| giftquickfix.com/lp/img/logo/hw.avif | 104.21.48.56 | 200 OK | 26 kB |
URL GET giftquickfix.com/lp/img/logo/hw.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash421ea8f78a683f7735b1a9a4cc3aab10 39cc6a661a7aca9e3b991741cc36a28eac59c39a 51f1d6ce167c42aecaf5d729eae09ed967800d05fe5c26fea08b46cd7751eee2
GET /lp/img/logo/hw.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: image/avif
content-length: 26544
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JwmvishNk8wnZjw2L9hGe5AyAiyHMmuNjeCD6d6wYqhMqA6bOUo7L8ICWktev47XdTGA4UVVfIedOiB7z3TchdpNC6yKh%2FNJibMWCm2f4kpabnLLHpxbe98V5feeFSIOAyHh"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d045b0"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3138
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff53819a530b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4725&min_rtt=592&rtt_var=4613&sent=359&recv=133&lost=0&retrans=0&sent_bytes=292958&recv_bytes=9747&delivery_rate=21407881&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=126600&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11106&inflight_dur=115&x=80"
|
|
| giftquickfix.com/lp/code/jquery-2.1.4.min.js | 104.21.48.56 | 200 OK | 84 kB |
URL GET giftquickfix.com/lp/code/jquery-2.1.4.min.js IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
File typeJavaScript source, ASCII text, with very long lines (32025) Hashf9c7afd05729f10f55b689f36bb20172 43dc554608df885a59ddeece1598c6ace434d747 f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c
GET /lp/code/jquery-2.1.4.min.js HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: text/javascript
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UoyQ7%2BsGkMBP%2Fu9EfYiNNV3oIJujTqMgrlbq1mpOvADd3BwlJ2tj4Z4ert57Tk%2BTox3GtkNvz8tfb%2B%2BTiu80Jot3xx43X4Ih0BKzfYjM"}]}
vary: accept-encoding
last-modified: Mon, 26 May 2025 11:39:00 GMT
server: cloudflare
age: 529
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"1dbce32c5d16b79"
content-encoding: br
cf-ray: 94ff533d79577128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans:700&subset=cyrillic | 142.250.74.10 | 200 OK | 6.0 kB |
URL GET fonts.googleapis.com/css?family=Open+Sans:700&subset=cyrillic IP 142.250.74.10:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File typeASCII text, with very long lines (1572) Hashd0b4afce1aa8ad95468f2d4175aa436a 97b9e9d5ccc34afdeca67b1598c7e3ece5728143 13b9764e9169fc012ea54caf401c5898ba873654d72109662a4c7d67cc41066b
GET /css?family=Open+Sans:700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jun 2025 04:29:13 GMT
date: Sun, 15 Jun 2025 04:29:13 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/favicon.ico | 104.21.48.56 | 200 OK | 198 B |
URL GET giftquickfix.com/favicon.ico IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 2 colors Hashc6acedaff906029fc5455d9ec52c7f42 92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81 9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b
GET /favicon.ico HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijmUj81i2PeuM5twYtCRTwnBYZrbD%2Bhzl%2FxlyHmpjdFqsdhIfDdRFPZITD2HGTEG231382%2FomVjy08qRKwWj5Spb2cb6IrSrk6rtnd9gyznHHkeyZB1F9CHN9vpIZC%2Bd%2BQWX"}],"group":"cf-nel","max_age":604800}
etag: W/"1dbce32c5d022c6"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 6237
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ff533f69cf0b61-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9236&min_rtt=592&rtt_var=5491&sent=215&recv=119&lost=0&retrans=0&sent_bytes=137715&recv_bytes=7564&delivery_rate=8205378&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=63000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=519&inflight_dur=100&x=80"
|
|
| giftquickfix.com/lp/img/btn/red.avif | 104.21.48.56 | 200 OK | 2.2 kB |
URL GET giftquickfix.com/lp/img/btn/red.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash0d813385e260b54f1fd50d4d1bc05671 4c0dfbccae85f19ca420ecb1374f312acaa8558d 545330685e052fa9fca48a87af1d62bbf5426247f568f996e1fdf49dc81f8436
