Overview

URL1.dating-roo2.site/
IP 185.162.10.217 (Bulgaria)
ASN#59729 ITL LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-10 18:10:13 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (16)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
monkeysloveyou.com (1) 0 2022-03-03 16:24:19 UTC 2022-09-09 21:24:30 UTC 62.122.171.6 Unknown ranking
forlumineoner.com (9) 298831 2020-04-27 13:07:45 UTC 2022-09-10 01:20:39 UTC 139.45.197.229
my.rtmark.net (1) 9054 2017-08-22 14:11:49 UTC 2022-09-10 07:32:55 UTC 139.45.195.8
1.dating-roo2.site (1) 0 2022-06-26 14:51:36 UTC 2022-09-10 15:58:16 UTC 185.162.10.217 Unknown ranking
redrotou.net (2) 145989 2021-03-16 05:03:50 UTC 2022-09-10 09:01:02 UTC 139.45.197.251
tracker-tds.info (1) 0 2019-08-16 12:20:07 UTC 2022-09-10 15:36:23 UTC 95.216.226.187 Unknown ranking
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-10 11:32:01 UTC 93.184.220.29
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-10 04:30:10 UTC 34.120.237.76
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-10 07:05:56 UTC 143.204.55.35
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-10 04:47:11 UTC 143.204.55.110
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-10 04:48:42 UTC 34.117.237.239
ocsp.sectigo.com (7) 487 2018-12-17 11:31:55 UTC 2022-09-10 13:59:47 UTC 172.64.155.188
27.tegronews.com (2) 0 2022-07-03 15:04:36 UTC 2022-09-04 19:13:32 UTC 45.133.44.20 Unknown ranking
123.selornews.com (9) 261839 2021-04-07 09:25:07 UTC 2022-09-10 15:37:50 UTC 45.133.44.20
abservinean.com (1) 57051 2020-07-04 20:47:15 UTC 2022-09-10 06:59:00 UTC 139.45.197.229
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-09-10 04:48:54 UTC 95.101.11.115

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-10 2 redrotou.net Sinkholed
2022-09-10 2 redrotou.net Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 185.162.10.217
Date UQ / IDS / BL URL IP
2023-03-07 06:37:36 +0000 0 - 0 - 3 1.dating-roo3.site/?clickid=b7a1d521zojuo6o9e (...) 185.162.10.217
2023-03-06 06:38:29 +0000 0 - 0 - 3 1.dating-roo3.site/?clickid=8734e528p1z1mdz21 (...) 185.162.10.217
2023-02-23 15:14:33 +0000 0 - 0 - 3 1.dating-roo3.site/?clickid=a2102cisl7sxi6o58 (...) 185.162.10.217
2023-02-08 20:39:32 +0000 0 - 0 - 2 1.dating-roo3.site/ 185.162.10.217
2023-01-19 05:56:35 +0000 0 - 0 - 1 1.dating-roo2.site/ 185.162.10.217


Last 5 reports on ASN: ITL LLC
Date UQ / IDS / BL URL IP
2023-03-24 09:31:12 +0000 0 - 1 - 0 geodoto.xyz/ 91.247.36.129
2023-03-24 07:31:50 +0000 0 - 0 - 5 dellivery.net/ 91.247.37.64
2023-03-22 17:04:01 +0000 0 - 0 - 0 wide-solutions.com/ 185.82.218.235
2023-03-21 22:58:29 +0000 0 - 0 - 1 195.123.228.246/ 195.123.228.246
2023-03-20 10:40:17 +0000 0 - 3 - 0 transfilmindo.com/u.exe 195.123.226.17


Last 5 reports on domain: dating-roo2.site
Date UQ / IDS / BL URL IP
2023-01-19 05:56:35 +0000 0 - 0 - 1 1.dating-roo2.site/ 185.162.10.217
2023-01-17 05:31:57 +0000 0 - 0 - 1 1.dating-roo2.site/ 185.162.10.217
2022-12-10 22:24:02 +0000 0 - 0 - 1 1.dating-roo2.site/?clickid=c370b7vfvg5dubl44 (...) 185.162.10.217
2022-12-05 05:53:24 +0000 0 - 0 - 2 1.dating-roo2.site/ 185.162.10.217
2022-12-04 08:36:16 +0000 0 - 0 - 1 1.dating-roo2.site/ 185.162.10.217


