| go.trklinkcm.com/rd.html?go=https://slutsaga.com/jpt?pub_id=32350&cid=38_32350_8150_2f8b7fb82dae0204cc9380887d410ed3&source= |  172.255.248.105 | 200 OK | 255 B |
URL HTTP/1.1go.trklinkcm.com/rd.html?go=https://slutsaga.com/jpt?pub_id=32350&cid=38_32350_8150_2f8b7fb82dae0204cc9380887d410ed3&source= IP172.255.248.105:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash997bfcab4e7a51023ff8da026ed4374a 35d15ad133e52c1b9dea0b3696a8719521387a9e 070d804ff334e0de872b9ac4c28c1bc578a043771099d2e9556782974ed560a3
GET /rd.html?go=https://slutsaga.com/jpt?pub_id=32350&cid=38_32350_8150_2f8b7fb82dae0204cc9380887d410ed3&source= HTTP/1.1
Host: go.trklinkcm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 25 Dec 2022 04:40:39 GMT
Content-Type: text/html
Last-Modified: Fri, 13 Aug 2021 14:56:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"61168831-149"
Cache-Control: no-store, no-cache
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashede732d48f2c32ad5e3b899bb4348df9 15fa12733818b3ae39f3022a715ed0f431b28242 446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8710
Expires: Sun, 25 Dec 2022 07:05:50 GMT
Date: Sun, 25 Dec 2022 04:40:40 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashad598540c6639aaaa344fb3ce4f3162f b0b9f86d50de7dc23bdc7aee2f45d79a06165afc 4e9aaff330ce0c9c11f6bb8502fe21296b1845151bace75f73908a3194d5d0a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5521
Expires: Sun, 25 Dec 2022 06:12:41 GMT
Date: Sun, 25 Dec 2022 04:40:40 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 25 Dec 2022 03:46:20 GMT
content-type: application/json
age: 3260
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash6b1d63d9d906daa309dc263b4991bbe9 04680ddd86781d46dfe6a9671571b3ad1f3758f3 46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5221
Expires: Sun, 25 Dec 2022 06:07:41 GMT
Date: Sun, 25 Dec 2022 04:40:40 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb1fcd419a4245617397846e8d17233f6 2a037ce244587640b27ead9a0ec2af4f862d91b2 e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9FAsc6w9M28gbMcSzly8nrsBLHYSk3isaIqWbRXhkpmKV6TPaul0Sb/60xsghNFnTVn+eQKQrJU=
x-amz-request-id: 59GN8FA6QM75842E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 25 Dec 2022 03:54:45 GMT
age: 2755
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 25 Dec 2022 04:40:40 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| go.trklinkcm.com/favicon.ico | 172.255.248.105 | 404 Not Found | 123 B |
URL HTTP/1.1go.trklinkcm.com/favicon.ico IP172.255.248.105:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hashc728bf241d9141b8d3100ae5140e09c5 07f0da1bdfadd0354b090781f1e3264ac22b6c39 34f3447a0b669f7c583609861bd783e8940b379cf642df02901cee86233a355a
GET /favicon.ico HTTP/1.1
Host: go.trklinkcm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://go.trklinkcm.com/rd.html?go=https://slutsaga.com/jpt?pub_id=32350&cid=38_32350_8150_2f8b7fb82dae0204cc9380887d410ed3&source=
HTTP/1.1 404 Not Found
Server: nginx
Date: Sun, 25 Dec 2022 04:40:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash94fed8d15f84b03e319db7cf8c20507f 7f2d39709b10438738db4e3e3c9cefca9b54b13f e15309403e70ade846c680707ded9e20aff4fa23517ad210c0ea876c18d7abfb
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E15309403E70ADE846C680707DED9E20AFF4FA23517AD210C0EA876C18D7ABFB"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=834
Expires: Sun, 25 Dec 2022 04:54:34 GMT
Date: Sun, 25 Dec 2022 04:40:40 GMT
Connection: keep-alive
|
|
| slutsaga.com/jpt/?pub_id=32350 | 172.67.199.140 | 301 Moved Permanently | 0 B |
URL HTTP/1.1slutsaga.com/jpt/?pub_id=32350 IP172.67.199.140:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jpt/?pub_id=32350 HTTP/1.1
Host: slutsaga.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://go.trklinkcm.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 25 Dec 2022 04:40:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 25 Dec 2022 05:40:40 GMT
Location: https://slutsaga.com/jpt/?pub_id=32350
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5IdBqdJu4mZBHJDRsluw0XPi%2B%2BcyuMK1lwvLbCSyPUNd79BD%2FljUkcsRPB0sNu2EvgLZLRpT3fOhOAF5v5qgKJnjfQRaCzumsiZ6PAfeQXhboPEyvsPoa6ztDuUV4Pg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77eee665cd470b45-OSL
alt-svc: h2=":443"; ma=60
|
|
| slutsaga.com/jpt?pub_id=32350 | 172.67.199.140 | 301 Moved Permanently | 507 B |
URL HTTP/2slutsaga.com/jpt?pub_id=32350 IP172.67.199.140:0
Hashcfcbebb82efcb4e5f57710bfa4adc16e 6aa2cfe7aaf10ea465c0f4b9047a6f7889886520 5b7efeef89e2b581105c20b08f70d7111646d22a5003263e582c21170b37a3af
GET /jpt?pub_id=32350 HTTP/1.1
Host: slutsaga.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://go.trklinkcm.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 25 Dec 2022 04:40:40 GMT
content-type: text/html
location: http://slutsaga.com/jpt/?pub_id=32350
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OiHRmBpr4AsNG7tt3UTG%2FbVPGDMNK3vlBMQ4rZF5yV5lTU%2FMgGi6AaeuH5Q2V8GqV471lW%2B%2F8DQk4mB9hJjy5q0F78RmlCYK7mJcrLE1yd%2BMpWtogv5vDFx%2Bwg5E93A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77eee6652973b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash5100021a7f8224edae91cf7c15ece4b2 2b0877c1cde0483463babb806f610158761489c7 701becec3ebad5661cfc231ad96cd17d95c4453206036fd3d05a246db72debef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 04:40:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 25 Dec 2022 04:33:28 GMT
age: 432
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash5100021a7f8224edae91cf7c15ece4b2 2b0877c1cde0483463babb806f610158761489c7 701becec3ebad5661cfc231ad96cd17d95c4453206036fd3d05a246db72debef
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 04:40:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash9527d889a5b94c28b4dcd8809ffba513 b2ee81348df6ebc3f72fcd64b7767df0a1903fb5 9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 04:40:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 36 kB |