GET /lp/img/btn/red.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: image/avif
content-length: 2199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPRfSoBMpBU0jXhV9LW%2FoiofShj29YyT%2B4Puc9U3sSdbDo4HViM0Eoyf%2FIJaa%2BoETmFqdgIl3eHku7McjDxf4sq7j%2FiJXi1vCtmZCtAMeR9zcabbjc8AK3ESV4OEbIIuJyFe"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d02a97"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3138
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff5381aa550b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3941&min_rtt=592&rtt_var=3941&sent=466&recv=136&lost=0&retrans=0&sent_bytes=419012&recv_bytes=10105&delivery_rate=21407881&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=126600&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11118&inflight_dur=123&x=80"
|
|
| giftquickfix.com/lp/code/style.css | 104.21.48.56 | 200 OK | 3.4 kB |
URL GET giftquickfix.com/lp/code/style.css IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash6f43711a1d2da638538ba84ca57ef865 bd5983744559696b00925480f07b73d8034124f4 adf36a8e932fcbaf7092c7dcaa019c19f466b94bcaaf48ad27ed45b17b6bfe46
GET /lp/code/style.css HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: text/css
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=P%2BuKZYeVzKapUuUlDDjZkWIxAiJxhy0xM4DwZbc6wqJPg%2BZDk6kMtIjq7cTPQWePZLKwt%2FSBRz4gys1bWO%2BJwqdm8j%2FxIxkVBuRuH3rQ"}]}
vary: accept-encoding
last-modified: Mon, 26 May 2025 11:39:00 GMT
server: cloudflare
age: 529
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"1dbce32c5d02f68"
content-encoding: br
cf-ray: 94ff533d79557128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/img/bg/hw.avif | 104.21.48.56 | 200 OK | 113 kB |
URL GET giftquickfix.com/lp/img/bg/hw.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Size113 kB (112750 bytes) Hashbe070f25f1b3610cffd4ba07e7e050ec 7b5cd7a78f8cfe92680c3e6e6eb1ba2938462894 e8f791c491cd4b2be22e7448a50f9f6edb6d28ea9564c14754ed649ca37e4bab
GET /lp/img/bg/hw.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: image/avif
content-length: 112750
accept-ranges: bytes
etag: "1dbce32c5d19a6e"
last-modified: Mon, 26 May 2025 11:39:00 GMT
server: cloudflare
age: 3127
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qhTzMi02sjK0vFCUtPeJ7k3zTpEbD9NklCUYiWdSsjadjgj4rBAS7%2FBUe6ZXor3SQzLmuFtJSIHNsThsNNakJb8j%2BVLk4rh3ztP0%2BliU"}]}
cf-ray: 94ff533e29a57128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/text/text.min.js | 104.21.48.56 | 200 OK | 1.0 kB |
URL GET giftquickfix.com/lp/text/text.min.js IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash05f895e2f3dd9287f39ad89ff5def04e 0b8988d08d788cc4b587bc57646069b059682135 6dad8cb15ab25a338b8cf94c31934fbc2f01aa993eb30f1aeb44510f7ab1c0a4
GET /lp/text/text.min.js HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XzJtuafWigif79JzZ9I101OV1%2Bh6GCwBSYkfqjeAn%2FO0yD%2BpzYPJnd7AfBK%2Frl66UzEf9Gs0OrY33mACzXfIYF93RB6DEnNYDZGGkTvuJqft9iiqUF55pzudTpVz7Z0JGpc4"}],"group":"cf-nel","max_age":604800}
etag: W/"1dbce32c5d02610"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 540
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ff53811a500b61-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5601&min_rtt=592&rtt_var=5604&sent=256&recv=128&lost=0&retrans=0&sent_bytes=175267&recv_bytes=8856&delivery_rate=21407881&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=63000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11030&inflight_dur=110&x=80"
|
|
| fonts.googleapis.com/css?family=Open+Sans:700&subset=cyrillic | 142.250.74.10 | 200 OK | 6.0 kB |
URL GET fonts.googleapis.com/css?family=Open+Sans:700&subset=cyrillic IP 142.250.74.10:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File typeASCII text, with very long lines (1572) Hashd0b4afce1aa8ad95468f2d4175aa436a 97b9e9d5ccc34afdeca67b1598c7e3ece5728143 13b9764e9169fc012ea54caf401c5898ba873654d72109662a4c7d67cc41066b
