| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash5ceaca9fd4ad000cb435820812fc69c8 8168397aaf7b572c89a9c83f46c0b65e4ac509f2 9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2472
Expires: Wed, 07 Dec 2022 04:11:01 GMT
Date: Wed, 07 Dec 2022 03:29:49 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf83c5e33ba42e312ee398848bbb711f5 caa1fd23b1fbbe883292ded04404c1cfd861eb09 106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1066
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:29:49 GMT
Last-Modified: Wed, 07 Dec 2022 03:12:03 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 03:18:44 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 665
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha0abf10fb7e96c1c98dacf2f013a68b4 acdd839bce85eadc78a8e821e32e00a958d5c0c8 b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9162
Expires: Wed, 07 Dec 2022 06:02:31 GMT
Date: Wed, 07 Dec 2022 03:29:49 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UOIq4RuzqB5qKNztVDBFe6wCii1VC0uc2w2e6DijrhrYwp4aMw4Hw8GNr+Q+V0DgQqXg6O9n8h0=
x-amz-request-id: ZQ8288M8R3VKHTRP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 02:47:20 GMT
age: 2549
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| book.dypics.com/search/Sense |  188.114.97.1 | 301 Moved Permanently | 171 B |
URL HTTP/1.1book.dypics.com/search/Sense IP188.114.97.1:0
File typeHTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text Hash0e186da9d383d6bb276353857bea3119 e0bce763cc7c2122fcf9d1c7aab6c52a7717f38f 80b4b7e30958c4003adcb016e146e47a154beab6da859c65960b89853d659443
GET /search/Sense HTTP/1.1
Host: book.dypics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 07 Dec 2022 03:29:49 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.torrentkitty.lol/search/search/Sense
X-Powered-By: ASP.NET
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YnS0sJzAmcn53eyu6j0VonaTcpL3vDm4qUZiWa4eqptctPaYEs6BHhfrEzuK8P8YrLt6N3H5VkHVLKee8mzpofL55IelUdHY%2FeTg8F1ahzA1NH9IZnVdv9PbgvoY3LrOIV8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 775a2ddc9d7db4f1-OSL
alt-svc: h2=":443"; ma=60
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 03:29:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 03:11:20 GMT
cache-control: public,max-age=3600
age: 1110
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash0f7dcaa590e32cfd1c075255188d5f06 d4bb4954fefdb3b59560b54adf500e806e252e39 195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1046
Cache-Control: max-age=107666
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:29:50 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 09:24:16 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 34.218.168.248 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.218.168.248:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6JMetFkgtE1XMk6b3OA/wQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: MQl3FMoNkzYOg4ZnY9QT0X0Gk3A=
|
|
| a.exdynsrv.com/popunder1000.js | 205.185.216.42 | 200 OK | 41 kB |
URL HTTP/1.1a.exdynsrv.com/popunder1000.js IP205.185.216.42:0
File typeUnicode text, UTF-8 text, with very long lines (65533), with no line terminators Hash38c589803dedbec4ae0a9d4792946942 09aa6664c284ed9b20f53763dfded84eb01545fe 366ed957141a01d5e325897c76d8c8eb6a33490f1f038be144b32792ca39fd09
GET /popunder1000.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 40934
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"2ca7f70f5b8e8b292b24e1040ee"
X-HW: 1670383791.dop020.sk1.t,1670383791.cds234.sk1.shn,1670383791.dop020.sk1.t,1670383791.cds001.sk1.c
Access-Control-Allow-Origin: *, *
|
|
| get.geojs.io/v1/ip/geo.js | 104.26.0.100 | 200 OK | 14 kB |
URL HTTP/2get.geojs.io/v1/ip/geo.js IP104.26.0.100:0
File typeASCII text, with very long lines (306) Hash5f0532bd7d7de0f8444542c3d03a9b05 afbb033fe54569f01639a964bf7b69a4a539dfe5 15dd8b2aff77b058c596e7a5a36c278f2fbdb592ecc87bef596f610f077e7726
GET /v1/ip/geo.js HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:51 GMT
content-type: application/javascript; charset=utf-8
x-request-id: 8611eb6533e69737cdc6d380db49b81f-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XpSwK1vc3nS0VdBHb7K%2BdUhqhd8novUzbfORbEIQTswaBgbtIgvzlm3UvcZfar2%2B83gCGewCGvJKYGQyxQau4zoHOMuDK8%2BknOh6Al3%2Fc6m6ShG5bjD64dLWOugxuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 775a2de5cf130b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 1.0 kB |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasheecad5e26919bbad4fda10b31e8f020a 8acf1bb99110017dfba1090f4a7fe471932f2092 0243a652f92d3968e0a2dda39d7c1dd9f2a123f92d8e37bdb98d6e676abb339e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AFA50DA08E95AEBA1EA677C0F37E25BEAF1707A4F71BA904E3E2E1F3A6E047BE"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4156
Expires: Wed, 07 Dec 2022 04:39:07 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf7c5a1f3006d8ef0c695c4d1a38d513b c442d81094d9a85197e454ce149aa815816d71f5 594cae488080ab8c75ae0a2a7f56b45e9f394faad60a49eb4d0ce27448014394
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "594CAE488080AB8C75AE0A2A7F56B45E9F394FAAD60A49EB4D0CE27448014394"
Last-Modified: Tue, 06 Dec 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14366
Expires: Wed, 07 Dec 2022 07:29:17 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| charmshoist.com/26/ca/06/26ca065a5fb871c74739646a26f0622b.js | 173.233.137.44 | 200 OK | 13 kB |
URL HTTP/1.1charmshoist.com/26/ca/06/26ca065a5fb871c74739646a26f0622b.js IP173.233.137.44:0
File typeASCII text, with very long lines (37126), with no line terminators Hash0d9ee7c43520f969d7ef485c589215af bdfd78b56e070f28433984518b02ce8fda1d7d70 7ec2cd246ccc6615fd0361f5d8d9a0a61437dd300959086e7a0466c2f0b86163
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /26/ca/06/26ca065a5fb871c74739646a26f0622b.js HTTP/1.1
Host: charmshoist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 28b81fb7e6fb85adfca51ad8a1692d38
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| accentneglectporter.com/80497e49a2c17fe3a1aff4077eee1810/invoke.js | 173.233.137.52 | 200 OK | 9.8 kB |
URL HTTP/1.1accentneglectporter.com/80497e49a2c17fe3a1aff4077eee1810/invoke.js IP173.233.137.52:0
