Report - ttnz.leafpool.com/

Report Overview

Submitted URL
ttnz.leafpool.com/
IP
172.67.212.42
ASN
#13335 CLOUDFLARENET
Submitted
2022-09-24 21:44:43
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.2 kB	34 kB	104.17.25.14
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	395 B	746 B	142.250.74.10
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	143.204.55.35
ttnz.leafpool.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.1 kB	306 kB	104.21.61.165
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	68 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	5.3 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	143.204.55.35
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	987 B	1.6 kB	93.184.220.29
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	594 B	127 B	44.238.3.246
cdn.datatables.net	5456	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	377 B	413 B	104.22.51.93
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	3.5 kB	142.250.74.3
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	492 B	46 kB	142.250.74.163
api-ttnz.leafpool.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	806 B	878 B	104.21.61.165

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed
2022-09-24	medium	leafpool.com	Sinkholed

JavaScript (13)

	URL	Size	First Seen	Last Seen
	ttnz.leafpool.com/	13 kB	2023-03-08	2023-03-08
Pretty URL ttnz.leafpool.com/ IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash bc6d23b9f23a9f984b586047aca590ac c9b6a67738cf23976414e9690bbbf108df67b681 2d81c76fdb9424cc689390b807ae44e371d4ca55d5df6283217532470b707697 Loading...

	cdn.datatables.net/v/bs4/dt-1.10.18/datatables.min.js	85 kB	2023-03-08	2023-03-08
Pretty URL cdn.datatables.net/v/bs4/dt-1.10.18/datatables.min.js IP 104.22.51.93 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash 03cf8f60c7410833a1a7d7d2c6a70737 d49382a718611c02d30f718f087d84571c4c33e8 678a69e416edaaa5bcd159aff34327f456442afaff0b678c0398d10e256ceca8 Loading...

	ttnz.leafpool.com/js/bootstrap-3.3.7.min.js?1	37 kB	2023-03-07	2024-05-07
Pretty URL ttnz.leafpool.com/js/bootstrap-3.3.7.min.js?1 IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:54 Last Seen2024-05-07 15:40:51 Times Seen55336 Hash 5869c96cc8f19086aee625d670d741f9 430a443d74830fe9be26efca431f448c1b3740f9 53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef Loading...

	ttnz.leafpool.com/	29 B	2023-03-08	2023-03-08
Pretty URL ttnz.leafpool.com/ IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash 9bb26f0306ca76870379c15eef7d0d50 fb5067e1f00f62a33d69f94b0410e74929ea29f2 9dc853052d6af68645401f491fd131a57d9301fa5083d2282c0f40e96b5d5860 Loading...

	ttnz.leafpool.com/js/jquery-editable-poshytip-1.5.0.min.js	49 kB	2023-03-08	2023-03-08
Pretty URL ttnz.leafpool.com/js/jquery-editable-poshytip-1.5.0.min.js IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash da26b26b60f7ce9f87a22a1cef39fcba c599ecc507c69577ebd6c241a99f492f6fc38f9b f3a5820b4037feb5d70b3f2c4736bada36faeeec446aa28195d75227a586f63f Loading...

	ttnz.leafpool.com/js/cmos.chart.js	451 kB	2023-03-08	2023-03-08
Pretty URL ttnz.leafpool.com/js/cmos.chart.js IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash c63dcc66c1b5d3b7ea625144bb8b1c1e 3f01bfb68c67734b5fe11b187622bb665daea2c7 94b57306188ad1f01266f1f8f122132b2f2922df612e22d4ca856753482f7396 Loading...

	ttnz.leafpool.com/js/cmos.js?v=4	1.4 kB	2023-03-08	2023-03-08
Pretty URL ttnz.leafpool.com/js/cmos.js?v=4 IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash 695c47f4497ed43e6f8af4c055aa8285 25cd24b5f7980abf59510059165ce3263ef9700a d7420aaed8cb474fed3cea70471de2ef1cc0cb2ae97c5fa9aa54b1265e057fcd Loading...

	ttnz.leafpool.com/	1.4 kB	2023-03-08	2023-03-08
Pretty URL ttnz.leafpool.com/ IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-08 00:40:33 Times Seen1 Hash d7a4ea5f0555de9b4e66dce7e015f8c0 c7f052cb5ca51261922747cb28e0cc2a8cefcfa6 13abe902665d8237f0e6ed21c85137b2991371399a2ff8d5bd00c64603c46ec8 Loading...