GET /css?family=Open+Sans:700&subset=cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jun 2025 04:29:24 GMT
date: Sun, 15 Jun 2025 04:29:24 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| giftquickfix.com/lp/img/fg/hw.avif | 104.21.48.56 | 200 OK | 95 kB |
URL GET giftquickfix.com/lp/img/fg/hw.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash1c0b0d07a68b053fb47322523004f398 1a3da099f0f9bec15a290d0ebb54b072dc4146a5 a796f903d8eaa149ef204cb4cc69ab3f457041b2099a8b9b30751c547d7d0672
GET /lp/img/fg/hw.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: image/avif
content-length: 95118
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f5MRk7GlFhu0yXd88KYBbO6GYtuhsQnATY9XaRo6dMjzRl2JAf1wnB7hzZSqR4ZV087RKzRZdRCpv1EWlnZaytxDAbPkpoXsCEL7zN%2B52GICgmgqxfKf99vOC45Ki7Fjuf%2BI"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d1518e"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3138
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff53819a540b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3941&min_rtt=592&rtt_var=3941&sent=384&recv=136&lost=0&retrans=0&sent_bytes=320865&recv_bytes=10105&delivery_rate=21407881&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=126600&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11112&inflight_dur=123&x=80"
|
|
| rtbbhub.com/favicon.ico | 104.21.63.172 | 200 OK | 0 B |
IP 104.21.63.172:80
Requested byhttp://rtbbhub.com/script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: rtbbhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Jun 2025 04:29:12 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Thu, 10 Dec 2020 09:27:58 GMT
etag: "5fd1ea1e-0"
accept-ranges: bytes
via: 1.1 google
Age: 5459
Cache-Control: max-age=14400
cf-cache-status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJct8Ot%2BQ5hOOeZe8zKHScdN9mbM9ADOHLy3IbzC4m9WiQqfLPRmP7wvLn94fJyZFCO%2BuhE52IRc9z1Zn3SHZ9ClWYm700g2D2KrI9OGx4zF6MpOgsIyfq4ZPOpfjg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 94ff533a2b0656aa-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=494&min_rtt=453&rtt_var=123&sent=6&recv=8&lost=0&retrans=0&sent_bytes=3694&recv_bytes=1606&delivery_rate=9833616&cwnd=253&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| giftquickfix.com/favicon.ico | 104.21.48.56 | 200 OK | 198 B |
URL GET giftquickfix.com/favicon.ico IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 2 colors Hashc6acedaff906029fc5455d9ec52c7f42 92cbd806ca421aa2c9ff5e1ff76bbc20913a2f81 9deb629637088856fe61dc868bf40a7d21ed942e4117659f3d6c3408f59b906b
GET /favicon.ico HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: image/x-icon
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2F8gq3SstZkwEN%2BN0Zz5qMyU1o3e11U%2Fze%2FkladjeAb3PWSQ4Ig7Fy%2F2h4pV%2FBH2IuAYHLUCfciOMsgFQu9J8DqgL4NJM8N61isvud%2BkgwasIAqrXpIgFUcUkvKjIcz739kb"}],"group":"cf-nel","max_age":604800}
etag: W/"1dbce32c5d022c6"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 6248
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ff53825a560b61-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3421&min_rtt=592&rtt_var=3174&sent=470&recv=139&lost=0&retrans=0&sent_bytes=421983&recv_bytes=10458&delivery_rate=21407881&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=126600&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11232&inflight_dur=131&x=80"
|
|
| giftquickfix.com/lp/img/fg/hw.avif | 104.21.48.56 | 200 OK | 95 kB |
URL GET giftquickfix.com/lp/img/fg/hw.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash1c0b0d07a68b053fb47322523004f398 1a3da099f0f9bec15a290d0ebb54b072dc4146a5 a796f903d8eaa149ef204cb4cc69ab3f457041b2099a8b9b30751c547d7d0672
GET /lp/img/fg/hw.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: image/avif
content-length: 95118