File typeexported SGML document, ASCII text, with very long lines (26953), with no line terminators Hash8506572ea98b7deed775fd14c13efeb5 acd8fbdf314ae088b2ee2d3c3df17cd4cbf030b8 d9f01a13a0b973503780de63b0d0600f9e9b687303b401d9ad0380e015894a29
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /80497e49a2c17fe3a1aff4077eee1810/invoke.js HTTP/1.1
Host: accentneglectporter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2539125e1016c73d21ee0b6867962661
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.165 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.165:0
Hash975d829b6c1182baa9059ef46ba71c89 4cad25f5dc5997779e9bde153551bf7fa3481938 5a23467d164713da6a0ba9cff3d114780c255f12696ad50c3efc214c8895ee64
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 07 Dec 2022 03:29:51 GMT
Etag: "638f4418-1d7"
Last-Modified: Wed, 07 Dec 2022 01:44:54 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lSSREUOzKUhfBZojwqolXLlme4pS9RtCzGFfPo5V7qfnQkEBfGdJVQ==
Age: 6297
|
|
| ocsp.sectigo.com/ |  104.18.32.68 | 200 OK | 472 B |
IP104.18.32.68:0
Hash0be73f837e6aeb740e5c608fb17237b5 4dfd1104c0558f35d83b35ca08e4874052be4bc7 9f57778d4b2af1df4ee9000e3be98a38927c78d4d61b8a70f7a6499c2842fa89
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 03:29:51 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 06:34:05 GMT
Expires: Tue, 13 Dec 2022 06:34:04 GMT
Etag: "4dfd1104c0558f35d83b35ca08e4874052be4bc7"
Cache-Control: max-age=528852,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 775a2de93be6b505-OSL
|
|
| simplewebanalysis.com/stats |  52.28.211.11 | 200 OK | 40 B |
URL HTTP/2simplewebanalysis.com/stats IP52.28.211.11:0
File typeASCII text, with no line terminators Hasha61fbefa0cfd6a555424f1b7dae13bbb 40c23887a6f0bc518ee0831202cd17e8e10a858a 489ff6dc86699874a5c38edc7c785856368f78149f7c236770f486b5214827a7
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
set-cookie: uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; expires=Sat, 04 Dec 2032 03:29:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| simplewebanalysis.com/stats | 52.28.211.11 | 200 OK | 40 B |
URL HTTP/2simplewebanalysis.com/stats IP52.28.211.11:0
File typeASCII text, with no line terminators Hasha61fbefa0cfd6a555424f1b7dae13bbb 40c23887a6f0bc518ee0831202cd17e8e10a858a 489ff6dc86699874a5c38edc7c785856368f78149f7c236770f486b5214827a7
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3115dd5bc8b3f10f7a5bdac8a4d6d579 3c8fca862ef564894e6a226312319b638f56daf2 e123ed36a240c987e233bcba017c41294e1cd01a88fdb68f99a1926049c0bb81
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "E123ED36A240C987E233BCBA017C41294E1CD01A88FDB68F99A1926049C0BB81"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14567
Expires: Wed, 07 Dec 2022 07:32:38 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| secure.statcounter.com/counter/counter.js | 104.20.219.77 | 200 OK | 15 kB |
URL HTTP/2secure.statcounter.com/counter/counter.js IP104.20.219.77:0
File typeASCII text, with very long lines (43632), with no line terminators Hash63350f3f526332b81bd8bbad3f783f65 f340d07936b1b6831c3631949588db2042e6ce2f 682b7b83fe0f2ff5e6c491a92fab25893c713b687083887abee316fe62a328ba
GET /counter/counter.js HTTP/1.1
Host: secure.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:51 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 18:49:39 GMT
etag: W/"6388f743-aa70"
expires: Wed, 07 Dec 2022 06:33:32 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 32179
server: cloudflare
cf-ray: 775a2dea7ba8b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash1ab1615b2c8cc26b12fc0cf41734ff07 a7d54b3709ce75a20210e20013e6f06b0aa88e2d 22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6401
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 03:29:51 GMT
Connection: keep-alive
|
|
| www.cloudflare.com/cdn-cgi/trace | 104.16.123.96 | 200 OK | 5.5 kB |
URL HTTP/2www.cloudflare.com/cdn-cgi/trace IP104.16.123.96:0
Hash360b797fc13f92c908a791aa0a2d91e4 02607b4ed3e0b67ed1b8a65e77234c6cd44d6a82 8c12c006f037a6df42d57bbe60cc86cb977e13ecadf53d572d8110492e601111
GET /cdn-cgi/trace HTTP/1.1
Host: www.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:51 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 775a2deb3dd9b524-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe95ebce9d79ba46cb96af9a45af1762f 985c6761675e6bcc0186f64d55f94cf09352f05c 5837d6bf31e57f955ba2577f112281cc33a5502b358c83192f4e396b57042ac0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22142ca2-85b4-47d4-8eaa-fcf2823b2c28.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8438
x-amzn-requestid: 0f5d1b0e-1193-4006-8a54-555681d9f62e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlqVGMjoAMFS6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb641-6366ea6464122d857407cdff;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:38:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2j9gqNvWYRFM-li9Nj4nLAWe_eKWMSwagPgU3eAtk0pjcJUX4Q8XEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:40 GMT
etag: "985c6761675e6bcc0186f64d55f94cf09352f05c"
content-type: image/jpeg
age: 20051
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg | 34.120.237.76 | 200 OK | 15 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4884ce2731d3033b12e4792c1bbf453e 63b6efc98cb04228d82ac28fceb97bb1cf8d82fb 8c37704d0e1fd16239e28cbdb88c5ac6a2e9cfb70f8457bfab127202f89d3788
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F167b7461-ee08-4205-a299-12e7c883b958.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14896
x-amzn-requestid: 58d94b15-dce0-44c0-96b1-917f1206a39e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnA4RFkeoAMFfGQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c4834-7c1667b53795d5c11a3bfdda;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:11:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gKrU6wAuRsrr4_VwxjHIsTHjAB_L3xy6VQPRFBTUrK4vd7ycP3kyig==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:46:26 GMT
age: 71005
etag: "63b6efc98cb04228d82ac28fceb97bb1cf8d82fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0a317faf49d8e057d1da40f9441b6c30 f01497a3eef693b70b18885156f63c9c7305ed7e 5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1go6MAGUUThlH59lQ8FRciYwPrzYJbcTKlNPmzqxNWynDV7SHrwmTw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:47:40 GMT