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-09 20:27:42 +0000 0 - 0 - 3 witty-news.info/indonesia 188.114.96.1
2023-02-25 19:23:58 +0000 0 - 0 - 1 7332.groovinews.com/common-player-arrow/index (...) 45.133.44.21
2023-02-09 19:37:58 +0000 0 - 0 - 1 7332.groovinews.com/common-player-arrow/index (...) 45.133.44.20
2023-02-09 03:47:35 +0000 0 - 0 - 1 7332.groovinews.com/common-player-arrow/index (...) 45.133.44.21
2023-02-08 20:10:16 +0000 0 - 0 - 1 video7top.com/sGjXtMXZ 95.216.26.241

JavaScript

Executed Scripts (11)

Executed Evals (4)
#1 JavaScript::Eval (size: 80) - SHA256: 63db60e4d9f326a74b9a2c2157f4791070eb8d9b094c1e51bb541ce354c4f63a
(() => {
    const a = async
    function name() {};
    window['r0xgxotyyvi'] = true;
})()
#2 JavaScript::Eval (size: 447) - SHA256: fd17317dd7f527d765cdfb97ebe7af5df9edc62de9d176a7b9ae22e3d01cb5dd
var url = new URL(url_string);
var source = url.searchParams.get('var');
sdk.onPermissionDefault(() => {});
sdk.onPermissionAllowed(() => {
    window.location.replace('https://lame7bsqu8barters.com/1923281/')
});
sdk.onPermissionDenied(() => {});
sdk.onAlreadySubscribed(() => {
    window.location.replace('https://lame7bsqu8barters.com/1923281/')
});
sdk.onNotificationUnsupported(() => {
    window.location.replace('https://lame7bsqu8barters.com/1923281/')
});
#3 JavaScript::Eval (size: 24) - SHA256: 74867c5a2cf408b090752d3cb8767bb46fdb4a0529bc959d96f51aeb2607d7e3
require('buffer').Buffer
#4 JavaScript::Eval (size: 79) - SHA256: 80460a0dc41b258d8f93fbcda6336630de326d87f06e5cd615db25bcc66ad905
(() => {
    const a = async
    function name() {};
    window['ssgq3t6p72'] = true;
})()

Executed Writes (0)


HTTP Transactions (52)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: 1.dating-roo2.site
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         185.162.10.217
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sat, 10 Sep 2022 18:10:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (6127)
Size:   12832
Md5:    e18dbbb0fa7e34843246f12b1dd18656
Sha1:   fe197da8ea8121783bed762fd0d3e2035988416c
Sha256: 9f66cacf1caf2c3f474e7b50b7095b310520ee4d8bad28c795ba8025eceed63f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2166
Expires: Sat, 10 Sep 2022 18:46:08 GMT
Date: Sat, 10 Sep 2022 18:10:02 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 18:06:45 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YJ-Zmv3djjFUrOy8kfJVi1jbHFouYZX2ecMk1i1OEdP4IDUjHNEifA==
Age: 197


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    99b7d23c1748d0526782b9ff9ea45f09
Sha1:   eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
Sha256: 48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: ZAbYYz8hxK0MwUjMq9dk7iub6iXVXI-lvuapGlRMytJkvjoHsopKNg==
age: 39170
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:02 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BC241EEF809BAAC4A17804D51E608ABD4FF8AD8F07C702ABA3EE4FB614485BE0"
Last-Modified: Thu, 08 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6806
Expires: Sat, 10 Sep 2022 20:03:29 GMT
Date: Sat, 10 Sep 2022 18:10:03 GMT
Connection: keep-alive

                                        
                                            POST /zone?&pub=0&zone_id=5150464&is_mobile=false&domain=1.dating-roo2.site&var=null&ymid=null&var_3=&dsig=&action=prerequest HTTP/1.1 
Host: redrotou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://1.dating-roo2.site
Connection: keep-alive
Referer: http://1.dating-roo2.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

search
                                         139.45.197.251
HTTP/2 200 OK
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:03 GMT
content-length: 0
x-trace-id: b71cbe11896ba2d8c3d728752f507bc9
access-control-allow-origin: http://1.dating-roo2.site
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 10 Sep 2022 17:56:07 GMT
Cache-Control: max-age=3600
Expires: Sat, 10 Sep 2022 17:59:40 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bY0fjKuBg9ljZzaTt4jg5dZmszoyqeW7VAhWVjfFSjuyq3rNh-5Ryw==
Age: 836


