| followshops.net/user/followshops/things/1451903136 |  104.21.17.152 | 301 Moved Permanently | 0 B |
URL HTTP/1.1followshops.net/user/followshops/things/1451903136 IP104.21.17.152:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /user/followshops/things/1451903136 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 29 Oct 2022 01:51:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 29 Oct 2022 02:51:33 GMT
Location: https://followshops.net/user/followshops/things/1451903136
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N%2BCRa6hMzjCPpcUtSzLmE8jQUFU1KpmOhG%2FNuPTrkKBQq6i5f31pwCUV5EIwy1Cy8wIoeDdh1kH2tkEjB3YFZgUw833ABOYmWI57AfdlUJgrXEGehANQCY9D449c1Nv2NjI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76184448cdebb4f3-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1e997bec759570aa0db03e31bf013cc2 948fd8263ab0b40f75eaf9495f76a7f39f39d5f9 853f97990fe10ccb34066b1e73e93dac45794f42fb745b266b6a46b9e26d52e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853F97990FE10CCB34066B1E73E93DAC45794F42FB745B266B6A46B9E26D52E9"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4847
Expires: Sat, 29 Oct 2022 03:12:20 GMT
Date: Sat, 29 Oct 2022 01:51:33 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash922281894182eba1fc67c2d8678e3238 e169209341b09bf4f14ebb3fc7c07b03f2121bf1 37516083f7655af68d7e426efca6f9f3709a80318ac7bb8cc492c183916141b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4251
Cache-Control: max-age=118225
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635ba15b-1d7"
Expires: Sun, 30 Oct 2022 10:41:58 GMT
Last-Modified: Fri, 28 Oct 2022 09:31:07 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash922281894182eba1fc67c2d8678e3238 e169209341b09bf4f14ebb3fc7c07b03f2121bf1 37516083f7655af68d7e426efca6f9f3709a80318ac7bb8cc492c183916141b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6070
Cache-Control: max-age=120044
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635ba15b-1d7"
Expires: Sun, 30 Oct 2022 11:12:17 GMT
Last-Modified: Fri, 28 Oct 2022 09:31:07 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash22eebb819dc140cc288474d9891526b4 45c18772664e9e3efb6a44d7da93699c81f71827 ce6a96e470dbfb48ff42fdaf5eaa464a87dc60b495e3e2767086ec0b6564fdd7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE6A96E470DBFB48FF42FDAF5EAA464A87DC60B495E3E2767086EC0B6564FDD7"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7790
Expires: Sat, 29 Oct 2022 04:01:23 GMT
Date: Sat, 29 Oct 2022 01:51:33 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain |  34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BSV7gb3Cy5W216A4KYuwkdWVmVzv7R7H11pS2qQ9uNLvlJeB9ukjp0Iix9I2HLlHiXdgJ+Ubbu8=
x-amz-request-id: A9924EQGC3VNDX5Y
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 29 Oct 2022 01:43:51 GMT
age: 462
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash3c9c09b6fd6ad793655496115e356ca4 31467c2d4da1c7827e3ff396e95d056fa94e15e1 fe8e39c2c94b22112dc003939a92c017a184de5ea6b7d5a953b701f6899b9433
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=125115
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635bcce0-117"
Expires: Sun, 30 Oct 2022 12:36:48 GMT
Last-Modified: Fri, 28 Oct 2022 12:36:48 GMT
Server: nginx
Content-Length: 279
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash6fbd868e5ab6d90ea466a15da176ea04 dbecc491ed93c3950ff99366f95a5d8d0fa92e49 05b9dd0e739dcddf5651a9a1d0f09d00d6d02c4137ecbd64580b08aa1362506c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6506
Cache-Control: max-age=107883
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635b7026-117"
Expires: Sun, 30 Oct 2022 07:49:36 GMT
Last-Modified: Fri, 28 Oct 2022 06:01:10 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
|
|
| followshops.net/images/site/blank.gif | 172.67.177.12 | 200 OK | 43 B |
URL HTTP/2followshops.net/images/site/blank.gif IP172.67.177.12:0
File typeGIF image data, version 89a, 1 x 1\012- data Hash325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/site/blank.gif HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 01 Oct 2015 09:55:22 GMT
etag: "560d030a-2b"
cache-control: public, max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0fyIvDGrE8mWXsl4iaLMHJ9jew9HWS%2Fhy8qnjpQOxOZjismepuCh%2BClQISPzbMU26RI4Y21HSIs4azzfSe%2FTms3P5FgkgwHC7LS7%2Bj1A7k8MVtI5bGN0dcsZgyQ5qgbTY7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7618444c7f220b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/images/logo/followshops.png | 172.67.177.12 | 200 OK | 52 kB |
URL HTTP/2followshops.net/images/logo/followshops.png IP172.67.177.12:0
File typePNG image data, 500 x 106, 8-bit/color RGBA, non-interlaced\012- data Hasheed78319f3cb4e09117f4757f3cfad3a b24f49ee17b1673a5d88202c85b74723cbb63ed7 55acd64c847b3fe9f4dbdb4a65020a6328ebf8bbea73a3d7e69f6589550db1ea
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/logo/followshops.png HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: image/png
content-length: 51655
last-modified: Thu, 01 Oct 2015 09:55:24 GMT
etag: "560d030c-c9c7"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p54COhSpZEDkkFfA18fcvtyJCxu3WJFOtAY0y9CVY6xYNK548GlJfgPTYLX9asiqd0kckuUVt4O2PzcFTKSbq7GLbD4tlcM6SvsXVbMCOEaQSzliyJ%2BrMhNiwUJRVd648dA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7618444c7f1f0b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/images/site/loading.gif | 172.67.177.12 | 200 OK | 1.2 kB |