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAI0m2y6TaYM4OCGuJYx%2FoKm0oK0RXI737VX%2FqMjtHvq4j%2F9jFCvxrxOmZw2bCmaltybWvIdgbmwZLyRmmTpGKlNX7gjbyXCV0Tpq6SfSNVgtzA3apz1VFDnTSOcxEFlq5CG"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d1518e"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3127
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff533e59cb0b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9453&min_rtt=592&rtt_var=5845&sent=112&recv=113&lost=0&retrans=0&sent_bytes=20600&recv_bytes=7069&delivery_rate=222892&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=361&inflight_dur=51&x=80"
|
|
| rtbbhub.com/script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0 | 104.21.63.172 | 200 OK | 7.1 kB |
URL User Request GET rtbbhub.com/script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0 IP 104.21.63.172:80
File typeHTML document, ASCII text, with very long lines (4576) Hash14711b0614a98217bceace92697ca089 c0d8db9d673efc9e9ad86d3edf1d3e7cef4f8668 765c24781a3665634c0c117abda44d2f127e02bf529d33dfd607b71d7850573f
NIDS | Severity | Alert | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2 | suricata | low | ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M3 |
GET /script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0 HTTP/1.1
Host: rtbbhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Jun 2025 04:29:12 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uaa%2FDZq6tfFGKf3eE1T9pjEBtfiwr%2BdH7BSQJzXlugzqb%2BlNQRdMI%2B78Dy0rgwOLMyA0PRkZrj9FG0nRBRFqpNkW8y2JtbOy2xGHEq%2F94p4a7iCJ0t%2B9Q810VT3ClA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 94ff5336799f56aa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=453&min_rtt=453&rtt_var=226&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=1289&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| giftquickfix.com/lp/img/bg/hw.avif | 104.21.48.56 | 200 OK | 113 kB |
URL GET giftquickfix.com/lp/img/bg/hw.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Size113 kB (112750 bytes) Hashbe070f25f1b3610cffd4ba07e7e050ec 7b5cd7a78f8cfe92680c3e6e6eb1ba2938462894 e8f791c491cd4b2be22e7448a50f9f6edb6d28ea9564c14754ed649ca37e4bab
GET /lp/img/bg/hw.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: image/avif
content-length: 112750
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fd%2F6ISM66NVq6mmxuBLtoh2HDkMdUJCRD8csoFAV7ndRmcVspJvpua3ev8KMTU%2Buw6SjQppML6OY6mdnrWogjLRK2QMbhA1e57rOl0i%2FetDXnav4rZcN89oDNtOlDiEmqrw0"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d19a6e"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3138
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff53818a520b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5016&min_rtt=592&rtt_var=5374&sent=260&recv=130&lost=0&retrans=0&sent_bytes=176682&recv_bytes=9166&delivery_rate=21407881&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=63000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11097&inflight_dur=111&x=80"
|
|
| fonts.gstatic.com/s/opensans/v43/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 | 142.250.74.35 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/opensans/v43/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 IP 142.250.74.35:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18244, version 1.0 Hash60910f83d690eecf6b7895f6c42f8666 b69baed7ac92de0d5ea4960eeccb35ab149dd117 d9aa9ce25c714499092dbbd5a6bbb5f41606c634e15e548d98a047adba331000
GET /s/opensans/v43/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://giftquickfix.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Jun 2025 02:54:22 GMT
expires: Wed, 10 Jun 2026 02:54:22 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 May 2025 17:51:55 GMT
content-type: font/woff2
age: 437702
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| pectationselea.info/redirect?tid=1062468 | 108.157.229.22 | 302 Found | 7.1 kB |
URL User Request GET pectationselea.info/redirect?tid=1062468 IP 108.157.229.22:443