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /index.php?key=0m3kex8j47sh7x0wskc1 HTTP/1.1 
Host: tracker-tds.info
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://1.dating-roo2.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         95.216.226.187
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.20.2
Date: Sat, 10 Sep 2022 18:10:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=xsqdj2ft6o; expires=Sun, 11-Sep-2022 18:10:03 GMT; Max-Age=86400; path=/; secure; SameSite=none uclickhash=xsqdj2ft6o-xsqdj2ft6o-wj-0-wj-4kuq-dz-a6c4df; expires=Sun, 11-Sep-2022 18:10:03 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://27.tegronews.com/dannig/common-player/index.html?var={source_subid}&ymid=21d0axsqdj2ft6o096&rc=0&mrc=1&zoneid=1923279&tburl=https://tracker-tds.info/index.php?key=ctxhj1ubkccojtcec5ki
Strict-Transport-Security: max-age=31536000

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3777
Cache-Control: max-age=140380
Date: Sat, 10 Sep 2022 18:10:03 GMT
Etag: "631c4596-1d7"
Expires: Mon, 12 Sep 2022 09:09:43 GMT
Last-Modified: Sat, 10 Sep 2022 08:06:46 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /pfe/current/micro.tag.min.js?z=5150464&sw=/sw-check-permissions-2e6d6.js&ymid=null&var=null HTTP/1.1 
Host: redrotou.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://1.dating-roo2.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.251
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:03 GMT
last-modified: Mon, 05 Sep 2022 12:32:41 GMT
etag: W/"6315ec69-1a29e"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   39775
Md5:    1b03711e952e2c701ce0d48797621bae
Sha1:   dbc884f16f81689842ec797b6095a905bee6364c
Sha256: 423ad691a9eb57744d31ec591dc8cf71f7e352123c9fb5dc90d8aa1ca85a1097

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:03 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 07 Sep 2022 09:12:13 GMT
Expires: Wed, 14 Sep 2022 09:12:12 GMT
Etag: "e01a7a302bce428c6a8fd5ad74dbdf37a999b973"
Cache-Control: max-age=312728,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e446cf70b59-OSL

                                        
                                            GET /dannig/common-player/index.html?var={source_subid}&ymid=21d0axsqdj2ft6o096&rc=0&mrc=1&zoneid=1923279&tburl=https://tracker-tds.info/index.php?key=ctxhj1ubkccojtcec5ki HTTP/1.1 
Host: 27.tegronews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://1.dating-roo2.site/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Sat, 10 Sep 2022 18:10:03 GMT
content-length: 6604
server: nginx/1.16.1
last-modified: Wed, 22 Dec 2021 16:47:12 GMT
etag: a2a3308172a9036912891a909172e625
x-timestamp: 1640191631.97886
x-trans-id: tx9ebe72d2cebe4739a3248-0061c43777
x-openstack-request-id: tx9ebe72d2cebe4739a3248-0061c43777
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:03 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1913)
Size:   6604
Md5:    a2a3308172a9036912891a909172e625
Sha1:   166003f8a5f86ecafe12dfbf2dfdd8188bc19457
Sha256: 887508b4625112e0edeba18ef3da53e5bf28922ea059e100b0c22a8f328e194a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:31:28 GMT
Expires: Thu, 15 Sep 2022 18:31:27 GMT
Etag: "e0dfe59d246a3b086eabdd3ea3732c5940fe711b"
Cache-Control: max-age=432682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e470ff70b59-OSL