URL HTTP/2followshops.net/images/site/loading.gif IP172.67.177.12:0
File typeGIF image data, version 89a, 32 x 22\012- data Hash206d3c2a8896cbb199683a9906075f8c ffa26c8e5eee4b4e15acf13d547c3f33a174976e 551e27d05a38b2505f23c14f83b584af3e815f1aca16ad9177f66a92d0b879a4
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /images/site/loading.gif HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: image/gif
content-length: 1188
last-modified: Thu, 01 Oct 2015 09:55:24 GMT
etag: "560d030c-4a4"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TMIcBWewS7UH94DuLqL7NnXY3%2BqHzxw4EE%2FWGKRPWFHnuMhFKVA1m%2BR3Hq%2ByhYAN6SFNoF5VEaxCBciJI%2B%2BXQ8iBs7OIWSZgoxjbsEhv%2BmgjbCrn0CYIS%2FmWFfNXv1Lpq3A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7618444c7f210b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashcbb03a67db0997dd4849e6ffbd91ce60 d1c2fc2392e5fd5615ddb4b838bdd9142ef3c5b1 5090b3f79d5e80cf51ab4143668e339c9a1c1e4a2adfb277e276080df45a45cf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1701
Cache-Control: max-age=151306
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635c2c8a-117"
Expires: Sun, 30 Oct 2022 19:53:19 GMT
Last-Modified: Fri, 28 Oct 2022 19:24:58 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash6fbd868e5ab6d90ea466a15da176ea04 dbecc491ed93c3950ff99366f95a5d8d0fa92e49 05b9dd0e739dcddf5651a9a1d0f09d00d6d02c4137ecbd64580b08aa1362506c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5507
Cache-Control: max-age=106884
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635b7026-117"
Expires: Sun, 30 Oct 2022 07:32:57 GMT
Last-Modified: Fri, 28 Oct 2022 06:01:10 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash6fbd868e5ab6d90ea466a15da176ea04 dbecc491ed93c3950ff99366f95a5d8d0fa92e49 05b9dd0e739dcddf5651a9a1d0f09d00d6d02c4137ecbd64580b08aa1362506c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4385
Cache-Control: max-age=105762
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635b7026-117"
Expires: Sun, 30 Oct 2022 07:14:15 GMT
Last-Modified: Fri, 28 Oct 2022 06:01:10 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash3c9c09b6fd6ad793655496115e356ca4 31467c2d4da1c7827e3ff396e95d056fa94e15e1 fe8e39c2c94b22112dc003939a92c017a184de5ea6b7d5a953b701f6899b9433
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=125115
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Etag: "635bcce0-117"
Expires: Sun, 30 Oct 2022 12:36:48 GMT
Last-Modified: Fri, 28 Oct 2022 12:36:48 GMT
Server: nginx
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js | 104.17.25.14 | 200 OK | 6.7 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.16.0/umd/popper.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (21084) Hash9e85c6f6521bceeccb3d9ba9149fef80 1e18137215b276bb9bda85ac311d9c8cd5b01985 913b850ee0b505bf6b957ecd04dd3aab13543c9047c46532ac27b0be31e206bc
GET /ajax/libs/popper.js/1.16.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 6696
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-5309"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 811488
expires: Thu, 19 Oct 2023 01:51:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tZllDkxHOSTjZ4f0FLecERSHCZjUSPVQ1JEH1ybtjV0Oe0R8MdOM1AfAH6iVKuiQNTPK75%2F6Q%2FLZTuKK1fyFkwVLVprfJC3qsfobYa83AbkwmUNiBfsNP3kdnDAhQ3HuTiGVffB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7618444d08f6b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-migrate-1.2.1.min.js | 69.16.175.10 | 200 OK | 3.1 kB |
URL HTTP/2code.jquery.com/jquery-migrate-1.2.1.min.js IP69.16.175.10:0
File typeASCII text, with very long lines (7085) Hashe1084a25976d8b8999acadc7350ffb48 99b723d38b78d8347e8dfa60193b12864a370227 b98359c65420aa3864d5b86ef94c4c9a5fb8c772a905884a5ba4ce55319a3d13
GET /jquery-migrate-1.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-encoding: gzip
content-length: 3063
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1c1f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1667008293.dop214.sk1.t,1667008293.cds251.sk1.hn,1667008293.cds242.sk1.c
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-1.11.3.min.js | 69.16.175.10 | 200 OK | 33 kB |
URL HTTP/2code.jquery.com/jquery-1.11.3.min.js IP69.16.175.10:0
File typeASCII text, with very long lines (32038) Hash1c8acbf5f411ace3b76578a1fd1a603e b1bbee9db24d885c25afd2e5a7720e4f79b6b991 e37464521b5447580a641b775ddb258a76f3bc7a3ca5a34eb452b12908b350a9
GET /jquery-1.11.3.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-encoding: gzip
content-length: 33261
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-176d5"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1667008293.dop214.sk1.t,1667008293.cds251.sk1.hn,1667008293.cds216.sk1.c
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-selectbox.js | 172.67.177.12 | 200 OK | 5.7 kB |
URL HTTP/2followshops.net/js/site/follow-selectbox.js IP172.67.177.12:0
File typeassembler source, ASCII text Hash609ad51dc25a0745c593ae8c1ec1ea79 563a6707711b319ca927c93522b86821171c81bf 52618e2abbf2e0c1e9ed6a2511a5b4ffb05682a2ea3b4108466847e8077bc8df
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/follow-selectbox.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:08 GMT
vary: Accept-Encoding