CertificateIssuerAmazon Subjectpectationselea.info Fingerprint3D:A6:65:CC:FE:4D:09:E6:2D:D8:CB:AE:0E:12:9F:43:0A:17:B2:B3 ValidityWed, 14 May 2025 00:00:00 GMT - Fri, 12 Jun 2026 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /redirect?tid=1062468 HTTP/1.1
Host: pectationselea.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/plain
content-length: 0
location: http://rtbbhub.com/script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0
date: Sun, 15 Jun 2025 04:29:11 GMT
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
set-cookie: AWSALB=ScfmUNfrGH7osNtmd4M7rup1f7GaCcVqzJGWGWSsF6JCnKTO+WMgxQfUty7h7pqXnFHziFag3p0vwBaWCthH7fRzatln0cFdjsSf6lMO1Lm7W/QiiERUTMobxEeP; Expires=Sun, 22 Jun 2025 04:29:11 GMT; Path=/
AWSALBCORS=ScfmUNfrGH7osNtmd4M7rup1f7GaCcVqzJGWGWSsF6JCnKTO+WMgxQfUty7h7pqXnFHziFag3p0vwBaWCthH7fRzatln0cFdjsSf6lMO1Lm7W/QiiERUTMobxEeP; Expires=Sun, 22 Jun 2025 04:29:11 GMT; Path=/; SameSite=None
csu=70c2a7d0-6402-44c7-a7c7-e1b5d8d7513a
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
x-cache: Miss from cloudfront
via: 1.1 f26fbc8f93ad20ccbbd480fccb1e6f88.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN56-P2
x-amz-cf-id: mS-gOi5oSK17guAx1wPZ97Acaa1YEuJuqRbAMHn-97v1HKwopJzqmQ==
X-Firefox-Spdy: h2
|
|
| rtbbhub.com/script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0&treqn=42346345&rpn=1&cbrandom=0.4522501225962583&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=1024&cbdescription=&cbkeywords=&cbref= | 172.67.148.212 | 302 Found | 6.1 kB |
URL User Request GET rtbbhub.com/script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0&treqn=42346345&rpn=1&cbrandom=0.4522501225962583&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=1024&cbdescription=&cbkeywords=&cbref= IP 172.67.148.212:443
CertificateIssuerGoogle Trust Services Subjectrtbbhub.com Fingerprint58:5C:01:52:A5:68:37:0C:81:EC:B4:D4:1B:B7:3E:1C:EA:9A:AD:C9 ValidityThu, 17 Apr 2025 12:34:19 GMT - Wed, 16 Jul 2025 13:30:27 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/s2iurl.php?stamat=m%7C%2C%2CAhf34jFWoGU3Bp_GH0dEdHP3xP.d45%2CoeIvAS4dbB_uF7dSAkd_JJab0oI97co5EumovFtDAZfIo_Bz03o-ZWErO3U2jkzbQoNkbJIkb98R1vyGCj1v8J0jwwpjPC1Q14p8ej1LpZnGC2qKzZ2yCKgtPCS0te_5xNATX-lbXBkbQJAPR89NGi1LD9YlHVzv_iPH-GtkMU_NO8Z-5ZSBcJy56X8JjdQb2pWM5LyWrdHyWntJAd1X49fPG2qvtErp0EHclNw9d_oBMTV3r5S38tNTpyJfO4g0WlzemKO72fmq-sRdG2riisBfTBoqhCC41qcyJVxCuJ9i5gKYRHu-oJYpHEDDjFEbMAEyihbsFED4fqKMaBHr10QGZMzF2R_981ZCRwny_ZBBobPXHQ54ZZqDt7G7ajo01PFgGIgpBjPdGMJjgiii5N38sFYp3JpKlz0LVCxga_xblu7CRYoa4NkG535GkpqZEGQ-i5-PiWMAXyMHeo0jzTEfi1EW9QlGosKK9nYrocDucDUKRQFTUPjEVlPhwT_xc-89V86I-kBndOgLASm-mvbsfDfIsm6hHcfUK79Gm2pLzXBW3Gwa9noBa4XX9vliCEPs_ViKnGt9tIQymfuRveiesa5qKK5F8M-2S97p29ISimrLKvautrNIWcvcKegFH879V_nOLP5TzmRogAP0jRv2V7ZY8qAAKByFPbucv6DYMShMk3U681q8jqtHAohfoQnoSsv1Y6ZZqpCG4PhXbEPu9cnZHf34Cns7V4HobyhIWBq7alHzySM58ZrrQvX0CQXHXIunH2QE-wZKTRbUXw%2C%2C&csid=5841470&s1=1062468&md=0&treqn=42346345&rpn=1&cbrandom=0.4522501225962583&cbtitle=&cbiframe=0&cbWidth=1280&cbHeight=1024&cbdescription=&cbkeywords=&cbref= HTTP/1.1
Host: rtbbhub.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Sun, 15 Jun 2025 04:29:12 GMT
content-type: text/html; charset=utf-8
location: https://giftquickfix.com/lp/index.html
server: cloudflare
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=or9YSK4O0n99%2B9zStzsjOWPE4eKrQnu21m4pK5xjQyqs7AbMp4asgvn6BlXbElBfRhjRkkpmsdMP8kN78Mg0IWn8Li9wuT8L%2FA%3D%3D"}]}
cf-ray: 94ff5339bad3712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/index1.html | 104.21.48.56 | 200 OK | 6.1 kB |
URL User Request GET giftquickfix.com/lp/index1.html IP 104.21.48.56:443
CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
File typeHTML document, Unicode text, UTF-8 text Hash60807c2818d206a7d11bd2fd12ac1bac ebd0859966abf0948014273a63d453d229d0b1f3 f08db88ae80836c7ec32efdc70362a6cb5937b93558b893d2c5bd79769f5ac65