age: 78131
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg | 34.120.237.76 | 200 OK | 8.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb89a7fe1080499e4f7171f962b57fec4 62ef59be034071e667e3476ea0740077c86778c1 e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:06 GMT
age: 20085
etag: "62ef59be034071e667e3476ea0740077c86778c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha0f0782df385287698881f1c19e79b96 5a25f245b594f6cbf2fdaeed2463ac5fbc08068a 4f795cd2286e194cd96751e6a4e3bd0da09c6db5344182e51986b65149e75cd7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8579
x-amzn-requestid: 0efa303a-364e-488d-beac-24836c7c1e4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlirE2KoAMFX9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb610-5564a0c0264ed36f0497e17e;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xpzGji_JAWkUjhXLouXWlin6rV-44shz6Z_STqo7uK7ZUV2PWs7Zpg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:54:15 GMT
age: 20136
etag: "5a25f245b594f6cbf2fdaeed2463ac5fbc08068a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash091409746aa7135b281ed1cc81acffd4 b08da33cdfe0b31662443d2b04740c063aba0aa1 bdaeaa7fba598bf5bb567dd0aac8d7eb5d647a6c210cbba67e37b3c5202aa888
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDAEAA7FBA598BF5BB567DD0AAC8D7EB5D647A6C210CBBA67E37B3C5202AA888"
Last-Modified: Mon, 05 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4731
Expires: Wed, 07 Dec 2022 04:48:43 GMT
Date: Wed, 07 Dec 2022 03:29:52 GMT
Connection: keep-alive
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3115dd5bc8b3f10f7a5bdac8a4d6d579 3c8fca862ef564894e6a226312319b638f56daf2 e123ed36a240c987e233bcba017c41294e1cd01a88fdb68f99a1926049c0bb81
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "E123ED36A240C987E233BCBA017C41294E1CD01A88FDB68F99A1926049C0BB81"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14566
Expires: Wed, 07 Dec 2022 07:32:38 GMT
Date: Wed, 07 Dec 2022 03:29:52 GMT
Connection: keep-alive
|
|
| swelltomatoesguess.com/watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1 | 173.233.139.164 | 307 Temporary Redirect | 0 B |
URL HTTP/1.1swelltomatoesguess.com/watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1 IP173.233.139.164:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1 HTTP/1.1
Host: swelltomatoesguess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.torrentkitty.lol
Access-Control-Allow-Origin: https://www.torrentkitty.lol
Access-Control-Allow-Credentials: true
Location: https://swelltomatoesguess.com/watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1&shu=55216505ee63f52552172bcd0c3082bfe2716c2d035584665e2adcdd9c5cbdd24e71182354e8bc94cf7a55a64e8ac4ab589e19d7eb179c100b9e5dc0d59971483a409df59a882d21fb0b75108a9ad10b5751af2c745f2525d2a83494889c&pst=1670383852&rmtc=t
Set-Cookie: u_pl=17298897; expires=Thu, 08 Dec 2022 03:29:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.QxIHez8hZA256eda80j8mEuhLemD9JIvx9YfK4B6eYg; expires=Wed, 07 Dec 2022 03:30:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e71ebf724e281ef24d5a83818e0f714d
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| swelltomatoesguess.com/watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1&shu=55216505ee63f52552172bcd0c3082bfe2716c2d035584665e2adcdd9c5cbdd24e71182354e8bc94cf7a55a64e8ac4ab589e19d7eb179c100b9e5dc0d59971483a409df59a882d21fb0b75108a9ad10b5751af2c745f2525d2a83494889c&pst=1670383852&rmtc=t | 173.233.139.164 | 200 OK | 2.1 kB |
URL HTTP/1.1swelltomatoesguess.com/watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1&shu=55216505ee63f52552172bcd0c3082bfe2716c2d035584665e2adcdd9c5cbdd24e71182354e8bc94cf7a55a64e8ac4ab589e19d7eb179c100b9e5dc0d59971483a409df59a882d21fb0b75108a9ad10b5751af2c745f2525d2a83494889c&pst=1670383852&rmtc=t IP173.233.139.164:0
File typeHTML document text\012- HTML document, ASCII text, with very long lines (2635) Hash0edfca5fb6014b672da82f41f92f2ac0 e13e989c6c857c2aad17fd0481f53a62eeafabea 2c431b8d3687dfc89a092b6716317d7cc390cb4e989eacbad4d70fbae8f81c2f
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /watch.1552526855588.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2FSense&tz=0&dev=e&res=12.1055&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1&shu=55216505ee63f52552172bcd0c3082bfe2716c2d035584665e2adcdd9c5cbdd24e71182354e8bc94cf7a55a64e8ac4ab589e19d7eb179c100b9e5dc0d59971483a409df59a882d21fb0b75108a9ad10b5751af2c745f2525d2a83494889c&pst=1670383852&rmtc=t HTTP/1.1
Host: swelltomatoesguess.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Referer: https://www.torrentkitty.lol/
Connection: keep-alive
Cookie: u_pl=17298897; ain=eyJhbGciOiJIUzI1NiJ9.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.QxIHez8hZA256eda80j8mEuhLemD9JIvx9YfK4B6eYg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.torrentkitty.lol
Access-Control-Allow-Origin: https://www.torrentkitty.lol
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; expires=Wed, 14 Dec 2022 03:29:52 GMT; secure; SameSite=None
iprcaeefbeb900101168bfb203589c9b561d=3570421; expires=Wed, 07 Dec 2022 07:29:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 08 Dec 2022 03:29:52 GMT; secure; SameSite=None
uncs=1; expires=Thu, 08 Dec 2022 03:29:52 GMT; secure; SameSite=None
pdhtkv32=true; expires=Thu, 08 Dec 2022 03:29:52 GMT; secure; SameSite=None
uncs32=1; expires=Thu, 08 Dec 2022 03:29:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 49c0937e425138cf9ea7424b41581a74
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf371fd6cbe04abe5f0d8679af1f2a998 ac95c5a39304a338b963d591a374bd667c836143 bb563352d50a6732df1045dcf54d5242f7609753538c26735456fef24a4692e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB563352D50A6732DF1045DCF54D5242F7609753538C26735456FEF24A4692E9"
Last-Modified: Tue, 06 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10411
Expires: Wed, 07 Dec 2022 06:23:23 GMT
Date: Wed, 07 Dec 2022 03:29:52 GMT
Connection: keep-alive
|
|
| cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg | 45.133.44.9 | 200 OK | 25 kB |
URL HTTP/2cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg IP45.133.44.9:0 ASN#39572 DataWeb Global Group B.V.