URL HTTP/2fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 35904, version 1.0\012- data Hashc26b97e7f5bb7a34d190703522d75e16 69d9e5aea0544dbaf9b78c1b65139c03eceece8f 96217f1d27fb909f92b4a6b35a0d3d6775f2f0b4d136d27aee88547d3ed87357
GET /s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://slutsaga.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:15 GMT
expires: Sat, 23 Dec 2023 13:33:15 GMT
cache-control: public, max-age=31536000
age: 140845
last-modified: Mon, 18 Jul 2022 19:34:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash9527d889a5b94c28b4dcd8809ffba513 b2ee81348df6ebc3f72fcd64b7767df0a1903fb5 9d3cfbc6c96f2da85420d44bdd58f8e860487d3cbf1ffda4d21477b566f23059
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 04:40:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashd7938ab2263405a708c44813f3e16cb8 3ba9f4363ecc2834ea1211f761ce2d04e0077ab3 8a8ef4218bcd8ecb1f12ecdb74f3f453a7093be8dd3c233615577dcc9b40fa92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2850
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 04:40:41 GMT
Etag: "63a6c129-1d7"
Last-Modified: Sun, 25 Dec 2022 03:53:11 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
|
|
| slutsaga.com/jpt/assets/audio/bg-sound.mp3 | 172.67.199.140 | 206 Partial Content | 709 kB |
URL HTTP/2slutsaga.com/jpt/assets/audio/bg-sound.mp3 IP172.67.199.140:0
Size709 kB (708894 bytes) Hash123118f0580d83ad4ab9b5ad17f070ca 9f6743fb73cc9e85f8df660176801b4d2189bcf6 b6c0d352b7fa4b3418883d0580e66e732951746958e5b6a510d06ce3cd1d607c
GET /jpt/assets/audio/bg-sound.mp3 HTTP/1.1
Host: slutsaga.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=969256-
Connection: keep-alive
Referer: https://slutsaga.com/jpt/?pub_id=32350
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 25 Dec 2022 04:40:41 GMT
content-type: audio/mpeg
content-length: 708894
last-modified: Mon, 08 Aug 2022 10:12:14 GMT
etag: "62f0e17e-199b46"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
content-range: bytes 969256-1678149/1678150
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WFPvofWO2tURECXw%2FEVfGNv%2BnanOBywU5qZIUPLf6guV%2FtltGXTIvISZC0FMbqmZg4OIrS%2BLLdd%2FcgkPSV0hVKhjCPhJQke8VO8xmdVF%2B3AqPARS56tw5yad0luYU7w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77eee668ca57b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| slutsaga.com/jpt/assets/audio/click.wav | 172.67.199.140 | 206 Partial Content | 229 kB |
URL HTTP/2slutsaga.com/jpt/assets/audio/click.wav IP172.67.199.140:0
Size229 kB (228640 bytes) Hash9cd96fe6a216360e680829d83bb6ba9d 832cc87b231eda1dc700690f10d29aa4998afdf5 00e18df869752db47171e178b78f4e087f8d2e0a87c77592a743c81fb257539c
GET /jpt/assets/audio/click.wav HTTP/1.1
Host: slutsaga.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=14200-
Connection: keep-alive
Referer: https://slutsaga.com/jpt/?pub_id=32350
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
date: Sun, 25 Dec 2022 04:40:41 GMT
content-type: application/octet-stream
content-length: 228640
last-modified: Mon, 08 Aug 2022 10:12:14 GMT
etag: "62f0e17e-3b498"
content-range: bytes 14200-242839/242840
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BWXrcLaJhSvzpzyiIzbh04g3xKB%2F9l3tzA%2Bhk5J5Z4QaDtCQq71AdO3Uda6bxOleFIYqO95S8isuL01SNRNmeIccf1w4YKmJv%2BWlHth8Gr9s1xrcIFDYXuYLfJzw4nY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77eee668ca55b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.38.146.2 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.38.146.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3QBiHGegfWvHcdXNLQ5LGA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: csvJycN7nrFhXxhqvZPGvfprASg=
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 202 kB |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
File typeISO Media, MP4 v2 [ISO 14496-14]\012- data Size202 kB (201547 bytes) Hash87bf6bd0d55a3f0f66376a5ed6276f20 a77318fa85ba45a0cf29f50ef919915e64c86cef 0cf5c90c95e3228216d59eb64e83a66febd1879bb6a1b1719491f85110b6a988
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=144853
Date: Sun, 25 Dec 2022 04:40:41 GMT
Etag: "63a7671e-1d7"
Expires: Mon, 26 Dec 2022 20:54:54 GMT
Last-Modified: Sat, 24 Dec 2022 20:54:54 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iZ0Z7_F7xll5tVvcTd3-MNoS9R2qtRrWwqe9H4u3qcIwEfGs1g3QvA==
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hashd6336809f1ef2146f7ebba4ba5f5383c 24f1ebe3568cc6410c379bbf18f4d094d9661bed daded789783161ca610b7705e5408ef2a0b298dd4168e682904a88fb88c90c78
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=143027
Date: Sun, 25 Dec 2022 04:40:42 GMT
Etag: "63a75ffd-1d7"
Expires: Mon, 26 Dec 2022 20:24:29 GMT
Last-Modified: Sat, 24 Dec 2022 20:24:29 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: BhttB95jFTPdGzym6vFAHk0Yvv_LSSzGfNZHXDu-nDoxho8IRnXQMQ==
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfc328f2e44d4ac962c03be665dbf6436 7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe 7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14189
Expires: Sun, 25 Dec 2022 08:37:11 GMT
Date: Sun, 25 Dec 2022 04:40:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfc328f2e44d4ac962c03be665dbf6436 7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe 7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14189
Expires: Sun, 25 Dec 2022 08:37:11 GMT
Date: Sun, 25 Dec 2022 04:40:42 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfc328f2e44d4ac962c03be665dbf6436 7ac1bb5dd0d42c9cb2e6a67b06b55934190691fe 7d7ced4a7da10564449ddec77f05d85557a2b2f7e8fe2a7d15541c7b52aee928
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7CED4A7DA10564449DDEC77F05D85557A2B2F7E8FE2A7D15541C7B52AEE928"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14189
Expires: Sun, 25 Dec 2022 08:37:11 GMT