GET /lp/index1.html HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:23 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SZ9NRdLEUvB22HKzOZDuaASSTadkcRtJr3tRRrjM%2Bcj7eVxMdWEwL3eywG%2Bh%2BifYaOyAurMzPfknN7iXeyEi5Rs9s%2FcYVdZEWZBjIITJehTgfT0AHFfwexf%2Frpvqa7U9lOpl"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 26 May 2025 11:39:00 GMT
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 94ff537ffa4a0b61-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8657&min_rtt=592&rtt_var=5277&sent=219&recv=121&lost=0&retrans=0&sent_bytes=138538&recv_bytes=7921&delivery_rate=8205378&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=63000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=10971&inflight_dur=105&x=80"
|
|
| giftquickfix.com/lp/code/style.css | 104.21.48.56 | 200 OK | 3.4 kB |
URL GET giftquickfix.com/lp/code/style.css IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash6f43711a1d2da638538ba84ca57ef865 bd5983744559696b00925480f07b73d8034124f4 adf36a8e932fcbaf7092c7dcaa019c19f466b94bcaaf48ad27ed45b17b6bfe46
GET /lp/code/style.css HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFTq7F64TdthiNshQgzwLyMqhTvgfAk%2F9uZ7TLktlTRW8lFQ8EMpRBS7HSIJha9vVHIIB5rwpPL7dAPMtMs5CVElwVKKZkmEmFK0s1oNwP1VWzePjWsIYWqapTYXAiS6FAdU"}],"group":"cf-nel","max_age":604800}
etag: W/"1dbce32c5d02f68"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 540
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ff53811a4e0b61-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7720&min_rtt=592&rtt_var=5832&sent=225&recv=125&lost=0&retrans=0&sent_bytes=141207&recv_bytes=8723&delivery_rate=8205378&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=63000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11026&inflight_dur=106&x=80"
|
|
| info.conicono.com/?at=599662386&c=b4b793df&ch=1&cntr=2&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0OTk2ODk0OSwiaWF0IjoxNzQ5OTYxNzQ5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMTRocHM0aWNjYTVlYTBxMmc2ZWs2NGUiLCJuYmYiOjE3NDk5NjE3NDksInRzIjoxNzQ5OTYxNzQ5NzgzNzg0fQ.5WxX9e9cw2udhugu1fIIEP9BVr47mjlOwMu5JfDveZs&sid=482af50a-49a1-11f0-a273-2b91bd706ae6&v=1.03 | 212.32.237.90 | 302 Found | 7.1 kB |
URL User Request GET info.conicono.com/?at=599662386&c=b4b793df&ch=1&cntr=2&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0OTk2ODk0OSwiaWF0IjoxNzQ5OTYxNzQ5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMTRocHM0aWNjYTVlYTBxMmc2ZWs2NGUiLCJuYmYiOjE3NDk5NjE3NDksInRzIjoxNzQ5OTYxNzQ5NzgzNzg0fQ.5WxX9e9cw2udhugu1fIIEP9BVr47mjlOwMu5JfDveZs&sid=482af50a-49a1-11f0-a273-2b91bd706ae6&v=1.03 IP 212.32.237.90:443
ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectconicono.com Fingerprint9D:5D:54:C0:73:02:CE:6B:B2:0B:E0:7E:20:51:7C:04:98:7F:B2:2E ValidityWed, 30 Apr 2025 05:30:31 GMT - Tue, 29 Jul 2025 05:30:30 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?at=599662386&c=b4b793df&ch=1&cntr=2&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0OTk2ODk0OSwiaWF0IjoxNzQ5OTYxNzQ5LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMTRocHM0aWNjYTVlYTBxMmc2ZWs2NGUiLCJuYmYiOjE3NDk5NjE3NDksInRzIjoxNzQ5OTYxNzQ5NzgzNzg0fQ.5WxX9e9cw2udhugu1fIIEP9BVr47mjlOwMu5JfDveZs&sid=482af50a-49a1-11f0-a273-2b91bd706ae6&v=1.03 HTTP/1.1
Host: info.conicono.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://info.conicono.com/?v=1.03&c=b4b793df&at=599662386&cntr=2
Cookie: sid=482af50a-49a1-11f0-a273-2b91bd706ae6
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Sun, 15 Jun 2025 04:29:10 GMT
location: http://click-v4.exmnclk.com/click?i=-6LEVwKNC8E_0
server: Cowboy
set-cookie: sid=482af50a-49a1-11f0-a273-2b91bd706ae6; path=/; domain=.conicono.com; expires=Fri, 03 Jul 2093 07:43:17 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| info.conicono.com/favicon.ico | 212.32.237.90 | 404 Not Found | 9 B |
URL GET info.conicono.com/favicon.ico IP 212.32.237.90:443
ASN#60781 LeaseWeb Netherlands B.V.
