| i.egy-best.net/watch.php?vid=83b2646b0 |  104.21.37.203 | 301 Moved Permanently | 0 B |
URL HTTP/1.1i.egy-best.net/watch.php?vid=83b2646b0 IP104.21.37.203:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.php?vid=83b2646b0 HTTP/1.1
Host: i.egy-best.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 21 Sep 2022 00:04:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 21 Sep 2022 01:04:52 GMT
Location: https://i.egy-best.net/watch.php?vid=83b2646b0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p5Mhem09MYziiKS2yUb%2FBfMhT0X0Z%2FUKi%2B7a0VBmRSKd227F49Aw1egV67%2BOqrXnST2nZn9qp76b9wH%2B%2BP0zskn4bTlez7B%2FDht3pq5aVCaw8eN7A7nDU3SN02i9B6z64Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74de8bc6ea73b500-OSL
alt-svc: h2=":443"; ma=60
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.115 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash1b3053fa528e28810f8a2cc9284cc921 cca9eb471d941881a6b9a1793aecb6c281908f6a a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 23:13:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NoJ6CeXqVKMAuTSZnpo3yNmECFfTCLHcAD12zW8LotpZ8jqwyghR5A==
Age: 3093
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha26d0784548ecab22f417f3d689daf23 8893b79366bbadeb5c8d587b8f023e310694df1c 35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7158
Expires: Wed, 21 Sep 2022 02:04:11 GMT
Date: Wed, 21 Sep 2022 00:04:53 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.35 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.35:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Jl5H43r2BQh6DfCzE7RD1RzrFGY6liJGAwVlpxk7VsOqntFg3sJvyA==
age: 70180
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:53 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| i.egy-best.net/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=74de8bc86a1dfac4 | 104.21.37.203 | 200 OK | 42 B |
URL HTTP/2i.egy-best.net/cdn-cgi/images/trace/jsch/js/transparent.gif?ray=74de8bc86a1dfac4 IP104.21.37.203:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/jsch/js/transparent.gif?ray=74de8bc86a1dfac4 HTTP/1.1
Host: i.egy-best.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.egy-best.net/watch.php?vid=83b2646b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:53 GMT
content-type: image/gif
content-length: 42
last-modified: Thu, 15 Sep 2022 13:37:59 GMT
etag: "63232ab7-2a"
server: cloudflare
cf-ray: 74de8bc9ea82fac4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 21 Sep 2022 02:04:53 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.115 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.115:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 21 Sep 2022 00:03:22 GMT
Expires: Wed, 21 Sep 2022 00:34:07 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 b9f0050ca4d212d7c855e005be54b1ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zkWYLu2zsH0WgC1gYQR7CovmImz3YhpGFTEVVB7QQwWAPI4GK1rgIg==
Age: 91
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashedf07cd621f733b0eb50c632387ebf4f 61a082d26501c2c8d481b1676d0de2e585269613 e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5242
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:04:54 GMT
Last-Modified: Tue, 20 Sep 2022 22:37:32 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.36.24.174 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.36.24.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: V7f/yRrSNDawd6xsAB6f1A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 96gHVNFA0UEhUKkUdZ6ckC3pWjo=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash61e5226dc3bddf0c0823c3134ebde224 4b35c53e8f91a840a4125b1ff92e99589c007a37 223615fe4754c0953ed65ec85d36d5219904395c8d7d7963670ab6f4c44e22da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:04:55 GMT
Last-Modified: Tue, 20 Sep 2022 22:34:25 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js | 104.17.25.14 | 200 OK | 27 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js IP104.17.25.14:0
File typeASCII text, with very long lines (32065) Hash63827323c175768ccb0e8ed54589a3e5 9760e238d6ecced66396798559f70593793d801e 196f9479a27db836a2a7454e222f0cb52d4eeb162e0a50e69401ba1a8d81b564
GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: application/javascript; charset=utf-8
content-length: 26909
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14e4a"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2433219
expires: Mon, 11 Sep 2023 00:04:55 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2UDnXl3N9o5cGDgJiBktG0XDI%2B3J9iLMnVwhXtavMPoBnrljB3qNkCKJJg68stLkjIW5APRdOpBn4Hkku%2BNFLmFwBDgwM2W8WVfI7cKv6TA%2FKGZopoRXnMkKgSg%2Bv0%2F0WydJ6702"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74de8bd52bdd0af6-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/mnHjlcI0CpkrBN9c3njfJtuLDKZ.jpg | 54.230.111.45 | 200 OK | 7.4 kB |
URL HTTP/2image.tmdb.org/t/p/w185/mnHjlcI0CpkrBN9c3njfJtuLDKZ.jpg IP54.230.111.45:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3\012- data Hasha3073edb190e36d7226e8c28ea9c8b99 13093cf2badaef1999207b1a33b85efafd6c98d9 afa0a7844a51287cf6fdab586db071d48ec5fb69662299fade5f9aea2895bc3c
GET /t/p/w185/mnHjlcI0CpkrBN9c3njfJtuLDKZ.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7383
date: Wed, 06 Jul 2022 05:56:04 GMT
server: openresty
last-modified: Fri, 27 May 2022 07:50:41 GMT
cache-control: max-age=31449600
etag: "94157de757de1c192ff366ffd484f9d8"
expires: Wed, 05 Jul 2023 05:56:04 GMT
x-rack-cache: fresh
x-content-digest: 13093cf2badaef1999207b1a33b85efafd6c98d9
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: t8YBLc9DOw_0H5_SCr9Ti6YyzyJHJeYk8L7qNq0LzLlbvUDc1jdUDw==
age: 6631731
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/r0TBaaYayuc4qspxaAuB1zAzvwH.jpg | 54.230.111.45 | 200 OK | 7.7 kB |