etag: W/"55e40118-5eab"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m%2BDaTosI%2BbpYBxnrvaO8VDyFfmkXd4NQzIQ1gj1nLLNlObMHqQsxNIDrUCO2m4cm1G6Avhkt5igXiW3ckcFmj%2B9Wh63xxrK1ufTDD8ReHjuKwfVGN8%2BuHScuOjAyFrWtmbI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c8f290b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/bootstrap3-typeahead.min.js | 172.67.177.12 | 200 OK | 2.6 kB |
URL HTTP/2followshops.net/js/site/bootstrap3-typeahead.min.js IP172.67.177.12:0
File typeASCII text, with very long lines (6877) Hash0aea2acbc7a65a1738a445ba401d94fc fd64d257e03f9befae4e5dc21784b46b17fd17b3 3de1cb320ecf3e8b11cb69d6a1cbca50defeec845766e72af2a72384f61a366c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/bootstrap3-typeahead.min.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 09 Nov 2015 14:54:28 GMT
vary: Accept-Encoding
etag: W/"5640b3a4-1ade"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 253711
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KrZKF88bgl9MvIfKz7ZxrTP9iUK6iwLiXq1fyfxfi77LfaipwDvft9Oa8zXyQ2OeAOY98QeV4WK1UXtLlRisBsH4VTUlB3DMsAX3S1QtLqvrCbLh4TMHO70uHQ0IBi7rTy8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f110b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/SpryTabbedPanels.js | 172.67.177.12 | 200 OK | 3.7 kB |
URL HTTP/2followshops.net/js/site/SpryTabbedPanels.js IP172.67.177.12:0
Hash5a206d365ec5c6e725693fa582a5bfd1 9069e188d5ea231046148e6434c88ba7a55c8110 0c85c8b2201355d4ba8593cf71400c616695ff69481d88f4d2b4dfc30a9ab4b1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/SpryTabbedPanels.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:54 GMT
vary: Accept-Encoding
etag: W/"560d014a-294d"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rjtWywfE8PUQVOSd1f1Nhu2ZZxpBj7Uq%2BXVrZzav9cdzpltOjxu%2BokmKXKJKe%2BCT34piDY2NBQetLn944MRSLnL7EyvNQ5h4jlScuwSsTm1DPxHXHGwqzsHYWWJEyWg3%2Fuo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c8f240b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hasha34a3d6697eb937f0b134e68e9fb2b99 dc432dc7c8692383d17e593a93e60857d9398082 e11fbf49eb07b649e29e7965e888397956e4476873c9e55812ef10f722bbc994
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashfdbbaff62c946475f71f8e99c60e1e9d 90fe5578e35623d48f4385925e81933cabc315c7 0211cb7f23600fb3e659f65c4f2e832ea2fed1daec7d550cdbc2cd8746e73851
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js | 142.250.74.106 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js IP142.250.74.106:0
File typeASCII text, with very long lines (65451) Hash903bc7a7e510f87aa5d0201eb59a0832 ac9aa4dd94cde1bcba9037e94087138b127e41fc 41a7ac8150cc9f38421451d5143c1ffec7a1f1fafbf7a7fc0f51b98ad699cf8f
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31021
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Oct 2022 13:11:20 GMT
expires: Sat, 28 Oct 2023 13:11:20 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Fri, 08 May 2020 07:05:03 GMT
content-type: text/javascript; charset=UTF-8
age: 45614
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js | 142.250.74.106 | 200 OK | 60 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js IP142.250.74.106:0
File typeASCII text, with very long lines (32389) Hash6d50451df0d9f8dcd462a9855265142f 0ffd13d9363a639c097d1a52c4be5432679813e7 fced51326b3edb5ec17118b26daa594999aea1d5430378fd489d70ea823faee2
GET /ajax/libs/jqueryui/1.10.3/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 60529
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Oct 2022 16:11:01 GMT
expires: Sat, 28 Oct 2023 16:11:01 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 34833
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/editor-config.js | 172.67.177.12 | 200 OK | 1.7 kB |
URL HTTP/2followshops.net/js/site/editor-config.js IP172.67.177.12:0
Hash3746293abd388d8a24e6d4ca986eafef 1387172d641644511747fc0b208a2edadb456f8a d871096025a92e8cf79f2c0b7575929e9b5c5778bdd1171af3386555789986a9
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/editor-config.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:54 GMT
vary: Accept-Encoding
etag: W/"560d014a-c89"
cache-control: public, max-age=2592000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VUHbFntVMYbe6CqYTgSJ24mGh5Kcgnx9FEplSuIGBETyTAHjUIStdRNcoeVkSOJhCddTGuIsgCnr%2FTzzIg07lQGp%2Fhnyv0ZGtDv9mwimnyXWS1tsUnYM6QiqJoS8MhNFDng%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f1b0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maps.google.com/maps/api/js?key=AIzaSyBVL5oiAiHqEzFAqjR2U6OX2SWB2K6TlPs&sensor=false&libraries=places | 216.58.211.14 | 200 OK | 56 kB |
URL HTTP/2maps.google.com/maps/api/js?key=AIzaSyBVL5oiAiHqEzFAqjR2U6OX2SWB2K6TlPs&sensor=false&libraries=places IP216.58.211.14:0
File typeASCII text, with very long lines (2390) Hash7f5cfa7b1228ac64ba595d0ecf5190ab 2e1bf2648a4c589e3314b46b9d664b55180bd9d8 b45f1f9020e5342e83e912fe50ad2b339fd5c93656b9b9d4575644fae19f5d35
GET /maps/api/js?key=AIzaSyBVL5oiAiHqEzFAqjR2U6OX2SWB2K6TlPs&sensor=false&libraries=places HTTP/1.1
Host: maps.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Sat, 29 Oct 2022 01:51:34 GMT
expires: Sat, 29 Oct 2022 02:21:34 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 55897
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=23
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashfdbbaff62c946475f71f8e99c60e1e9d 90fe5578e35623d48f4385925e81933cabc315c7 0211cb7f23600fb3e659f65c4f2e832ea2fed1daec7d550cdbc2cd8746e73851