                                        
                                            GET /script.js?slug=common-player-arrow HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 6400
server: nginx/1.16.1
last-modified: Fri, 17 Jun 2022 14:53:17 GMT
etag: 87ed65e4f6ca32b7320cfd6ef7134079
x-timestamp: 1655477596.31301
cache-control: max-age=172800
x-trans-id: tx4895d4d89d9c49979dfc5-0062ac9591
x-openstack-request-id: tx4895d4d89d9c49979dfc5-0062ac9591
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (349)
Size:   6400
Md5:    87ed65e4f6ca32b7320cfd6ef7134079
Sha1:   cd4d768c712dba07bf4d94be9ee2a77c4021ad44
Sha256: 808c9a6b91e4ee90a02147d0103af8148ed2dac8932ef766274b5c2b43cbe34c
                                        
                                            GET /dannig/common-player-arrow/img/icon4.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 7032
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: 7ad7f32c1c0df7b4975cc41bda4ac435
x-timestamp: 1621260766.57654
x-trans-id: tx215c904acc1b4d098b48b-0061c43773
x-openstack-request-id: tx215c904acc1b4d098b48b-0061c43773
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size:   7032
Md5:    7ad7f32c1c0df7b4975cc41bda4ac435
Sha1:   81d57e996ee6cd9e122592e68ffa3d55c1ba10ff
Sha256: c0af6cb2280bba97d235dfad7c72d22353a0d2cf277733ce9fc4701df7ed1d5f
                                        
                                            GET /dannig/common-player-arrow/img/icon5.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 3264
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: 1e1a7582b5da63e10485d63f97abc9a0
x-timestamp: 1621260766.74516
x-trans-id: tx08562062e0c7405e8c2e5-0061c43776
x-openstack-request-id: tx08562062e0c7405e8c2e5-0061c43776
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Size:   3264
Md5:    1e1a7582b5da63e10485d63f97abc9a0
Sha1:   ca3ee3067f96c732f455bc7c99ec5100194f13f6
Sha256: 196083352a09a19cf2d4364e3ad406606fedb562f2096c1bef373ff2c485b503
                                        
                                            GET /dannig/common-player-arrow/img/icon7.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 3283
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:48 GMT
etag: b512735542cb07b3b2dcf153a7dfe456
x-timestamp: 1621260767.43555
x-trans-id: tx935449a99ad24e399a39e-0061c43774
x-openstack-request-id: tx935449a99ad24e399a39e-0061c43774
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced\012- data
Size:   3283
Md5:    b512735542cb07b3b2dcf153a7dfe456
Sha1:   93bde8875412ce266600e2af1c37123483a50376
Sha256: e9c661cc8adbaa1b9cd4cf65f0ba93a1c24211cb5f94ed0950e0fbc973781718
                                        
                                            GET /dannig/common-player-arrow/img/icon8.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 4064
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:48 GMT
etag: f92d6474ebc6a3a0b576749cfb4afe98
x-timestamp: 1621260767.46514
x-trans-id: tx4e1ca880eef04158bb33c-0061c43773
x-openstack-request-id: tx4e1ca880eef04158bb33c-0061c43773
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size:   4064
Md5:    f92d6474ebc6a3a0b576749cfb4afe98
Sha1:   0f4ce3dcf04873b8098c01d20c44967fb9fce0cc
Sha256: 3a7abff293d71fd8c5a58deacb964b50fe074a6f458575d37abbd367a3a930a1
                                        
                                            GET /dannig/common-player-arrow/img/icon1.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 7252
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: 3d0ab5834c8bf7134e4d21fa3288317f
x-timestamp: 1621260766.56573
x-trans-id: txefc825b0ed8b472cb9d85-0061c43774
x-openstack-request-id: txefc825b0ed8b472cb9d85-0061c43774
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size:   7252
Md5:    3d0ab5834c8bf7134e4d21fa3288317f
Sha1:   c31d1a6b9df206f67ea194f4c424cdc372a423c2
Sha256: 0515ddd9185d263874e7b66bb6d521fcd63b857aac5fed51c08df98026dafe27
                                        
                                            GET /dannig/common-player-arrow/img/icon2.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 4576
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:47 GMT
etag: c947d439eb93367f1af5b2a3d222f057
x-timestamp: 1621260766.58366
x-trans-id: tx066d39b603164a8d80c52-0061c43773
x-openstack-request-id: tx066d39b603164a8d80c52-0061c43773
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size:   4576
Md5:    c947d439eb93367f1af5b2a3d222f057
Sha1:   5b4c10820d39e624bc6df72a113679da80a8e44e
Sha256: aab564e67c47df65ddcb9c4eaa62cd798a51624a3fded9f9b3a1197b460a79c2
                                        