Date: Sun, 25 Dec 2022 04:40:42 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498c2da4-79e2-4198-a673-39ac386f9d85.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498c2da4-79e2-4198-a673-39ac386f9d85.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash49243f7b16344df6fbbb9a39d6883e27 2ace4f84825a461eaaf14199adc5b763a047fa42 4be86950ce0d8bf8a211d4977772db967dc5a34397e625105a9b23fbe78db5b1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F498c2da4-79e2-4198-a673-39ac386f9d85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8854
x-amzn-requestid: 321af264-ac36-47a1-b9a2-5d7d9ef709cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbuz0FxCIAMFVgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a15e7e-3a8afa2350fa1f4c1e97cb1b;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 07:04:30 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Nr1-MryZVwdNInY3VxkDBr3pb79HOPVI1Z5AmVFHQU30Tt5Fc918HA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 bb763d35677c62f9f5d9728bba884662.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 22:14:03 GMT
age: 23199
etag: "2ace4f84825a461eaaf14199adc5b763a047fa42"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd9e22c8-a9cc-48fe-a821-b6c7e317e433.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd9e22c8-a9cc-48fe-a821-b6c7e317e433.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash10713b0c2cec301fcd45db80ae0a10eb 78d9719593aa9e972921ae6555cf235286f50709 32d4474f99a79b9e05b31722af47fa45b6876ebbb042b57260a351d2a2601fb7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd9e22c8-a9cc-48fe-a821-b6c7e317e433.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10195
x-amzn-requestid: 04589666-4416-4780-a959-9e3c6b140194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq6efFnzIAMFebA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a77129-4415c578420b56920685c331;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:37:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: slM8cEpVBQ5acYETTSdN8QQB4w3lNhFmGJnUFL67ZY8H5dVs5E2jvQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 04:12:58 GMT
age: 1664
etag: "78d9719593aa9e972921ae6555cf235286f50709"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash060f377fc7bb087a495ce5bb536d246f 64d4ff943882dd8f80e860505218e321d2951465 36566e692827354e1d91c9223e3c3ddc78de454b7a2ba3a4240f93869bc021ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F534406aa-3cfc-4a91-b7aa-f80f72f66437.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10071
x-amzn-requestid: c32aaf36-e6d2-4dbc-8bb6-91aaa85657b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dVJ4rHjPoAMFxFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639ebd04-3ee9cc203213ff6d2963696a;Sampled=0
x-amzn-remapped-date: Sun, 18 Dec 2022 07:11:00 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: xdL7TgKIkDaxdkkLKSILVUiiNYWxNjHMhaFY5zo6qTRVl0LZpLCgVw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 da4fa914888b330b3e8a08632b8e41be.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:59:56 GMT
age: 24046
etag: "64d4ff943882dd8f80e860505218e321d2951465"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe24b39e5-aa1e-4c82-bf1b-43f6492ecb7d.jpeg | 34.120.237.76 | 200 OK | 5.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe24b39e5-aa1e-4c82-bf1b-43f6492ecb7d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash59583d85ae634ddba0650411ad64e5e2 840860ecc29bce0039ff2622724bde34e0888907 3a27e023ec7fd0ae01405191ec61cd3082def8f4d8eb9b9d5091ae68801ba860
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe24b39e5-aa1e-4c82-bf1b-43f6492ecb7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5582
x-amzn-requestid: 200b0084-b13c-4032-8741-7fbde21e16a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dq6x_FhBoAMFT2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a771a6-141eae7b1b776163639ccef5;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 21:39:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: IMfOjqpmUUaADDbY6kSO6BcDY6ypC_Yip4C8npLx0ew_V2Kn4UMogw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 21:43:56 GMT
age: 25006
etag: "840860ecc29bce0039ff2622724bde34e0888907"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc91439-b5c5-4e34-9a35-d0d01e44e767.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc91439-b5c5-4e34-9a35-d0d01e44e767.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash869162c237be7787a0ce7f77d8138fab de8d05483030d643e52384855ec71aa86c7ae679 1ddafd96f4d2d9343a0ab5d1b07adfe5917cfe2b8e0e99e95ffe2d9cf05cf78d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc91439-b5c5-4e34-9a35-d0d01e44e767.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10261
x-amzn-requestid: 26599021-2d46-4d78-bdcb-6e17f6d421a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEeFedIAMFYEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12882-124ee28534a6572d49c89379;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zeriSb4K4G5WRI3Tq10_3zH93od4tzP55rQ0wH0c9eJgJUdG8jWHZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 08:22:46 GMT
age: 73076
etag: "de8d05483030d643e52384855ec71aa86c7ae679"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b280d2f-1dea-4f40-b61e-10dae68ce7c4.jpeg | 34.120.237.76 | 200 OK | 4.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b280d2f-1dea-4f40-b61e-10dae68ce7c4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash694cc4498e41a57fe81f10efd85de57d df0605e509e4c6c44f278eb44dd1f31bdb525215 e487c025794a0860fc6226e270da1008b2cf363326871547ad263755b7cbd395
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b280d2f-1dea-4f40-b61e-10dae68ce7c4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4264
x-amzn-requestid: 5a2c8b3b-4240-4048-bd16-1cc418debf59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: diWbyEU-IAMF2Bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4044b-1af38fcb4ead058d7a9c3d0b;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 07:16:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pKa7VCUmaQNvFV1i_G_3BCL3HgzwveLPyKGZ0w_BckNOd3Guwf30dw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Dec 2022 08:50:37 GMT