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| followshops.net/js/site/jquery.ui.addresspicker.js | 172.67.177.12 | 200 OK | 72 kB |
URL HTTP/2followshops.net/js/site/jquery.ui.addresspicker.js IP172.67.177.12:0
Hashde62b0f6d885a13b575c28112b008091 07fae779858bfb372ed5b159430ba11904fc6e66 bb6681b9a88a1a9e07aca9d68626e65e16ada9cf95e071c2c6fca544a148d2d1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/jquery.ui.addresspicker.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Sat, 04 Sep 2021 10:14:40 GMT
vary: Accept-Encoding
etag: W/"61334710-286f"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lKEMqbw0kVwdmxSrqlC6LEG3%2BmWIW%2Bp0sr6HCRMMd3bE7%2FlzGMfPFj7fBzCH9vRatg%2Bx5CZqJDeMkbM76Gze8ksg2GVbS5URk533u7CtPFIg2W4gFp%2FcrMsJx%2FkB9s6hwns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f120b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filesjquery.js | 172.67.177.12 | 200 OK | 65 kB |
URL HTTP/2followshops.net/js/site/follow-filesjquery.js IP172.67.177.12:0
File typeASCII text, with very long lines (7199) Hash99732ce7ca3bdb86d2c9364dfb9165d0 ec401af02ab7453e3148b07aa7ff0c214153604d 3a59f56735707e0fff0a5766da8b26f9cb3407a8679b0eee8907770fdcb76690
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/follow-filesjquery.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-1d01"
cache-control: public, max-age=2592000
cf-cache-status: HIT
age: 253711
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OlpaGwwR23o42M%2FmvWdCiDeKKyB4h4cQr0zNtU6IzpsD%2Fe8AUktGY%2B3X5GkcDaveVHQUnvsYxoglywyX86UUF2ut28tqHi6OTkxcF%2FwusPyOYE%2FfLoLPWhHEtMAbyjQxqWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f160b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/thing_page.js | 172.67.177.12 | 200 OK | 9.0 kB |
URL HTTP/2followshops.net/js/site/thing_page.js IP172.67.177.12:0
Hashb755976c16e4d0a14dbbf686f51e8ca5 4ad0855ea5f045542a9b293d04b1e65b5ad6ae88 e45414514e7e24ffc9406eea7365dfee6ceaa516661469b3912004cb8232d79b
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/thing_page.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:54 GMT
vary: Accept-Encoding
etag: W/"560d014a-6a7b"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qOJVuJOeXGv7PJEgBwqDK4%2FVepxdf4F3BdbYlPmePxn7FbS0Nc1O8pVky5T4DpOK02Ub0mmm1pPYCR0MzlXlKJcEses17Ljd7JpwIW%2B9lK7z6bXsAN5C8%2FLNm%2FiwHEDLyAY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c8f2a0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 29 Oct 2022 00:41:09 GMT
expires: Sat, 29 Oct 2022 02:41:09 GMT
cache-control: public, max-age=7200
age: 4225
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true | 142.250.74.10 | 200 OK | 23 B |
URL HTTP/2maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true IP142.250.74.10:0
File typeJSON data\012- , ASCII text Hashe3981ca10169a319d5aa062bf43a5fa1 2c6ed584767b65688ce99b1ebe1a3b7448a67421 8b0b8749aba12de93f3cf5d86f9fac9d6de7cac400a17473718f182a34ebb7e9
GET /maps/api/mapsjs/gen_204?csp_test=true HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://followshops.net
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 29 Oct 2022 01:51:34 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 23
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://followshops.net
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash30c5107c8f49f7471978d43d30847010 9f5c74e117f8cd972c5ca0983bc4023910601113 1c4451ea36f959819a5d50296603c2352c380ff89bf8812db857df6b8ac7bf69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash6b7c0ce49b8ebb90707ec439581bc979 1affe02f362f59f8acaaa2cc16185fc2942a82cf 99057099a66b378f0825443f175ad6f84a9f69c0abb8f8db546eb348de4facb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1153
Cache-Control: max-age=110067
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:34 GMT
Etag: "635b8d98-1d7"
Expires: Sun, 30 Oct 2022 08:26:01 GMT
Last-Modified: Fri, 28 Oct 2022 08:06:48 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash89643d2109e09c2c32f8e67de2d35df0 7d57d55fe52e166f75f93efab1a784e840c25757 672d341ec656ed18d6484ab814ab4f888b37624bfb49e9c2d95860168246b46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| maps.gstatic.com/mapfiles/transparent.png | 142.250.74.163 | 200 OK | 68 B |
URL HTTP/2maps.gstatic.com/mapfiles/transparent.png IP142.250.74.163:0
File typePNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data Hash8327a6037ae00a5be9f75e63ee1b9fbe a812c79b0d125e4946b33446eae0353f518627e2 fe67e12a6497f8518ef1673fd8cf5622871935ff85f204715e78b2009dd48588
GET /mapfiles/transparent.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 68
date: Sat, 29 Oct 2022 01:51:34 GMT
expires: Sat, 29 Oct 2022 01:51:34 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash89643d2109e09c2c32f8e67de2d35df0 7d57d55fe52e166f75f93efab1a784e840c25757 672d341ec656ed18d6484ab814ab4f888b37624bfb49e9c2d95860168246b46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 29 Oct 2022 01:51:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| maps.gstatic.com/mapfiles/undo_poly.png | 142.250.74.163 | 200 OK | 1.8 kB |
URL HTTP/2maps.gstatic.com/mapfiles/undo_poly.png IP142.250.74.163:0
File typePNG image data, 90 x 27, 8-bit/color RGBA, non-interlaced\012- data Hash2bb1383e2a9ee6528ddb13196809fb3f ea89cd4bd22c7210609dd81ab7b950c54e610b4f c2891e07d682011e6916fb39490661579278993d30a0c0a4bf41b08627fafb88