URL HTTP/2image.tmdb.org/t/p/w185/r0TBaaYayuc4qspxaAuB1zAzvwH.jpg IP54.230.111.45:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3\012- data Hashe775cc9340b90f2c3c27855066f4b5b8 c51c042b6642219a698ef25c5cc5259595c02aa5 cadcd938a8b45ba587513b0526e95a86c46246cc98c00f9f9e7bb278e6749f89
GET /t/p/w185/r0TBaaYayuc4qspxaAuB1zAzvwH.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7671
date: Sat, 27 Aug 2022 01:56:45 GMT
server: openresty
last-modified: Wed, 06 Jul 2022 01:50:45 GMT
cache-control: max-age=31449600
etag: "5032b6f2d34ed2774436e6bd17aa7fd8"
expires: Sat, 26 Aug 2023 01:56:45 GMT
x-rack-cache: fresh
x-content-digest: c51c042b6642219a698ef25c5cc5259595c02aa5
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: F6lcww9dgO44q6ApmuRnmZpP2xmsPJa4eemz1L89VUxD50Dp9SpKuQ==
age: 2153290
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 7.6 kB |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash97070736c2fc35e3952b2626e3d5317a 8b4edbaf825f74bab9e1b8d3601b3236734913a7 4e32d34b41d488275e867154b81643ed99d57b873212171e33e5878752648ca9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92884CCA19D68E439E83F6AA25694BCBA206EA9CCE0D88841E18DC02EE58EA5B"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16712
Expires: Wed, 21 Sep 2022 04:43:27 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| code.jquery.com/jquery-migrate-1.2.1.min.js | 69.16.175.42 | 200 OK | 3.1 kB |
URL HTTP/2code.jquery.com/jquery-migrate-1.2.1.min.js IP69.16.175.42:0
File typeASCII text, with very long lines (7085) Hashe1084a25976d8b8999acadc7350ffb48 99b723d38b78d8347e8dfa60193b12864a370227 b98359c65420aa3864d5b86ef94c4c9a5fb8c772a905884a5ba4ce55319a3d13
GET /jquery-migrate-1.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:55 GMT
content-encoding: gzip
content-length: 3063
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-1c1f"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663718695.dop016.sk1.t,1663718695.cds222.sk1.hn,1663718695.cds242.sk1.c
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/lL6UVRTNEbidZF0aTJAFdzZYeuD.jpg | 54.230.111.45 | 200 OK | 10 kB |
URL HTTP/2image.tmdb.org/t/p/w185/lL6UVRTNEbidZF0aTJAFdzZYeuD.jpg IP54.230.111.45:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3\012- data Hashca04c865fae7435dd794fc4f1166ce94 0befd665b2b074c063c2e83f0a840e8085901d88 e485b492b4c8b9aae615073063d14f3d6a06ecfc168304572069a1e45bebb104
GET /t/p/w185/lL6UVRTNEbidZF0aTJAFdzZYeuD.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 10339
date: Sat, 10 Sep 2022 08:52:47 GMT
server: openresty
last-modified: Sat, 23 Oct 2021 11:40:09 GMT
cache-control: max-age=31449600
etag: "a1ab16bed9d128c13383eb8e888658ff"
expires: Sat, 09 Sep 2023 08:52:47 GMT
x-rack-cache: fresh
x-content-digest: 0befd665b2b074c063c2e83f0a840e8085901d88
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: sbU4DBbICsFj1ix-zPJK6pF86pAw_fUB6MXjeOhFNwYEjuLbu1F5DQ==
age: 918728
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| image.tmdb.org/t/p/w185/etiL0ANjzBhTiyvUblZl6vwIog9.jpg | 54.230.111.45 | 200 OK | 9.2 kB |
URL HTTP/2image.tmdb.org/t/p/w185/etiL0ANjzBhTiyvUblZl6vwIog9.jpg IP54.230.111.45:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3\012- data Hash56b324d81ea58ea17eae271bfdca0c66 fd73078bfd48f998feefdc63f4ceddbc8b61c73f 2ee980b1666b23bdad74754d563ebecda3c771dc8a9fc2711ec188c5ccc40f35
GET /t/p/w185/etiL0ANjzBhTiyvUblZl6vwIog9.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 9238
date: Thu, 25 Aug 2022 13:11:45 GMT
server: openresty
last-modified: Mon, 04 Jul 2022 04:50:01 GMT
cache-control: max-age=31449600
etag: "14bfe6bdba4e0286a40a009af3e74133"
expires: Thu, 24 Aug 2023 13:11:45 GMT
x-rack-cache: fresh
x-content-digest: fd73078bfd48f998feefdc63f4ceddbc8b61c73f
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: mZmM7ewHhM8hSzJIs1FmGcfxoZRWgtTGXSMfltNtxjdyDAI-lyRLTQ==
age: 2285590
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 40 kB |
IP142.250.74.3:0
Hashecad99dc1e9a18739e29779d2c7b9b5c 3a515432c3972fca2a83054f371b9b9c9bb1094a 4c9d88975611503c20085e3365b8fddeaa099f33d9b4351c3d9090defe12ff82
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:04:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| image.tmdb.org/t/p/w185/bSVFh0NND8UAXYrL1mi0Ea5n9r0.jpg | 54.230.111.45 | 200 OK | 7.7 kB |
URL HTTP/2image.tmdb.org/t/p/w185/bSVFh0NND8UAXYrL1mi0Ea5n9r0.jpg IP54.230.111.45:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 185x278, components 3\012- data Hash15e24f2f2ae49325bdb6ba9dcd595105 25111601052e55946e2b9f11be2f8e14553929aa 826a00d3f4af29515aa2b15aeae7b03c2bb6739a2cf8a8156f9fb5cd829bf104
GET /t/p/w185/bSVFh0NND8UAXYrL1mi0Ea5n9r0.jpg HTTP/1.1
Host: image.tmdb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 7654
date: Sun, 21 Aug 2022 13:00:49 GMT
server: openresty
last-modified: Sun, 10 Jul 2022 01:13:54 GMT
cache-control: max-age=31449600
etag: "a817ea2c85a5b2750e09e64b8f911e2c"
expires: Sun, 20 Aug 2023 13:00:49 GMT
x-rack-cache: fresh
x-content-digest: 25111601052e55946e2b9f11be2f8e14553929aa
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: CFEiHxUjyWVZ45MNTaBDgKxP0SGlH7AfaL7PaMgCvJ4hY-EisMD8eg==
age: 2631846
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash596ea0e7cffcb12819c214fd7e55e6b5 fdf581b35743d7693bf8c7f6154471a1b2646f06 a78eee2be3725b096407fde832e7762dad74ac69165f57a10b1ef76b5b2d9874
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:04:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash61e5226dc3bddf0c0823c3134ebde224 4b35c53e8f91a840a4125b1ff92e99589c007a37 223615fe4754c0953ed65ec85d36d5219904395c8d7d7963670ab6f4c44e22da
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5430
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:04:55 GMT