	cdnjs.cloudflare.com/ajax/libs/select2/4.0.3/js/select2.full.min.js	75 kB	2023-03-07	2024-05-01
Pretty URL cdnjs.cloudflare.com/ajax/libs/select2/4.0.3/js/select2.full.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:39:58 Last Seen2024-05-01 12:55:49 Times Seen656 Hash da607360bcc65284a197ada3d68d5439 a3cf7f0ff2baef254ce214b9bb042f01a7140a35 149b8bc61889897fb9420b347362582c8c89e62d28e1c720e8343ace08ad0986 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery-sparklines/2.1.2/jquery.sparkline.min.js	43 kB	2023-03-07	2024-05-04
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery-sparklines/2.1.2/jquery.sparkline.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:24:41 Last Seen2024-05-04 08:44:18 Times Seen268 Hash 56be28a1645466dc675d2a204fca015c 7e3cc75c9facc4ef22dc14002ee79e0976cc0130 06e0242da172ab85985db3774c54ac1b53391a5b447857a100c5118b8281a543 Loading...

	ttnz.leafpool.com/js/jquery-3.2.1.min.js	87 kB	2023-03-07	2024-05-07
Pretty URL ttnz.leafpool.com/js/jquery-3.2.1.min.js IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-07 14:13:18 Times Seen65025 Hash c9f5aeeca3ad37bf2aa006139b935f0a 1055018c28ab41087ef9ccefe411606893dabea2 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de Loading...

	ttnz.leafpool.com/js/jquery-confirm-3.3.0.min.js	28 kB	2023-03-08	2024-05-02
Pretty URL ttnz.leafpool.com/js/jquery-confirm-3.3.0.min.js IP 104.21.61.165 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2024-05-02 12:16:38 Times Seen102 Hash a1d60524fdad6109b346882e9b46d938 9e14fda5e4cb153597d2cad6440271f69afa90bb 4cf4fe06b5c06b10d9128f3e60eafd53411611ce0eead2a6afde140c5b2442f9 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery-timeago/1.6.1/jquery.timeago.min.js	3.6 kB	2023-03-08	2023-03-13
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery-timeago/1.6.1/jquery.timeago.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 00:40:33 Last Seen2023-03-13 10:04:40 Times Seen1 Hash 1b477687e9f1dabe08aab88be4cffbeb 4c798a6770f0bb31097e8bad0d0780c405da8291 2407659cc898159470a90aa0898c0b8d2915f7842d57371bbdab10326d394c79 Loading...

HTTP Transactions (49)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11622
Expires: Sun, 25 Sep 2022 00:58:14 GMT
Date: Sat, 24 Sep 2022 21:44:32 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

143.204.55.35

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 24 Sep 2022 21:04:54 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: T7fQFBk6kdsq2SQIKSS7Mi9NsDN3T2Cz4b6LF73XLspiRqPYn7aAWA==
Age: 2378

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain

143.204.55.35

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kazxuuv43NepcQKRbGlBoxzBe-kX6nmGdL3ZEdxiRczklUK_UKzr8w==
age: 61758
X-Firefox-Spdy: h2

ttnz.leafpool.com/

104.21.61.165

200 OK

5.5 kB

URL HTTP/1.1
ttnz.leafpool.com/
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
5.5 kB (5460 bytes)
Hash
574228aebd5121d6ce9dc9c70e81c169
12703241b638090e39429d46ed8334929f07ac64
1b0f7e9b6d8548b47f70813b784ecbf1140efa29211e1ac45de6dc495a9e2c17

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; path=/
cmos=a7faba6638a1dd2dffad5cda5933539e; expires=Mon, 23-Sep-2024 21:44:32 GMT; Max-Age=63072000; path=/; domain=ttnz.leafpool.com
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lRPBgJ0u6%2FPgI9G202hXt6%2FDrfHnodQnev4erO1c3pSLTGwqCfPbHU1XxUTl1PlKwbdSXodzwO%2BVSx8NkI6F0xXq9qf%2BtdUATv0Ld64I6oig4akOeZ%2Bq5cN1db8Mn8c94e9LXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74feb3b3fa79b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 21:44:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/select2/4.0.3/js/select2.full.min.js

104.17.25.14

200 OK

18 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/select2/4.0.3/js/select2.full.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with very long lines (32091)
Size
18 kB (17507 bytes)
Hash
5b80148bc86779f2ddbf672b4ef74269
cb267fb61f77875abca7b020307754333ee65b1f
83b9976079487acc85d79e12b80da00befc64a73dcc34966efcac6758a50c106

HTTP Headers

GET /ajax/libs/select2/4.0.3/js/select2.full.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 24 Sep 2022 21:44:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 17507
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fcb-124fd"
last-modified: Mon, 04 May 2020 16:16:11 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2691778
expires: Thu, 14 Sep 2023 21:44:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AbIN8lbPtdaim7jQ1n0zsRX4%2Fh9bBlNVkwUVwbJ%2BH1ysiS6vFC4BgY5q5z1Vx9Vxaj4ioVWU%2F%2F0VBexdt9%2FnNrPxJ0Mdm8MSrvomK1frnvHgexFxgFUqcG5%2FI%2Bysj0Fup8fUClsu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74feb3b75935b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery-sparklines/2.1.2/jquery.sparkline.min.js