File typeJPEG image data, baseline, precision 8, 320x50, components 3\012- data Hashd465d02b90e928dfd9d9846e102a9dac 22f7333777bec813bd9a7b870913a2b79b6d2fe4 e393d4f1c6b5d4973e157f0f10764b92037dc18239500f42b72bed8ecef462fd
GET /cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:52 GMT
content-type: image/jpeg
content-length: 24714
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 14:06:18 GMT
etag: "62e1465a-608a"
expires: Fri, 09 Dec 2022 03:29:52 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash932c342bdac10955a7a4526b617b265e f62040d987f22ab35fa2984e55ce26a78f91c6c0 30a223bb84e4f11a13a48b558f14b7721e0f9e2b029bc8be08e3a2d50ea92e89
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "30A223BB84E4F11A13A48B558F14B7721E0F9E2B029BC8BE08E3A2D50EA92E89"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13540
Expires: Wed, 07 Dec 2022 07:15:32 GMT
Date: Wed, 07 Dec 2022 03:29:52 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 851 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd1b499f317f2bebeeb3216af5f9ea228 d0ff028ab8fd176e22167e93826f71cea34f8f73 4f5adbce060aeb5068e25eb3f592ebe766f3b3615cd6eba70d3a8824aaf87828
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "546F530032E8C8CD6E51D1ADB173E194CEF6610EE425B44FA57BDD153AAAB079"
Last-Modified: Tue, 06 Dec 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13374
Expires: Wed, 07 Dec 2022 07:12:47 GMT
Date: Wed, 07 Dec 2022 03:29:53 GMT
Connection: keep-alive
|
|
| unseenreport.com/pxf.gif?uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=26ca065a5fb871c74739646a26f0622b&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3 | 192.243.61.227 | 200 OK | 1 B |
URL HTTP/1.1unseenreport.com/pxf.gif?uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=26ca065a5fb871c74739646a26f0622b&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /pxf.gif?uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=26ca065a5fb871c74739646a26f0622b&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=3 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:52 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5dc4327088c2600bdf9d4529ae650e3c
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| hygieneretorted.com/sbar.json?key=26ca065a5fb871c74739646a26f0622b&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1 | 192.243.61.227 | 200 OK | 3.6 kB |
URL HTTP/1.1hygieneretorted.com/sbar.json?key=26ca065a5fb871c74739646a26f0622b&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
File typeJSON data\012- , ASCII text, with very long lines (6289), with no line terminators Hash887ef5f99ed750ee591da1f7ef5955fb abdd40e2ad77fd6f83873e32b11b6239e4892658 13e46f880c5ded35fde1f5ddb78bc0b2888f821a47061a3458594664ad6384a5
GET /sbar.json?key=26ca065a5fb871c74739646a26f0622b&uuid=159fcc4a-9411-4eed-9a79-e273ab3f3e54%3A3%3A1 HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:53 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.torrentkitty.lol
Access-Control-Allow-Origin: https://www.torrentkitty.lol
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17550729; expires=Thu, 08 Dec 2022 03:29:53 GMT; secure; SameSite=None
uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; expires=Wed, 14 Dec 2022 03:29:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 08 Dec 2022 03:29:53 GMT; secure; SameSite=None
uncs=1; expires=Thu, 08 Dec 2022 03:29:53 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 08 Dec 2022 03:29:53 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 08 Dec 2022 03:29:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3f8e59b772330602018ebaf7a930882c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashea6d8022d3d0fcb1a655c111694efb3c 0565f1dae70afb9f7d231824a488de4f262218f0 198fc3e66c5d81029e6781d76d0eb5bf8a3c8ae92aa3aa6a7f0fda6d95658a76
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "198FC3E66C5D81029E6781D76D0EB5BF8A3C8AE92AA3AA6A7F0FDA6D95658A76"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9217
Expires: Wed, 07 Dec 2022 06:03:30 GMT
Date: Wed, 07 Dec 2022 03:29:53 GMT
Connection: keep-alive
|
|
| cdn.barscreative1.com/sb/au/f1/01/0a/f1010a9807a81827606e49543c46403d/1664530497.html | 45.133.44.4 | 200 OK | 990 B |
URL HTTP/2cdn.barscreative1.com/sb/au/f1/01/0a/f1010a9807a81827606e49543c46403d/1664530497.html IP45.133.44.4:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document text\012- HTML document, ASCII text Hash881c56146d897e639c044e77c574ef7d 47c57dbb1d0e9cc95ef3e638968d3028b71a5394 5a05ae488cf54def0771fab792a39838d7893fe0b7206bcd0c8a8d7eb08bba60
GET /sb/au/f1/01/0a/f1010a9807a81827606e49543c46403d/1664530497.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:53 GMT
content-type: text/html; charset=utf-8
content-length: 990
server: nginx/1.17.6
last-modified: Fri, 30 Sep 2022 09:35:01 GMT
etag: "6336b845-3de"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
expires: Wed, 07 Dec 2022 04:29:53 GMT