GET /mapfiles/undo_poly.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 1804
date: Sat, 29 Oct 2022 01:51:34 GMT
expires: Sat, 29 Oct 2022 01:51:34 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 44.242.3.166 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP44.242.3.166:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BMN9vjynwtpPOR4ZBHqzGA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: yzcI1xtao+Q9HbbdgHdLijO1kos=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd74fd61a9f3caa5eada0b6b9f7154475 eb94382c5deaf0de61635a7d4ecc89928ef84e65 b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12240
Expires: Sat, 29 Oct 2022 05:15:35 GMT
Date: Sat, 29 Oct 2022 01:51:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd74fd61a9f3caa5eada0b6b9f7154475 eb94382c5deaf0de61635a7d4ecc89928ef84e65 b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12240
Expires: Sat, 29 Oct 2022 05:15:35 GMT
Date: Sat, 29 Oct 2022 01:51:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd74fd61a9f3caa5eada0b6b9f7154475 eb94382c5deaf0de61635a7d4ecc89928ef84e65 b8fe819d80e3dbca42f89e4654dfb96aa886892d265b475c7e23c780120aa5cd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B8FE819D80E3DBCA42F89E4654DFB96AA886892D265B475C7E23C780120AA5CD"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12240
Expires: Sat, 29 Oct 2022 05:15:35 GMT
Date: Sat, 29 Oct 2022 01:51:35 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97b6c4b-9ae3-43f9-a0be-52e33d2041b0.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97b6c4b-9ae3-43f9-a0be-52e33d2041b0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1ab38f9f7924c7ee9271368faf55a2ee 2508c0e5c7471244baa94fbc97769e5a19641a34 c314c69fc7e82538b2694da79c93a909620a1820e9ef8a25c3d8b675118e3e79
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97b6c4b-9ae3-43f9-a0be-52e33d2041b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: 2426674e-b28d-47c2-a32c-7275864a418c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apxNRF57IAMFtAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635a2f21-3a8349e635018e2d6400a13b;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 07:11:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZGZUUir8a2FA7VzAmP1cc6SJr8-nXbb8rjIEaYBWZWaSgITHWY2cig==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 07:18:19 GMT
age: 66796
etag: "2508c0e5c7471244baa94fbc97769e5a19641a34"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdb0edd4c-e6e8-4c25-ac9a-e3701004e856.jpeg | 34.120.237.76 | 200 OK | 7.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdb0edd4c-e6e8-4c25-ac9a-e3701004e856.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha11bf07ea9377fadcb6cd7b343e56d4b 4f2f2d1fc8b0fc43c469672e884d57ae9e974368 a6804985570e25c066108b1fb8555ab6d67c533b370ff66fec7736f7fb52b9c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdb0edd4c-e6e8-4c25-ac9a-e3701004e856.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7098
x-amzn-requestid: 175c4749-cc9f-40b8-af93-cd69f62d06a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: avCGnE-NoAMFwWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635c4a2a-64c4923c2850cc467b738450;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 21:31:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZcPPBppGPiPvF-2m_kkPWS4xxJcSMEzA9JXQ-hOtgbHnYLfIiVLidQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 21:50:01 GMT
age: 14494
etag: "4f2f2d1fc8b0fc43c469672e884d57ae9e974368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ed0e856-e7a8-4b66-8b47-6376c7ef215f.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ed0e856-e7a8-4b66-8b47-6376c7ef215f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash29f8a8bdab8c8b28242ea7227be2d471 aa097b7f69b5369277d405238bbbb19081c3c3da ec9a37f12ce0fb63e907ac3e5cbba04f392dfe44432422a839fc9c6ea66ec176
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ed0e856-e7a8-4b66-8b47-6376c7ef215f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8239
x-amzn-requestid: 7dd9eebd-2c20-4e7c-ba5d-349dc15abe61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: avCGmH3eIAMFhcA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635c4a2a-3dfa40935763bd2641e7e53a;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 21:31:22 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ezz-JH5UmLsrfICqqGDnf9Bd48WgoGT_4q8jS1fji5OkPs2CJYuHfg==
via: 1.1 fec77e486350d1bd33f526a760d8b5a4.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 21:50:03 GMT
age: 14492
etag: "aa097b7f69b5369277d405238bbbb19081c3c3da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F493e6c0e-987f-4e8a-b2a1-5fe4f452da17.jpeg | 34.120.237.76 | 200 OK | 6.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F493e6c0e-987f-4e8a-b2a1-5fe4f452da17.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3044824aa388754b4834dc79496d135b ee65caaa8a746599f6c29d74900472a98c121499 1e7f15e9d74e3559bbe51f66a861045d02a1cb227c978ba09c47e52972095930
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F493e6c0e-987f-4e8a-b2a1-5fe4f452da17.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6036
x-amzn-requestid: 3614efdd-d9db-4461-a335-30cfc17cf8b5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: avCGmEyVoAMFnPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635c4a2a-5f619a592c75e97c3dc2689a;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 21:31:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Q4BKx39YfIUToWYusxR0A0ndnPGlNBDgQrP6ZlO8f5_D7xzdgelZ2A==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 21:51:16 GMT