104.17.25.14

200 OK

12 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery-sparklines/2.1.2/jquery.sparkline.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32775)
Size
12 kB (11580 bytes)
Hash
70cf717f938272802cbdec5a130dc6a4
dc124549202414d19872449f4cae94b11c9723f7
2a992bb1103baac2aad5e9213467810cdd8fe959aa3163f0f17dd406dde175d9

HTTP Headers

GET /ajax/libs/jquery-sparklines/2.1.2/jquery.sparkline.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 24 Sep 2022 21:44:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 11580
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-a8ef"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 9499477
expires: Thu, 14 Sep 2023 21:44:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xrIgiM%2FyBI48Gs1GVGckyC%2FLPJbOuPAQNq%2BpP3ZWQf335G2W1u7ONG%2BKr7DrV47Na5NZDHw0fjj7o4oMRk1YD8ThnO1J0QpwXfgF6EpjfROUE%2B2SeVfpua942EuZHNsQZtBAj6s5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74feb3b75942b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/jquery-timeago/1.6.1/jquery.timeago.min.js

104.17.25.14

200 OK

1.3 kB

URL HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery-timeago/1.6.1/jquery.timeago.min.js
IP
104.17.25.14:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (3620), with no line terminators
Size
1.3 kB (1319 bytes)
Hash
c84d1d5c5a6f46078b44c477d9e8f1c6
3fe071886ae867a399f8379a06e7cd979b75188f
c172f580fd054fdb603842262d3a6ef2bbf5a4e2b6810b359f84dee35fa3a1aa

HTTP Headers

GET /ajax/libs/jquery-timeago/1.6.1/jquery.timeago.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 24 Sep 2022 21:44:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 1319
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec2-e24"
last-modified: Mon, 04 May 2020 16:11:46 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 5068674
expires: Thu, 14 Sep 2023 21:44:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fo5%2F7N11W3jLeF3jNTSreiDTJZcWzoDHx92M838TWF%2FTK5rE1JvYNGluL%2BB01hhaitw2DpE6uZgrZbWYqFI0Wt3Wxw%2BbjN6BYeCFWi5HpCu%2B6vdLy%2BSu25GFZ3n5%2BbppWxMs709V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74feb3b75939b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

143.204.55.35

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
143.204.55.35:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 21:04:17 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sat, 24 Sep 2022 21:54:16 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8V96EhxqrJzj6n-koGnBlru7vrzHI8npE-dYKy2z-4TgNulkJerXWw==
Age: 2416

ttnz.leafpool.com/css/theme/dark.css?v=221

104.21.61.165

200 OK

1.3 kB

URL HTTP/1.1
ttnz.leafpool.com/css/theme/dark.css?v=221
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
1.3 kB (1295 bytes)
Hash
6e6ae31045a3df4ada59df70de542e32
b42f2878b1e8fc34ea76578ca2c9eba389fe1b78
372a6f60c632b761948a5a075647f203730eae526dbeb9aff5641e7585c5c9c1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/theme/dark.css?v=221 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 Jun 2021 12:36:00 GMT
ETag: W/"60c20730-1cd1"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEdoa39U1yOr%2BDNGA2NXi0HWsObzyf8Anp93hQ%2FTfCzT93L%2F0wxwEsKXFkfpSyzPayl%2Be7Qk2kGwtEc7bCwHPio%2FPeh7i47THmdgThFZvTuXE0LWG4kCLr76oeoGuVqNUld6cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b709e1b51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/fonts/icon.css?family=Material+Icons

104.21.61.165

200 OK

304 B

URL HTTP/1.1
ttnz.leafpool.com/fonts/icon.css?family=Material+Icons
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
304 B (304 bytes)
Hash
cfe91ef241a6bdc9ffbbe1f19b9b92ea
c1dd070f38419a09c41595eb01cfa3bc4e22cb4d
1267d77990be6c4c673b2551147fc28fae0758c3ea78a0555066ca7fbf9b076f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /fonts/icon.css?family=Material+Icons HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 17 Aug 2019 02:44:49 GMT
ETag: W/"5d576a21-20a"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DOW%2Fhcyh85WNpoeoLCjQCTa3hvaR%2BNS%2F0GfJ2a1XzmvkAqQYffAYohCayU9%2B0v%2BOvDYTkqg%2FDJDXLt83DbQvS%2FHiBr7m%2FGckAZdDc7ODMEoIGz%2FOH3xK%2BTUIDcxUIO8Qm48VyA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b70b97b4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
a7809de115ea73f8b61f3d20a9978493
01fc65a2b694d7aadd5204d21801e87b2b55b73e
72692486033feeb149424c59576c6c75b17228dfc89b4c369d2e17cc4bff3d52