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hygieneretorted.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scxRevTvKFL%2BYgBi8exDl4UHFnu3u6Z7YTIRhjQjBmYxINeJHqqurdcmq6mqrq6dklYDAg8SBMTnrs%2BcwmixrU%2FAGCdLxIUNjxIHtw%2FSOEnGV2B0bfod97%2FXmHz4%2F6bFIeEB8l3b%2F6rt6WStHVuO23Xrkpc64r27pyoxX4bf9M66bMu9GZ1mj%2BMcPTgR%2B3%2FVdbFwXr69XQD3w%2F8IPWBWlEpkerhyhk8TAJ2onfjsJ2EEcYmf%2FutvRgqQc%2BPCCnIPnsf5u%2FPIJkDfLBD%2BeF7TtdvP72oFTUaYMh330%2F7%2Be6yjFYjpnxkOW7i2toOyPkq2PQ%2Be5CAfRwZ64AqZwR748Aab67oIl0eP%2BIaaogcqT8JKphA6EaSNqA6TuQfI8AjOPKOvLBgyvaVHTrCKVzdEZOPP0bspqRE38%2Bj3zw3TklR63rWpVO6txilNWQowZyo0FRPobb9iCrx2DuU0j%2BG1l9ehn5YGfdKg3J918O4iRjLKIrSRQEK5EQfCWhvWRFhL0OTTtZR8TRoUVSNpBZAyXGoPY4SuuhlB7KzENZeBjw%2FRaNk8z3e1madTprEWOs02EsXuvymHeitcxHyeYaxnDFGEyNwcxtFOY2%2BvLeXnwKpvwJdrOG5cdg3Yx4732CIa9RCYLKElSUoJIElSOohvV9rmxo6wdc2TINFj1c9E491W5jQu9rtyFyMikOyHNz%2F7yTv36OvthvhV1G%2FW5M4yxd6wWsF%2FU6STfq0rCb%2Bd0wTGFlDWmPgVoP2%2FMw37iHQu49exEpbWBVAyZPgZYvglbTXuiDbk6jNR%2Fb%2BfdOGyNy15fObbXdEFzXKNwJuC1vog7IC4dBnj75GgR7cvbLL9b%2FOsM%2FBDM1ClPjY%2FkzwYa6O72mK7JzTVeWPFovnBzIbToP%2BbqjThz%2F5h2xVWnDL52346%2FfZHNgPj68Iay7THMu8w1Lvj0nORfmgjZMkB8v2ZsivVrazXOlycvi8tW3LlwaFEZYK3XegMq9D26ByRl55tZHh8%2F3JW8CaRqYssagfEIWBakbsOI2bLFkbzWBUcubtPBQlfXUhOnyp5IESix3mtaw%2F9rT5Tyxd7FhPFB3B%2FmgxtDUGKoaVI1hy%2BNTV5gnZ3%2FvHBZS5U1TZbydVBl178haK%2FdbIs78TPihSLMkzXrU50kWJSlNAtFLYxrA2Rkb%2F%2F%2FRPwAAAP%2F%2FAQAA%2F%2F%2BTPseylgQAAA%3D%3D | 192.243.61.227 | 200 OK | 7 B |
URL HTTP/1.1hygieneretorted.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scxRevTvKFL%2BYgBi8exDl4UHFnu3u6Z7YTIRhjQjBmYxINeJHqqurdcmq6mqrq6dklYDAg8SBMTnrs%2BcwmixrU%2FAGCdLxIUNjxIHtw%2FSOEnGV2B0bfod97%2FXmHz4%2F6bFIeEB8l3b%2F6rt6WStHVuO23Xrkpc64r27pyoxX4bf9M66bMu9GZ1mj%2BMcPTgR%2B3%2FVdbFwXr69XQD3w%2F8IPWBWlEpkerhyhk8TAJ2onfjsJ2EEcYmf%2FutvRgqQc%2BPCCnIPnsf5u%2FPIJkDfLBD%2BeF7TtdvP72oFTUaYMh330%2F7%2Be6yjFYjpnxkOW7i2toOyPkq2PQ%2Be5CAfRwZ64AqZwR748Aab67oIl0eP%2BIaaogcqT8JKphA6EaSNqA6TuQfI8AjOPKOvLBgyvaVHTrCKVzdEZOPP0bspqRE38%2Bj3zw3TklR63rWpVO6txilNWQowZyo0FRPobb9iCrx2DuU0j%2BG1l9ehn5YGfdKg3J918O4iRjLKIrSRQEK5EQfCWhvWRFhL0OTTtZR8TRoUVSNpBZAyXGoPY4SuuhlB7KzENZeBjw%2FRaNk8z3e1madTprEWOs02EsXuvymHeitcxHyeYaxnDFGEyNwcxtFOY2%2BvLeXnwKpvwJdrOG5cdg3Yx4732CIa9RCYLKElSUoJIElSOohvV9rmxo6wdc2TINFj1c9E491W5jQu9rtyFyMikOyHNz%2F7yTv36OvthvhV1G%2FW5M4yxd6wWsF%2FU6STfq0rCb%2Bd0wTGFlDWmPgVoP2%2FMw37iHQu49exEpbWBVAyZPgZYvglbTXuiDbk6jNR%2Fb%2BfdOGyNy15fObbXdEFzXKNwJuC1vog7IC4dBnj75GgR7cvbLL9b%2FOsM%2FBDM1ClPjY%2FkzwYa6O72mK7JzTVeWPFovnBzIbToP%2BbqjThz%2F5h2xVWnDL52346%2FfZHNgPj68Iay7THMu8w1Lvj0nORfmgjZMkB8v2ZsivVrazXOlycvi8tW3LlwaFEZYK3XegMq9D26ByRl55tZHh8%2F3JW8CaRqYssagfEIWBakbsOI2bLFkbzWBUcubtPBQlfXUhOnyp5IESix3mtaw%2F9rT5Tyxd7FhPFB3B%2FmgxtDUGKoaVI1hy%2BNTV5gnZ3%2FvHBZS5U1TZbydVBl178haK%2FdbIs78TPihSLMkzXrU50kWJSlNAtFLYxrA2Rkb%2F%2F%2FRPwAAAP%2F%2FAQAA%2F%2F%2BTPseylgQAAA%3D%3D IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scxRevTvKFL%2BYgBi8exDl4UHFnu3u6Z7YTIRhjQjBmYxINeJHqqurdcmq6mqrq6dklYDAg8SBMTnrs%2BcwmixrU%2FAGCdLxIUNjxIHtw%2FSOEnGV2B0bfod97%2FXmHz4%2F6bFIeEB8l3b%2F6rt6WStHVuO23Xrkpc64r27pyoxX4bf9M66bMu9GZ1mj%2BMcPTgR%2B3%2FVdbFwXr69XQD3w%2F8IPWBWlEpkerhyhk8TAJ2onfjsJ2EEcYmf%2FutvRgqQc%2BPCCnIPnsf5u%2FPIJkDfLBD%2BeF7TtdvP72oFTUaYMh330%2F7%2Be6yjFYjpnxkOW7i2toOyPkq2PQ%2Be5CAfRwZ64AqZwR748Aab67oIl0eP%2BIaaogcqT8JKphA6EaSNqA6TuQfI8AjOPKOvLBgyvaVHTrCKVzdEZOPP0bspqRE38%2Bj3zw3TklR63rWpVO6txilNWQowZyo0FRPobb9iCrx2DuU0j%2BG1l9ehn5YGfdKg3J918O4iRjLKIrSRQEK5EQfCWhvWRFhL0OTTtZR8TRoUVSNpBZAyXGoPY4SuuhlB7KzENZeBjw%2FRaNk8z3e1madTprEWOs02EsXuvymHeitcxHyeYaxnDFGEyNwcxtFOY2%2BvLeXnwKpvwJdrOG5cdg3Yx4732CIa9RCYLKElSUoJIElSOohvV9rmxo6wdc2TINFj1c9E491W5jQu9rtyFyMikOyHNz%2F7yTv36OvthvhV1G%2FW5M4yxd6wWsF%2FU6STfq0rCb%2Bd0wTGFlDWmPgVoP2%2FMw37iHQu49exEpbWBVAyZPgZYvglbTXuiDbk6jNR%2Fb%2BfdOGyNy15fObbXdEFzXKNwJuC1vog7IC4dBnj75GgR7cvbLL9b%2FOsM%2FBDM1ClPjY%2FkzwYa6O72mK7JzTVeWPFovnBzIbToP%2BbqjThz%2F5h2xVWnDL52346%2FfZHNgPj68Iay7THMu8w1Lvj0nORfmgjZMkB8v2ZsivVrazXOlycvi8tW3LlwaFEZYK3XegMq9D26ByRl55tZHh8%2F3JW8CaRqYssagfEIWBakbsOI2bLFkbzWBUcubtPBQlfXUhOnyp5IESix3mtaw%2F9rT5Tyxd7FhPFB3B%2FmgxtDUGKoaVI1hy%2BNTV5gnZ3%2FvHBZS5U1TZbydVBl178haK%2FdbIs78TPihSLMkzXrU50kWJSlNAtFLYxrA2Rkb%2F%2F%2FRPwAAAP%2F%2FAQAA%2F%2F%2BTPseylgQAAA%3D%3D HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e172797f783a3bbb78432c9fe38155e6
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 345 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf487c9656e04f6341613a2e7b770e964 b210ca7b9fc103cc101e2c05e93a5c0c3ff7f3a4 be0f18f3be762c53367f17301b85bcf92f94f7be506495fc0e31419516a8f420
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BE0F18F3BE762C53367F17301B85BCF92F94F7BE506495FC0E31419516A8F420"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=828
Expires: Wed, 07 Dec 2022 03:43:41 GMT
Date: Wed, 07 Dec 2022 03:29:53 GMT
Connection: keep-alive
|
|
| hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Ff1%2F01%2F0a%2Ff1010a9807a81827606e49543c46403d%2F1664530497.html&l=990&fd=115 | 192.243.61.227 | 200 OK | 0 B |
URL HTTP/1.1hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Ff1%2F01%2F0a%2Ff1010a9807a81827606e49543c46403d%2F1664530497.html&l=990&fd=115 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Ff1%2F01%2F0a%2Ff1010a9807a81827606e49543c46403d%2F1664530497.html&l=990&fd=115 HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.cloudimagesb.com/si/ea/ca/2f/eaca2fd9d6d02d502d6c0824987ce799/1667590017.png | 45.133.44.9 | 200 OK | 33 kB |
URL HTTP/2cdn.cloudimagesb.com/si/ea/ca/2f/eaca2fd9d6d02d502d6c0824987ce799/1667590017.png IP45.133.44.9:0 ASN#39572 DataWeb Global Group B.V.
