq0DylyMmXHdN0DIdip8gvrJHyFKRzCq44BqIykKxumYHEyUASZsDj51li2g5CZYc6hmEVGWOGwZhplbjJjaLlIEjYivsxxOExMPcYWPQqhNGrMJbHECU%2FAzVcgOIZULEGE76AVGiQKg1SokEqNUhjDdLJ4gF3FVaLh9xVCdUvd3y5G4uTIB7cIw%2BCeCB87V74RPv0yrDMlc%2B%2BD2NxntXLyCJ2kRBCSiVsUatslrEuCNJ1xzJsC5RcgFTPXcicy6X24i9%2BB6Fcap%2F48QQoeQzKfQxMfgFI8kUg6UkZIyDDk6KFYO6%2FLX0huBoFVK2zwAMeLCCMX4B4lrnnPtE%2BdzE64%2FUvg2BnG69fOQi%2FVX0eWLSAMFrASP5cg4H72slukGr3d4NUae91w1h6ck5WY92LSSy0H94UszSIeLOqjt%2FcZCtgVb7VEypuEZ9Lf6C0H21JzkVUDyImtJ821YGgO4kabiWRn4Stne160wsjoZQM%2FFMgcqlpb7wLbCXyw%2BOLyH7%2BnSOQ0WOIkvO%2FFwrMZeN1wtVYiFBEK2WFwVDGqqBjVLIQxgVZMMvFMiqWcQEXVMQKZlk3dVQIw4Je0DeGldqN%2FDw9PNjdn5shKZl3Dg8b3Ts7hxQP3Alulvv0jjfdG5HGdZvNQ3dnWlXz%2FsjOp40IGTG9zma9Ua0dbh7ofXuAjZLpkbBkDV56aS2SvFKyMDEtA%2BUtbvC8rgueJ3oJ5REqYURNjEUZrcVxpSojweI1EscVYy1MqIqY5JWnVNeIE%2FGKtcbiir6m4koJgZecbTxc%2FORLN1%2F8A8jgFFh4941crrnd7eRy538dxnGorhYK7CPOsI1wUsFrkwr65ur6nwlfUdd1o2TZeM2p6GtDXHmlsTult2%2B1j%2Fhha7zXK2%2FfVPrWSO50xmkQ67e3%2FPG0XCL2qFEf%2FBfGhepfJr2Zy%2FWavVYtlzuv6ChbT%2FxsnbBYZTdpkMTZ3lBkO0EcRDJIVHbvTiJ5tkE8cTW7FwbSFZF6ObslUhKJd3K51uZuo3a72d5s1HK5DzLdf%2Fqp8tIbfDRtz5JWtPHUwFYhXyDXdxGrBpMW7qiW58Z9PJwwY3fe8joTumeH9IAHLezGRwfcbeG%2ByxudoIXrs8N5u9SW09Eh7oe0kar%2Bvj0njfqMNfaT7qiWtren3iEO0%2F5s6h%2Fi%2FvAI78%2B7Xl3nDUtx3Zq2q820hYeIX98stWZPv0ONDmIzc0QxmvBta9auNqetXi1tzWtpuzeedbYto10det3qYNrBHa9frRndHjOO8L53NOqM2r026h7Uit1eXXa2zTusse%2Bvp4KGG5OKXipj2zSQYef9W2l5Oirlm%2Fu3uqoZH9rzG8LZnQY6FfWbzMM3pr12Kg%2F84dEYVHimXS5QgQaR%2B6ynYQbS5P8zwycRpmcbW19t%2FvmPH3wSXLnU7D99HFxxtvH973Y%2FvMb7QOgClPg3t57V99RrMIgyQOK7F4foJFrAxF0AcY9BJc%2BfxGF0tvEb42IBdTMn1I0y96kbud97%2BuNX8jwrTAc5AmFBHZs6ZYK47RRtSmxdlKlJdIjVkr3%2FjV%2F9AwAA%2F%2F8BAAD%2F%2F3ViHIUmCQAA
200 OK 45 kB URL HTTP/1.1 reposemarshknot.com/ren.gif?sid=H4sIAAAAAAAC%2F%2BRVW4gjWRmu7K4i%2BuSgD4quwUiry6Zz6lQqqZoxNN2dy2Qml57ubF%2FyMpxbJSep29SpSiVBcHFA9kVon3TfMn%2FPZVeXvTytCIL0CCL9ovFBe8FZEPFZUMRHSU%2Fr6L754JOnqDr%2Fz1dQ3%2Ff9H3W%2Bcy95oiFIyPlOO5hL1yUFcx1lv3YgfR6kKtvpZXW0jq5lD6RfKl7LTlePaHJVR%2BY6%2Bnq2Idg4KGCkI6QjPVuXkXCCaeECBRm%2BZevrNlov4nXdLMI0%2Bs9eJRlQJAN88kS7ApIvPzb85Xsg2Sn43rtVocZxEL5c8xKXxEEEE%2F7oFX%2FsB6kP3rPSiTLg%2BI8u34ZALTXtB89B4D%2B6VADB5P5KAVC51DK%2F1YH6jy5pAp08eMqUuiB8oPxTkE5OQbinIMkpsOAuSP5rDYBx6HTB9x52gigls6coWaFL7YW%2F%2FQVkutRe%2BP1nwPfe3nLlNLsXuEksA1%2FB1FmAnJ6CHJxCmDyGeJ4BmT4GFn8bJNfA9xYg%2BflXCDYItTHNU9O28kXq0DylyMmXHdN0DIdip8gvrJHyFKRzCq44BqIykKxumYHEyUASZsDj51li2g5CZYc6hmEVGWOGwZhplbjJjaLlIEjYivsxxOExMPcYWPQqhNGrMJbHECU%2FAzVcgOIZULEGE76AVGiQKg1SokEqNUhjDdLJ4gF3FVaLh9xVCdUvd3y5G4uTIB7cIw%2BCeCB87V74RPv0yrDMlc%2B%2BD2NxntXLyCJ2kRBCSiVsUatslrEuCNJ1xzJsC5RcgFTPXcicy6X24i9%2BB6Fcap%2F48QQoeQzKfQxMfgFI8kUg6UkZIyDDk6KFYO6%2FLX0huBoFVK2zwAMeLCCMX4B4lrnnPtE%2BdzE64%2FUvg2BnG69fOQi%2FVX0eWLSAMFrASP5cg4H72slukGr3d4NUae91w1h6ck5WY92LSSy0H94UszSIeLOqjt%2FcZCtgVb7VEypuEZ9Lf6C0H21JzkVUDyImtJ821YGgO4kabiWRn4Stne160wsjoZQM%2FFMgcqlpb7wLbCXyw%2BOLyH7%2BnSOQ0WOIkvO%2FFwrMZeN1wtVYiFBEK2WFwVDGqqBjVLIQxgVZMMvFMiqWcQEXVMQKZlk3dVQIw4Je0DeGldqN%2FDw9PNjdn5shKZl3Dg8b3Ts7hxQP3Alulvv0jjfdG5HGdZvNQ3dnWlXz%2FsjOp40IGTG9zma9Ua0dbh7ofXuAjZLpkbBkDV56aS2SvFKyMDEtA%2BUtbvC8rgueJ3oJ5REqYURNjEUZrcVxpSojweI1EscVYy1MqIqY5JWnVNeIE%2FGKtcbiir6m4koJgZecbTxc%2FORLN1%2F8A8jgFFh4941crrnd7eRy538dxnGorhYK7CPOsI1wUsFrkwr65ur6nwlfUdd1o2TZeM2p6GtDXHmlsTult2%2B1j%2Fhha7zXK2%2FfVPrWSO50xmkQ67e3%2FPG0XCL2qFEf%2FBfGhepfJr2Zy%2FWavVYtlzuv6ChbT%2FxsnbBYZTdpkMTZ3lBkO0EcRDJIVHbvTiJ5tkE8cTW7FwbSFZF6ObslUhKJd3K51uZuo3a72d5s1HK5DzLdf%2Fqp8tIbfDRtz5JWtPHUwFYhXyDXdxGrBpMW7qiW58Z9PJwwY3fe8joTumeH9IAHLezGRwfcbeG%2ByxudoIXrs8N5u9SW09Eh7oe0kar%2Bvj0njfqMNfaT7qiWtren3iEO0%2F5s6h%2Fi%2FvAI78%2B7Xl3nDUtx3Zq2q820hYeIX98stWZPv0ONDmIzc0QxmvBta9auNqetXi1tzWtpuzeedbYto10det3qYNrBHa9frRndHjOO8L53NOqM2r026h7Uit1eXXa2zTusse%2Bvp4KGG5OKXipj2zSQYef9W2l5Oirlm%2Fu3uqoZH9rzG8LZnQY6FfWbzMM3pr12Kg%2F84dEYVHimXS5QgQaR%2B6ynYQbS5P8zwycRpmcbW19t%2FvmPH3wSXLnU7D99HFxxtvH973Y%2FvMb7QOgClPg3t57V99RrMIgyQOK7F4foJFrAxF0AcY9BJc%2BfxGF0tvEb42IBdTMn1I0y96kbud97%2BuNX8jwrTAc5AmFBHZs6ZYK47RRtSmxdlKlJdIjVkr3%2FjV%2F9AwAA%2F%2F8BAAD%2F%2F3ViHIUmCQAA
IP
File type Web Open Font Format (Version 2), TrueType, length 78472, version 331.-31327\012- data
Hash 594e86ed5701504b60ebf17f10527c8c
e0afe4e35884dc62fefa3171e680bd87a340d62f
98fcb18403fbea8435df443d96f575d55f4295abbf1befd0f3fd1bcfac472903