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5783
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:33 GMT
Last-Modified: Sat, 24 Sep 2022 20:08:10 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

ttnz.leafpool.com/css/font-awesome.min.css?v=221

104.21.61.165

200 OK

6.9 kB

URL HTTP/1.1
ttnz.leafpool.com/css/font-awesome.min.css?v=221
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (30837)
Size
6.9 kB (6875 bytes)
Hash
d6c8c1428db744943001ade348510e65
83e16acc875a5e3559526ac3c3f31c471dc77d4c
13de46b403869629f28eb7e5c1403f714372b09b5eb8ecbe3a5955ba94debf16

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/font-awesome.min.css?v=221 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 Mar 2018 10:32:24 GMT
ETag: W/"5a9e6e38-7918"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dwaREa8ICBioycLuG4LTh%2FQNm6sAjsTYHlpjM74pO26qZjfFuT4R2m7PYI1yZ9wQdwNENHEt3QH4EWLea3NhKos7G4NqSt8N9qeMy7MyHbv%2FYdHoelxuTFHBa89IxJdH%2Fk9%2FaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b70dbbb52d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/css/jquery-confirm.min.css

104.21.61.165

200 OK

3.4 kB

URL HTTP/1.1
ttnz.leafpool.com/css/jquery-confirm.min.css
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (22251)
Size
3.4 kB (3351 bytes)
Hash
6ae8bc0152b7c40625b84bf3705414c0
5f77ad8c15264478e5cec22ba6d125896b3e1861
8835f286cfbb4304e1d67a4b18266584a8a7979001bc5343c2d30970962e6730

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/jquery-confirm.min.css HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:33 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 17 Aug 2019 02:44:52 GMT
ETag: W/"5d576a24-580a"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGUFER3l%2BDVMk5vZfv5sn0zd4%2BlnFnDULr%2FcPdkHttUSzCVOP2sj%2FFpySaBSOBYXCkrD7JPvt%2FKhkl4SHatbRFdogf19SPFX2jreE2NvK8vH%2FsEqS0pun7iOWc46EoxylPw7Lg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b70db0b4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

push.services.mozilla.com/

44.238.3.246

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
44.238.3.246:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 75ZvTZFjdOaFsLV6E9hvTw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: u+YGa00PYh1ZrKtsBM6VvZAaSpU=

ttnz.leafpool.com/js/bootstrap-3.3.7.min.js?1

104.21.61.165

200 OK

9.8 kB

URL HTTP/1.1
ttnz.leafpool.com/js/bootstrap-3.3.7.min.js?1
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32033)
Size
9.8 kB (9833 bytes)
Hash
5001f34e4d6720378751012dedda52d6
d582a3fa4a2772626a934ade1489dc5e5f97a845
3cbb8f3723828476519f646eed5cd50a490f1cb1a03b9c2e92ad2a749c1dbf5a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/bootstrap-3.3.7.min.js?1 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 18 Aug 2019 05:07:25 GMT
ETag: W/"5d58dd0d-90b5"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6b8hvEEJQlQT0rWaslYX1ep9oOiZGNSS46oPRVebuxIg4GARFH5xRcawTupncb2AXE8y%2FESkPQhY3qfHF4ARfm0aU4DX2vrz515b8zXorCFVEhC6ElG2HYt6m6Dm65ATH65pMw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3ba7f05b4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/css/vendor.css?v=221

104.21.61.165

200 OK

24 kB

URL HTTP/1.1
ttnz.leafpool.com/css/vendor.css?v=221
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (540)
Size
24 kB (24422 bytes)
Hash
459d3e5a82811c67036844d422c7f218
6718c33550653e0044f76cf09bc09888734912b2
a2177d3e5b94a32b7f6be9b24bbdbcfef794386801a0b42a99b8c56203cd8829

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/vendor.css?v=221 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 26 Jun 2020 22:05:46 GMT
ETag: W/"5ef6713a-2a90e"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PBy%2FNlYRNXQ4exRvBTaO0%2B%2BtyDQx8TVhmb8tmDRGtsC2b2K1Sq7bhc2IPWeuHoGrvdcnbQM4rjY3891eFHoMsmXT81Zg8vYUKATQ8bzVTH6OPRzRcCpOGmuP%2B%2FHMjKpDzTLLBA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b6fe8ab505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/css/lp.css?v=221