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hash2cb2500acb00f247ef19403c3a0f89e1 7c57e8b84b2bb0003810ffae7a14e24869155464 7efcd5082673b787603d2a0b8d768fb26807cf2ab79771a69886a916d0cda3ce
GET /si/ea/ca/2f/eaca2fd9d6d02d502d6c0824987ce799/1667590017.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:53 GMT
content-type: image/png
content-length: 32763
server: nginx/1.17.6
last-modified: Fri, 04 Nov 2022 19:27:06 GMT
etag: "6365678a-7ffb"
expires: Fri, 09 Dec 2022 03:29:53 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc10bc583c46449dc192a809398b4e814 ff0f7ad905d32d7f3d01e4054552d0ad551503a5 defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:29:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashc10bc583c46449dc192a809398b4e814 ff0f7ad905d32d7f3d01e4054552d0ad551503a5 defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:29:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 345 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf487c9656e04f6341613a2e7b770e964 b210ca7b9fc103cc101e2c05e93a5c0c3ff7f3a4 be0f18f3be762c53367f17301b85bcf92f94f7be506495fc0e31419516a8f420
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BE0F18F3BE762C53367F17301B85BCF92F94F7BE506495FC0E31419516A8F420"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11374
Expires: Wed, 07 Dec 2022 06:39:28 GMT
Date: Wed, 07 Dec 2022 03:29:54 GMT
Connection: keep-alive
|
|
| hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fcss%2Fstyle.css&l=6120&fd=348 | 192.243.61.227 | 200 OK | 0 B |
URL HTTP/1.1hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fcss%2Fstyle.css&l=6120&fd=348 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fcss%2Fstyle.css&l=6120&fd=348 HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:54 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fcss%2Fanimate.css&l=79249&fd=351 | 192.243.61.227 | 200 OK | 0 B |
URL HTTP/1.1hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fcss%2Fanimate.css&l=79249&fd=351 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fcss%2Fanimate.css&l=79249&fd=351 HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:54 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashe24f2da4ed2e3cd07b0999a67550d634 6e2277e734fd0015849c3554dd2cf2ae289c2cf2 74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:29:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hashe24f2da4ed2e3cd07b0999a67550d634 6e2277e734fd0015849c3554dd2cf2ae289c2cf2 74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 03:29:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 546939
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fjs%2Fscript.js&l=398&fd=359 | 192.243.61.227 | 200 OK | 0 B |
URL HTTP/1.1hygieneretorted.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fjs%2Fscript.js&l=398&fd=359 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Fin-page_push%2Fcustom%2Fcompact%2F2%2Fjs%2Fscript.js&l=398&fd=359 HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:54 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/custom/compact/2/css/style.css | 172.64.109.13 | 200 OK | 17 kB |
URL HTTP/2cdn.creative-bars1.com/sb/ssp/in-page_push/custom/compact/2/css/style.css IP172.64.109.13:0
Hash3a07055577a219863a4d42e3fc3fa667 48121c87b2337ef40539f7b01bf6dc48d143e711 68a18f0f797e11fcf8ebcbea0e832c75934cf6a027642796c0e6108243443927
GET /sb/ssp/in-page_push/custom/compact/2/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:54 GMT
content-type: text/css
last-modified: Thu, 29 Sep 2022 11:41:27 GMT
etag: W/"63358467-17e8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SGvlQTKTk%2FL9FWCTkcbXp%2B1TgwMTIvtEeH3S%2FtYb5%2F3eqm3MNBdqB%2BSq%2Ff3Qllr%2FDfLMF1w3EJ%2Bmu7FfbQyehYkqTZpOgUcGEgdMXFFr9%2Bdp9%2B5eeiB%2B3M7UZTieSM5yY%2BUZ8lYkSyBN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a2df72e2624d1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hygieneretorted.