Last-Modified: Tue, 20 Sep 2022 22:34:25 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
|
|
| www.googletagmanager.com/gtag/js?id=UA-123348492-7 | 142.250.74.72 | 200 OK | 42 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-123348492-7 IP142.250.74.72:0
File typeASCII text, with very long lines (1720) Hashe96066ee775af486106ddbff7eb55e3d 9119314819eb75377c3b158a594c171776236709 77f656f9038b03f02fd663188b3bf4055d89c764321340b63d696a28851b28e3
GET /gtag/js?id=UA-123348492-7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 21 Sep 2022 00:04:55 GMT
expires: Wed, 21 Sep 2022 00:04:55 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42193
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 2.0 kB |
IP142.250.74.3:0
Hash3f98a9861500886eb9a9652968694300 5a22adb61c90ef983ac3797648ac7824c238c20b 35c1638e82733765cb377652f48d11c73bd495077fc835900aad368fda8047f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:04:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash8f474e68d2690f8fcdf061639669cacc 0cb82f3a823835ad8fc9a567934bc48901f1a2ab c24cdfc363af17aeef2c5b669fc4892102e5bd16af9f5bac62a31ff5b7fe34a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C24CDFC363AF17AEEF2C5B669FC4892102E5BD16AF9F5BAC62A31FF5B7FE34A2"
Last-Modified: Mon, 19 Sep 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11481
Expires: Wed, 21 Sep 2022 03:16:16 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| fonts.googleapis.com/css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 | 216.58.211.10 | 200 OK | 1.3 kB |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 IP216.58.211.10:0
Hash9d64b7a6a5cad20a947b8d2f26b9a557 48588c48cb162f0fc36cd8e3525404d0b82ee4cf e000c9729053145546ab09299b52a09724ae13ffbf6b8c0402438f3b7f0df385
GET /css?family=Roboto:400,300,500,700|Noticia+Text:400,400italic,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 21 Sep 2022 00:04:55 GMT
date: Wed, 21 Sep 2022 00:04:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.156 | 200 OK | 4.5 kB |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.156:0
Hash6c4c2c6bd7740b69fab934848a8ec411 a404b362a4de41fb9d537b66aaa6e4763dc0b42f af304664af2c8f3378db01327b768ff881da1f5f71082ec604d028f847a2f276
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 00:04:55 GMT
Last-Modified: Tue, 20 Sep 2022 22:51:58 GMT
Server: ECS (bsa/EB12)
X-Cache: Miss from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: se9JQPj79b2weODL8lQtVwfEuJHRy7eN4-8KnxedLD8lOOvIa0PqDA==
Age: 4377
|
|
| usingswhoring.com/g1ODOV8bU6n0cfdR5/45553 |  23.109.87.253 | 200 OK | 26 B |
URL HTTP/1.1usingswhoring.com/g1ODOV8bU6n0cfdR5/45553 IP23.109.87.253:0
File typeASCII text, with no line terminators Hash4e5d65669f8dcd928dad06adf883f025 d771713d758c3348dd7e5b38bb40c7935399ae46 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /g1ODOV8bU6n0cfdR5/45553 HTTP/1.1
Host: usingswhoring.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 21 Sep 2022 00:04:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://egy.egy-best.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Thu, 22-Sep-2022 00:04:55 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Thu, 22-Sep-2022 00:04:55 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash371a3b3d5ab54d595b1316bbce5e3da3 757830f06f93b05b7c53ff52877df470cf4734a8 a972349954951888038df82ff06c5020fb156bcf5742945352a09c0597ba507b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A972349954951888038DF82FF06C5020FB156BCF5742945352A09C0597BA507B"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3015
Expires: Wed, 21 Sep 2022 00:55:10 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashdb49c6707f6b71ed0bbc04058d5a8892 403475685cdd071b1f16f420feceaf827eb5d446 74ac2e4dd154725896d57dade75dff2f7107796727ced185d0879d092f21b545
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "74AC2E4DD154725896D57DADE75DFF2F7107796727CED185D0879D092F21B545"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2013
Expires: Wed, 21 Sep 2022 00:38:28 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| use.fontawesome.com/releases/v5.8.2/webfonts/fa-solid-900.woff2 | 172.64.132.15 | 200 OK | 80 kB |
URL HTTP/2use.fontawesome.com/releases/v5.8.2/webfonts/fa-solid-900.woff2 IP172.64.132.15:0
Hash76e565c930fb1bab299dff1fcef4384c b2541b72b7600456e0abfaf970c25d135b8990d7 f44d059a896973d4397e4c4cbe09c85051c0ede63489439878fe04356c3e310a
GET /releases/v5.8.2/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: font/woff2
content-length: 74328
x-amz-id-2: J8EnfHNkD68i3ZkiKKARjUE9zQVNUO0qa2hJdFzR0c2/b8opyNf4zdgWxHgB4c5bBAoedVRZogk=
x-amz-request-id: 2Z7FXADXMFNTA1QB
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:47:21 GMT
etag: "64b3e814a66c2719b15abf8f7998bd73"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 98215
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HKQLr3sj%2FFN3MyVGdI7yABrapxLHjR5sNBgaJSV2XdpnpiHZLmubZA1aDR0NGVDkN%2FPIklvyM5BqwrNGIxK%2FxnWwN8Hx42tIzLu9ZX8qg71ukSOWauFW88cEjeOwL1vFBDCoNsn7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74de8bd66a94e67c-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10498
Expires: Wed, 21 Sep 2022 02:59:53 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10498
Expires: Wed, 21 Sep 2022 02:59:53 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10498
Expires: Wed, 21 Sep 2022 02:59:53 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash18bc6d8114f7e8379159a54601b308b4 b52366f769a90a056925001e69f0f55257241b42 26dcb05c9fdb4839ffb0730d37af77b55207a6a27b444cd2912ad07f4c52544a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "26DCB05C9FDB4839FFB0730D37AF77B55207A6A27B444CD2912AD07F4C52544A"
Last-Modified: Sun, 18 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9028