age: 14419
etag: "ee65caaa8a746599f6c29d74900472a98c121499"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47e250ef-f696-4eff-9f92-684d03f537d1.jpeg | 34.120.237.76 | 200 OK | 5.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47e250ef-f696-4eff-9f92-684d03f537d1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7d063976205ab89fde8d7e8ca09ea2c3 fed062bcd6f96e0b1dfb3ff960e1d3577cc92d6a be33e72b3dba7a9520c7ed87270118a106be9ffe8e020fa8aea5b63f11cbb834
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47e250ef-f696-4eff-9f92-684d03f537d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5887
x-amzn-requestid: 6886efc9-4517-4848-9625-599d60702d83
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: avCIIEUxIAMFa1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635c4a33-2d97e3d30b60ae1938e5f711;Sampled=0
x-amzn-remapped-date: Fri, 28 Oct 2022 21:31:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: y1lPMltaUmsnBKG9UYlZxw-zJyTjYq9gGPgCoOTptjADZdfzW_wngA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 21:45:02 GMT
age: 14793
etag: "fed062bcd6f96e0b1dfb3ff960e1d3577cc92d6a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd830c901-a7fd-448a-9a5c-b65235a10127.jpeg | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd830c901-a7fd-448a-9a5c-b65235a10127.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8ccb6be5f8a61354dfff4fa9d48852fe 33b4a66a9693ca4c327c13303cb4f1aa4354b261 aa48f106bdfd580cea5f691ddf2c7e0445a30d89526355953ae9d87881ad6495
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd830c901-a7fd-448a-9a5c-b65235a10127.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15494
x-amzn-requestid: 5c6a874b-b97e-44ba-93e2-ebc4517220d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: apSLZGNGoAMFrgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359fd7b-0a756fdd554b64381bf74525;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 03:39:39 GMT
x-amz-cf-pop: YVR50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: IZrTbVtjoc8LALwjuxZKdHwsRJ6EOAPwdJgdAFxYcNKdIVtVV7mSsQ==
via: 1.1 c4e77f714a7aade06aaed8bdc8b66fca.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 21:51:41 GMT
age: 14394
etag: "33b4a66a9693ca4c327c13303cb4f1aa4354b261"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/main4.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/main4.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/main4.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Sat, 26 Jun 2021 07:58:22 GMT
vary: Accept-Encoding
etag: W/"60d6de1e-1f848"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ifXkLrnlMPXXbXz2byuP0cz04zYfJfX6Iol%2BsLzffiiSB10CxhbSXeGTiWY6uMLa2%2FSARdUKwH2543OUjaETxIVedwBzp2Reu%2Fc48XvFECRCCWb0zdPEBmqJOblGDv0kf6A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f170b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/tinymce/jscripts/tiny_mce/tiny_mce.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/tinymce/jscripts/tiny_mce/tiny_mce.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/tinymce/jscripts/tiny_mce/tiny_mce.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:54 GMT
vary: Accept-Encoding
etag: W/"560d014a-28fe4"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KqGi%2FFE%2B4slC83jW5SQfsEIS8EbAZJP3YOWNO6BLTa8GcEXmO7pvNzibbHpRw9NofOR9s%2BYi9RUlXNEHkiBZLSPuz66Nw3W216bp5VD6NMaGDBLRiw5%2BEsPRPz2EFiwveVk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f190b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-main.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-main.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-main.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 06:05:38 GMT
vary: Accept-Encoding
etag: W/"61024532-6d08f"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FtE6U9UtgttbmSMkDHhcIFxlHNDdgt6g%2Fu5LVY%2BQ2GBn0fdU6oLUqYohQPe1HcWvwvnfTEO1%2BkQBNDzrEbuOycNvjzA3rYVpCletop61D4laOUnxBPj0A6ycNq0%2BGihzPWg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c5efd0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filestimeline-slideshow.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filestimeline-slideshow.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-filestimeline-slideshow.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Sat, 17 Aug 2013 10:10:34 GMT
vary: Accept-Encoding
etag: W/"520f4c1a-27ee"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dSSogyetGLSjbD33crgrz1ZIgr4DgcC0SYswKuJ7g0Zd1APhun3Sqw94YCRmNxmKnWCMMHgYQHmriwj90iJZuv8fSjnrs5xl7d8hxGgx5TE1t0gCvlPq8WVGPde%2FVeYAxzo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c6f010b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css | 104.18.11.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css IP104.18.11.207:0
GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 08/03/2021 15:44:07
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: 0c835de6853c3382b93a518481c93460
cdn-cache: HIT
cf-cache-status: HIT
age: 172550