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F%2BRVW4gjWRmu7K4i%2BuSgD4quwUiry6Zz6lQqqZoxNN2dy2Qml57ubF%2FyMpxbJSep29SpSiVBcHFA9kVon3TfMn%2FPZVeXvTytCIL0CCL9ovFBe8FZEPFZUMRHSU%2Fr6L754JOnqDr%2Fz1dQ3%2Ff9H3W%2Bcy95oiFIyPlOO5hL1yUFcx1lv3YgfR6kKtvpZXW0jq5lD6RfKl7LTlePaHJVR%2BY6%2Bnq2Idg4KGCkI6QjPVuXkXCCaeECBRm%2BZevrNlov4nXdLMI0%2Bs9eJRlQJAN88kS7ApIvPzb85Xsg2Sn43rtVocZxEL5c8xKXxEEEE%2F7oFX%2FsB6kP3rPSiTLg%2BI8u34ZALTXtB89B4D%2B6VADB5P5KAVC51DK%2F1YH6jy5pAp08eMqUuiB8oPxTkE5OQbinIMkpsOAuSP5rDYBx6HTB9x52gigls6coWaFL7YW%2F%2FQVkutRe%2BP1nwPfe3nLlNLsXuEksA1%2FB1FmAnJ6CHJxCmDyGeJ4BmT4GFn8bJNfA9xYg%2BflXCDYItTHNU9O28kXq0DylyMmXHdN0DIdip8gvrJHyFKRzCq44BqIykKxumYHEyUASZsDj51li2g5CZYc6hmEVGWOGwZhplbjJjaLlIEjYivsxxOExMPcYWPQqhNGrMJbHECU%2FAzVcgOIZULEGE76AVGiQKg1SokEqNUhjDdLJ4gF3FVaLh9xVCdUvd3y5G4uTIB7cIw%2BCeCB87V74RPv0yrDMlc%2B%2BD2NxntXLyCJ2kRBCSiVsUatslrEuCNJ1xzJsC5RcgFTPXcicy6X24i9%2BB6Fcap%2F48QQoeQzKfQxMfgFI8kUg6UkZIyDDk6KFYO6%2FLX0huBoFVK2zwAMeLCCMX4B4lrnnPtE%2BdzE64%2FUvg2BnG69fOQi%2FVX0eWLSAMFrASP5cg4H72slukGr3d4NUae91w1h6ck5WY92LSSy0H94UszSIeLOqjt%2FcZCtgVb7VEypuEZ9Lf6C0H21JzkVUDyImtJ821YGgO4kabiWRn4Stne160wsjoZQM%2FFMgcqlpb7wLbCXyw%2BOLyH7%2BnSOQ0WOIkvO%2FFwrMZeN1wtVYiFBEK2WFwVDGqqBjVLIQxgVZMMvFMiqWcQEXVMQKZlk3dVQIw4Je0DeGldqN%2FDw9PNjdn5shKZl3Dg8b3Ts7hxQP3Alulvv0jjfdG5HGdZvNQ3dnWlXz%2FsjOp40IGTG9zma9Ua0dbh7ofXuAjZLpkbBkDV56aS2SvFKyMDEtA%2BUtbvC8rgueJ3oJ5REqYURNjEUZrcVxpSojweI1EscVYy1MqIqY5JWnVNeIE%2FGKtcbiir6m4koJgZecbTxc%2FORLN1%2F8A8jgFFh4941crrnd7eRy538dxnGorhYK7CPOsI1wUsFrkwr65ur6nwlfUdd1o2TZeM2p6GtDXHmlsTult2%2B1j%2Fhha7zXK2%2FfVPrWSO50xmkQ67e3%2FPG0XCL2qFEf%2FBfGhepfJr2Zy%2FWavVYtlzuv6ChbT%2FxsnbBYZTdpkMTZ3lBkO0EcRDJIVHbvTiJ5tkE8cTW7FwbSFZF6ObslUhKJd3K51uZuo3a72d5s1HK5DzLdf%2Fqp8tIbfDRtz5JWtPHUwFYhXyDXdxGrBpMW7qiW58Z9PJwwY3fe8joTumeH9IAHLezGRwfcbeG%2ByxudoIXrs8N5u9SW09Eh7oe0kar%2Bvj0njfqMNfaT7qiWtren3iEO0%2F5s6h%2Fi%2FvAI78%2B7Xl3nDUtx3Zq2q820hYeIX98stWZPv0ONDmIzc0QxmvBta9auNqetXi1tzWtpuzeedbYto10det3qYNrBHa9frRndHjOO8L53NOqM2r026h7Uit1eXXa2zTusse%2Bvp4KGG5OKXipj2zSQYef9W2l5Oirlm%2Fu3uqoZH9rzG8LZnQY6FfWbzMM3pr12Kg%2F84dEYVHimXS5QgQaR%2B6ynYQbS5P8zwycRpmcbW19t%2FvmPH3wSXLnU7D99HFxxtvH973Y%2FvMb7QOgClPg3t57V99RrMIgyQOK7F4foJFrAxF0AcY9BJc%2BfxGF0tvEb42IBdTMn1I0y96kbud97%2BuNX8jwrTAc5AmFBHZs6ZYK47RRtSmxdlKlJdIjVkr3%2FjV%2F9AwAA%2F%2F8BAAD%2F%2F3ViHIUmCQAA HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Cookie: u_pl=17962423; uid_id2=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:40 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f1387b187ab52debcd5d89766e8fa4d0
Strict-Transport-Security: max-age=0; includeSubdomains
i1.wp.com/ineedsjobs.com/wp-content/uploads/2022/12/b505b42f-da4b-4bac-8b99-6527d2a21be0.jpg?resize=920%2C518&ssl=1
200 OK 90 kB URL HTTP/2 i1.wp.com/ineedsjobs.com/wp-content/uploads/2022/12/b505b42f-da4b-4bac-8b99-6527d2a21be0.jpg?resize=920%2C518&ssl=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 920x518, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 314a712609ff36b569097ad256f2b5a5
a1b9d58803dd49b125faa173f96dd7771a9685b5
f45d72911881a2fac3e907749ca9e4299a2a200fdda972997dd94dc58b269fd7
GET /ineedsjobs.com/wp-content/uploads/2022/12/b505b42f-da4b-4bac-8b99-6527d2a21be0.jpg?resize=920%2C518&ssl=1 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: image/webp
content-length: 89504
last-modified: Thu, 05 Jan 2023 21:10:40 GMT
expires: Sun, 05 Jan 2025 09:10:40 GMT
cache-control: public, max-age=63115200
link: <https://ineedsjobs.com/wp-content/uploads/2022/12/b505b42f-da4b-4bac-8b99-6527d2a21be0.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "8330e17f53278972"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0b29dc8c7a991aa4bf6811e25dbc147c
03dc09f87a4017228b6c82dd57c02fc8c78ce909
442b3aa48f7f563c5c21632c1457584bc004b28eb3eb72ec6b210b7665f0a904
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2901
Cache-Control: max-age=149930
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 21:10:40 GMT
Etag: "63b6d825-1d7"
Expires: Sat, 07 Jan 2023 14:49:30 GMT
Last-Modified: Thu, 05 Jan 2023 14:01:09 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d9a880223cbd9a43452b02047d1c3e2
3b8a6d8fe73e0c186765caa8ea2c2240482d55a9
1aafca4a5c48193374494f44cceeccd709615611d31b26588c929e66fcba9722
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1AAFCA4A5C48193374494F44CCEECCD709615611D31B26588C929E66FCBA9722"
Last-Modified: Wed, 04 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11496
Expires: Fri, 06 Jan 2023 00:22:16 GMT
Date: Thu, 05 Jan 2023 21:10:40 GMT
Connection: keep-alive
graph.facebook.com/?id=https%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&callback=jQuery361003641258209617848_1672953028270&_=1672953028271
200 OK 192 B URL HTTP/2 graph.facebook.com/?id=https%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&callback=jQuery361003641258209617848_1672953028270&_=1672953028271
IP
Hash c7a2ff6c5d3dd2e06b309ab6d62a92fb
ac325c6d3d9eb564ca54ae15cfdd9d3239aff4fd
3da3bd87353acd4ade3b4315971d770315c4409682022745c5c4ff4f6c6d6fce
GET /?id=https%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&callback=jQuery361003641258209617848_1672953028270&_=1672953028271 HTTP/1.1
Host: graph.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
vary: Origin, Accept-Encoding
x-fb-rlafr: 0
content-type: text/javascript; charset=UTF-8
www-authenticate: OAuth "Facebook Platform" "invalid_request" "(#2) Service temporarily unavailable"