Expires: Wed, 21 Sep 2022 02:35:23 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash85aa2dcaf76d25900c78356e5e1c254f 46cd66c9921a162c9e67cfa7d85bc82e5967d531 741815f43b76661b9edde512bc9061cb4bc659b297e7d822bf8e68e5aac9d23d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10498
Expires: Wed, 21 Sep 2022 02:59:53 GMT
Date: Wed, 21 Sep 2022 00:04:55 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6b35a1c-f445-4b05-b56e-ce2ad0ef2a9a.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6b35a1c-f445-4b05-b56e-ce2ad0ef2a9a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8bae3a7a80ff40df1d701dfc925ddeff 91df60162a8322469cada0dd8eb93619f28aec1a fab10c7ad4658bc191621d9f2042236a7b6e34448ce5215dde5b8d6a64b52952
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6b35a1c-f445-4b05-b56e-ce2ad0ef2a9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6897
x-amzn-requestid: 509dc368-dd1c-4be7-94ff-64dbd53c199f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YoqoRG2WIAMFw6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63268b01-1cb916c251fd5f2f3cf10435;Sampled=0
x-amzn-remapped-date: Sun, 18 Sep 2022 03:05:37 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: JB1bt_R_dtA1cgaQinaQjtvsvxI8URaFudTBsF5IA0itMeTng3ERhA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 04:14:21 GMT
age: 71434
etag: "91df60162a8322469cada0dd8eb93619f28aec1a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5a64d4-8802-4886-ab88-03c39eb96f1a.jpeg | 34.120.237.76 | 200 OK | 5.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5a64d4-8802-4886-ab88-03c39eb96f1a.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5a21b393fc4213d090f794f3eeee2333 cf334c1fc3191c5dcafaa2df55f62a10e16fda69 43553a352e6d7c8108bd5152d1c949d8acfb922344a00f8c77c986e2d8f665d9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fab5a64d4-8802-4886-ab88-03c39eb96f1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 19cef827-7a71-4789-ae2f-03861f7d65c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YsvkiG9BoAMFqRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63282c83-695865cd7f0a236300a179cb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 08:46:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: pt-UpDrev8YQvpm0E3xWMpkUSsxo80_jlCq1jJ0ePrpLb9rE7_kQ8w==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:45:39 GMT
age: 4756
etag: "cf334c1fc3191c5dcafaa2df55f62a10e16fda69"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24bb3042-6621-4dd2-99f1-4b50cc7da808.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24bb3042-6621-4dd2-99f1-4b50cc7da808.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash10ad73e887b57566c4ba3ae763552a2e 63252bd8cc72452c4c6be84593d704ae9bf97d1f 7d58d096045066af053eb1a1fc3878d3e2080aa50b71aa30fa5b7929693ab004
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F24bb3042-6621-4dd2-99f1-4b50cc7da808.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9399
x-amzn-requestid: 44705828-c137-4ab5-8538-5d4595a2b058
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYvkJGjxoAMF6-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202c80-3cb542a303a59002480c82b2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:08:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: PIZx2S4HyPokzOhbut6yFxH_-32I3SvT1jbeo2rSxQtkgYZGcqjBJA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:00:12 GMT
age: 7483
etag: "63252bd8cc72452c4c6be84593d704ae9bf97d1f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg | 34.120.237.76 | 200 OK | 9.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha692964324dbb9c460a1b855808d02e6 1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54 3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9201
x-amzn-requestid: 6dbfae76-f9ab-4f31-9b62-bcf5d9ce4515
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YxzxlEYcoAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a333d-7d147481402cc46a751b72ed;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:40:13 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JEb0g486u6AjYFbf8rSbreKjh0m1GsAGbvykHl0oahmVN2ciqe5FOw==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:14:57 GMT
etag: "1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54"
content-type: image/jpeg
age: 6598
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F273857c4-a36e-4755-b3c4-1ff5fcd3d260.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F273857c4-a36e-4755-b3c4-1ff5fcd3d260.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha4a275a6a20ad8a21f49b3ed73098126 5dfdf9835782ef3825a45bfcc7f38dfe3a754df0 933a6d502e92d7320ad9f3204c768b0d7d757f136d4c9c130e418e74a36dde06
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F273857c4-a36e-4755-b3c4-1ff5fcd3d260.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11440
x-amzn-requestid: eda42fc3-bfca-4c15-856f-fae709e79c4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYvZ5EcDIAMF9lQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202c3f-3ae1bd425e29e23c2ee71933;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:07:43 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: UscDE1v3vDPb-3zj6gYkmlNRx4gBIYgiTMf4bYivsZm3Q-0kFOO10Q==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:12:22 GMT
age: 6753
etag: "5dfdf9835782ef3825a45bfcc7f38dfe3a754df0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha504981ee10d8341b64f19001464ae8a 56f228d7358ba9deef000f53214dc7c1dc358109 0ea3b6ed12f3adf9d56e7d9b61f284d28107d99f28ee4e66b4c078a9a1a0cbee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60ffb31d-d07d-4e81-9477-522f011ae13e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8861
x-amzn-requestid: 873e88ab-7afc-4b14-b428-d90ec2079741