104.21.61.165

200 OK

21 kB

URL HTTP/1.1
ttnz.leafpool.com/css/lp.css?v=221
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (314)
Size
21 kB (21346 bytes)
Hash
bcbe336d671a239db447e9b90519cd7a
df80c8858eea82aa974d009fc5b7ed694cf0e1bd
a1e1d3b6fbfd84ed060a76ec7e0103512743be5caa43808a233d4d966a2864bc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /css/lp.css?v=221 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Jun 2021 01:36:49 GMT
ETag: W/"60c80431-2ced5"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iPzjBLHFTMjXkC2Q3w6TuApDJ7K04ZPBamyoj2bdH5ZJfhrjq2v3uR9vwWzR5GheUWuGDkHhKYPou%2BP0jzW3E4FhHbEFau0bkTVePe5m1h0U3qNecLNaY6rvxvPu1c89VsPqkA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b70cc1b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/js/jquery-3.2.1.min.js

104.21.61.165

200 OK

30 kB

URL HTTP/1.1
ttnz.leafpool.com/js/jquery-3.2.1.min.js
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32058)
Size
30 kB (30177 bytes)
Hash
165a43244de5b28bfdb9422e0ad82b68
dd12888e259036e6c6986a0c65a3b3e38b697f54
200e3fccd025dffd3f7c6ad186f87ea51737db6c85e279b0d8b9626ad7ce1954

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/jquery-3.2.1.min.js HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 17 Aug 2019 02:41:50 GMT
ETag: W/"5d57696e-15283"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QPNn1pFghBieplTbiYx5ato1VatdvwcQxG1vET2ADrmlFHv8s7uKRHMP3VnsiNErLjUfUtXgr3p7AaCkwjXsfdjYUPn5jMraEIPN7t0b5fCVh9H951adeMr5hb9nU9DHuZm4lA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3b92beeb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
cfbe772bfdcc656e94ceed53256863ca
34055ed3761ab4b69af25a2cb70ca7a337a9f79b
7464464772c70e6a9f1b516b9fc3b60f4e567c10f968c573d5a187f5f22d0722

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ttnz.leafpool.com/js/jquery-confirm-3.3.0.min.js

104.21.61.165

200 OK

7.1 kB

URL HTTP/1.1
ttnz.leafpool.com/js/jquery-confirm-3.3.0.min.js
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (27443)
Size
7.1 kB (7129 bytes)
Hash
26c24706d661e9c555b6fc2de82c2cf4
d20b68ffd97797e277eb7ebfe38320559b7e0cad
5b85d0be96e5cd695833b6256ec7a12220d7a1df8015556ba083022ceac428d6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/jquery-confirm-3.3.0.min.js HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 17 Aug 2019 02:46:50 GMT
ETag: W/"5d576a9a-6c56"
Expires: Mon, 24 Oct 2022 21:44:33 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sku7stMmtijAtvqDJEiBszgKUIAGmUOcjJ0qxolRFlbaKk49mbE1dzA5Gx%2Bp4s30%2Bb26LUdmoASCVJccbSiRtj7aGye4HBW%2FRT1nwdrRLGBZpDFX0jX9JL72ex5maR%2B9UVenOw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3baa876b52d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
cfbe772bfdcc656e94ceed53256863ca
34055ed3761ab4b69af25a2cb70ca7a337a9f79b
7464464772c70e6a9f1b516b9fc3b60f4e567c10f968c573d5a187f5f22d0722

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
da681c2f112645651e5b32be2cfcd052
2e57e4163b8ed8ceebe8c6dde5ff1aa5efc7b946
302a7e1f8156051b7c793c61fbe3e81096374431e22bd9821b4aa38e1a5772f7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
da681c2f112645651e5b32be2cfcd052
2e57e4163b8ed8ceebe8c6dde5ff1aa5efc7b946
302a7e1f8156051b7c793c61fbe3e81096374431e22bd9821b4aa38e1a5772f7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2

142.250.74.163

200 OK

45 kB

URL HTTP/2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size
45 kB (44856 bytes)
Hash
565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db

HTTP Headers

GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ttnz.leafpool.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 18:01:25 GMT
expires: Sun, 24 Sep 2023 18:01:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 13389
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ttnz.leafpool.com/js/cmos.js?v=4

104.21.61.165

200 OK

580 B

URL HTTP/1.1
ttnz.leafpool.com/js/cmos.js?v=4
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
580 B (580 bytes)
Hash
ebf61893e79ad644513640b3e703bfba
9f02d96203d894b5d3b61dc6cb5e535da41e74f9
9fa8fdf3d6ffaa344de9848640c4d72d1c2cf4501501df1a09ad21e5a8cd11ea

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/cmos.js?v=4 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 Mar 2018 10:32:41 GMT
ETag: W/"5a9e6e49-585"
Expires: Mon, 24 Oct 2022 21:44:34 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3gS37762bCrby4XWCc4m%2Bi5rgv%2B1h2NdV9MyLNNDzjWMTK%2FRJtGCK3vOT6O4BW7mleZNVgpdhUq2oSj6kbW9qcZ%2B%2BEHRdUQPALkOs7V5Uu7tUfKIMuBBQJ2YJWesgdKj%2BXEoSw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3bcc950b4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.3