access-control-allow-origin: *
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
pragma: no-cache
cache-control: no-store
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-fb-request-id: ASJmdFsTrn_HOldCxYTMOn8
x-fb-trace-id: DJma8VvO2fO
x-fb-rev: 1006789561
x-fb-debug: UyPhS4Zj5VXaXeejklUfBllFsxwRS1hX+Zdodx0QU+d4OheBXSnDiYu0L7IfoDcOd0P0q7wx1+JTQX13uNaQzw==
content-length: 192
date: Thu, 05 Jan 2023 21:10:40 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0b29dc8c7a991aa4bf6811e25dbc147c
03dc09f87a4017228b6c82dd57c02fc8c78ce909
442b3aa48f7f563c5c21632c1457584bc004b28eb3eb72ec6b210b7665f0a904
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2901
Cache-Control: max-age=149930
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 21:10:40 GMT
Etag: "63b6d825-1d7"
Expires: Sat, 07 Jan 2023 14:49:30 GMT
Last-Modified: Thu, 05 Jan 2023 14:01:09 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
api.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&callback=jQuery361003641258209617848_1672953028272&_=1672953028273
200 OK 144 B URL HTTP/2 api.pinterest.com/v1/urls/count.json?url=https%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&callback=jQuery361003641258209617848_1672953028272&_=1672953028273
IP
File type ASCII text, with no line terminators
Hash b13cd0ff3ec45c87dd256fcd0f9e0c05
f938065aaa429204e94485715905f1bd22ba0f7f
0b3d58b39a303f4863036ddc29fe55072baf6c331a39b9f053a8eeb982fa823b
GET /v1/urls/count.json?url=https%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&callback=jQuery361003641258209617848_1672953028272&_=1672953028273 HTTP/1.1
Host: api.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/javascript
content-length: 144
expires: Thu, 05 Jan 2023 21:25:40 GMT
x-envoy-upstream-service-time: 4
cache-control: no-cache, no-store, must-revalidate
x-pinterest-rid: 5364382548438931
date: Thu, 05 Jan 2023 21:10:40 GMT
set-cookie: _ir=0; Max-Age=1800; HttpOnly; Path=/; Secure
akamai-grn: 0.540a655f.1672953040.20819c9b
x-cdn: akamai
X-Firefox-Spdy: h2
ineedsjobs.com/favicon.ico
301 Moved Permanently 707 B URL HTTP/1.1 ineedsjobs.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /favicon.ico HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com; pbpr0tpuw4isk85t8yg3jb2lj5vqf=reposemarshknot.com
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 05 Jan 2023 21:10:40 GMT
server: LiteSpeed
location: https://ineedsjobs.com/favicon.ico
vary: User-Agent
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ca43dc405d4cba594ec2ca5f0e4c9cf3
38502dab5b99e8f0b30acb7deb4b64801b81fd49
f7d9c2a9da13232785b37c9c6cb0b8eb98f2c49c3fb70d038ed6a2bee01e9e85
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F7D9C2A9DA13232785B37C9C6CB0B8EB98F2C49C3FB70D038ED6A2BEE01E9E85"
Last-Modified: Wed, 04 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5243
Expires: Thu, 05 Jan 2023 22:38:03 GMT
Date: Thu, 05 Jan 2023 21:10:40 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ca43dc405d4cba594ec2ca5f0e4c9cf3
38502dab5b99e8f0b30acb7deb4b64801b81fd49
f7d9c2a9da13232785b37c9c6cb0b8eb98f2c49c3fb70d038ed6a2bee01e9e85
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F7D9C2A9DA13232785B37C9C6CB0B8EB98F2C49C3FB70D038ED6A2BEE01E9E85"
Last-Modified: Wed, 04 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5243
Expires: Thu, 05 Jan 2023 22:38:03 GMT
Date: Thu, 05 Jan 2023 21:10:40 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 660 B URL HTTP/1.1 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Hash 55130bf120bd75a4bba7d678be617cdf
77b172c0cc1d15e60ab95edccf3ac1e640d16812
262b9e8c2eeba18bdc3dd53ac7bbacdbbec713a9443ff5dc34e359de56ea040d
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 05 Jan 2023 21:10:40 GMT
Date: Thu, 05 Jan 2023 21:10:40 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/img/close.png
200 OK 769 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/img/close.png
IP
File type PNG image data, 23 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 13b3b0cc6ce924780c0eec0b24c40c33
53b78225158a60f9327e135be26e365eb842f0df
7907c875d2dd81230f15826dffe1faa695cfb1f385adbb4d9480058d0d0112ad
GET /sb/notifications/rtb/os-box/1-2/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: image/png
content-length: 769
last-modified: Wed, 30 Mar 2022 13:44:01 GMT
etag: "62445ea1-301"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 848568
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hnpEGs8aJJm66On%2FaLwM9SC%2FmGa4ttRS5lyK6bodUkGD0qqUM7udtvRDHdWkL6KvdZ9dqD5RPpT3O79AvWBPIt4oBycJ%2B5%2B8guKXpPDbIkRCwSB9Pjbuy3sF2eZ5EFijTc9IQG%2BQp67S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784f33b88fe27795-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/notifications/rtb/os-box/1-2/index.html