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YO2wuE0AoAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c3804-0d25ab397a16c78907914e23;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 07:08:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: E3CxTY9UbUKfKS16_Os-lp6w8b_bIIbWqcIzaGOOc0iwrSOzj6NNqQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 03:10:54 GMT
age: 75241
etag: "56f228d7358ba9deef000f53214dc7c1dc358109"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| s10.histats.com/js15_as.js |  46.105.201.240 | 200 OK | 4.4 kB |
URL HTTP/2s10.histats.com/js15_as.js IP46.105.201.240:0
File typeHTML document, ASCII text, with very long lines (11440), with no line terminators Hashed192092c129db6123a3397855f42619 067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e 998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 23:57:22 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 688718718
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash75925b52065e8c40d078aee85c947946 72219bfe4412de462135af38de924431a60cd5f5 e4931e694c717412c066464f1c206f1049ebe3fa70270dd550c84129e49b68bb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 00:04:56 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 06:25:21 GMT
Expires: Mon, 26 Sep 2022 06:25:20 GMT
Etag: "72219bfe4412de462135af38de924431a60cd5f5"
Cache-Control: max-age=454224,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74de8bd90e200b41-OSL
|
|
| my.rtmark.net/gid.js?userId=82a2089c86e741318a3e240507c9fbda | 139.45.195.8 | 200 OK | 65 B |
URL HTTP/2my.rtmark.net/gid.js?userId=82a2089c86e741318a3e240507c9fbda IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash5d98f780a4b60e63e74f5de737f75362 a9c9e8cc725e0936c5de262e564c657f35736923 7b06baf1876ca8d8251848bb05912dea23da999d1751bded72e2a7ee43b4861a
GET /gid.js?userId=82a2089c86e741318a3e240507c9fbda HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:56 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://egy.egy-best.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=82a2089c86e741318a3e240507c9fbda; expires=Thu, 21 Sep 2023 00:04:56 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 472 B |
IP172.64.155.188:0
Hashd6144873d1b3d01ecb0e648fb059a630 bfa916db8299f289317b6975b240ea3aa3594df6 a2bea9d0219022fec4ce3a1b79a4575cbfa4d060b33de5ae36e164e9983993fa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 00:04:56 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 19 Sep 2022 00:52:18 GMT
Expires: Mon, 26 Sep 2022 00:52:17 GMT
Etag: "bfa916db8299f289317b6975b240ea3aa3594df6"
Cache-Control: max-age=434240,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74de8bdaced50b41-OSL
|
|
| fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f | 139.45.195.254 | 200 OK | 12 B |
URL HTTP/1.1fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f IP139.45.195.254:0
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://egy.egy-best.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://egy.egy-best.net
Content-Length: 1800
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 21 Sep 2022 00:05:12 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://egy.egy-best.net
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| glizauvo.net/500/4874273?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.236 | 200 OK | 0 B |
URL HTTP/2glizauvo.net/500/4874273?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.236:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /500/4874273?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: glizauvo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://egy.egy-best.net/
Origin: https://egy.egy-best.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:56 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://egy.egy-best.net
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| rndskittytor.com/500/4608239?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.238 | 200 OK | 0 B |
URL HTTP/2rndskittytor.com/500/4608239?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.238:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /500/4608239?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://egy.egy-best.net/
Origin: https://egy.egy-best.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:56 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://egy.egy-best.net
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-allow-credentials: true
access-control-max-age: 600
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| glizauvo.net/500/4874273?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.236 | 200 OK | 809 B |
URL HTTP/2glizauvo.net/500/4874273?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.236:0
File typeJSON data\012- , ASCII text, with very long lines (809), with no line terminators Hash05eac59b55715dc9d6325021db4feea5 755fc0c0562dee238a68486538a77a17bac128cd 185149ba8e2ddd9aef0d2af8aeb70063d82ffba7bbc8aa17f1f27236583a4096
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /500/4874273?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: glizauvo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://egy.egy-best.net/
Cookie: OAID=d490bbc7cafa47299fcf5846f8345a9e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:56 GMT
content-type: application/javascript
content-length: 809
x-trace-id: 84adc788f1ec58e9ef4bea2ca118dd92
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://egy.egy-best.net
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=82a2089c86e741318a3e240507c9fbda; expires=Thu, 21 Sep 2023 00:04:56 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash56f5d7f608e25d64207135f045f988cb 901eb59372ae330ae85e1384da93479b21ae1082 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Tue, 20 Sep 2022 22:41:12 GMT
expires: Wed, 21 Sep 2022 00:41:12 GMT