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.3:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
da681c2f112645651e5b32be2cfcd052
2e57e4163b8ed8ceebe8c6dde5ff1aa5efc7b946
302a7e1f8156051b7c793c61fbe3e81096374431e22bd9821b4aa38e1a5772f7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ttnz.leafpool.com/logo/ttnz_48.png?v=1

104.21.61.165

200 OK

736 B

URL HTTP/1.1
ttnz.leafpool.com/logo/ttnz_48.png?v=1
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
736 B (736 bytes)
Hash
11578d7c92bad9fc509ad45f0d88aeef
32f246b55e06fa99c5fd8cd16b62c35438199a8e
7348d7de136a40cdfbfe5babb7fdfd4a25b058a5dca6ad6958dff822d869d7d1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /logo/ttnz_48.png?v=1 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: image/png
Content-Length: 736
Connection: keep-alive
Last-Modified: Tue, 09 Oct 2018 14:23:22 GMT
ETag: "5bbcb9da-2e0"
Expires: Mon, 24 Oct 2022 21:44:34 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s4RrE3w8gJcwRCUqBMoUhC531BJiZDnVsb%2F5DnOMgpazSo36jz1e4dCfdWYrW9t7rFVRSUecad%2BxklMAuTh%2Fqi83iT7oLglO5OxouOLEfPBgdNn4DcsPG5HfBU%2Bt%2BmJPuXz%2Fiw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3bd6b93b518-OSL
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/js/jquery-editable-poshytip-1.5.0.min.js

104.21.61.165

200 OK

12 kB

URL HTTP/1.1
ttnz.leafpool.com/js/jquery-editable-poshytip-1.5.0.min.js
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32001), with CRLF, LF line terminators
Size
12 kB (12523 bytes)
Hash
27045922d2489e0aaf9be4dd911953fe
0f5f1ebd3a7a8ed6cddcfb3c5edddc4d28705fd6
3e33876fe583d95b4ca4857c3461e1194bac9936c56324ce1eb89c29c24bb2c4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/jquery-editable-poshytip-1.5.0.min.js HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 17 Aug 2019 02:46:49 GMT
ETag: W/"5d576a99-c11a"
Expires: Mon, 24 Oct 2022 21:44:34 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TD3YN0%2FiHDFNfZHECmtjO0nh1rsJzsBVTL4uWdZftsr8SDva%2FQgH7B9QvWxfyMg%2Fd5nfpjG0p03QCiFgG7QzcKU6NR9Dyazh%2BPntZnpCAQ65%2BdGIKWK4Czfz1AJ98kEOnNP%2FCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3bbfb7fb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ttnz.leafpool.com/fonts/fontawesome-webfont.woff2?v=4.7.0

104.21.61.165

200 OK

77 kB

URL HTTP/1.1
ttnz.leafpool.com/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Size
77 kB (77160 bytes)
Hash
af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://ttnz.leafpool.com/css/font-awesome.min.css?v=221
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:34 GMT
Content-Type: application/octet-stream
Content-Length: 77160
Connection: keep-alive
Last-Modified: Fri, 27 Apr 2018 11:53:52 GMT
ETag: "5ae30f50-12d68"
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2saA9Guc1eaC57EYc7AASFwHhTyHTYpKTIc5Ku0gJr7ZO%2FmwYZk1CCCgXT1c11ostmDNHTCIJmm2dbG%2Bfd7bBzMjlS1yLQ1proZ%2F%2BCD8dAsm2MkzjT%2BPhdeFoygO%2Fiq8biDEFg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3be5958b51d-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15429
Expires: Sun, 25 Sep 2022 02:01:44 GMT
Date: Sat, 24 Sep 2022 21:44:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15429
Expires: Sun, 25 Sep 2022 02:01:44 GMT
Date: Sat, 24 Sep 2022 21:44:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15429
Expires: Sun, 25 Sep 2022 02:01:44 GMT
Date: Sat, 24 Sep 2022 21:44:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15429
Expires: Sun, 25 Sep 2022 02:01:44 GMT
Date: Sat, 24 Sep 2022 21:44:35 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15429
Expires: Sun, 25 Sep 2022 02:01:44 GMT
Date: Sat, 24 Sep 2022 21:44:35 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0027ff5-ed5d-4cf9-9ef4-847dbda3f91b.jpeg

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0027ff5-ed5d-4cf9-9ef4-847dbda3f91b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12552 bytes)
Hash
e8a0d2b8beddf9f866a2bfe96ac21c2e
dfe5c93dc1637162a0b6ac174dcd7107af80763a
0e4bf30611043a171485c6fa054d6102a6cfd7f8a4153daa34eba1b72f455a77