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7618444cfec10b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filescatalog.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/follow-filescatalog.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/follow-filescatalog.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-b21"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vIGAS9l60d0iJTlFyB60ATuqeaXH1P%2B0K%2Br7qr9L29J8sGVUm9dwyifBqx9Vu%2BaXAJVMsCsTEl6b%2FW%2BCSmR0CaWNolOjG55wKbGDjVWO1MM%2FqQ43idWTDV%2BoRcmw6z7T7Oo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c6f070b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filestimeline_slideshow.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/follow-filestimeline_slideshow.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/follow-filestimeline_slideshow.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:08 GMT
vary: Accept-Encoding
etag: W/"55e40118-5bbb"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FSpDMSsqWmc8hXkzPjiBNNZm%2BD5FevOaHTwQaDUMdZPpg69nKsqvcmtNmhjliwLX8WXBd2y79wkiPesIsdaGAg8QefBG3EWjGmCS10rusecITQL3sjXIbeNFakpsgy1qsX0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f180b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filesjquery_zoomer.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/follow-filesjquery_zoomer.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/follow-filesjquery_zoomer.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-5bd"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rcUARrvZv78ZdFoX4YXAE4SAVJGG6r2WJuZ4X2b7NT%2FrtwDLw2Cs5i2rUeoQqwgKeuOMkxOcntnED93OAKwfgxdGL3KcCcFIa1HnE72b%2BtFojCZCNyyvqAvWb%2FBlaVsguUc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c8f270b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/locationpicker.jquery.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/locationpicker.jquery.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/locationpicker.jquery.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 06 Sep 2021 10:20:01 GMT
vary: Accept-Encoding
etag: W/"6135eb51-2ce9"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=duLKwXH3Y%2FImlZCmgKVGI3CUWo9EFtrsOb%2FDJYvMZ9kcJW0FmD7DrwVTbHSQVD7fNFJrqdJPm2clBWdfDU0FGv9OabltpLHkOA4nCdm09Z2p9vwyDHk1NEGSqm3%2FbkhB%2BPs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f0f0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-selectbox.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-selectbox.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-selectbox.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Sat, 17 Aug 2013 10:11:42 GMT
vary: Accept-Encoding
etag: W/"520f4c5e-bb6"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwdhjmZphai9Qk2jRpqnzjShVMTVhnBrkUq4280jnOTNLm3JuDcg75lrtJ36P475btqg5LbVSQw7nOBfAjQLybJIdmEnMTOj6KbI8NBWpV6rEHfEftSHyTHwSB3TGDTkGnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c6f040b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/validation.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/validation.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/validation.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Thu, 01 Oct 2015 09:47:56 GMT
vary: Accept-Encoding
etag: W/"560d014c-bacd"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lxPaEB53%2BJlRudu6SvfMAOOJiLTTK1oKLle1lgxEC52AH2dnAJkGCC43msdtOBQWAiM6sOL1R1%2Fu2kC8vqWdemipy5ibAsq2RLBNExxQ4TKMHzOVtsV1%2F%2Fs2oyXAP79HnVo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f1c0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filespopup.css?v=1234567 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filespopup.css?v=1234567 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-filespopup.css?v=1234567 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 09:33:28 GMT
vary: Accept-Encoding
etag: W/"610275e8-25b41"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WfnAgUm1cKXzVnTEQUKXRkakBOiQZ%2FH1Na790rRHjMvbt7G6iQHY7wwLtGfMhTMjk5UEki3AsfDrQVymNrffjjz3YTTdCTw1bbRbmGjBsl5gjJZesM%2FXbPYD4x1XC7GkGyU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c5eff0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filessign.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filessign.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-filessign.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Mon, 24 May 2021 08:06:23 GMT
vary: Accept-Encoding
etag: W/"60ab5e7f-6bee"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1QhPuLOt2JUn%2BgjIcwZCcRDHU0LjFg8MH61gD4H9YI7QYvkQ6sgbD5tePjUjOKjaWm7RtSU%2FMcWEmo5YCejHWzYf49QUjHogYx%2FUcAXrbM5os93bLTaiUcCBuPoNTO3nniU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c5efe0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/js/site/follow-filesjquery_002.js | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/js/site/follow-filesjquery_002.js IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /js/site/follow-filesjquery_002.js HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript
last-modified: Mon, 31 Aug 2015 07:24:06 GMT
vary: Accept-Encoding
etag: W/"55e40116-5eaa"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ofx1B6FbT5ke2s3RdGap2M67npyuUiSomKj75ZQ4IofXLLMel5MgL7Iyf%2BYxBT4Ih5bCJ4HeKw%2FwyzvA8F0YTUsviTmyGGdaKK0nvocBphMRQSMD4NN5IKnpZLtratnsPrE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c7f140b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/my-account.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/my-account.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/my-account.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Sat, 17 Jul 2021 14:48:50 GMT