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuuTvKDH%2BYgBi8exDl4UHFn%2B3M%2BEiEYY0IwZmMSDXiR6qrq3XJrupqq6unZJWAwIPEgTE567Hlmk0UNav4AQTpeJCjseJA9uP4RQs4yuwOj76Hf9%2B3nPTwf9dmkPCA%2BSrp%2F9V29LZWiq0nbb71yU%2BZcV7Z15UYr8Nv%2BmdZNmXfiM63R%2FGOGpwM%2Fafuvti4KtqlXQz%2Fw%2FcAPWhekEZkerR6ikMXDftDu%2B%2B04bAdJjJH5725LD5Z64MMDcgqSz%2F638csjSNYgH%2FxwXthNp4vX3x6UijptMOS77%2Bebua5yDJZjZjxk%2Be7iGtrOCPnqGHS%2Bu1AAPdyZK0AqZ8T7I0Ca7y5oIh3eP2KaKogcKT%2BJathAqAaSNmD6DiTfIwDjuLKGfPDgijYV3TpC6RydkRNP%2F4asZuTEn88jH3x3TslR67pWpZM6txhlNeSogVxvUJSP4bY9yOoxmPsUkv9GVp9eRj7YWbNKQ%2FL9l4OknzEW05V%2BHAQrsRB8pU%2B7%2FRURdiOaRlkkkvjQIikbyKyBEmNQexyl9VBKD2XmoSw8DPh%2Biyb9zPe7WZpFUS9mjEURY0mvwxMexb3MR8nmGsZwxRhMjcHMbRTmNjblvb3kFEz5E%2BxGDcuPwboZ8d77BENeoxIElSWoKEElCSpHUA3r%2B1zZ0NYPuLJlGix6uOhRPdVufULva7cucjIpDshzc%2F%2B8k79%2Bjk2x3wo7jPqdhCZZ2usGrBt3o34n7tCwk%2FmdMExhZQ1pj4FaD9vzMN%2B4h0LuPXsRKW1gVQMmT4GWL4JW027og25M456P7fx7p40RuduUzm213RBc1yjcCbgtb6IOyAuHQZ4%2B%2BRoEe3L2yy%2FW%2FjrDPwQzNQpT42P5M8G6uju9piuyc01XljxaK5wcyG06D%2Fm6o04c%2F%2BYdsVVpwy%2Bdt%2BOv32RzYD4%2BvCGsu0xzLvN1S749JzkX5oI2TJAfL9mbIr1a2o1zpcnL4vLVty5cGhRGWCt13oDKvQ9ugckZeebWR4fP9yVvAmkamLLGoHxCFgWpG7DiNmyxZG81gVHLm7TwUJX11ITp8qeSBEosd5rWsP%2Fa0%2BU8sXexbjxQdwf5oMbQ1BiqGlSNYcvjU1eYJ2d%2Fjw4LqfKmqTLeTqqMundkrZX7rSSIRS%2FtdRnnqWA86IZRL%2FL9kPO42xdBH87O2Pj%2Fj%2F4BAAD%2F%2FwEAAP%2F%2FhzZJVJYEAAA%3D | 192.243.61.227 | 200 OK | 7 B |
URL HTTP/1.1hygieneretorted.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuuTvKDH%2BYgBi8exDl4UHFn%2B3M%2BEiEYY0IwZmMSDXiR6qrq3XJrupqq6unZJWAwIPEgTE567Hlmk0UNav4AQTpeJCjseJA9uP4RQs4yuwOj76Hf9%2B3nPTwf9dmkPCA%2BSrp%2F9V29LZWiq0nbb71yU%2BZcV7Z15UYr8Nv%2BmdZNmXfiM63R%2FGOGpwM%2Fafuvti4KtqlXQz%2Fw%2FcAPWhekEZkerR6ikMXDftDu%2B%2B04bAdJjJH5725LD5Z64MMDcgqSz%2F638csjSNYgH%2FxwXthNp4vX3x6UijptMOS77%2Bebua5yDJZjZjxk%2Be7iGtrOCPnqGHS%2Bu1AAPdyZK0AqZ8T7I0Ca7y5oIh3eP2KaKogcKT%2BJathAqAaSNmD6DiTfIwDjuLKGfPDgijYV3TpC6RydkRNP%2F4asZuTEn88jH3x3TslR67pWpZM6txhlNeSogVxvUJSP4bY9yOoxmPsUkv9GVp9eRj7YWbNKQ%2FL9l4OknzEW05V%2BHAQrsRB8pU%2B7%2FRURdiOaRlkkkvjQIikbyKyBEmNQexyl9VBKD2XmoSw8DPh%2Biyb9zPe7WZpFUS9mjEURY0mvwxMexb3MR8nmGsZwxRhMjcHMbRTmNjblvb3kFEz5E%2BxGDcuPwboZ8d77BENeoxIElSWoKEElCSpHUA3r%2B1zZ0NYPuLJlGix6uOhRPdVufULva7cucjIpDshzc%2F%2B8k79%2Bjk2x3wo7jPqdhCZZ2usGrBt3o34n7tCwk%2FmdMExhZQ1pj4FaD9vzMN%2B4h0LuPXsRKW1gVQMmT4GWL4JW027og25M456P7fx7p40RuduUzm213RBc1yjcCbgtb6IOyAuHQZ4%2B%2BRoEe3L2yy%2FW%2FjrDPwQzNQpT42P5M8G6uju9piuyc01XljxaK5wcyG06D%2Fm6o04c%2F%2BYdsVVpwy%2Bdt%2BOv32RzYD4%2BvCGsu0xzLvN1S749JzkX5oI2TJAfL9mbIr1a2o1zpcnL4vLVty5cGhRGWCt13oDKvQ9ugckZeebWR4fP9yVvAmkamLLGoHxCFgWpG7DiNmyxZG81gVHLm7TwUJX11ITp8qeSBEosd5rWsP%2Fa0%2BU8sXexbjxQdwf5oMbQ1BiqGlSNYcvjU1eYJ2d%2Fjw4LqfKmqTLeTqqMundkrZX7rSSIRS%2FtdRnnqWA86IZRL%2FL9kPO42xdBH87O2Pj%2Fj%2F4BAAD%2F%2FwEAAP%2F%2FhzZJVJYEAAA%3D IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
File typeASCII text, with no line terminators Hash132d6af1b46048b45cf86cdee7991d31 eb7007d03d59b65bc6da7e098c4d38fc6dfb6285 ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSzYscxRuuTvKDH%2BYgBi8exDl4UHFn%2B3M%2BEiEYY0IwZmMSDXiR6qrq3XJrupqq6unZJWAwIPEgTE567Hlmk0UNav4AQTpeJCjseJA9uP4RQs4yuwOj76Hf9%2B3nPTwf9dmkPCA%2BSrp%2F9V29LZWiq0nbb71yU%2BZcV7Z15UYr8Nv%2BmdZNmXfiM63R%2FGOGpwM%2Fafuvti4KtqlXQz%2Fw%2FcAPWhekEZkerR6ikMXDftDu%2B%2B04bAdJjJH5725LD5Z64MMDcgqSz%2F638csjSNYgH%2FxwXthNp4vX3x6UijptMOS77%2Bebua5yDJZjZjxk%2Be7iGtrOCPnqGHS%2Bu1AAPdyZK0AqZ8T7I0Ca7y5oIh3eP2KaKogcKT%2BJathAqAaSNmD6DiTfIwDjuLKGfPDgijYV3TpC6RydkRNP%2F4asZuTEn88jH3x3TslR67pWpZM6txhlNeSogVxvUJSP4bY9yOoxmPsUkv9GVp9eRj7YWbNKQ%2FL9l4OknzEW05V%2BHAQrsRB8pU%2B7%2FRURdiOaRlkkkvjQIikbyKyBEmNQexyl9VBKD2XmoSw8DPh%2Biyb9zPe7WZpFUS9mjEURY0mvwxMexb3MR8nmGsZwxRhMjcHMbRTmNjblvb3kFEz5E%2BxGDcuPwboZ8d77BENeoxIElSWoKEElCSpHUA3r%2B1zZ0NYPuLJlGix6uOhRPdVufULva7cucjIpDshzc%2F%2B8k79%2Bjk2x3wo7jPqdhCZZ2usGrBt3o34n7tCwk%2FmdMExhZQ1pj4FaD9vzMN%2B4h0LuPXsRKW1gVQMmT4GWL4JW027og25M456P7fx7p40RuduUzm213RBc1yjcCbgtb6IOyAuHQZ4%2B%2BRoEe3L2yy%2FW%2FjrDPwQzNQpT42P5M8G6uju9piuyc01XljxaK5wcyG06D%2Fm6o04c%2F%2BYdsVVpwy%2Bdt%2BOv32RzYD4%2BvCGsu0xzLvN1S749JzkX5oI2TJAfL9mbIr1a2o1zpcnL4vLVty5cGhRGWCt13oDKvQ9ugckZeebWR4fP9yVvAmkamLLGoHxCFgWpG7DiNmyxZG81gVHLm7TwUJX11ITp8qeSBEosd5rWsP%2Fa0%2BU8sXexbjxQdwf5oMbQ1BiqGlSNYcvjU1eYJ2d%2Fjw4LqfKmqTLeTqqMundkrZX7rSSIRS%2FtdRnnqWA86IZRL%2FL9kPO42xdBH87O2Pj%2Fj%2F4BAAD%2F%2FwEAAP%2F%2FhzZJVJYEAAA%3D HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 52539665178801301575b69eb299b1a4
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/custom/compact/2/js/script.js | 172.64.109.13 | 200 OK | 668 B |
URL HTTP/2cdn.creative-bars1.com/sb/ssp/in-page_push/custom/compact/2/js/script.js IP172.64.109.13:0
Hashfe78f33ec2fa6fdbf37a1e19457f3250 c4c5332923c9d294a6c1382e9df94b70f117f4b1 a9d9b30b51a9898a8ae56d8f16d1bae81947992d83d4c47e4fc366625dcfe980
GET /sb/ssp/in-page_push/custom/compact/2/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:54 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 10:06:00 GMT
etag: W/"63317988-18e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ryi1rybGKckyfTz7AHDNNJPd%2BS877jerKnCzR5oDL5ULgdg3tVNP%2FIJfnPzG6uyZVgN9DvWi7weyRdGrt83bEJB1oymkPQd65Uwrfh25V%2FWDSFApZ0ROF1Ag0%2BRrlOwG6QLQzl%2BQruRh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a2df71e2224d1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hygieneretorted.com/pixel/sbs?c=1 | 192.243.61.227 | 200 OK | 0 B |
URL HTTP/1.1hygieneretorted.com/pixel/sbs?c=1 IP192.243.61.227:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbs?c=1 HTTP/1.1
Host: hygieneretorted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=159fcc4a-9411-4eed-9a79-e273ab3f3e54:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 07 Dec 2022 03:29:54 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|
| c.statcounter.com/t.php?sc_project=10571718&u1=E7A55EBB5D2A4FC036C908AAB166CB56&java=1&security=6b4a9073&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.torrentkitty.lol/search/search/Sense&t=search%20-%20Torrent%20Kitty&invisible=1&sc_rum_e_s=2312&sc_rum_e_e=2316&sc_rum_f_s=0&sc_rum_f_e=2303&get_config=true | 104.20.219.77 | 200 OK | 0 B |
URL HTTP/2c.statcounter.com/t.php?sc_project=10571718&u1=E7A55EBB5D2A4FC036C908AAB166CB56&java=1&security=6b4a9073&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.torrentkitty.lol/search/search/Sense&t=search%20-%20Torrent%20Kitty&invisible=1&sc_rum_e_s=2312&sc_rum_e_e=2316&sc_rum_f_s=0&sc_rum_f_e=2303&get_config=true IP104.20.219.77:0
GET /t.php?sc_project=10571718&u1=E7A55EBB5D2A4FC036C908AAB166CB56&java=1&security=6b4a9073&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.torrentkitty.lol/search/search/Sense&t=search%20-%20Torrent%20Kitty&invisible=1&sc_rum_e_s=2312&sc_rum_e_e=2316&sc_rum_f_s=0&sc_rum_f_e=2303&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:52 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc10571718.1670383792.0; SameSite=None; Secure; Expires=Monday, 06-Dec-2027 11:29:52 HKT; Path=/; Domain=.statcounter.com
is_visitor_unique=1670383792574144198; SameSite=None; Secure; Expires=Friday, 06-Dec-2024 11:29:52 HKT; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 775a2dec9ca5b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:0
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 03:29:53 GMT
date: Wed, 07 Dec 2022 03:29:53 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.creative-bars1.com/sb/ssp/in-page_push/custom/compact/2/css/animate.css | 172.64.109.13 | 200 OK | 0 B |
URL HTTP/2cdn.creative-bars1.com/sb/ssp/in-page_push/custom/compact/2/css/animate.css IP172.64.109.13:0
GET /sb/ssp/in-page_push/custom/compact/2/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:54 GMT
content-type: text/css
last-modified: Thu, 29 Sep 2022 11:36:21 GMT
etag: W/"63358335-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h8oHx29hXzXbgiqc%2BP9BvfFvaqS5mkeqGwAhEW%2FnxAsi5rLQjtjzouUQO1yghhf4VbWRq3P2Syn0Qw1KJvgP0w11MalHUUvxL91nGprpCp2cBvv8RwziFiHBFBfDn3oEn%2F0lTqAzbIrR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a2df71e2024d1-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www.torrentkitty.lol/search/search/Sense | 188.114.96.1 | 200 OK | 0 B |
URL HTTP/2www.torrentkitty.lol/search/search/Sense IP188.114.96.1:0
GET /search/search/Sense HTTP/1.1
Host: www.torrentkitty.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:50 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: max-age=14400, must-revalidate
pragma: no-cache
cf-cache-status: MISS
last-modified: Wed, 07 Dec 2022 03:29:50 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FS0hB%2BkgiieTsIUAK4sl0%2FwCoajyy2ZkLaI1pG%2FLdr2bEe62ooaZk67eZWwSua9R%2F4%2BpZD2yZ84PrH8rU3JhFVWhK%2FjcCOTF8GwJ957FXj8mheoll7cloULkPCVTvAuKHG8qOf3n6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a2ddf3ef7b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| friendshipmale.com/sfp.js | 172.64.162.31 | 200 OK | 0 B |
URL HTTP/2friendshipmale.com/sfp.js IP172.64.162.31:0
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 03:29:51 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 23114b2211e7a1f26b08b7fcf03e495d
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 07 Dec 2022 03:29:51 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BWGR9SbcGTeoKoMR3XSFokQ8Naxjr3%2F7pJEn%2BvY5TD%2BZeOJXm0VYnjeObg9Wiu6skKyOP9aD9f6rSkRGhZjq14e%2Ferwlg9pnkql5cCWi%2BeYkr%2FBKCD%2Bzg8MS2%2FrUXaC10itz4m8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775a2deb4f5771f2-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|