age: 71405
etag: "df0605e509e4c6c44f278eb44dd1f31bdb525215"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp2.globalsign.com/gsalphasha2g2 |  104.18.20.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.20.226:0
Hashd21e30061bf4dff58945b4fe6ceb128e 6de98c1c5f569b9aea44edd200060a44e23722da 6e2a4a19c8e05efe215ad73ddd24b2ec07e60c1844cde90d1e9ed8e187216d72
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 04:40:42 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 29 Dec 2022 02:24:48 GMT
ETag: "6de98c1c5f569b9aea44edd200060a44e23722da"
Last-Modified: Sun, 25 Dec 2022 02:24:49 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 13
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77eee6737a7eb503-OSL
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash6c0c34cfeabfea2e7b8ec300d64ff7d7 ce5d717a6d759c50d57f07b049fb0fd689faf217 738cecd5ceb754d8c3241de73ead5b4638d86b9c78305c91efaff37a2ac6ba24
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "738CECD5CEB754D8C3241DE73EAD5B4638D86B9C78305C91EFAFF37A2AC6BA24"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5954
Expires: Sun, 25 Dec 2022 06:19:57 GMT
Date: Sun, 25 Dec 2022 04:40:43 GMT
Connection: keep-alive
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css | 152.199.19.160 | 200 OK | 20 kB |
URL HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/css/bootstrap.min.css IP152.199.19.160:0
File typeASCII text, with very long lines (65371) Hash7e2bb6028f0b19917a1a2d1944fc72b1 e1837fc75ee2ddd24c6e1df6b309ea212b57e681 cc6093bd7162882fd34252fb5d3e8e7d07247e3b70fad894320bf2a960abeda5
GET /ajax/bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 16669979
cache-control: public,max-age=31536000
content-type: text/css
date: Sun, 25 Dec 2022 04:40:43 GMT
etag: "0e914f2cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:10:18 GMT
server: ECAcc (ska/F740)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 19629
X-Firefox-Spdy: h2
|
|
| ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js | 152.199.19.160 | 200 OK | 9.8 kB |
URL HTTP/2ajax.aspnetcdn.com/ajax/bootstrap/3.3.7/bootstrap.min.js IP152.199.19.160:0
File typeASCII text, with very long lines (32033) Hash432ca07a1a844dbb27f9e0ab0d468be5 7fdaf858d702f84536a515c675b4028ce2eb0cfa 12732099d21835fabf83a93eec52f7cf1847cd64a0572d18917b2e13b06d5cf0
GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1
Host: ajax.aspnetcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 13575788
cache-control: public,max-age=31536000
content-type: application/javascript
date: Sun, 25 Dec 2022 04:40:43 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 142.250.74.138 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP142.250.74.138:0
File typeASCII text, with very long lines (65451) Hash81182f4b684635f6bdcbdd907ee66f25 a1f2f151df72ede41397c8131bd47a3ce85575b3 be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Dec 2022 17:10:47 GMT
expires: Mon, 18 Dec 2023 17:10:47 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
age: 559796
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp2.globalsign.com/gsalphasha2g2 | 104.18.20.226 | 200 OK | 1.4 kB |
URL HTTP/1.1ocsp2.globalsign.com/gsalphasha2g2 IP104.18.20.226:0
Hash07065e9e047b9ed8be450ae3ef83cc00 a6f8552733b09b39ebc24ed9ad2c3287ec9ed329 8e890ed1e7c4ca40cac5e114cd58d5482374c31c7f1df80275094004ec090a6c
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 04:40:43 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Thu, 29 Dec 2022 03:42:32 GMT
ETag: "a6f8552733b09b39ebc24ed9ad2c3287ec9ed329"
Last-Modified: Sun, 25 Dec 2022 03:42:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 12
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77eee679dd0db503-OSL
|
|
| bkdwbvx.com/common_tpls/compactML/css/epcsaga.css | 207.120.33.5 | 200 OK | 8.8 kB |
URL HTTP/2bkdwbvx.com/common_tpls/compactML/css/epcsaga.css IP207.120.33.5:0
File typeASCII text, with very long lines (1275) Hasha647e09b3974e10f56189e3f800483be b4cb278e0160090c73beb4d007d9b7bff8dac9b4 f3bcf42f7332103637cf82e30adde5fb753fd67f777dc548609cf2228adde180
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/compactML/css/epcsaga.css HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: text/css
content-length: 8761
last-modified: Sat, 04 Dec 2021 17:36:33 GMT
etag: W/"61aba721-be1c"
content-encoding: gzip
section-io-cache-id: 1d7aa728b6566fc19783f8712ad33f27
vary: Accept-Encoding
x-varnish: 18101797 18536536
age: 11869
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 4b6b25316e7446bf044c9431ebe784ca
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/email.png | 207.120.33.5 | 200 OK | 1.3 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/email.png IP207.120.33.5:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hasha86d99b9176d82a211cfa29b2f0b353f 62947ddfd87e3a21869818885e4bfa4e55ad0c11 f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/email.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: image/png
content-length: 1254
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-4e6"
section-io-cache-id: 88357da8eebabb52ef5a68c8a7f0e854
x-varnish: 19385643 17790848
age: 12262
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 23ee53444564e77365fbc69fe8ccc784
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/fname.png | 207.120.33.5 | 200 OK | 1.6 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/fname.png IP207.120.33.5:0
File typePNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced\012- data Hash5c846870756544f39604e671d4111b9d 304938c74246e228fa82d8ca40201c3db6098074 d43abf8c5665519a3fe3f7e90298fc17b62e06d8ada1b90a44ea9985a62abb4d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/fname.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: image/png