Requested byhttps://info.conicono.com/?v=1.03&c=b4b793df&at=599662386&cntr=2 CertificateIssuerLet's Encrypt Subjectconicono.com Fingerprint9D:5D:54:C0:73:02:CE:6B:B2:0B:E0:7E:20:51:7C:04:98:7F:B2:2E ValidityWed, 30 Apr 2025 05:30:31 GMT - Tue, 29 Jul 2025 05:30:30 GMT
File typeASCII text, with no line terminators Hashd8f4a1993546cc4b850cde3599e27aec 094b763b4cfcc0b05e5d040581cd513c3ca08067 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
GET /favicon.ico HTTP/1.1
Host: info.conicono.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://info.conicono.com/?v=1.03&c=b4b793df&at=599662386&cntr=2
Cookie: sid=482af50a-49a1-11f0-a273-2b91bd706ae6
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: max-age=0, private, must-revalidate
content-length: 9
date: Sun, 15 Jun 2025 04:29:09 GMT
server: Cowboy
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/index.html | 104.21.48.56 | 200 OK | 6.1 kB |
URL User Request GET giftquickfix.com/lp/index.html IP 104.21.48.56:443
CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
File typeHTML document, Unicode text, UTF-8 text Hashe477c4980036c4901bdb6f2f84b34fd6 02d155fb41cf3cce8f5beda331ac7dfd240c8636 c65c4f55a937ad3117cc7ea607027bdbacebcc08e3ffd1970e250e16e807aa08
GET /lp/index.html HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Jun 2025 04:29:12 GMT
content-type: text/html
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Nr%2B1%2Fi1mrYLpuw2K%2BnNkwAGceK0LR5Ldj8BUP43wAQQ%2F3Z5Av%2Bv%2B5r4kzBU%2FKVrTtkgQ144BvoXRBY%2BSVThGl7nN2NgjadEt1RKo2McZ"}]}
last-modified: Mon, 26 May 2025 11:39:00 GMT
server: cloudflare
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 94ff533b48847128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/text/text.min.js | 104.21.48.56 | 200 OK | 1.0 kB |
URL GET giftquickfix.com/lp/text/text.min.js IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash05f895e2f3dd9287f39ad89ff5def04e 0b8988d08d788cc4b587bc57646069b059682135 6dad8cb15ab25a338b8cf94c31934fbc2f01aa993eb30f1aeb44510f7ab1c0a4
GET /lp/text/text.min.js HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: text/javascript
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1MXwXFqm3lXNmdzIuyliA9GeI06xBi4QcfqCp%2FYUUxQ1Xm1b2DFUCw5VT1MqBFGxIxj9PTTrISMjuceeyiHFBcR0NihNRZgxEjPs3VxG"}]}
vary: accept-encoding
last-modified: Mon, 26 May 2025 11:39:00 GMT
server: cloudflare
age: 529
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"1dbce32c5d02610"
content-encoding: br
cf-ray: 94ff533d79587128-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/img/logo/hw.avif | 104.21.48.56 | 200 OK | 26 kB |
URL GET giftquickfix.com/lp/img/logo/hw.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash421ea8f78a683f7735b1a9a4cc3aab10 39cc6a661a7aca9e3b991741cc36a28eac59c39a 51f1d6ce167c42aecaf5d729eae09ed967800d05fe5c26fea08b46cd7751eee2
GET /lp/img/logo/hw.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: image/avif
content-length: 26544
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9bK7YufpssZsdnLyN6NyM4XVMfZVugdgW9zP7S9YjySYGLCgwWHXI%2BxvFVa9FED6KXpmyJF9fvQwwEmYkM80%2Fv%2Fxni4cMQj%2FE4lAS81BtB2%2Fu23N4dGrK9zF7IY5%2BVfCzXfs"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d045b0"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3127
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff533e59ca0b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9453&min_rtt=592&rtt_var=5845&sent=102&recv=113&lost=0&retrans=0&sent_bytes=8600&recv_bytes=7069&delivery_rate=222892&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=359&inflight_dur=51&x=80"
|
|
| giftquickfix.com/lp/img/btn/red.avif | 104.21.48.56 | 200 OK | 2.2 kB |
URL GET giftquickfix.com/lp/img/btn/red.avif IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
Hash0d813385e260b54f1fd50d4d1bc05671 4c0dfbccae85f19ca420ecb1374f312acaa8558d 545330685e052fa9fca48a87af1d62bbf5426247f568f996e1fdf49dc81f8436
GET /lp/img/btn/red.avif HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:13 GMT
content-type: image/avif
content-length: 2199
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CPKaQ24HGHLas0aaJa%2Bxftwv9qIbu3OIOmYYlxdtqwaJbyfgfUKwMzocnP%2Fb3hFuV7g5ujihBQ6oRa4EdqgcAwZkAY%2BwyEXMC2j8IqVFEy4Fl3im4ytY0NRCcHbBN39zsJsI"}],"group":"cf-nel","max_age":604800}
accept-ranges: bytes
etag: "1dbce32c5d02a97"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 3127
cache-control: max-age=14400
cf-cache-status: HIT
cf-ray: 94ff533e69cc0b61-OSL
server: cloudflare
vary: Accept-Encoding
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9453&min_rtt=592&rtt_var=5845&sent=112&recv=113&lost=0&retrans=0&sent_bytes=20600&recv_bytes=7069&delivery_rate=222892&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=361&inflight_dur=51&x=80"
|
|
| info.conicono.com/?v=1.03&c=b4b793df&at=599662386&cntr=2 | 212.32.237.90 | 200 OK | 517 B |
URL User Request GET info.conicono.com/?v=1.03&c=b4b793df&at=599662386&cntr=2 IP 212.32.237.90:443
ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectconicono.com Fingerprint9D:5D:54:C0:73:02:CE:6B:B2:0B:E0:7E:20:51:7C:04:98:7F:B2:2E ValidityWed, 30 Apr 2025 05:30:31 GMT - Tue, 29 Jul 2025 05:30:30 GMT
File typeHTML document, ASCII text, with very long lines (517), with no line terminators Hash5ed8cb9ca2c2c8115615c00624cf10f5 67f3d7a9406c089df89ac981d229844d399090d4 3f2f1a81ff705f56016a8accdedd07ff2f42bd8383b215b3ea8825343d3d32ef
GET /?v=1.03&c=b4b793df&at=599662386&cntr=2 HTTP/1.1
Host: info.conicono.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
content-length: 517
content-type: text/html; charset=utf-8
date: Sun, 15 Jun 2025 04:29:08 GMT
server: Cowboy
set-cookie: sid=482af50a-49a1-11f0-a273-2b91bd706ae6; path=/; domain=.conicono.com; expires=Fri, 03 Jul 2093 07:43:16 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v43/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 | 142.250.178.67 | 200 OK | 18 kB |
URL GET fonts.gstatic.com/s/opensans/v43/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 IP 142.250.178.67:443
Requested byhttps://giftquickfix.com/lp/index.html CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintE1:0C:8D:E3:24:8F:B1:9F:BA:8E:CF:BE:4B:8F:D6:6A:39:8A:9D:7A ValidityMon, 19 May 2025 08:42:51 GMT - Mon, 11 Aug 2025 08:42:50 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18244, version 1.0 Hash60910f83d690eecf6b7895f6c42f8666 b69baed7ac92de0d5ea4960eeccb35ab149dd117 d9aa9ce25c714499092dbbd5a6bbb5f41606c634e15e548d98a047adba331000
GET /s/opensans/v43/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://giftquickfix.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 12 Jun 2025 17:17:34 GMT
expires: Fri, 12 Jun 2026 17:17:34 GMT
cache-control: public, max-age=31536000
age: 213099
last-modified: Wed, 28 May 2025 17:51:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| giftquickfix.com/lp/code/jquery-2.1.4.min.js | 104.21.48.56 | 200 OK | 84 kB |
URL GET giftquickfix.com/lp/code/jquery-2.1.4.min.js IP 104.21.48.56:443
Requested byhttps://giftquickfix.com/lp/index1.html CertificateIssuerGoogle Trust Services Subjectgiftquickfix.com Fingerprint48:AF:C3:2E:83:91:87:0C:D4:8B:89:B7:B1:14:55:02:01:10:4E:8D ValiditySun, 11 May 2025 14:03:33 GMT - Sat, 09 Aug 2025 15:01:01 GMT
File typeJavaScript source, ASCII text, with very long lines (32025) Hashf9c7afd05729f10f55b689f36bb20172 43dc554608df885a59ddeece1598c6ace434d747 f16ab224bb962910558715c82f58c10c3ed20f153ddfaa199029f141b5b0255c
GET /lp/code/jquery-2.1.4.min.js HTTP/1.1
Host: giftquickfix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 15 Jun 2025 04:29:24 GMT
content-type: text/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pFmbzi0LMDW5oiwD8N3OEfdOK7fjDiGiif9mVKjbdP7AAbYsZLGZDKD0hSd0JPElMgaAtWW%2BuFDzJAs%2BdUIriO0YmqDhieLk7OR6AFGamLd9UJp8iJnnVgq4f2em%2FKp2%2Fu95"}],"group":"cf-nel","max_age":604800}
etag: W/"1dbce32c5d16b79"
last-modified: Mon, 26 May 2025 11:39:00 GMT
age: 540
cache-control: max-age=14400
cf-cache-status: HIT
content-encoding: br
cf-ray: 94ff53811a4f0b61-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7720&min_rtt=592&rtt_var=5832&sent=225&recv=125&lost=0&retrans=0&sent_bytes=141207&recv_bytes=8723&delivery_rate=8205378&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=63000&unsent_bytes=0&cid=88da56ed9a920e9e&ts=11026&inflight_dur=106&x=80"
|
|
| click-v4.exmnclk.com/click?i=-6LEVwKNC8E_0 | 198.134.116.17 | 302 Found | 7.1 kB |
URL User Request GET click-v4.exmnclk.com/click?i=-6LEVwKNC8E_0 IP 198.134.116.17:443
ASN#27257 WEBAIR-INTERNET
CertificateIssuerLet's Encrypt Subjectexmnclk.com FingerprintDA:BF:BA:FB:D3:B2:66:68:21:E2:70:D7:D1:E9:4B:39:03:B8:14:76 ValidityFri, 04 Apr 2025 07:17:44 GMT - Thu, 03 Jul 2025 07:17:43 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=-6LEVwKNC8E_0 HTTP/1.1
Host: click-v4.exmnclk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 15 Jun 2025 04:29:11 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store
Location: https://pectationselea.info/redirect?tid=1062468
|
|