cache-control: public, max-age=7200
age: 5024
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| s4.histats.com/stats/0.php?4416498&@f16&@g1&@h1&@i1&@j1663718695897&@k0&@l1&@m%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9%20%D9%81%D9%8A%D9%84%D9%85%20HeroPanti%202022%20%D9%85%D8%AA%D8%B1%D8%AC%D9%85%20HD&@n0&@ohttps%3A%2F%2Fi.egy-best.net%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-175196587&@b3:1663718696&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&@w |  158.69.251.190 | 200 OK | 51 B |
URL HTTP/1.1s4.histats.com/stats/0.php?4416498&@f16&@g1&@h1&@i1&@j1663718695897&@k0&@l1&@m%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9%20%D9%81%D9%8A%D9%84%D9%85%20HeroPanti%202022%20%D9%85%D8%AA%D8%B1%D8%AC%D9%85%20HD&@n0&@ohttps%3A%2F%2Fi.egy-best.net%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-175196587&@b3:1663718696&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&@w IP158.69.251.190:0
File typeASCII text, with no line terminators Hashf91ddba7eb39ad3eef91ec53281d404b dd1846a9a235e2d0a4834e1f1cea946198007371 239d62d0e1d9684e4e7a412d35245e5c31f77edbf992066a0f3d281acd653fc5
GET /stats/0.php?4416498&@f16&@g1&@h1&@i1&@j1663718695897&@k0&@l1&@m%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9%20%D9%81%D9%8A%D9%84%D9%85%20HeroPanti%202022%20%D9%85%D8%AA%D8%B1%D8%AC%D9%85%20HD&@n0&@ohttps%3A%2F%2Fi.egy-best.net%2F&@q0&@r0&@s0&@ten-US&@u1280&@b1:-175196587&@b3:1663718696&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 00:04:56 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 51
Connection: close
|
|
| littlecdn.com/contents/s/6f/ff/49/d618b9c167ead557de6448ea44/09023711255.png | 104.22.25.116 | 200 OK | 56 kB |
URL HTTP/2littlecdn.com/contents/s/6f/ff/49/d618b9c167ead557de6448ea44/09023711255.png IP104.22.25.116:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash6fff49d618b9c167ead557de6448ea44 08fffd6ecd99290fae7665c10bb604ac8e5248ac adfd94d82626b3d2c0d9c2cd89a13f75cdcd4e563c8ed431a4c73b430b365e5e
GET /contents/s/6f/ff/49/d618b9c167ead557de6448ea44/09023711255.png HTTP/1.1
Host: littlecdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:56 GMT
content-type: image/png
content-length: 55954
last-modified: Fri, 10 Apr 2020 15:56:06 GMT
etag: "5e909716-da92"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 1358
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74de8bdd38feb4e8-OSL
X-Firefox-Spdy: h2
|
|
| offerimage.com/www/images/3cc187c3294f050cb0f2632e70e60563.png | 104.22.33.172 | 200 OK | 93 kB |
URL HTTP/2offerimage.com/www/images/3cc187c3294f050cb0f2632e70e60563.png IP104.22.33.172:0
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash3cc187c3294f050cb0f2632e70e60563 3f827edd982ebb762f5aa277031e479b915ec3ca b19c84a72b1d44fb0226991b96e3ad276549cb40af572411320212828d77a498
GET /www/images/3cc187c3294f050cb0f2632e70e60563.png HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:56 GMT
content-type: image/png
content-length: 93324
last-modified: Thu, 10 Dec 2020 15:51:16 GMT
etag: "5fd243f4-16c8c"
expires: Wed, 21 Sep 2022 17:12:46 GMT
cache-control: max-age=86400
timing-allow-origin: *
cf-cache-status: HIT
age: 24730
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 74de8bdd5ebff16a-ARN
X-Firefox-Spdy: h2
|
|
| i.egy-best.net/cdn-cgi/styles/challenges.css | 104.21.37.203 | 200 OK | 40 kB |
URL HTTP/2i.egy-best.net/cdn-cgi/styles/challenges.css IP104.21.37.203:0
Hash80bf0e7bfb78cfb800f6a336bae8f45b 52137a331b2e7be584bef17ecc9c3ee67d264318 36bc9f86a6860e947d8c57447e13c0aadc551231afc47d1665158e0801da5e8b
GET /cdn-cgi/styles/challenges.css HTTP/1.1
Host: i.egy-best.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.egy-best.net/watch.php?vid=83b2646b0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:53 GMT
content-type: text/css
last-modified: Thu, 15 Sep 2022 13:37:59 GMT
etag: W/"63232ab7-1896"
server: cloudflare
cf-ray: 74de8bc98a6bfac4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Wed, 21 Sep 2022 02:04:53 GMT
cache-control: max-age=7200, public
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| eephaush.com/?rb=VIYXbLx5lzCrq_n9AceLY6nXDeGcyXIQV63yQwvNhBDWVRSwRGugfqhJNBoNIjvTrcmTlzMDQmTi88nXKWMAHz6r2qVEBH1cS1NBaDO5REPcUIbEn9-xnQYZRzcMmDtIyGjAKRTVxcKeMTIORsnf7wOE4ZydR_Y_2oqLJfCygku-QIcslqiEdANi6bImPIziCHS7duCYI9l8KeDEWdRVzSheOqM%3D&request_ab2=0&zoneid=4601741&js_build=iclick-v1.429.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.429.0&bs=fbe408f5-a759-4fd4-9053-8d59457fe075&userId=82a2089c86e741318a3e240507c9fbda&m=link | 139.45.197.236 | 200 OK | 23 kB |
URL HTTP/2eephaush.com/?rb=VIYXbLx5lzCrq_n9AceLY6nXDeGcyXIQV63yQwvNhBDWVRSwRGugfqhJNBoNIjvTrcmTlzMDQmTi88nXKWMAHz6r2qVEBH1cS1NBaDO5REPcUIbEn9-xnQYZRzcMmDtIyGjAKRTVxcKeMTIORsnf7wOE4ZydR_Y_2oqLJfCygku-QIcslqiEdANi6bImPIziCHS7duCYI9l8KeDEWdRVzSheOqM%3D&request_ab2=0&zoneid=4601741&js_build=iclick-v1.429.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.429.0&bs=fbe408f5-a759-4fd4-9053-8d59457fe075&userId=82a2089c86e741318a3e240507c9fbda&m=link IP139.45.197.236:0
Hashd04f9f59ab28dd1a049aaa10d9826e7c 0c59b361937b86b4ccdf1134c5836b4b0b2139b1 f9f8f2d63d124391c78fb597f517014f640d5d6c9f0246c4e3f04d675cd6abc0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /?rb=VIYXbLx5lzCrq_n9AceLY6nXDeGcyXIQV63yQwvNhBDWVRSwRGugfqhJNBoNIjvTrcmTlzMDQmTi88nXKWMAHz6r2qVEBH1cS1NBaDO5REPcUIbEn9-xnQYZRzcMmDtIyGjAKRTVxcKeMTIORsnf7wOE4ZydR_Y_2oqLJfCygku-QIcslqiEdANi6bImPIziCHS7duCYI9l8KeDEWdRVzSheOqM%3D&request_ab2=0&zoneid=4601741&js_build=iclick-v1.429.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.429.0&bs=fbe408f5-a759-4fd4-9053-8d59457fe075&userId=82a2089c86e741318a3e240507c9fbda&m=link HTTP/1.1
Host: eephaush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://egy.egy-best.net/