vary: Accept-Encoding
etag: W/"60f2edd2-2e07"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SxtOKA4FMtaojrCNgvHJ%2FI2cLxwD%2Fl%2BDjLG6BJx%2FAhimXi%2BveztUFsQETbg4VBZqFzbqrs4NgKSBlKwzCVJwpds%2F53JFX%2B%2FyZonSm2M6nbrbpDIvF6tK%2FOt699L59nRDn%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c8f230b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js IP104.18.11.207:0
GET /bootstrap/3.3.5/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://followshops.net
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4becdc9104623e891fbb9d38bba01be4"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 08/20/2022 02:32:00
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: ec23044c9bcf02b581a1aa48165143e4
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7618444d1bebfac4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-filesphoto.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-filesphoto.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-filesphoto.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Mon, 31 Aug 2015 07:21:32 GMT
vary: Accept-Encoding
etag: W/"55e4007c-8a5"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WymiglYOxU%2FJszFM1gNcflWMO65W2HooIeSFf5Fb0vog0V5bKEGzRD0M8wjoz%2BPC0JwraI1czGmT3etO23ZSqImOrlAYx4AmhMQdn0ucYnousnyx9Ndc7pfYpb536mOpCmM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c6f020b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-clone-style.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-clone-style.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-clone-style.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Thu, 29 Jul 2021 06:25:50 GMT
vary: Accept-Encoding
etag: W/"610249ee-28684"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2F0ZW1ezPdX8diAcM0OjuyuTjZ6zAnZ5%2BtD4dM%2FMBcEPpuSLVmpUDssd7wlEltKUYe2Rm2orV7WhKGHriu5Lirdhx18BrTUdi2223QzuhWgTkSms4snMKG68cgF1%2FNJnBbM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c5efb0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/user/followshops/things/1451903136 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/user/followshops/things/1451903136 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /user/followshops/things/1451903136 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: DYNAMIC
set-cookie: ci_session=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Da706cb0ca557e8ebf41da866d84bc1e4978d29b3; path=/
ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; path=/
PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kPKhlk%2FuP9NcSCzkXqmM9x%2BTh7jOSNKrPCzhL3BkwivSLgf%2B%2BxZ6n0tHipw9irpG13e8x0MqrLzxcsLNyThahoVPQIrKH%2BtyolPJXXst648l5xESRMb1mB2TpT8WNBFVHoM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444b2ea10b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/site/follow-timeline.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/site/follow-timeline.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/site/follow-timeline.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Tue, 27 Jul 2021 11:07:55 GMT
vary: Accept-Encoding
etag: W/"60ffe90b-c05d"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MxLuqyHwfQgrjMl%2BLm9wLILuSaRAtOrX%2BCb9NmhPupSWvyvXgYKB8PV6HU%2Fqyz9PSY8SjQp1VVyFJli1%2BaJUXr0CZS4VxRrsrJz9B05B5z6j%2Fd5ZZqPfS%2FYER904Bx%2F8354%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c6f060b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 0 B |
URL HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js IP104.18.11.207:0
GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 601, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 2021-04-23 06:18:12
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 635a5ba5b16f6b5cab614d07cc78dc4b
cdn-cache: HIT
cf-cache-status: HIT
age: 15118591
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7618444d2ed10b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| followshops.net/css/developer.css?v=123456 | 172.67.177.12 | 200 OK | 0 B |
URL HTTP/2followshops.net/css/developer.css?v=123456 IP172.67.177.12:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /css/developer.css?v=123456 HTTP/1.1
Host: followshops.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://followshops.net/user/followshops/things/1451903136
Cookie: ci_session=a%3A6%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22e29a76b0ad034d8d396a1add3be44fea%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A12%3A%2291.90.42.154%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A80%3A%22Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1667008293%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3Bs%3A18%3A%22fc_session_temp_id%22%3Bs%3A6%3A%22112883%22%3B%7De3446b06a341187b1cd4d0bfa82093935a581e1e; PHPSESSID=q6ratcgfmgotrqj5h4dghj5h87
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 29 Oct 2022 01:51:33 GMT
content-type: text/css
last-modified: Tue, 27 Apr 2021 08:49:57 GMT
vary: Accept-Encoding
etag: W/"6087d035-2a57"
cache-control: public, max-age=2592000
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xLOrwob2faJQc%2FTynFUY7rgGTbvxZolqDy03%2FCKFgl%2FPWntTKmCLL4oN4JshJmwMJLYb%2F6p7yU%2BmJwN2cNQ5%2F9k%2Fhk0jVr0aqBL%2FAycNZ41upL%2FF%2B2bJRRyJbuYIAtOioJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7618444c6f050b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
104.21.17.152