                                            GET /dannig/common-player-arrow/img/icon3.png HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 7847
server: nginx/1.16.1
last-modified: Mon, 17 May 2021 14:12:51 GMT
etag: 8f3cc830da0b1fdf66bda7d1d734747b
x-timestamp: 1621260770.61859
x-trans-id: txf1afb96819d048d789705-0061c43777
x-openstack-request-id: txf1afb96819d048d789705-0061c43777
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Mon, 12 Sep 2022 18:10:04 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Size:   7847
Md5:    8f3cc830da0b1fdf66bda7d1d734747b
Sha1:   94588f041eec3a78a8780c8124c56a1434a89277
Sha256: ea3698c32039a115b03c2528cbb29c3ff97bbd49ad1345d5095e98d1fd0ea8ba
                                        
                                            GET /dannig/common-player-arrow/img/v_F.ico HTTP/1.1 
Host: 123.selornews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         45.133.44.20
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
date: Sat, 10 Sep 2022 18:10:04 GMT
content-length: 70
server: nginx/1.22.0
x-trans-id: tx26b37fcf58cd4f9786f75-00631cd2c3
x-openstack-request-id: tx26b37fcf58cd4f9786f75-00631cd2c3
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
x-proxy-cache: HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   70
Md5:    cb75a4a5436bc5f23fd500aed9ab3ad4
Sha1:   270ba1020384007ebcd50e4985b6a3bbe63f194b
Sha256: cd08cc3cd7dbd890951754b1e187e2fbe4d68d6a77b2618eb00740a8281c9b56
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:31:28 GMT
Expires: Thu, 15 Sep 2022 18:31:27 GMT
Etag: "e0dfe59d246a3b086eabdd3ea3732c5940fe711b"
Cache-Control: max-age=432682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e470b8ab50c-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:31:28 GMT
Expires: Thu, 15 Sep 2022 18:31:27 GMT
Etag: "e0dfe59d246a3b086eabdd3ea3732c5940fe711b"
Cache-Control: max-age=432682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e470cd10b69-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:31:28 GMT
Expires: Thu, 15 Sep 2022 18:31:27 GMT
Etag: "e0dfe59d246a3b086eabdd3ea3732c5940fe711b"
Cache-Control: max-age=432682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e471ac9b512-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:04 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:31:28 GMT
Expires: Thu, 15 Sep 2022 18:31:27 GMT
Etag: "e0dfe59d246a3b086eabdd3ea3732c5940fe711b"
Cache-Control: max-age=432682,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e471e4d0b55-OSL