Origin: https://egy.egy-best.net
Connection: keep-alive
Cookie: OAID=82a2089c86e741318a3e240507c9fbda; oaidts=1663718695
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:56 GMT
content-type: application/json
x-trace-id: 6abc46223d4f88db7d05cd44402ad6a7
access-control-allow-origin: https://egy.egy-best.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=82a2089c86e741318a3e240507c9fbda; expires=Thu, 21 Sep 2023 00:04:56 GMT; path=/; secure; SameSite=None
oaidts=1663718696; expires=Thu, 21 Sep 2023 00:04:56 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 28 Sep 2022 00:04:56 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| glizauvo.net/impression/QV4WqjWmdqTBHcQwAwd70_h2cZFgYobM07SDytQZhdWAy4UvFgh4TMtleZiPgsYqG2wix9Vg7WN-Ra5jQKRRD1BUM7eql8tPUQV9kYBFSHV3ip3OvkimW7WLtH4mIGk3AgQSYodpUXq5tCLlq3gD6Q1J-HprNrtVx6Be-ecaeQ9v6o89m6GbM_HiiCGB_OTjZyMnld_OEnli8BHaDiVwlaPvRZ9jZBLf?_z=4874273&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.236 | 200 OK | 43 B |
URL HTTP/2glizauvo.net/impression/QV4WqjWmdqTBHcQwAwd70_h2cZFgYobM07SDytQZhdWAy4UvFgh4TMtleZiPgsYqG2wix9Vg7WN-Ra5jQKRRD1BUM7eql8tPUQV9kYBFSHV3ip3OvkimW7WLtH4mIGk3AgQSYodpUXq5tCLlq3gD6Q1J-HprNrtVx6Be-ecaeQ9v6o89m6GbM_HiiCGB_OTjZyMnld_OEnli8BHaDiVwlaPvRZ9jZBLf?_z=4874273&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.236:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /impression/QV4WqjWmdqTBHcQwAwd70_h2cZFgYobM07SDytQZhdWAy4UvFgh4TMtleZiPgsYqG2wix9Vg7WN-Ra5jQKRRD1BUM7eql8tPUQV9kYBFSHV3ip3OvkimW7WLtH4mIGk3AgQSYodpUXq5tCLlq3gD6Q1J-HprNrtVx6Be-ecaeQ9v6o89m6GbM_HiiCGB_OTjZyMnld_OEnli8BHaDiVwlaPvRZ9jZBLf?_z=4874273&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: glizauvo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Cookie: OAID=82a2089c86e741318a3e240507c9fbda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:05:00 GMT
content-type: image/gif
content-length: 43
x-trace-id: 3f990e04e9ed61bad2b0ce1d96a1b3e0
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| rndskittytor.com/impression/X5oP0BHcNEauVGTesCq78T7v3HSoMRl0nP5gqQx9lIo3WrSjEwc_Y8kjDNQcPSZATGnlDCn0Dd_FH_X_aQt-VeZlq4bgIw2hKuEpBXgQwvQtfLF4VsrCkju_tuoPBORAFRyt5JlztU2wrh_lQjVMhBX_csZmYbNW_UNikl6XyiDsNX20dq-bJpjclT1esX7bTu88Wj1mVu0Uy94FXYTjR9PqvCAue1hJcJOwpER27Fbvew81IoV2cljBqvgC1qlNe-C8ypbzkh67w9BDYPJ1kJPWQMG1Lm_upb_ucPxiCucAxJz8j_4sfs5p5rPp7BFfy2c3_TT4vD_fvG5qnju46PI7rprtA920sF33H2qyjvZzYMpNrmE1LiSS5EtLUSx4zomZemGFGJyy60KrZXV9qmixM8Bezy3YeI4gibAIRI3KSbH-5k5CzvckuLXwGmb2qFdmwAGBw3dRZUrOZG1hEr_Vg5VO15wjLou_N1MEeqJ0pl6U7vfkHNH442W37IkbpzEGx-ZJXW34Fv1TH0bSnBn28kOcLd2EGT5g969Lt_TKFYWAT9nEBOaPQYLKyWCGdw13vw8g2rBMSwvG5Xlzv9hbQGog4qA1?_z=4608239&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.238 | 200 OK | 43 B |
URL HTTP/2rndskittytor.com/impression/X5oP0BHcNEauVGTesCq78T7v3HSoMRl0nP5gqQx9lIo3WrSjEwc_Y8kjDNQcPSZATGnlDCn0Dd_FH_X_aQt-VeZlq4bgIw2hKuEpBXgQwvQtfLF4VsrCkju_tuoPBORAFRyt5JlztU2wrh_lQjVMhBX_csZmYbNW_UNikl6XyiDsNX20dq-bJpjclT1esX7bTu88Wj1mVu0Uy94FXYTjR9PqvCAue1hJcJOwpER27Fbvew81IoV2cljBqvgC1qlNe-C8ypbzkh67w9BDYPJ1kJPWQMG1Lm_upb_ucPxiCucAxJz8j_4sfs5p5rPp7BFfy2c3_TT4vD_fvG5qnju46PI7rprtA920sF33H2qyjvZzYMpNrmE1LiSS5EtLUSx4zomZemGFGJyy60KrZXV9qmixM8Bezy3YeI4gibAIRI3KSbH-5k5CzvckuLXwGmb2qFdmwAGBw3dRZUrOZG1hEr_Vg5VO15wjLou_N1MEeqJ0pl6U7vfkHNH442W37IkbpzEGx-ZJXW34Fv1TH0bSnBn28kOcLd2EGT5g969Lt_TKFYWAT9nEBOaPQYLKyWCGdw13vw8g2rBMSwvG5Xlzv9hbQGog4qA1?_z=4608239&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.238:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /impression/X5oP0BHcNEauVGTesCq78T7v3HSoMRl0nP5gqQx9lIo3WrSjEwc_Y8kjDNQcPSZATGnlDCn0Dd_FH_X_aQt-VeZlq4bgIw2hKuEpBXgQwvQtfLF4VsrCkju_tuoPBORAFRyt5JlztU2wrh_lQjVMhBX_csZmYbNW_UNikl6XyiDsNX20dq-bJpjclT1esX7bTu88Wj1mVu0Uy94FXYTjR9PqvCAue1hJcJOwpER27Fbvew81IoV2cljBqvgC1qlNe-C8ypbzkh67w9BDYPJ1kJPWQMG1Lm_upb_ucPxiCucAxJz8j_4sfs5p5rPp7BFfy2c3_TT4vD_fvG5qnju46PI7rprtA920sF33H2qyjvZzYMpNrmE1LiSS5EtLUSx4zomZemGFGJyy60KrZXV9qmixM8Bezy3YeI4gibAIRI3KSbH-5k5CzvckuLXwGmb2qFdmwAGBw3dRZUrOZG1hEr_Vg5VO15wjLou_N1MEeqJ0pl6U7vfkHNH442W37IkbpzEGx-ZJXW34Fv1TH0bSnBn28kOcLd2EGT5g969Lt_TKFYWAT9nEBOaPQYLKyWCGdw13vw8g2rBMSwvG5Xlzv9hbQGog4qA1?_z=4608239&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=1&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Cookie: OAID=82a2089c86e741318a3e240507c9fbda
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:05:01 GMT
content-type: image/gif
content-length: 43
x-trace-id: 595959000f997959fdff2347ae4e4e49
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc683e61e63df92799aa274fdac42cd3b 191aeec95861fa8596a90a10c60b22434431c033 898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:05:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc683e61e63df92799aa274fdac42cd3b 191aeec95861fa8596a90a10c60b22434431c033 898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:05:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 534653
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.163 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 19:34:08 GMT
expires: Thu, 14 Sep 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 534653
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc683e61e63df92799aa274fdac42cd3b 191aeec95861fa8596a90a10c60b22434431c033 898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 00:05:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| use.fontawesome.com/releases/v5.8.2/css/all.css | 172.64.132.15 | 200 OK | 0 B |
URL HTTP/2use.fontawesome.com/releases/v5.8.2/css/all.css IP172.64.132.15:0
GET /releases/v5.8.2/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: text/css
x-amz-id-2: oj6No7otc6m5TMKWDphEpthUv0JxqXNTxKhV+p4jnBcRaWBKTZZu+eRKsoUl+AXXhUbYUgJP8i4=
x-amz-request-id: ZFHH2FY22GP2Z6ZW
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:47:00 GMT
etag: W/"77cbad34e5ce95e70847b074e05faeab"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 98216
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b0btQjwOKUmy7766ByP4XjSfERPDW8drQEDIcgHzMbzHCegC5mF7OZp9Pk7zkcl%2FJtFjcjTLnHkHDhxKM3eR%2BFz%2Fi7rU4WwOjaFGzll0%2BDDo%2FAeJbo9u%2BVO3CzPaawEk4HLCAFlB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74de8bd52a02e67c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rndskittytor.com/400/4608239 | 139.45.197.238 | 200 OK | 0 B |
URL HTTP/2rndskittytor.com/400/4608239 IP139.45.197.238:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /400/4608239 HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: application/javascript
x-trace-id: 9183c616e3cdaf89dff376c7bbd4a322
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=fe7390f4c65f45e887b999b14e86b039; expires=Thu, 21 Sep 2023 00:04:55 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| i.egy-best.net/watch.php?vid=83b2646b0 | 104.21.37.203 | 503 Service Unavailable | 0 B |
URL HTTP/2i.egy-best.net/watch.php?vid=83b2646b0 IP104.21.37.203:0
GET /watch.php?vid=83b2646b0 HTTP/1.1
Host: i.egy-best.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 503 Service Unavailable
date: Wed, 21 Sep 2022 00:04:53 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KqqmpRaprVEdBv1zFxeTThUl5FnRXkVD3a2YGPPbL4OOhSsbHvL2U%2BgKy0p%2Ft581eYX0Rv0WeIhOs5tx9Xorwk9ZHhcwzp0SHOTPxmPHhc2cBK%2BxJbd0uqMoqBiX3Z71uQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74de8bc86a1dfac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| i.egy-best.net/favicon.ico | 104.21.37.203 | 503 Service Unavailable | 0 B |
URL HTTP/2i.egy-best.net/favicon.ico IP104.21.37.203:0
GET /favicon.ico HTTP/1.1
Host: i.egy-best.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://i.egy-best.net/watch.php?vid=83b2646b0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 503 Service Unavailable
date: Wed, 21 Sep 2022 00:04:53 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5KEDjN2Yu4Nh5bWKUvGIKvzTaJ2R5jYqfpIzR0dWiPiQADKZN2M0qJiLNz%2FOauszOgkEYrff7HcPYn6nyxbmfKIZJp%2F5nZwKfANV8RL7v5ax2n2Ikstd8QzRCk36IdQSMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74de8bc98a6cfac4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| eephaush.com/5/4601741 | 139.45.197.236 | 200 OK | 0 B |
IP139.45.197.236:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /5/4601741 HTTP/1.1
Host: eephaush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: application/javascript
x-trace-id: 1e0733dcf1d5020437e855ab1ba29275
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=82a2089c86e741318a3e240507c9fbda; expires=Thu, 21 Sep 2023 00:04:55 GMT; path=/; secure; SameSite=None
oaidts=1663718695; expires=Thu, 21 Sep 2023 00:04:55 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| glizauvo.net/401/4874273 | 139.45.197.236 | 200 OK | 0 B |
IP139.45.197.236:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /401/4874273 HTTP/1.1
Host: glizauvo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: application/javascript
x-trace-id: 1cf75cb43484e47c0749867e2178852b
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=d490bbc7cafa47299fcf5846f8345a9e; expires=Thu, 21 Sep 2023 00:04:55 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| tzegilo.com/stattag.js | 104.21.84.149 | 200 OK | 0 B |
IP104.21.84.149:0
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:18:11 GMT
etag: W/"62ebe333-8007"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1269
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vC%2BjATVcOFI6bi%2Fs1r0lh23dXuLcHYXD4os%2BluS8gWFRdlxgF31TkM2PC37SY0Bl7iOpu5gfNBP9CUxEx5413kStYD1p%2FZ1Jukc2bAn55KBiTAQ8ZCje9iClhtaJgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74de8bd90b90b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| rndskittytor.com/500/4608239?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false | 139.45.197.238 | 200 OK | 0 B |
URL HTTP/2rndskittytor.com/500/4608239?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false IP139.45.197.238:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /500/4608239?excludes=&oaid=82a2089c86e741318a3e240507c9fbda&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=0&pl=https%3A%2F%2Fegy.egy-best.net%2Fwatch.php%3Fvid%3D83b2646b0&drf=https%3A%2F%2Fi.egy-best.net%2F&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false HTTP/1.1
Host: rndskittytor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://egy.egy-best.net
Connection: keep-alive
Referer: https://egy.egy-best.net/
Cookie: OAID=fe7390f4c65f45e887b999b14e86b039
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 00:04:56 GMT
content-type: application/javascript
x-trace-id: 20a6d9531914cb9869e628c53f7bec5e
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://egy.egy-best.net
access-control-expose-headers: Link
access-control-allow-credentials: true
set-cookie: OAID=82a2089c86e741318a3e240507c9fbda; expires=Thu, 21 Sep 2023 00:04:56 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 0 B |
URL HTTP/2netdna.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js IP104.18.10.207:0
GET /bootstrap/3.2.0/js/bootstrap.min.js HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://egy.egy-best.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 00:04:55 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 718, 718
last-modified: Mon, 25 Jan 2021 22:03:57 GMT
cdn-cachedat: 2021-04-23 06:51:03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: fc677afec6931d1ef989be7fcd53b7bc
cdn-cache: HIT
cf-cache-status: HIT
age: 11829006
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74de8bd54f30b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
104.21.37.203