200 OK 447 B URL HTTP/2 cdn.barscreative1.com/sb/notifications/rtb/os-box/1-2/index.html
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text
Hash 1c45b833462670ec9002b757d3c192f9
13da708358375661bb331b35018b5d2010a18c00
6b1602ba5ae6e905fa7fbe7251276b015c986d5f3f4381cb57e670aa8dfa3e8c
Analyzer Verdict Alert fortinet Phishing
GET /sb/notifications/rtb/os-box/1-2/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Wed, 30 Mar 2022 13:43:57 GMT
etag: W/"62445e9d-4ea"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Thu, 05 Jan 2023 22:10:40 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
c.adskeeper.com/c?pv=2&v=0|0|0|EJ-zwXWRVz5pa65qXXGOqPXb2glv2I7ZbqmxSjaGH9czplPxDszZj9-wGr03tbHcyTjEMpAW1Z9g2365map68g**&cid=1136892&f=1&h2=UGRxb_QMYdXLkST7CKs1BjiPNkwot1_Bnkx76a9jGFg*&rid=682a5830-8d3d-11ed-a160-00620b522e70&psid=571510
200 OK 43 B URL HTTP/2 c.adskeeper.com/c?pv=2&v=0|0|0|EJ-zwXWRVz5pa65qXXGOqPXb2glv2I7ZbqmxSjaGH9czplPxDszZj9-wGr03tbHcyTjEMpAW1Z9g2365map68g**&cid=1136892&f=1&h2=UGRxb_QMYdXLkST7CKs1BjiPNkwot1_Bnkx76a9jGFg*&rid=682a5830-8d3d-11ed-a160-00620b522e70&psid=571510
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /c?pv=2&v=0|0|0|EJ-zwXWRVz5pa65qXXGOqPXb2glv2I7ZbqmxSjaGH9czplPxDszZj9-wGr03tbHcyTjEMpAW1Z9g2365map68g**&cid=1136892&f=1&h2=UGRxb_QMYdXLkST7CKs1BjiPNkwot1_Bnkx76a9jGFg*&rid=682a5830-8d3d-11ed-a160-00620b522e70&psid=571510 HTTP/1.1
Host: c.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: image/gif
content-length: 43
x-mg-request-uuid: 135c1901-7664-4c30-b1a5-e6f3464dbe45
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 784f33b8ea9c1bfa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash ca43dc405d4cba594ec2ca5f0e4c9cf3
38502dab5b99e8f0b30acb7deb4b64801b81fd49
f7d9c2a9da13232785b37c9c6cb0b8eb98f2c49c3fb70d038ed6a2bee01e9e85
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "F7D9C2A9DA13232785B37C9C6CB0B8EB98F2C49C3FB70D038ED6A2BEE01E9E85"
Last-Modified: Wed, 04 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5243
Expires: Thu, 05 Jan 2023 22:38:03 GMT
Date: Thu, 05 Jan 2023 21:10:40 GMT
Connection: keep-alive
acacdn.com/script/ut.js?cb=1672953028320
200 OK 24 kB URL HTTP/1.1 acacdn.com/script/ut.js?cb=1672953028320
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4b583c9f97bff486ea195ff04918205b
58a2ba18e06eadab8b18561f85671fa6659d0984
a28f0acc634c773a9468e4a5d603a4b997374eda1b44241944a1aea63662c662
GET /script/ut.js?cb=1672953028320 HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdsD_cw6k5iUAcX97ILksILdhpiQa_MQP6ipG9Yy0UcJswQB4VIQpEC4jYw3KLs9R4XmHMUeX0bNKuQi3dJVrZrW_-8_acr4
x-goog-generation: 1670939749168345
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 71395
x-goog-hash: crc32c=aFnw8A==, md5=1ZA8yu2VHCgNZ/QYhUjh6Q==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Thu, 05 Jan 2023 21:09:10 GMT
Cache-Control: public, max-age=14400
Age: 3214
Last-Modified: Tue, 13 Dec 2022 13:55:49 GMT
ETag: W/"d5903ccaed951c280d67f4188548e1e9"
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=87qR8UCEC3kZWyp7Yn7JGzg9pMkDIC8LBWvYX58HVuhi93w7G1S2myYBMZRY2RehuytkwtAEAOCo4mDIFUkHHlRMQ8NQHxXMkPNmEXkhOjlkyX%2BLVyIJBga7c5cD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784f33b9796b0b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
reposemarshknot.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fcss%2Fanimate.css&l=79249&fd=264
200 OK 0 B URL HTTP/1.1 reposemarshknot.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fcss%2Fanimate.css&l=79249&fd=264
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fcss%2Fanimate.css&l=79249&fd=264 HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:40 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
youradexchange.com/ad/czcf.php?cz=7ppmqytgim
200 OK 146 B URL HTTP/1.1 youradexchange.com/ad/czcf.php?cz=7ppmqytgim
IP
File type JSON data\012- , ASCII text
Hash 2052315b2892bf85f0d555bcaf177db6
ca656a79c0a3908d3216675d38953d5a5fe022e8
7150b92bda267e612ede7f6e0f8a338f4df1b5befc83536ed2b0e2baea96a4e5
GET /ad/czcf.php?cz=7ppmqytgim HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ineedsjobs.com/
Origin: http://ineedsjobs.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 05 Jan 2023 21:10:40 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Via: 1.1 google
reposemarshknot.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fcss%2Fstyle.css&l=3695&fd=376
200 OK 0 B URL HTTP/1.1 reposemarshknot.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fcss%2Fstyle.css&l=3695&fd=376
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fcss%2Fstyle.css&l=3695&fd=376 HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
acacdn.com/script/ippg.js
200 OK 36 kB URL HTTP/1.1 acacdn.com/script/ippg.js
IP
File type Unicode text, UTF-8 text, with very long lines (42932), with NEL line terminators
Hash f5da11c231ea7b26b29937ce24d0c494