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0027ff5-ed5d-4cf9-9ef4-847dbda3f91b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12552
x-amzn-requestid: 71161d44-4c3a-459e-bf76-5bf3deafcafe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YlYTrHz0oAMF2eA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63253a7d-39dd0e2a7045128024086375;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 03:09:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: EGtjExnYcmDEP9a540mHhZ7EjGlvLIDLK65Phs9MsAVdEpwNI4avTQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:32 GMT
age: 423
etag: "dfe5c93dc1637162a0b6ac174dcd7107af80763a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (11435 bytes)
Hash
1a9f4d93ea4a06628bc31a00a9c4e692
27f05479fd4fbe68993748fdb043850807ddebdd
31b0809297c7e8acbb46b544cf6f3f4ffaa6bda7a8896fe8678fbfc839a115ab

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73844595-b7d7-4585-a846-ab38b27af847.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11435
x-amzn-requestid: e1288aca-0375-4ce8-9daa-81afe23c9c5c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_ETHE6oAMFqGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-01a836ab57a326356f838bfc;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X8xpMQCKuQGx46BrQ_851U0HhXIALy0k22WRO-zp8TuFhK0KaHItBw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
age: 449
etag: "27f05479fd4fbe68993748fdb043850807ddebdd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8914 bytes)
Hash
dfdacc8edea3c24dad020d7e9c11b3f4
2b6e37596e88b62f288dc8e8c937fd904fae28d5
338a44f3bcc01bdd197f037dd8f8bf58a18dea00127465488efe76fb72a6fdff

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c48523c-250d-4030-8145-14c8967dc600.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8914
x-amzn-requestid: 8cfdc32e-f04a-4fd6-a1f1-632934a682fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EUHqJoAMF7MQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7881-14a6d8ef126409964607e0aa;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kdF6En2vbJhRH1bkYMOuNm5XOIsT1qs3FE281N1SKn1FbyW-oNZsEw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:06 GMT
age: 449
etag: "2b6e37596e88b62f288dc8e8c937fd904fae28d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb442b904-290c-4a62-b7de-aadc1622cac4.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.9 kB (8883 bytes)
Hash
4ecc2a02c5bf02ae98849085d835b2dd
5fc6f043ab0929c95b84b78c9d03befbe0fadea0
ac308de6a557df495017c8cd16d431711daee7107686c1b74cd4e6f0e63de961

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb442b904-290c-4a62-b7de-aadc1622cac4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8883
x-amzn-requestid: 684fdd05-960b-42cb-8544-3347a4bf9b36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y--PmEaqIAMFz4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f7730-2642e1df108d0f7a5d98b126;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:31:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ww7Y221O3YKYU2YLj-uLBxsJoTTCvV4nZd1Vlh2DK1TAFv2BINUJ4w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:05 GMT
age: 450
etag: "5fc6f043ab0929c95b84b78c9d03befbe0fadea0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Size
13 kB (12826 bytes)
Hash
b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6ZD1652Yn1xqZG7ehDcirlYoG8Hcsrdj11Fzfgj7zb-OiU8xHj1gw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:32 GMT
age: 423
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb009e5a9-dad2-4c57-9637-c9930d6b3f05.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.7 kB (6671 bytes)
Hash
328516d7184ca4b4f6e50bf895b9bce0
752c2278004a98fcfacf4c3f16470d610ffd2daa
8096b89e6b868d9e40b5c31b80309472695b9cd085cca2f872159f4e35056c08

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb009e5a9-dad2-4c57-9637-c9930d6b3f05.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6671
x-amzn-requestid: c99d94f4-5a09-44d2-a2ce-0daac62d2087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y-_EAHQ2oAMFaqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632f787f-7fbe302d3e7587263e61cb0d;Sampled=0
x-amzn-remapped-date: Sat, 24 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FuhBG1wzZ7q3UXGwFA32yLn9Rn4DzcpPODW1HivGDtB-2-9F4Q3gBA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 21:37:05 GMT
age: 450
etag: "752c2278004a98fcfacf4c3f16470d610ffd2daa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

ttnz.leafpool.com/js/cmos.chart.js

104.21.61.165

200 OK

91 kB

URL HTTP/1.1
ttnz.leafpool.com/js/cmos.chart.js
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (1591)
Size
91 kB (91402 bytes)
Hash
a780e18e2daa20911103f1cad13cc5eb
4df29d6412150e571c513323765836acb6cc6d3c
9c43110c81f24012f4c4a5629ae1508a9d41af6b329b859a262eed36ed3c21bb