content-length: 1649
last-modified: Tue, 28 Nov 2017 20:52:02 GMT
etag: "5a1dcc72-671"
section-io-cache-id: ec5ef0d6aa106634ea2f441e2f3bd7d0
x-varnish: 19385644 19694120
age: 12271
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: e7df89ba0c2b3ef325b5a051d956d957
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/address.png | 207.120.33.5 | 200 OK | 1.2 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/address.png IP207.120.33.5:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hashb579e9868402d708e54e1a980166c444 1c58e2890b934c0b1ab057f3ac28bedd2a082d19 67756f8b542c7823bcdba421219c3b8e1ee472748d8c3463534f667271356dfb
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/address.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: image/png
content-length: 1167
last-modified: Mon, 21 Aug 2017 19:32:05 GMT
etag: "599b3535-48f"
section-io-cache-id: 1fe65ec078f3c5372a1cd9b774f06f58
x-varnish: 19673428 10812341
age: 12280
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: f760cea1c0c8ef7fb42d007368ed335d
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/images/icons/password.png | 207.120.33.5 | 200 OK | 1.5 kB |
URL HTTP/2bkdwbvx.com/common_tpls/images/icons/password.png IP207.120.33.5:0
File typePNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data Hash6f100f1cdbdce928118ffa4c9293ca5b 6b1a3593e792d4c00187d60560dd03fb42df1156 8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/images/icons/password.png HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: image/png
content-length: 1452
last-modified: Tue, 22 Aug 2017 16:34:59 GMT
etag: "599c5d33-5ac"
section-io-cache-id: 9b1db3c5bd34f88803b4f07e939c4b2a
x-varnish: 4116169 4562572
age: 334
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 92a1cd0caa03f0ef5962f11c0823183d
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 2.6 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (27832) Hasheaaabd3f60063923cd5333eb1d7a20a1 0da69706105e28896a1f6eeaa91d5bec1b82f7f1 f863309ec0ac675409167610ff9776fa9c7620d6ee3592cc0c19d0b883ff2f70
GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: text/css
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2021979
accept-ranges: bytes
server: cloudflare
cf-ray: 77eee67a3fdcb505-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 54 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (65397) Hashdc9270247a97f75913a5d8934c24de03 ed9b0fa01b552571f99d529ed355b2ba91cfc48d 847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: text/css
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2021979
accept-ranges: bytes
server: cloudflare
cf-ray: 77eee67a3fdab505-OSL
X-Firefox-Spdy: h2
|
|
| ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 | 104.18.23.52 | 200 OK | 4.2 kB |
URL HTTP/2ka-p.fontawesome.com/releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 IP104.18.23.52:0
File typeASCII text, with very long lines (26366) Hash7fd743485fa194e25e2a207bff6c258a 97c999d752b95ee1ed6271a29aa58109dc17281e dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1
Host: ka-p.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bkdwbvx.com/
Origin: https://bkdwbvx.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: text/css
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 2021979
accept-ranges: bytes
server: cloudflare
cf-ray: 77eee67a3fdbb505-OSL
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/552.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 5.9 kB |
URL HTTP/2js-agent.newrelic.com/552.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (21423) Hash097ef34c5f5d635a147bca3721bd605b 3b31ef3cfb1d62d9884d631ec2467b9d6b0d46e2 3e05d4e42c1e87b516b525574b20d2570dccc50d1bd1b2956d6421699aa19914
GET /552.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Lx7LUNyC193WWpSv5hW/L7UEeNSlDwufm33KpA2sv5a1ht8efI/6s62/R2OVbNZKkoG/gUHXaFI=
x-amz-request-id: VK0V8BCV38T7WVVS
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "777ac0df4dba632ad1b2955c88dd51ac"
x-amz-version-id: 7EjqUQ3uiXAFqO0VnIOp2ymSTJq3JZwD
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 400
x-timer: S1671943244.261871,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 5890
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/290.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 3.4 kB |
URL HTTP/2js-agent.newrelic.com/290.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (8544) Hashb9baa2cb6a3b1a3d0fda03cd7db51631 42d37467e05182e3cab2fcb54577dc462adcf50b 31a8b4d47298cae24c66e37256a51474ae88a745fdfec79f99b2d43608e6d822
GET /290.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: fhmr6WetDM+g2i2QlvVMRpxUR5FtkKdG9L63CCQ3CSWsvtR6j++f9vvc73sttpIYqURa2xyYTRk=
x-amz-request-id: VK0ZFWF8T6343F8V
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "13898fbb4d7a1f83fc6722c4c12faf40"
x-amz-version-id: C4hj6k9j4I7xXuTBZvcbX78Bf.Ep8KMk
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 348
x-timer: S1671943244.400659,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 3424
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/768.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 2.2 kB |
URL HTTP/2js-agent.newrelic.com/768.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (5523) Hash98a96a3306b7723c0b8c4bff074cdd9f e9070da7daa34fa2d8ac2e4ec00e3c499ea37516 a6079d50fa4c72b521fd865e67be080b5b21c336a71dbf7a1800a12ad42384f7
GET /768.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: YghQGw//W98CcE+uLEc2bIpyY1zfBy1cvSl3ZbHItGIBbBbjBYrgjjDhKdNnyagoNGaVfLpI2xM=
x-amz-request-id: VK0XNZM280HMN60Q
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "d6cc8b42eda6fd7734014b03b87b5787"
x-amz-version-id: 0CJw6LdyBdZcjhOiVrtC0pLcOFtA3d5G
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 345
x-timer: S1671943244.400967,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2225
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/js/validate_form_v2.js?jsv=29 | 207.120.33.5 | 200 OK | 7.3 kB |
URL HTTP/2bkdwbvx.com/common_tpls/js/validate_form_v2.js?jsv=29 IP207.120.33.5:0
File typeAlgol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (3382) Hashad972d042331d1ae0261126a1e67029b f47a80c83dd733ffad1c68955bdd00af81eec368 a8e516750d69401e7bc242e0a68a2740b8a0fda8bfc091ef5fe04036a5bec6f2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/js/validate_form_v2.js?jsv=29 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Tue, 01 Nov 2022 21:07:07 GMT
etag: W/"63618a7b-614a"
section-io-cache-id: b1cb83913b6c4c9b1198c5d1c62b414a
x-varnish: 19766984 18769178
age: 12278
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 60ea92924809dda0a04bf485bf1c5e65
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/775.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 632 B |
URL HTTP/2js-agent.newrelic.com/775.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (1169) Hash661520fd0dfebb919d68a69b60ca426f b85ef80a0e0d95bf4904f9ce4fad56c49ae035be ecd489671c6255fee8370fc1f8f4e99519ef8d4c4c0ab06640b0c021642e1db7
GET /775.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: n5W3M8HU3EdwDhPARC2iiAf1as95kdLfrN2+qdL0W35SMVzIqjIlMR9W7ck8oTAzeIw6lrJi5fM=
x-amz-request-id: VK0MRM6MJ78HXF3Y
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "1dfdb74c0491489bf04c6deadb56add2"
x-amz-version-id: y1AQ2bnjUbwuFOuSS5MP1vew1dGw.1iz
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 342
x-timer: S1671943244.401257,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 632
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/39.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 2.8 kB |
URL HTTP/2js-agent.newrelic.com/39.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (7169) Hasha0a406e7bdf3e14f047e46bcea27640c c1fbc88d260f16a092c1b7b0e58e4291401478e8 2309d4e82574d5402ec3454a76051987336fe3b4e4d546f6565a3a443c6d4049
GET /39.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: YVIhZ0s+kfqfyw3/OOPaabzaoXb/XwD4VELrgCLiMtI8cGCxgyDD6Y3bdLzWtK9lY7b2Y9dtVwM=
x-amz-request-id: VK0GJZ5NDAT42H61
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "0448380a8f2cd0426bbdf04dd45b5408"
x-amz-version-id: rKoZQfJFmGD6aC9Xn3l7.fk4j9L96MM_
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 194
x-timer: S1671943244.401570,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2755
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/0.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 2.3 kB |
URL HTTP/2js-agent.newrelic.com/0.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (5198) Hash852267b16c136b977ccd94900c6c6308 e013e1b2c6de5b625ebbfe2e7cf3cfb09cee6c16 9bb09a133a1b33e9cecb06aa44e1ea67b3ad4ea74df5c6a89b1580064364cced
GET /0.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: yaLgSlI/o1YgPR64REKW7tJGngFFiymXOCq3qvC8FibvMh/NPjIov1s2Y43sA3Nk7dOb/Jeu8n0=
x-amz-request-id: VK0HGZZCMTDZKH5X
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "cc9b3d207e9ea2c79974f46bf474e6dd"
x-amz-version-id: 5C7ygpPS6JvoVHQoGDIm5lCTgaPcqmFc
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 192
x-timer: S1671943244.401843,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2349
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/571.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 1.1 kB |
URL HTTP/2js-agent.newrelic.com/571.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (2412) Hashd392a55faa7a0a2a43781a495891c9aa 1998ba6f85354606c186fa1a29285676f0b596f0 33b4cb21373961aa88430ff72406d46e95ceddf50afc086598ea5bdc3a311815
GET /571.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: Yb3onr5wgE7GyebmH4WnkKwnI2MQKfjQMqMso3BN0Y71/Vtt12keZBjkbAuB5UJTI/GRzVXSccI=
x-amz-request-id: VK0WTM9PM29FXD43
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "04b00905b32fd8d29459545bc125cff6"
x-amz-version-id: ySPuP7kOqGri8HjzDqW2TYirQNYv9NMF
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 192
x-timer: S1671943244.402326,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 1108
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/790.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 6.1 kB |
URL HTTP/2js-agent.newrelic.com/790.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (17591) Hashb3193d37837e2f200e10db13deff83a9 d8577b8a972583e81cfd8e31436dcd039aa049b2 5ba2e421fa78af3094294f4f8e30ba63225537da3ad68e35fbab63b2d22a0288
GET /790.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: veWtlyFq4FXZZ3C91QZ1ydEfJVdBNkWk12lPeQHXsOtJd4oL/94W2O+vIrequr5Q4TsFmN49oJA=
x-amz-request-id: VK0VJC72617ZJQFB
last-modified: Wed, 05 Oct 2022 14:53:43 GMT
etag: "af8c077a247e90dff929d7af81c94f57"
x-amz-version-id: TFyNie.wEelbO4xbna5bJ14MRDIkKCak
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 147
x-timer: S1671943244.402286,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 6064
X-Firefox-Spdy: h2
|
|
| js-agent.newrelic.com/820.2d6a2503-1220.js | 151.101.66.137 | 200 OK | 3.0 kB |
URL HTTP/2js-agent.newrelic.com/820.2d6a2503-1220.js IP151.101.66.137:0
File typeASCII text, with very long lines (7460) Hash7d1295a839190615b34d5a62acceee4f eef26f5c6d2ae14cb81b3a9b669da224faceacd0 4d59d58f31b6638fbc3792a0b5fddca6e8eafc19a0c9e9aabadb5ad4d9197198
GET /820.2d6a2503-1220.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-amz-id-2: FgITvf3WklEMWkZwakon8gl0N9aTQ94pdNptn966xzqmGm/5HblQmQGcNcywcu4tvf5sbwoyl9E=
x-amz-request-id: VK0ZG74SYEQQ4TER
last-modified: Wed, 05 Oct 2022 14:53:42 GMT
etag: "897a1a72a47e4f4a24c05aec49af638f"
x-amz-version-id: P6j2S.7Iht6lmVHyZ_zkYmp136j6E8IA
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Sun, 25 Dec 2022 04:40:44 GMT
via: 1.1 varnish
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 192
x-timer: S1671943244.402307,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 2979