6526017f6ce9f8197e1d39c3f6ce9bbb9d8396b9
97138fa8c3b4cd133442faeb20aa92f5af2f27f4afacb6c61c86374162238502
GET /script/ippg.js HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdv5gkY9-TQ4CRquzWPC56PZSfHv9FGZEHk-yFWNFBc729BaIU0ix8pDbM2vsfKmbTKRqbLXA-_eyowtfAcbIliv8brQpvzy
x-goog-generation: 1670939622773403
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 113749
x-goog-hash: crc32c=lTM39g==, md5=Nytmy6xxkOFrzvUlBMQ78g==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Thu, 05 Jan 2023 21:06:34 GMT
Cache-Control: public, max-age=14400
Last-Modified: Tue, 13 Dec 2022 13:53:42 GMT
ETag: W/"372b66cbac7190e16bcef52504c43bf2"
Age: 443
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J%2FC3ip2sT99ROTSllNmWKeArptAV2PquC4oqqRInsTFmfryPrdxQj8l23WsAX61V8u6f4cHgLBcrgtX9JrOtrTbOZA60kGYsY%2F7tU5PPHcSCtHXU%2FrONF5rJPTyE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784f33bb0af70b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Jan 2023 21:13:53 GMT
Expires: Thu, 04 Jan 2024 21:13:53 GMT
Cache-Control: public, max-age=31536000
Age: 86208
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 04 Jan 2023 21:12:54 GMT
Expires: Thu, 04 Jan 2024 21:12:54 GMT
Cache-Control: public, max-age=31536000
Age: 86267
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
acacdn.com/script/suv4.js
200 OK 33 kB URL HTTP/1.1 acacdn.com/script/suv4.js
IP
File type Unicode text, UTF-8 text, with very long lines (37814), with NEL line terminators
Hash e733a9e20e3388e4069c69c23506f68d
c9314ba6cd41036cc77b8bfb497923845540dab4
86b3879193832a6ad687e60cf7974ed0d7db2026f86a9fbd921b23ad6588289b
GET /script/suv4.js HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdsjH8PPvwm-tf-iK_Znhs_fmX7Kw988nEXIGQ5cKEK7A-3QLzp7Qn39U-MRkBnpeMFR7t01j27LWPQdLdXuxImHvyFx6ezc
x-goog-generation: 1670939725427322
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 100623
x-goog-hash: crc32c=AsVyBQ==, md5=QW9pKNjz2NZmVavAl7rKAw==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Thu, 05 Jan 2023 20:55:07 GMT
Cache-Control: public, max-age=14400
Age: 1981
Last-Modified: Tue, 13 Dec 2022 13:55:25 GMT
ETag: W/"416f6928d8f3d8d66655abc097baca03"
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E4wBvYY5AtaQVeRM98RqfhbfVydm7JtuM5bQhMnUx83C6ObohAU0bluSH1fkwIdT4Gy2aycco6IrcWnxzNCnyuf8llf1msuy%2FuhkETdsOdA8Y38ULcajcRsy4DfP"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784f33bb0fedb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
reposemarshknot.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fjs%2Fscript.js&l=775&fd=273
200 OK 0 B URL HTTP/1.1 reposemarshknot.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fjs%2Fscript.js&l=775&fd=273
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Frtb%2Fos-box%2F1-2%2Fjs%2Fscript.js&l=775&fd=273 HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
reposemarshknot.com/impr.gif?sid=H4sIAAAAAAAC%2F%2BSVS4gkSRnHs3ZXET056EHRNbGk1WWrKzKysipzxqLp7npMzdSjp7u2H3UZ4pFZFVX5mozMyqxCcHFA9iK0J91bzdfz2NVlH6cVQZAeQaQvWh60F5wFEc%2BCIh6lelpH9%2BbBk5Fkxhd8Cfn%2F%2F%2BJPxnfuJU8UBAk53%2BkEc%2BG6pGisI%2FVrB8LnQSrVbl%2FV0Dq6ph4Iv1y6pmarRzS9qiFjHX1dbdpsEhQx0hDSkKY2RGQ7QVa86III37K0dQutl%2FC6ZpQgi%2F5zLZMcSJIDPn2iXAHBlx8b%2FfI9EOwUfO%2Fdmi0ncRC%2BXPcSl8RBBFP%2B6BV%2F4gepD96z0oly4PiPLt%2BGQC4V5QfPQeA%2FunQAwfT%2BygFQsVRyv9WA%2Bo8uZQKdPniqlLpg%2B0D5pyCdnoLtnoIgp8CCuyD4rxUAxqHbA9972A2ilMyedsmqu1Re%2BNtfQKRL5YXffwZ87%2B0tV2TqXuAmsQh8CZmzAJGdghieQpg8hnieA5E%2BBhZ%2FGwRXwPcWIPj5VwjWCbUwLVDDMgsl6tACpcgpVBzDcHSHYqfEL9AIcQrCOQXXPgYic5CsbpGDxMlBEubA4%2BcqMSwHoYpDHV03S4wxXWfMMMvc4HrJdBAkbKX9GOLwGJh7DCx6FcLoVZiIY4iSn4EcLUDyHMhYgSlfQGorkEoFUqJAKhRIYwXS6eIBdyWWi4fclQnVLmd8OeuLkyAe3iMPgnho%2B8q98Iny6RWw3JXPvg8T%2B1zVKsgkVokQQsplbFKzYlSwZhOkaY6pWyZIsQAhn7uwORdL5cVf%2FA5CsVQ%2B8eMpUPIYpPsYmPgCkOSLQNKTCkZARiclE8Hcf1v4ts3lOKBynQUe8GABYfwCxLPcPfeJ8rmLrdNf%2FzLY7Gzj9SsH4bdqzwOLFhBGCxiLnyswdF872Q1S5f5ukErlvV4YC0%2FMyWpb92IS28oPb9qzNIh4qyaP39xkq8aqfKtvy7hNfC78oVR%2BtCU4t6NGEDFb%2BWlLHth0J5GjrSTyk7C9s91oeWFkSykC%2FxSIWCrKG%2B8CW5n88Pgisp9%2F5whE9Bii5PzvxSJz2WSdcDmx7dCOVs6Kw5GIZVHDqGwijIuiaFRKFVSq4CIuyogVjYpmaKgYhkWtqG2MqvUbhXl6eLC7PzdCUjbuHB42e3d2DikeulPcqgzoHS%2FbG5PmdYvNQ3cnq8n5YGwV0maE9JheZ7P%2BuN4JNw%2B0gTXEetnwSFg2hy%2B9tBYJXi2bmBimjgom13lB02xeIFoZFRAqY0QNjO0KWovjak1ENovXSBxX9bUwoTJiglefSl0jTsSr5hqLq9qajKtlBF5ytvFw8ZMv3XzxDyCCU2Dh3Xfy%2BfbmbrN%2Bu9XZbNbz%2BQ9yvVEch%2FJqsSgLwht%2BlNIzQiULZzo2i4Uiub6LWC2YtnFXtj03HuDRlOm787bXndI9K6QHPGhjNz464G4bD1ze7AZt3JgdzjvljsjGh3gQ0mYqB%2FvWnDQbM9bcT3rjetrZzrxDHKaDWeYf4sHoCO%2FPe15D401Tcs3MOrVW2sYjxK9vltuzp9%2BhehexmTGmGE35tjnr1FpZu19P2%2FN62ulPZt1tU%2B%2FURl6vNsy6uOsNanW912f6Ed73jsbdcaffQb2DeqnXb4jutnGHNff99dSm4ca0qpUr2DJ0pFsF%2F1ZaycblQmv%2FVk%2B24kNrfsN2drNAo3bjJvPwjazfScWBPzqavJHPt7Z73Xz%2B%2FK%2F%2FJMs%2BQpVthNMqXptW0TdX1%2F8sWqtwaJpeNi285lS1tRGuvtLczejtW50jftie7PUr2zeltjUWO91JGsTa7S1%2FklXKxBo3G8P%2FIpqh%2FFcM38zn%2B61%2Bu57Pn1c1pDYSX20QFkt1kwZJrPZHttoN4iASQSLVvTuJ4GqTePZVdS8MhGtH8mV1y05JZIMMz5TLATJQIHKfrWmYgzT5%2FyR8EmF6trH11daf%2F%2FjBJ8EVS8X608fBtc82vv%2Fd3ofX%2BAAIXYC0%2F43Ws%2FqefA2GUQ5IfPfiEJ1GC5i6CyDuMcjk%2BZM4jM42fqNfDKBu7oS6Ue4%2BdSP3e09%2F%2FFKcq4ZWslcHD%2BOc2oxrFaybOkKY81LFsjULYrlk73%2FjV%2F8AAAD%2F%2FwEAAP%2F%2Fgn%2FRsyYJAAA%3D