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3302
Expires: Sat, 10 Sep 2022 19:05:06 GMT
Date: Sat, 10 Sep 2022 18:10:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3302
Expires: Sat, 10 Sep 2022 19:05:06 GMT
Date: Sat, 10 Sep 2022 18:10:04 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3302
Expires: Sat, 10 Sep 2022 19:05:06 GMT
Date: Sat, 10 Sep 2022 18:10:04 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4477
x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjzaHrIoAMF-iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: a0AyKhmYA7WPwciU2nTXwyChZV_riw1QsqI_giBIcdZhi3Nz4jM0Sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:59:11 GMT
age: 72653
etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4477
Md5:    71bafbee3867c04c3712ff98a123d52c
Sha1:   ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf
Sha256: 58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9766
x-amzn-requestid: 720a4111-91de-4672-88c8-f40db517c07d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YHsjRE13oAMFbCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63195ae1-288f1f5456bf4d146dcf774c;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 03:00:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HwwG0Hjf8uZn1AtbLU_wKs3w9lict3tRP31XQY6tIxDz9KDNaBMAqw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 04:00:05 GMT
age: 50999
etag: "3768753be084c0e0fc268be5b192d02d769114b6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9766
Md5:    7ade70e6dbcfb3ca1765f95112671e69
Sha1:   3768753be084c0e0fc268be5b192d02d769114b6
Sha256: 9670a3bf2476ba193cfeb3153c1254bdcfc980a28503dda0d9b398a3a59f53f4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1a40490a-216d-49e4-bfae-20c0ba1e9616.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4434
x-amzn-requestid: d2239717-afaf-485c-b238-e421f3f2750f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjs3GsCoAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb31e-4d779e9e395f30db784955e7;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:41:50 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: hW6DClTvHw4WjHttC_4SBQBO0E8cAi1GnufETnH2OzaUP0EAj0S14g==
via: 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:54:41 GMT
age: 72923
etag: "75438d4566755201604bebadec4b699ba585b62b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4434
Md5:    0fd70eea0aa5e563509d9e2c0ae25050
Sha1:   75438d4566755201604bebadec4b699ba585b62b
Sha256: 584534a66a490a6a5f217b484edc5aebbb3076f70280984fecd724138420331c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8266
x-amzn-requestid: 3411ec4b-ac18-4b4e-8876-c99b94d3a4a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNitWEjhIAMFWpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb188-4d9e496e7ff141b46748d850;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: vyV1_onImxuLNGp4UI1W5grcuVW3LHJFJjvmO0VXU-OYorF6RVcoDw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:11 GMT
age: 73193
etag: "fdc9453562f993e2545ca99731a7741e748b6082"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8266
Md5:    d21a3e07583d9fad4104b6457f7915e7
Sha1:   fdc9453562f993e2545ca99731a7741e748b6082
Sha256: 8ea38264c82c6b544447079cc92eae70d0968a070ba39022af0e18c498916338
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7218
x-amzn-requestid: 4e9672b6-5415-4808-9508-22e8c42de448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE_QzHffIAMFYTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318459e-743b975a2770e2a90c616d87;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:17:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dR6KtfbMJzFz0j8zIFUNtdkJHUaerjxWbUyYKBD-jR_uAAvCCty01Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:01:33 GMT
age: 72511
etag: "4e4e127039dd8099c63c3bde198118d2874f7342"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7218
Md5:    3f8aeb20a6543be83f3e422796c4dc70
Sha1:   4e4e127039dd8099c63c3bde198118d2874f7342
Sha256: 0f9fdd1b577e4719f88620bb451131bfb120790479b4feccb4222647fb3ea453
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8676
x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNiuZEjnIAMFRFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:13:43 GMT
age: 71781
etag: "88db17a82ea0207ccb4826c2961875c5106b427a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8676
Md5:    e8f11aeba65478b039cfb4100aa23435
Sha1:   88db17a82ea0207ccb4826c2961875c5106b427a
Sha256: 6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "AACC4FCEE02CEFBA8885C1A12CA3D7EE5D54F777F27E5E2791BD29383CFE0726"
Last-Modified: Fri, 09 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3641
Expires: Sat, 10 Sep 2022 19:10:46 GMT
Date: Sat, 10 Sep 2022 18:10:05 GMT
Connection: keep-alive

                                        
                                            GET /pn21ywqw/z/sc/scssx/1923279/lib.js?ymid=21d0axsqdj2ft6o096&var={source_subid} HTTP/1.1 
Host: monkeysloveyou.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         62.122.171.6
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
vary: Accept-Encoding
x-route-id: script
set-cookie: UID=2209101310caa06e3a36cd4aa9984e21d882; Path=/; Expires=Sun, 10 Sep 2023 18:10:05 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   16432
Md5:    3f4ba17ae2a2ca4a7919444e2ffb62e8
Sha1:   c79ea1ba494c6d38b87903e755822b3af7038cac
Sha256: 1b311fdfba19b1cdbcb437cf4843f62b40874fbba69af79bd6dcd6fa1c7d3729
                                        
                                            OPTIONS /custom HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://27.tegronews.com/
Origin: https://27.tegronews.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 0
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2

                                        
                                            OPTIONS /custom HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://27.tegronews.com/
Origin: https://27.tegronews.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 0
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2

                                        
                                            POST /custom HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Content-Type: application/json
Origin: https://27.tegronews.com
Content-Length: 591
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 39
x-trace-id: bcbe6b13fcc0081c02080f783273f826
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            POST /custom HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Content-Type: application/json
Origin: https://27.tegronews.com
Content-Length: 969
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 39
x-trace-id: bd9692a6dea592709c572c7c920e99fb
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            POST /custom HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Content-Type: application/json
Origin: https://27.tegronews.com
Content-Length: 599
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 39
x-trace-id: 7dc4e1ebd52efa497d06a0905ad84c21
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.64.155.188
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 10 Sep 2022 18:10:05 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 18:25:21 GMT
Expires: Thu, 15 Sep 2022 18:25:20 GMT
Etag: "a653f55ef7e337bd259cd76d14fe2adc91c11603"
Cache-Control: max-age=432314,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 748a1e51aa770b59-OSL