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/js/iframeResizer.contentWindow.min.js | 207.120.33.5 | 200 OK | 5.0 kB |
URL HTTP/2bkdwbvx.com/common_tpls/js/iframeResizer.contentWindow.min.js IP207.120.33.5:0
Hashba2348e604535b0236145bd82f162434 6c7ac9a5867ab57a70437762f356eae09bfea6b3 f41a038390b130adf264b91152c9a819c5fd7bce23783b9cf729b63679cc16eb
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2016 15:06:03 GMT
etag: W/"56b368db-3445"
section-io-cache-id: bc63866688889210999994df1fb60548
x-varnish: 19385645 19016739
age: 12273
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: e0e4bd38b5fe6f69ae4fea99ae3e6d64
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash6c37895c1f2cdb27c2ea79b509f19e86 f44970a2365bf7ae0dc28a860bc0f1b2ec48ae1f 2d342277f73d5572cea54f1ba230f5051c48ec50a5b3985990b7039cfc979250
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5012
Cache-Control: max-age=155638
Content-Type: application/ocsp-response
Date: Sun, 25 Dec 2022 04:40:44 GMT
Etag: "63a77daf-1d7"
Expires: Mon, 26 Dec 2022 23:54:42 GMT
Last-Modified: Sat, 24 Dec 2022 22:31:11 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
|
|
| bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3661&ck=0&s=228c34e2931eb2b7&ref=https://bkdwbvx.com/acct/epc69324/add/&ap=73&be=2907&fe=460&dc=455&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1671943238471,%22n%22:0,%22f%22:2201,%22dn%22:2203,%22dne%22:2205,%22c%22:2205,%22s%22:2314,%22ce%22:2432,%22rq%22:2432,%22rp%22:2759,%22rpe%22:2759,%22dl%22:2763,%22di%22:3349,%22ds%22:3361,%22de%22:3366,%22dc%22:3366,%22l%22:3366,%22le%22:3371%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken | 162.247.241.14 | 200 OK | 77 B |
URL HTTP/1.1bam.nr-data.net/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3661&ck=0&s=228c34e2931eb2b7&ref=https://bkdwbvx.com/acct/epc69324/add/&ap=73&be=2907&fe=460&dc=455&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1671943238471,%22n%22:0,%22f%22:2201,%22dn%22:2203,%22dne%22:2205,%22c%22:2205,%22s%22:2314,%22ce%22:2432,%22rq%22:2432,%22rp%22:2759,%22rpe%22:2759,%22dl%22:2763,%22di%22:3349,%22ds%22:3361,%22de%22:3366,%22dc%22:3366,%22l%22:3366,%22le%22:3371%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken IP162.247.241.14:0
File typeASCII text, with no line terminators Hashf1442f5831dbbe0210da2d7a4180d6b8 2ade23c6c7a001c66f0c0a9a101ec152747b434e c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3661&ck=0&s=228c34e2931eb2b7&ref=https://bkdwbvx.com/acct/epc69324/add/&ap=73&be=2907&fe=460&dc=455&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1671943238471,%22n%22:0,%22f%22:2201,%22dn%22:2203,%22dne%22:2205,%22c%22:2205,%22s%22:2314,%22ce%22:2432,%22rq%22:2432,%22rp%22:2759,%22rpe%22:2759,%22dl%22:2763,%22di%22:3349,%22ds%22:3361,%22de%22:3366,%22dc%22:3366,%22l%22:3366,%22le%22:3371%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 04:40:44 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 77eee67e49c7b515-OSL
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
|
|
| bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3856&ck=0&s=228c34e2931eb2b7&ref=https://bkdwbvx.com/acct/epc69324/add/ | 162.247.241.14 | 200 OK | 24 B |
URL HTTP/1.1bam.nr-data.net/events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3856&ck=0&s=228c34e2931eb2b7&ref=https://bkdwbvx.com/acct/epc69324/add/ IP162.247.241.14:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashbc32ed98d624acb4008f986349a20d26 2d3df8c11d2168ce2c27e0937421d11d85016361 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1220.PROD&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=3856&ck=0&s=228c34e2931eb2b7&ref=https://bkdwbvx.com/acct/epc69324/add/ HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 678
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 25 Dec 2022 04:40:44 GMT
Content-Type: image/gif
Content-Length: 24
Connection: keep-alive
CF-Ray: 77eee67f5a1fb515-OSL
Access-Control-Allow-Origin: https://bkdwbvx.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare
|
|
| hotrtr.com/cr.php?cid=920&ACT=69324&TRK=32350.null.null | 44.239.224.184 | 302 Found | 0 B |
URL HTTP/2hotrtr.com/cr.php?cid=920&ACT=69324&TRK=32350.null.null IP44.239.224.184:0
GET /cr.php?cid=920&ACT=69324&TRK=32350.null.null HTTP/1.1
Host: hotrtr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://slutsaga.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 25 Dec 2022 04:40:41 GMT
content-type: text/html; charset=UTF-8
location: https://www.landqck.com/ep.php/JK-prmagms:76259/69324:32350.null.null.q;7T122416841.8150
set-cookie: AWSALB=V7RFH6MMkoxl/qldYfk/pnf1ydt0PQrM69heleLt0MDC8lSY0rguqbBez30YRJevi6m3m01tdZTohup+KU3YZStrHWy0ZJp6bbLhqoE3t/rere1Tr/QiZCKtyL8P; Expires=Sun, 01 Jan 2023 04:40:41 GMT; Path=/
AWSALBCORS=V7RFH6MMkoxl/qldYfk/pnf1ydt0PQrM69heleLt0MDC8lSY0rguqbBez30YRJevi6m3m01tdZTohup+KU3YZStrHWy0ZJp6bbLhqoE3t/rere1Tr/QiZCKtyL8P; Expires=Sun, 01 Jan 2023 04:40:41 GMT; Path=/; SameSite=None; Secure
hskp=q%3B7T122416841%2C; expires=Sun, 08-Jan-2023 04:40:41 GMT; Max-Age=1209600
skip=-1671943241%2C2622; expires=Sun, 25-Dec-2022 04:50:41 GMT; Max-Age=600
920_2622_0=1671943241; expires=Mon, 26-Dec-2022 04:40:41 GMT; Max-Age=86400
server: Apache
X-Firefox-Spdy: h2
|
|
| slutsaga.com/favicon.ico | 172.67.199.140 | 200 OK | 0 B |
IP172.67.199.140:0
GET /favicon.ico HTTP/1.1
Host: slutsaga.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://slutsaga.com/jpt/?pub_id=32350
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:41 GMT
content-type: image/x-icon
last-modified: Mon, 08 Aug 2022 10:13:01 GMT
etag: W/"62f0e1ad-45b26"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4DNdSJ%2FOgMuc19HdQBj3xaZm6H05aqMXmzVkVr03CzoY7INy%2BFHa6tobh7W7CndCnjWAdcBH5KkR3Mw3xLYK0HTk0Rmz8QrCRlwcJVLiJ%2BdefJ8LTP6%2FFCdrvng5GUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77eee668ca53b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| geoip.enlistsecureup.com/?v=1 |  163.171.128.172 | 200 OK | 0 B |