200 OK 7 B URL HTTP/1.1 reposemarshknot.com/impr.gif?sid=H4sIAAAAAAAC%2F%2BSVS4gkSRnHs3ZXET056EHRNbGk1WWrKzKysipzxqLp7npMzdSjp7u2H3UZ4pFZFVX5mozMyqxCcHFA9iK0J91bzdfz2NVlH6cVQZAeQaQvWh60F5wFEc%2BCIh6lelpH9%2BbBk5Fkxhd8Cfn%2F%2F%2BJPxnfuJU8UBAk53%2BkEc%2BG6pGisI%2FVrB8LnQSrVbl%2FV0Dq6ph4Iv1y6pmarRzS9qiFjHX1dbdpsEhQx0hDSkKY2RGQ7QVa86III37K0dQutl%2FC6ZpQgi%2F5zLZMcSJIDPn2iXAHBlx8b%2FfI9EOwUfO%2Fdmi0ncRC%2BXPcSl8RBBFP%2B6BV%2F4gepD96z0oly4PiPLt%2BGQC4V5QfPQeA%2FunQAwfT%2BygFQsVRyv9WA%2Bo8uZQKdPniqlLpg%2B0D5pyCdnoLtnoIgp8CCuyD4rxUAxqHbA9972A2ilMyedsmqu1Re%2BNtfQKRL5YXffwZ87%2B0tV2TqXuAmsQh8CZmzAJGdghieQpg8hnieA5E%2BBhZ%2FGwRXwPcWIPj5VwjWCbUwLVDDMgsl6tACpcgpVBzDcHSHYqfEL9AIcQrCOQXXPgYic5CsbpGDxMlBEubA4%2BcqMSwHoYpDHV03S4wxXWfMMMvc4HrJdBAkbKX9GOLwGJh7DCx6FcLoVZiIY4iSn4EcLUDyHMhYgSlfQGorkEoFUqJAKhRIYwXS6eIBdyWWi4fclQnVLmd8OeuLkyAe3iMPgnho%2B8q98Iny6RWw3JXPvg8T%2B1zVKsgkVokQQsplbFKzYlSwZhOkaY6pWyZIsQAhn7uwORdL5cVf%2FA5CsVQ%2B8eMpUPIYpPsYmPgCkOSLQNKTCkZARiclE8Hcf1v4ts3lOKBynQUe8GABYfwCxLPcPfeJ8rmLrdNf%2FzLY7Gzj9SsH4bdqzwOLFhBGCxiLnyswdF872Q1S5f5ukErlvV4YC0%2FMyWpb92IS28oPb9qzNIh4qyaP39xkq8aqfKtvy7hNfC78oVR%2BtCU4t6NGEDFb%2BWlLHth0J5GjrSTyk7C9s91oeWFkSykC%2FxSIWCrKG%2B8CW5n88Pgisp9%2F5whE9Bii5PzvxSJz2WSdcDmx7dCOVs6Kw5GIZVHDqGwijIuiaFRKFVSq4CIuyogVjYpmaKgYhkWtqG2MqvUbhXl6eLC7PzdCUjbuHB42e3d2DikeulPcqgzoHS%2FbG5PmdYvNQ3cnq8n5YGwV0maE9JheZ7P%2BuN4JNw%2B0gTXEetnwSFg2hy%2B9tBYJXi2bmBimjgom13lB02xeIFoZFRAqY0QNjO0KWovjak1ENovXSBxX9bUwoTJiglefSl0jTsSr5hqLq9qajKtlBF5ytvFw8ZMv3XzxDyCCU2Dh3Xfy%2BfbmbrN%2Bu9XZbNbz%2BQ9yvVEch%2FJqsSgLwht%2BlNIzQiULZzo2i4Uiub6LWC2YtnFXtj03HuDRlOm787bXndI9K6QHPGhjNz464G4bD1ze7AZt3JgdzjvljsjGh3gQ0mYqB%2FvWnDQbM9bcT3rjetrZzrxDHKaDWeYf4sHoCO%2FPe15D401Tcs3MOrVW2sYjxK9vltuzp9%2BhehexmTGmGE35tjnr1FpZu19P2%2FN62ulPZt1tU%2B%2FURl6vNsy6uOsNanW912f6Ed73jsbdcaffQb2DeqnXb4jutnGHNff99dSm4ca0qpUr2DJ0pFsF%2F1ZaycblQmv%2FVk%2B24kNrfsN2drNAo3bjJvPwjazfScWBPzqavJHPt7Z73Xz%2B%2FK%2F%2FJMs%2BQpVthNMqXptW0TdX1%2F8sWqtwaJpeNi285lS1tRGuvtLczejtW50jftie7PUr2zeltjUWO91JGsTa7S1%2FklXKxBo3G8P%2FIpqh%2FFcM38zn%2B61%2Bu57Pn1c1pDYSX20QFkt1kwZJrPZHttoN4iASQSLVvTuJ4GqTePZVdS8MhGtH8mV1y05JZIMMz5TLATJQIHKfrWmYgzT5%2FyR8EmF6trH11daf%2F%2FjBJ8EVS8X608fBtc82vv%2Fd3ofX%2BAAIXYC0%2F43Ws%2FqefA2GUQ5IfPfiEJ1GC5i6CyDuMcjk%2BZM4jM42fqNfDKBu7oS6Ue4%2BdSP3e09%2F%2FFKcq4ZWslcHD%2BOc2oxrFaybOkKY81LFsjULYrlk73%2FjV%2F8AAAD%2F%2FwEAAP%2F%2Fgn%2FRsyYJAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F%2BSVS4gkSRnHs3ZXET056EHRNbGk1WWrKzKysipzxqLp7npMzdSjp7u2H3UZ4pFZFVX5mozMyqxCcHFA9iK0J91bzdfz2NVlH6cVQZAeQaQvWh60F5wFEc%2BCIh6lelpH9%2BbBk5Fkxhd8Cfn%2F%2F%2BJPxnfuJU8UBAk53%2BkEc%2BG6pGisI%2FVrB8LnQSrVbl%2FV0Dq6ph4Iv1y6pmarRzS9qiFjHX1dbdpsEhQx0hDSkKY2RGQ7QVa86III37K0dQutl%2FC6ZpQgi%2F5zLZMcSJIDPn2iXAHBlx8b%2FfI9EOwUfO%2Fdmi0ncRC%2BXPcSl8RBBFP%2B6BV%2F4gepD96z0oly4PiPLt%2BGQC4V5QfPQeA%2FunQAwfT%2BygFQsVRyv9WA%2Bo8uZQKdPniqlLpg%2B0D5pyCdnoLtnoIgp8CCuyD4rxUAxqHbA9972A2ilMyedsmqu1Re%2BNtfQKRL5YXffwZ87%2B0tV2TqXuAmsQh8CZmzAJGdghieQpg8hnieA5E%2BBhZ%2FGwRXwPcWIPj5VwjWCbUwLVDDMgsl6tACpcgpVBzDcHSHYqfEL9AIcQrCOQXXPgYic5CsbpGDxMlBEubA4%2BcqMSwHoYpDHV03S4wxXWfMMMvc4HrJdBAkbKX9GOLwGJh7DCx6FcLoVZiIY4iSn4EcLUDyHMhYgSlfQGorkEoFUqJAKhRIYwXS6eIBdyWWi4fclQnVLmd8OeuLkyAe3iMPgnho%2B8q98Iny6RWw3JXPvg8T%2B1zVKsgkVokQQsplbFKzYlSwZhOkaY6pWyZIsQAhn7uwORdL5cVf%2FA5CsVQ%2B8eMpUPIYpPsYmPgCkOSLQNKTCkZARiclE8Hcf1v4ts3lOKBynQUe8GABYfwCxLPcPfeJ8rmLrdNf%2FzLY7Gzj9SsH4bdqzwOLFhBGCxiLnyswdF872Q1S5f5ukErlvV4YC0%2FMyWpb92IS28oPb9qzNIh4qyaP39xkq8aqfKtvy7hNfC78oVR%2BtCU4t6NGEDFb%2BWlLHth0J5GjrSTyk7C9s91oeWFkSykC%2FxSIWCrKG%2B8CW5n88Pgisp9%2F5whE9Bii5PzvxSJz2WSdcDmx7dCOVs6Kw5GIZVHDqGwijIuiaFRKFVSq4CIuyogVjYpmaKgYhkWtqG2MqvUbhXl6eLC7PzdCUjbuHB42e3d2DikeulPcqgzoHS%2FbG5PmdYvNQ3cnq8n5YGwV0maE9JheZ7P%2BuN4JNw%2B0gTXEetnwSFg2hy%2B9tBYJXi2bmBimjgom13lB02xeIFoZFRAqY0QNjO0KWovjak1ENovXSBxX9bUwoTJiglefSl0jTsSr5hqLq9qajKtlBF5ytvFw8ZMv3XzxDyCCU2Dh3Xfy%2BfbmbrN%2Bu9XZbNbz%2BQ9yvVEch%2FJqsSgLwht%2BlNIzQiULZzo2i4Uiub6LWC2YtnFXtj03HuDRlOm787bXndI9K6QHPGhjNz464G4bD1ze7AZt3JgdzjvljsjGh3gQ0mYqB%2FvWnDQbM9bcT3rjetrZzrxDHKaDWeYf4sHoCO%2FPe15D401Tcs3MOrVW2sYjxK9vltuzp9%2BhehexmTGmGE35tjnr1FpZu19P2%2FN62ulPZt1tU%2B%2FURl6vNsy6uOsNanW912f6Ed73jsbdcaffQb2DeqnXb4jutnGHNff99dSm4ca0qpUr2DJ0pFsF%2F1ZaycblQmv%2FVk%2B24kNrfsN2drNAo3bjJvPwjazfScWBPzqavJHPt7Z73Xz%2B%2FK%2F%2FJMs%2BQpVthNMqXptW0TdX1%2F8sWqtwaJpeNi285lS1tRGuvtLczejtW50jftie7PUr2zeltjUWO91JGsTa7S1%2FklXKxBo3G8P%2FIpqh%2FFcM38zn%2B61%2Bu57Pn1c1pDYSX20QFkt1kwZJrPZHttoN4iASQSLVvTuJ4GqTePZVdS8MhGtH8mV1y05JZIMMz5TLATJQIHKfrWmYgzT5%2FyR8EmF6trH11daf%2F%2FjBJ8EVS8X608fBtc82vv%2Fd3ofX%2BAAIXYC0%2F43Ws%2FqefA2GUQ5IfPfiEJ1GC5i6CyDuMcjk%2BZM4jM42fqNfDKBu7oS6Ue4%2BdSP3e09%2F%2FFKcq4ZWslcHD%2BOc2oxrFaybOkKY81LFsjULYrlk73%2FjV%2F8AAAD%2F%2FwEAAP%2F%2Fgn%2FRsyYJAAA%3D HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Cookie: u_pl=17962423; uid_id2=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5551f089fda8bd8ae8b3a7f933775858
Strict-Transport-Security: max-age=0; includeSubdomains
acacdn.com/script/ut.js?cb=1672953030763
200 OK 24 kB URL HTTP/1.1 acacdn.com/script/ut.js?cb=1672953030763
IP
File type Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Hash 4b583c9f97bff486ea195ff04918205b
58a2ba18e06eadab8b18561f85671fa6659d0984
a28f0acc634c773a9468e4a5d603a4b997374eda1b44241944a1aea63662c662
GET /script/ut.js?cb=1672953030763 HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
X-GUploader-UploadID: ADPycdsD_cw6k5iUAcX97ILksILdhpiQa_MQP6ipG9Yy0UcJswQB4VIQpEC4jYw3KLs9R4XmHMUeX0bNKuQi3dJVrZrW_-8_acr4
x-goog-generation: 1670939749168345
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 71395
x-goog-hash: crc32c=aFnw8A==, md5=1ZA8yu2VHCgNZ/QYhUjh6Q==
x-goog-storage-class: MULTI_REGIONAL
Access-Control-Allow-Origin: *
Expires: Thu, 05 Jan 2023 21:09:10 GMT
Cache-Control: public, max-age=14400
Age: 3215
Last-Modified: Tue, 13 Dec 2022 13:55:49 GMT
ETag: W/"d5903ccaed951c280d67f4188548e1e9"
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GNfv0c2sJStWlLqDJkFcdEWMn2VKaYOWlDi3tVJkVyZ7DpsGIJBLGhD24uCX6IhpmDEkyL1eOqMiJSq1JmcPnXATcY%2FhSR4JVgpfGimrAjpg67qe5%2Bei67PWqZ3f"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784f33bbab8e0b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
youradexchange.com/n/display.php?r=6562282&atag=1&czid=7ppmqytgim&aggr=2&ppv=1
204 No Content 0 B URL HTTP/1.1 youradexchange.com/n/display.php?r=6562282&atag=1&czid=7ppmqytgim&aggr=2&ppv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /n/display.php?r=6562282&atag=1&czid=7ppmqytgim&aggr=2&ppv=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 204 No Content
Server: openresty
Date: Thu, 05 Jan 2023 21:10:41 GMT
Access-Control-Allow-Origin: *
Via: 1.1 google
youradexchange.com/script/suurl4.php?r=6562290&atag=1&czid=7ppmqytgim&cbur=0.5886833368363937&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Investors%20seek%20to%20sell%20FTX%2C%20Celsius%2C%20BlockFi%2C%20Voyager%20claims%20-%20I%20Needs%20Jobs&cbpage=http%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acacdn.com&aggr=2
204 No Content 0 B URL HTTP/1.1 youradexchange.com/script/suurl4.php?r=6562290&atag=1&czid=7ppmqytgim&cbur=0.5886833368363937&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Investors%20seek%20to%20sell%20FTX%2C%20Celsius%2C%20BlockFi%2C%20Voyager%20claims%20-%20I%20Needs%20Jobs&cbpage=http%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acacdn.com&aggr=2
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suurl4.php?r=6562290&atag=1&czid=7ppmqytgim&cbur=0.5886833368363937&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Investors%20seek%20to%20sell%20FTX%2C%20Celsius%2C%20BlockFi%2C%20Voyager%20claims%20-%20I%20Needs%20Jobs&cbpage=http%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acacdn.com&aggr=2 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ineedsjobs.com/
Origin: http://ineedsjobs.com
Connection: keep-alive
HTTP/1.1 204 No Content
Server: openresty
Date: Thu, 05 Jan 2023 21:10:41 GMT
Access-Control-Allow-Origin: *
Via: 1.1 google
youradexchange.com/script/push.php?r=6562286&ipp=1&mads=1&position=top&czid=7ppmqytgim&aggr=2&atag=1&cbpage=http%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&cbref=
204 No Content 0 B URL HTTP/1.1 youradexchange.com/script/push.php?r=6562286&ipp=1&mads=1&position=top&czid=7ppmqytgim&aggr=2&atag=1&cbpage=http%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&cbref=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/push.php?r=6562286&ipp=1&mads=1&position=top&czid=7ppmqytgim&aggr=2&atag=1&cbpage=http%3A%2F%2Fineedsjobs.com%2Finvestors-seek-to-sell-ftx-celsius-blockfi-voyager-claims%2F&cbref= HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ineedsjobs.com/
Origin: http://ineedsjobs.com
Connection: keep-alive
HTTP/1.1 204 No Content
Server: openresty
Date: Thu, 05 Jan 2023 21:10:41 GMT
Access-Control-Allow-Origin: *
Via: 1.1 google
reposemarshknot.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 reposemarshknot.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: reposemarshknot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Cookie: u_pl=17962423; uid_id2=a23ab92b-b598-4bfb-bb0f-7f55f3fb2f4d:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/?relatedposts=1
200 OK 1.0 kB URL HTTP/1.1 ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/?relatedposts=1
IP
File type JSON data\012- , ASCII text, with very long lines (2211), with no line terminators
Hash 17b100c20bed8dfa5fb20731209586e5
651db60cc65e0ff6ee6173f6972f47e8595f2a99
5d6199e6592c31306e78818c477b90fbe6b9cb6d41ccb1b3c40a6417ac48e750
GET /investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/?relatedposts=1 HTTP/1.1
Host: ineedsjobs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://ineedsjobs.com/investors-seek-to-sell-ftx-celsius-blockfi-voyager-claims/
Cookie: pvc_visits[0]=1673039436b9748; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c69c8068-c0de-4dbf-9f3c-48d6b78749bc%3A1%3A1; sb_main_1708a94aaaa6628b875721ea011f8398=1; sb_count_1708a94aaaa6628b875721ea011f8398=1; m5a4xojbcp2nx3gptmm633qal3gzmadn=jeerinfluencemedical.com
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-pingback: http://ineedsjobs.com/xmlrpc.php
content-type: application/json; charset=utf-8
x-content-type-options: nosniff
content-length: 1035
content-encoding: gzip
vary: Accept-Encoding,User-Agent
date: Thu, 05 Jan 2023 21:10:41 GMT
server: LiteSpeed
unseenreport.com/pxf.gif?uuid=c69c8068-c0de-4dbf-9f3c-48d6b78749bc&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=1708a94aaaa6628b875721ea011f8398&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=c69c8068-c0de-4dbf-9f3c-48d6b78749bc&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=1708a94aaaa6628b875721ea011f8398&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=c69c8068-c0de-4dbf-9f3c-48d6b78749bc&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1053&b_frame=0&pk=1708a94aaaa6628b875721ea011f8398&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=21 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ineedsjobs.com/
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 05 Jan 2023 21:10:41 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c0812cb7791547865f1258fa77672f97
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/css/animate.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/css/animate.css
IP
GET /sb/notifications/rtb/os-box/1-2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: text/css
last-modified: Wed, 30 Mar 2022 13:43:59 GMT
etag: W/"62445e9f-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Zh11b9rOeYyyjnfK9SgRM2ppqowlYwoLhorkmdvzKzg9c4CqtTSy26Cj%2FdXSWaOzaQBBgUyKYnKHOF3TYiQTrBSAOed1dY3XS3y21NAflyNUeVQJ9HZdhPBkNkvsj9WW6fW62sQdv9s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784f33b88fe07795-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/js/jquery.min.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/js/jquery.min.js
IP
GET /sb/notifications/rtb/os-box/1-2/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:44:03 GMT
etag: W/"62445ea3-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4432719
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sXbuUgXh1qFFbNzdEf%2FZls6yvC88jUOIM8FHEIE8K12k4YNzDRsdc%2FFgiMfZVLUYWiTvE6uPb%2Bklw49OcrDsQi4rha%2FD0UMPLCR5Xmq%2FWzC2ZdD2%2FsRP7JqbFhfs6ChQLlJitETtRdwL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784f33b88fec7795-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stats.wp.com/e-202301.js
200 OK 0 B IP
GET /e-202301.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 21:10:39 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
content-encoding: br
expires: Sun, 31 Dec 2023 13:33:19 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/css/style.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/css/style.css
IP
GET /sb/notifications/rtb/os-box/1-2/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:40 GMT
content-type: text/css
last-modified: Wed, 30 Mar 2022 13:43:59 GMT
etag: W/"62445e9f-e6f"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FYpUBCpOXIZIIvomuEpE1ac%2Fpsw5kEMTcqshI%2B2LQa4BZX8bxAQ7g64PnjkKVUb71rJ6IDBrPjy2TZfGBh8Kxl%2FHwtx80dv8DXIE%2BAkpRo2xMTvzNRl0t2HAxgqNHIGSCUvOke5OIRvp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784f33b87fdf7795-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/js/script.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/rtb/os-box/1-2/js/script.js
IP
GET /sb/notifications/rtb/os-box/1-2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ineedsjobs.com
Connection: keep-alive
Referer: http://ineedsjobs.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 05 Jan 2023 21:10:41 GMT
content-type: application/javascript
last-modified: Wed, 30 Mar 2022 13:44:03 GMT
etag: W/"62445ea3-307"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ryRfYQzmCijF3eipWhI7sBnCE%2BMoXAfiOCa2wcXTb1z5SN6CYiZMcEz9JEvHz8IyeJvCEH3yv%2FM4gq0JDhokhxK%2F3LI8M5CD%2FEz%2BKVx%2BAi%2BKTOndL%2FqyYckitD8RL05bRlC7TRAIOj%2Bf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 784f33b9189c7795-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.105.39.127
52.28.184.54
172.64.167.29
23.36.77.32
31.13.72.8
93.184.220.29
0.0.0.0