                                        
                                            GET /gid.js?pub=1&userId=9af2831f67ff4e16aa538bf162ec3309&zoneId=1923280&checkDuplicate=true&ymid=&var=source_subid|21d0axsqdj2ft6o096|1923279 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Origin: https://27.tegronews.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         139.45.195.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 65
access-control-allow-origin: https://27.tegronews.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9af2831f67ff4e16aa538bf162ec3309; expires=Sun, 10 Sep 2023 18:10:05 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   65
Md5:    394d53906e79d1bfa8d698c6a800c76a
Sha1:   7a1591c3fa12dbac275a5d89e7538266cfb81ade
Sha256: f75729970ff7ed2f38e9aa469361b9d7563d0461ff91e8872a202c49e67932eb
                                        
                                            GET /hyw/1923279.js?v=3.1.392&o=9af2831f67ff4e16aa538bf162ec3309&pub=1&p=1923280 HTTP/1.1 
Host: 27.tegronews.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

search
                                         45.133.44.20
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Sat, 10 Sep 2022 18:10:05 GMT
content-length: 217
server: nginx/1.16.1
last-modified: Wed, 20 Jul 2022 06:37:08 GMT
etag: 8940dbd4b192dab51079131d72483719
x-timestamp: 1658299027.98570
x-trans-id: txb39257748c6649128e6e7-0062d7a3a2
x-openstack-request-id: txb39257748c6649128e6e7-0062d7a3a2
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
expires: Mon, 12 Sep 2022 18:10:05 GMT
cache-control: max-age=172800
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   217
Md5:    8940dbd4b192dab51079131d72483719
Sha1:   04611e0b7c2bb6f71e209260015523e9eb5c34e4
Sha256: 636d2b2a62e43c8845a02c7bd619dd2ada1e0e31c2fd86768666fe14012da19e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4CB5481CF6C775F845CD6316F310399E6B5A48CCC341F737F330FEBE1CB807AC"
Last-Modified: Thu, 08 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5756
Expires: Sat, 10 Sep 2022 19:46:02 GMT
Date: Sat, 10 Sep 2022 18:10:06 GMT
Connection: keep-alive

                                        
                                            OPTIONS /event HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://27.tegronews.com/
Origin: https://27.tegronews.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:06 GMT
content-length: 0
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2

                                        
                                            POST /event HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Content-Type: application/json
Origin: https://27.tegronews.com
Content-Length: 433
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:06 GMT
content-length: 94
x-trace-id: 91b5c3f6270c5eff215348d96019fb95
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   94
Md5:    b66c4695370d5df49a19e93551ece59c
Sha1:   3998fa1ffb149ff7fd091f76bc7b985b0762b4e6
Sha256: d162a543b0385f8f433ec822a3055dfaafbb7c0056a9e674e4e226a2bfb64720
                                        
                                            POST /custom HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Content-Type: application/json
Origin: https://27.tegronews.com
Content-Length: 725
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:06 GMT
content-length: 39
x-trace-id: b733d446b556ef703728d04fd5d758a1
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   39
Md5:    058b158c2be925f556454ef762d93538
Sha1:   cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
Sha256: ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
                                        
                                            GET /pfe/current/service-worker.min.js?r=sw HTTP/1.1 
Host: abservinean.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://27.tegronews.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:06 GMT
last-modified: Mon, 05 Sep 2022 12:32:39 GMT
etag: W/"6315ec67-1d310"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1 
Host: forlumineoner.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://27.tegronews.com/
Origin: https://27.tegronews.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         139.45.197.229
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Sat, 10 Sep 2022 18:10:05 GMT
last-modified: Mon, 05 Sep 2022 12:32:39 GMT
etag: W/"6315ec67-20481"
access-control-allow-origin: https://27.tegronews.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---