URL HTTP/2geoip.enlistsecureup.com/?v=1 IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
GET /?v=1 HTTP/1.1
Host: geoip.enlistsecureup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:44 GMT
content-type: application/javascript
server: waf/4.32.3-0.el6
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-via: 1.1 PS-DFW-01gGZ147:4 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1bc200:14 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1je97:15 (Cdn Cache Server V2.0)
x-ws-request-id: 63a7d44b_PSdgflkfFRA1vg90_35148-58610
set-cookie: HMF_CI=d429f5e2a239b196feafeb008ee430f8bb7c9c91eb52ccd954d7e6baddd0df35b7096dddd45ad74cd347236b418869a81cd708b2ce2c0a1d5e653df640de95835e; Expires=Tue, 24-Jan-23 04:40:44 GMT; Path=/
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Nunito:wght@400;700&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css2?family=Nunito:wght@400;700&display=swap IP142.250.74.106:0
GET /css2?family=Nunito:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://slutsaga.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 25 Dec 2022 04:40:40 GMT
date: Sun, 25 Dec 2022 04:40:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.landqck.com/ep.php/JK-prmagms:76259/69324:32350.null.null.q;7T122416841.8150 | 44.231.180.243 | 302 Found | 0 B |
URL HTTP/2www.landqck.com/ep.php/JK-prmagms:76259/69324:32350.null.null.q;7T122416841.8150 IP44.231.180.243:0
GET /ep.php/JK-prmagms:76259/69324:32350.null.null.q;7T122416841.8150 HTTP/1.1
Host: www.landqck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://slutsaga.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 25 Dec 2022 04:40:42 GMT
content-type: text/html; charset=UTF-8
location: https://fstentr.com/signup/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q;7T122416841.8150&lang=no&f_color=ffffff
set-cookie: AWSALB=jWBjBrj5JO5veB+H0N7rziMAJQ8rInsJTp+gqmO2XjFvMPUZDHR5UZdETs9jev48DB06fiG+RUlQE3Io8FkkOxoZP7wfcrwP4FE6yfPuws9vYYnFlnWMoLMd0rlD; Expires=Sun, 01 Jan 2023 04:40:42 GMT; Path=/
AWSALBCORS=jWBjBrj5JO5veB+H0N7rziMAJQ8rInsJTp+gqmO2XjFvMPUZDHR5UZdETs9jev48DB06fiG+RUlQE3Io8FkkOxoZP7wfcrwP4FE6yfPuws9vYYnFlnWMoLMd0rlD; Expires=Sun, 01 Jan 2023 04:40:42 GMT; Path=/; SameSite=None; Secure
vip_id=69324.47378-928422; expires=Wed, 28-Dec-2022 04:40:42 GMT; Max-Age=259200; path=/
server: Apache
X-Firefox-Spdy: h2
|
|
| fstentr.com/signup/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q;7T122416841.8150&lang=no&f_color=ffffff | 163.171.128.172 | 302 Found | 0 B |
URL HTTP/2fstentr.com/signup/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q;7T122416841.8150&lang=no&f_color=ffffff IP163.171.128.172:0 ASN#54994 QUANTILNETWORKS
GET /signup/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q;7T122416841.8150&lang=no&f_color=ffffff HTTP/1.1
Host: fstentr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://slutsaga.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: text/html; charset=UTF-8
server: PWS/8.3.1.0.8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
location: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
via: 1.1 PSmglsjLAX2hu177:8 (W), 1.1 PSdgflkfFRA1vg90:11 (W)
x-px: ms PSdgflkfFRA1vg90FRA,ms PSmglsjLAX2hu177LAX(origin)
x-ws-request-id: 63a7d44a_PSdgflkfFRA1vg90_35852-10016
set-cookie: PHPSESSID=3ee6e22227c8729bad9b5346db96a8c3; path=/; secure; SameSite=None
HMF_CI=a4f7c8cfd92c1c34be705e578ea97b086dfc99165a54f28668ca67bd9c2fca64b8c9dae9b54a07c473ec9c215a9ba25f1d7c72aa451271c44e6fd4e6047cf991af; Expires=Tue, 24-Jan-23 04:40:43 GMT; Path=/
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/b314bdf1b3.js | 104.18.23.52 | 200 OK | 0 B |
URL HTTP/2kit.fontawesome.com/b314bdf1b3.js IP104.18.23.52:0
GET /b314bdf1b3.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bkdwbvx.com
Connection: keep-alive
Referer: https://bkdwbvx.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FyzAirxEebdfk--ceVWC
cf-cache-status: HIT
age: 13
server: cloudflare
cf-ray: 77eee6799fa8b505-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bkdwbvx.com/common_tpls/js/form_support.js?v=1101202201 | 207.120.33.5 | 200 OK | 0 B |
URL HTTP/2bkdwbvx.com/common_tpls/js/form_support.js?v=1101202201 IP207.120.33.5:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /common_tpls/js/form_support.js?v=1101202201 HTTP/1.1
Host: bkdwbvx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bkdwbvx.com/acct/epc69324/add/?epcVIP=63.1066.g110&email=&password=&firstname=&lastname=&zip=&act=epc69324.47378-928422.32350.null.null.q%3B7T122416841.8150&lang=no&f_color=ffffff&epcCID=w4OfS5N95026N394v7WaZ2GeAbIbk8UeX&rtid=81246603925
Cookie: PHPSESSID=12b564721fd28d8280c3e35de13617c6
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:43 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 18 Nov 2022 21:23:38 GMT
etag: W/"6377f7da-ed7"
section-io-cache-id: fcc0d5af775b0f6c70ccfe580b99fd74
x-varnish: 19385642 15442716
age: 12259
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: a4e4c434851438248ef9335a661cc59c
X-Firefox-Spdy: h2
|
|
| slutsaga.com/jpt/?pub_id=32350 | 172.67.199.140 | 200 OK | 0 B |
URL HTTP/2slutsaga.com/jpt/?pub_id=32350 IP172.67.199.140:0
GET /jpt/?pub_id=32350 HTTP/1.1
Host: slutsaga.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://go.trklinkcm.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 25 Dec 2022 04:40:40 GMT
content-type: text/html
last-modified: Mon, 08 Aug 2022 10:12:23 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iFq%2FAt9uanfBs9zyI88YlQEyhsp8BNt0nWrzvt0lr9LaaQcc9p1W2sxU2JD3f2o8W5yWMt7L4htjlYRY4qEy%2FWj3P%2BByx3yW4fseKu4AavxVi63apuj0rnzutrObuuU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77eee665d9a3b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|