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/cmos.chart.js HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:35 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 07 Mar 2018 02:51:48 GMT
ETag: W/"5a9f53c4-6e2ed"
Expires: Mon, 24 Oct 2022 21:44:34 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T6ednfPOLCtJkAxH0k5V02gkAfQLhUunvNrYGlceN31bBnkVnxokyLvG5vT4tIBRz2pkvAesOL3EP2%2FeKdW8F%2BnMlMJGHTkImAka%2BACRXvekjg5jBHlukUrExUtqva204ol9PA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3bd4d6ab505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
4dac3902c0829d50425ed895cc61d43a
628abdae5b1419034a7464ef5bb38af38f6aeeb7
9183abaff864a67c70a33334dc6bc377c126551d91e50ee9fad8710d4b0e81fb

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:35 GMT
Server: ECS (amb/6B85)
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
279 B (279 bytes)
Hash
4dac3902c0829d50425ed895cc61d43a
628abdae5b1419034a7464ef5bb38af38f6aeeb7
9183abaff864a67c70a33334dc6bc377c126551d91e50ee9fad8710d4b0e81fb

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 21:44:35 GMT
Server: ECS (amb/6B7B)
Content-Length: 279

ttnz.leafpool.com/logo/ttnz_32.png

104.21.61.165

200 OK

671 B

URL HTTP/1.1
ttnz.leafpool.com/logo/ttnz_32.png
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size
671 B (671 bytes)
Hash
6f4b404eda0f2cc291a3ea61cc0fa56d
642d39d1703975fface3c9611fce6803e8e8b7e8
87f6c7aca0fa98878048fbe9072150cfd0af4bc6b111b1a191293fa5a3bda247

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /logo/ttnz_32.png HTTP/1.1
Host: ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Cookie: PHPSESSID=1qd81b1mq8603cngdnd0i06o7q; cmos=a7faba6638a1dd2dffad5cda5933539e

HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 21:44:35 GMT
Content-Type: image/png
Content-Length: 671
Connection: keep-alive
Last-Modified: Tue, 09 Oct 2018 14:23:22 GMT
ETag: "5bbcb9da-29f"
Expires: Mon, 24 Oct 2022 21:44:35 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UlcrC4EqCNvav1eRMT1RfiPsrXsgudDu%2F2LhtjktSCQq%2FP4P0Wr%2Fc3i9Y0r5D1bURT5aFKQFbyDm%2FGbFwwSxlv9Z01SaARg969ndv5FEESHGAQl9jNod1z3CrtIxG4H%2FCUIz1Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74feb3c5f858b51d-OSL
alt-svc: h2=":443"; ma=60

cdn.datatables.net/v/bs4/dt-1.10.18/datatables.min.js

104.22.51.93

200 OK

0 B

URL HTTP/2
cdn.datatables.net/v/bs4/dt-1.10.18/datatables.min.js
IP
104.22.51.93:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /v/bs4/dt-1.10.18/datatables.min.js HTTP/1.1
Host: cdn.datatables.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Sat, 24 Sep 2022 21:44:33 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: OPTIONS, GET
cache-control: max-age=31557600
cf-cache-status: HIT
age: 7098387
last-modified: Mon, 04 Jul 2022 17:58:06 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 74feb3b75d1bb503-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans:300,400,600,700

142.250.74.10

200 OK

0 B

URL HTTP/2
fonts.googleapis.com/css?family=Open+Sans:300,400,600,700
IP
142.250.74.10:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Sep 2022 21:44:34 GMT
date: Sat, 24 Sep 2022 21:44:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

api-ttnz.leafpool.com/stats

104.21.61.165

502 Bad Gateway

0 B

URL HTTP/2
api-ttnz.leafpool.com/stats
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /stats HTTP/1.1
Host: api-ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ttnz.leafpool.com
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 502 Bad Gateway
date: Sat, 24 Sep 2022 21:44:36 GMT
content-type: text/html; charset=UTF-8
set-cookie: cf_use_ob=0; path=/; expires=Sat, 24-Sep-22 21:45:06 GMT
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cf-ray: 74feb3c7eec4b500-OSL
server: cloudflare
X-Firefox-Spdy: h2

api-ttnz.leafpool.com/health

104.21.61.165

502 Bad Gateway

0 B

URL HTTP/2
api-ttnz.leafpool.com/health
IP
104.21.61.165:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /health HTTP/1.1
Host: api-ttnz.leafpool.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ttnz.leafpool.com
Connection: keep-alive
Referer: http://ttnz.leafpool.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 502 Bad Gateway
date: Sat, 24 Sep 2022 21:44:36 GMT
content-type: text/html; charset=UTF-8
set-cookie: cf_use_ob=0; path=/; expires=Sat, 24-Sep-22 21:45:06 GMT
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cf-ray: 74feb3c7fee1b500-OSL
server: cloudflare
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations