r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e36c852b5e145f2f09fe73111fb162e1
e439c6a462f86a3003d6464a8b9999b1c4d1e210
52a721168d0c41cb0854ff8c730fce3b79db2e804b383238e95ff1401922bd74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52A721168D0C41CB0854FF8C730FCE3B79DB2E804B383238E95FF1401922BD74"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4458
Expires: Wed, 26 Oct 2022 03:01:03 GMT
Date: Wed, 26 Oct 2022 01:46:45 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3921
Cache-Control: max-age=118187
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 01:46:45 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:36:32 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash c2bba4cad162918b17858b60e909e4d9
d9a1d4f7fb7635ab233ebbf776e6de1a2857032b
3a1d27ec3d034d6326b32f6054b6be46079a86a33e75d5a2a3796a0c4c5eadab
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3921
Cache-Control: max-age=118187
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 01:46:45 GMT
Etag: "6357acdf-1d7"
Expires: Thu, 27 Oct 2022 10:36:32 GMT
Last-Modified: Tue, 25 Oct 2022 09:31:11 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 26 Oct 2022 01:41:35 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 310
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8db408c487f7d35bba323046736e8d3a
01b91e2dce7c6d3de9adfe6ff4d38f9b24ab7db0
9aeafc72c1a969243e1fc96f68ce18888034a749ee70582208bf814bd40b61a5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9AEAFC72C1A969243E1FC96F68CE18888034A749EE70582208BF814BD40B61A5"
Last-Modified: Tue, 25 Oct 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7139
Expires: Wed, 26 Oct 2022 03:45:44 GMT
Date: Wed, 26 Oct 2022 01:46:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vpLm5OV4bEU3Vdxt/xnnK6K5lh52V7dc7tyK7FXmyiVW/0Ddzl3mxqOYlp90evwHnT4yYpFjG1Ks0wcwLP9Adw==
x-amz-request-id: PAYM4GH7PDR2QPPT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 01:09:10 GMT
age: 2255
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 01:46:45 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 518ff04fd536958e285cf07aaf4a2786
fa5dad2391c2a9957340bd629f0462db4f412a5c
608c78964412d5dc7025e9cbfaef345d448a29eae0f11257c49a41f274917b9a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2613
Cache-Control: max-age=111815
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 01:46:46 GMT
Etag: "63579918-1d7"
Expires: Thu, 27 Oct 2022 08:50:21 GMT
Last-Modified: Tue, 25 Oct 2022 08:06:48 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: D6eBdreQZe26i+RMQBmLfw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fFzXqBWmcftudFS+e29EU+CSmoA=
waptrick.com/en/free/mp3/Cediz/
200 OK 3.3 kB URL HTTP/1.1 waptrick.com/en/free/mp3/Cediz/
IP
File type gzip compressed data, from NTFS filesystem (NT)\012- data
Hash ca860ec40b1665abf67c3adf26900601
23a2115ff7dd3c5111383ef4efec1c3aeb322186
7c4e81f0a0cfb27e8acb35347f0ca6b26defcecdb75b07bf47e62b793d18340b
GET /en/free/mp3/Cediz/ HTTP/1.1
Host: waptrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: Microsoft-IIS/7.5
Date: Wed, 26 Oct 2022 01:47:09 GMT
Content-type: text/html; charset=utf-8
Expires: 0
Pragma: no-cache
Cache-control: max-age=0, no-store, no-cache, must-revalidate
Vary: accept-encoding, user-agent
Set-cookie: uuid=0x544c9ae2cabeecb6;Domain=waptrick.com;Expires=Wed, 09-Nov-2022 01:47:09 GMT;Path=/
adsterra=Y;Domain=waptrick.com;Expires=Wed, 26-Oct-2022 01:52:09 GMT;Path=/
Content-encoding: gzip
Transfer-encoding: chunked
Connection: close
a.exdynsrv.com/ad-provider.js
200 OK 26 kB URL HTTP/1.1 a.exdynsrv.com/ad-provider.js
IP
File type ASCII text, with very long lines (49710)
Hash 3dfb2d9a2547f5683d61744522119020
cf080103e34f6529a13b7058590b1eea03fc9e6a
ee1a2cece045018279c4b95169bd8c91ebf7450acedcaa16585513f9715ba597
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 25546
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"98504cf193b5cd6548d3906920b"
X-HW: 1666748807.dop020.sk1.t,1666748807.cds020.sk1.shn,1666748807.dop020.sk1.t,1666748807.cds246.sk1.c
Access-Control-Allow-Origin: *, *
nabalpal.com/tvlP48j0j7GHQZa/37433
200 OK 25 B URL HTTP/1.1 nabalpal.com/tvlP48j0j7GHQZa/37433
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tvlP48j0j7GHQZa/37433 HTTP/1.1
Host: nabalpal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 01:46:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Thu, 27-Oct-2022 01:46:47 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Thu, 27-Oct-2022 01:46:47 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
cudgelridge.com/da/fe/7e/dafe7e98dace1e50d48969e5c8a626a4.js
200 OK 13 kB URL HTTP/1.1 cudgelridge.com/da/fe/7e/dafe7e98dace1e50d48969e5c8a626a4.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37128), with no line terminators
Hash 6d848ec8f06304785bb1766016b3c4aa
5ada661d756385347dc0c7df281ab03fcc1cc3e0
17d4bdc1a7d051c709ead7c8fa79c991dde8f1deb71365d55950cbe5cfe76a2f
Analyzer Verdict Alert quad9 Sinkholed
GET /da/fe/7e/dafe7e98dace1e50d48969e5c8a626a4.js HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 01:46:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9b16c98e3d88a2177ba5aad7aa5b0efb
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cudgelridge.com/bf/0d/76/bf0d7612e94ed920aec918d8bc477e4f.js
200 OK 20 kB URL HTTP/1.1 cudgelridge.com/bf/0d/76/bf0d7612e94ed920aec918d8bc477e4f.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59399), with no line terminators
Hash f2db9b9013941d12d214ead50fc983ca
0c82b7fb5b854fc8af459fb979a874eb54222d3e
6fb75b18b42b9dc4a46d2e7e052aa4a011f789e97280d302f636ed14d362a817
Analyzer Verdict Alert quad9 Sinkholed
GET /bf/0d/76/bf0d7612e94ed920aec918d8bc477e4f.js HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 01:46:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3b465604cb25ce56e7e6427921f07419
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11898
Expires: Wed, 26 Oct 2022 05:05:06 GMT
Date: Wed, 26 Oct 2022 01:46:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11898
Expires: Wed, 26 Oct 2022 05:05:06 GMT
Date: Wed, 26 Oct 2022 01:46:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 358ecd0ec047d700042e2a62f9847199
7bf4c552f47536fe451dc6ccfb0930c592084ef9
e14317aace5d64e9901867578379dd4dd4252b059070d37722f82ebb2e649d27
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E14317AACE5D64E9901867578379DD4DD4252B059070D37722F82EBB2E649D27"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11898
Expires: Wed, 26 Oct 2022 05:05:06 GMT
Date: Wed, 26 Oct 2022 01:46:48 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 494a826ce7609ee5cc8157ea5de5f4f7
3d28f2daeef33f37c91bd26cb527793288635103
09f702f40e29e6b0c27abc5c7bb4605e504453b543c92805ba4045bd3d65c4d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3337
x-amzn-requestid: 5a06b710-2b88-435e-8863-3e0e58742e6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ21FjooAMFp8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585691-2adc1ac2375e087b20ad0e32;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:13 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 02nWxjGUWnLOfCCH-_N91bhvwj9nD2aqZr757DDchdNlHitK7bih4Q==
via: 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 22:12:48 GMT
age: 12840
etag: "3d28f2daeef33f37c91bd26cb527793288635103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2792ca2-a8f4-4e81-bcd4-6622a0af2bb5.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2792ca2-a8f4-4e81-bcd4-6622a0af2bb5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09cb7bc8ddfe92c1130dbabd27512fc4
b8eec3e24a3960e1a65b8ae69a0e9648275d7af7
cd6b9cc817d8ce64a8a8f51cbee96343fc26b51d9f2dc8f905303c3c28f5b6da
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2792ca2-a8f4-4e81-bcd4-6622a0af2bb5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6737
x-amzn-requestid: 7cc81b57-158b-4304-95dc-c0373f710537
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alL-kFQPoAMFt7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635859f6-5b43711d2040d32f7a7cfcbd;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:49:42 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: v7QWR9jPfLG67Woq6TFAFpG2j82t7l2RCYtg_WXBZcgEIR7WuLrwuQ==
via: 1.1 94be61e339880d0097634de6934f7710.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 22:05:09 GMT
etag: "b8eec3e24a3960e1a65b8ae69a0e9648275d7af7"
content-type: image/jpeg
age: 13299
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b946c4f2f177828cf7b76c5764e97157
c3856686b98e1883133aa1824c496d34512769a0
be818a015fc9c745ea561a0b9c2aca6ba25ade24acd696fa651163d47b195371
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc635673e-499c-4d9c-8bc5-a713fb19e221.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13796
x-amzn-requestid: 90b1e032-78c6-499d-b564-f25c15e20304
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2OG0SoAMFx-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6358568e-599d0f526fc6a01f77b67dcf;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: sVS9nFgRyVconkkFTOrCO2zA0cICFNQFB2E1q7SQcVQm5_Dm6khvrA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:48:40 GMT
age: 14288
etag: "c3856686b98e1883133aa1824c496d34512769a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48cd6d0a-5e38-4eda-b349-0efb558678c9.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48cd6d0a-5e38-4eda-b349-0efb558678c9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d4241ae7c2236e38cb6df2a3ecb5c8d
a19ff057587a29f7193f4b2c9755a4f216cc6c59
59aece251cdd8887c545e84bb5113f41b3a6b6af14f60161398b1bf2a5771484
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48cd6d0a-5e38-4eda-b349-0efb558678c9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7042
x-amzn-requestid: 5bd3ed8d-4c84-4b38-8d9d-c6b8943956ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alK9KGJGIAMFV6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585854-5f1fccfb501455bc2834940d;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:42:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: B4hZ_viGTb-KtRKr0L8_vTeQ6k9MHq0rbxxG1ewC2hriy3ERxvhj6w==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:49:13 GMT
age: 14255
etag: "a19ff057587a29f7193f4b2c9755a4f216cc6c59"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NQJHFIbLMzw0aGwCkVGIEIHOMHprTpvLkLQRKgrGeVj35sk7sW4IUg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:36:34 GMT
age: 4214
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cc61ad4b1d66ab4bce27288ee690e12
324e13ad5c99f628d713e55a2994ad4042ece70e
62cd88bc19bc1f0be2a37c3e990897158acd3d55aa3ddd299144d4f9596ba34e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F057530b7-f6b8-4f9b-b6fc-8fdc4a101f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6831
x-amzn-requestid: cc6f38ff-ab33-4b18-8cae-aa6bc061962f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alKjPH7ToAMFSiw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635857ae-3db2790d0e6c5fab6c4bc81f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:39:58 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tiWbOUwlRzaT2EnCWIgoFaT_ho55s3tgRxalb7yBbI21Pv0BhfLJOg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 22:05:09 GMT
age: 13299
etag: "324e13ad5c99f628d713e55a2994ad4042ece70e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
samp.waptrick.org/js/jquery_scroll.js
200 OK 2.0 kB URL HTTP/1.1 samp.waptrick.org/js/jquery_scroll.js
IP
File type ASCII text, with CRLF line terminators
Hash e183fa3c407ab5574fd031fc9dff9c82
60dcaf14911262a7312d92f5218d06c3c558cb8e
84714cc57554d33bcac659c53b181b27d590a77445ed1ca84c0876fea58dabe8
GET /js/jquery_scroll.js HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 07:58:36 GMT
Accept-Ranges: bytes
ETag: "09eddbd4adfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:46 GMT
Connection: close
Content-Length: 1995
samp.waptrick.org/css/htmlv125_basic.css
200 OK 5.8 kB URL HTTP/1.1 samp.waptrick.org/css/htmlv125_basic.css
IP
File type ASCII text, with very long lines (25053), with no line terminators
Hash 04fc8047a2f34f1b1d0e61e00e6ac803
777ff47e71982bfa284e04d8b63df0f203b7a6f1
0dcdc08230cb9ba8e66315ca0aff736f5543c643e07304de785631bf342d6dfa
GET /css/htmlv125_basic.css HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 08:24:45 GMT
Accept-Ranges: bytes
ETag: "80410654edfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:46 GMT
Connection: close
Content-Length: 5752
samp.waptrick.org/js/combinedv136.js
200 OK 2.3 kB URL HTTP/1.1 samp.waptrick.org/js/combinedv136.js
IP
File type Unicode text, UTF-8 text, with very long lines (519), with CRLF line terminators
Hash 1c780d06b80889abc2b4dc2c42da1a0d
0b2e2d8d1dddd2e1a4644c5bd40fbac1c8ea1e45
3f40410d685839a594f1d8eb6dfec0e4c8adc7664774d4a796e84e912b038e51
GET /js/combinedv136.js HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 07:56:44 GMT
Accept-Ranges: bytes
ETag: "0c61b7b4adfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:46 GMT
Connection: close
Content-Length: 2279
samp.waptrick.org/js/jquery-3.4.1.min.js
200 OK 31 kB URL HTTP/1.1 samp.waptrick.org/js/jquery-3.4.1.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 3195e7e20d5daf86f6c6f6107c7bad9d
f5dc59013bfc44a61d3379e5c2e0356935ccda0e
524f9b76882cacbfa2459d4e6464bd039da02db98a25dc29754c54ea4b2d8867
GET /js/jquery-3.4.1.min.js HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 08:01:30 GMT
Accept-Ranges: bytes
ETag: "0e993254bdfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:46 GMT
Connection: close
Content-Length: 30737
samp.waptrick.org/imgs/flags/NORWAY.png
200 OK 2.2 kB URL HTTP/1.1 samp.waptrick.org/imgs/flags/NORWAY.png
IP
File type PNG image data, 25 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d63618403a5116c6f67652c052780939
76a973780634b8753544f896c10c07cf1d308cb6
a2afdc332e5e773e12aae4ac22807a41b982c338398e103b5d46aa28ef5728c7
GET /imgs/flags/NORWAY.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 12 Dec 2019 08:10:42 GMT
Accept-Ranges: bytes
ETag: "0ad8ea5c3b0d51:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 2214
samp.waptrick.org/imgs/htmlcssv11/back_change_language_icon32x32.png
200 OK 3.0 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/back_change_language_icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 9879e97102aaacacf42f1257a5afb761
e523a42312b049a9aadb51a0f0a62833ec1fca96
209d59d004a87671c892d53fffc966ec01aa511ba5cd5bef59c16b5455f24102
GET /imgs/htmlcssv11/back_change_language_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Wed, 09 Apr 2014 09:02:34 GMT
Accept-Ranges: bytes
ETag: "0712072d253cf1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 3042
nabalpal.com/tvlP48j0j7GHQZa/37433
200 OK 25 B URL HTTP/1.1 nabalpal.com/tvlP48j0j7GHQZa/37433
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tvlP48j0j7GHQZa/37433 HTTP/1.1
Host: nabalpal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Thu, 27-Oct-2022 01:46:48 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Thu, 27-Oct-2022 01:46:48 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
samp.waptrick.org/imgs/htmlcssv11/clear_icon.png
200 OK 294 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/clear_icon.png
IP
File type PNG image data, 21 x 15, 8-bit colormap, non-interlaced\012- data
Hash e7932d617d61ef466439d3379e29c5b4
5ffb19024492dc19a6108d0b6f0487f2193aadf7
ddec118279ef42ab6c7170391e8422ab7d647a85875cfd12b9ea4d55ea8cc7d6
GET /imgs/htmlcssv11/clear_icon.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 05 Oct 2012 15:59:42 GMT
Accept-Ranges: bytes
ETag: "0eb5d6e12a3cd1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 294
cudgelridge.com/watchnew?key=0d90779d5172c783ebd7800dad489a3d
200 OK 1.1 kB URL HTTP/1.1 cudgelridge.com/watchnew?key=0d90779d5172c783ebd7800dad489a3d
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9d31b29c6bb38121f34a38d492b0462a
03a207e91e405d6ca7a8f7f6ab96006006f38602
300d203406f1499d6a6820e806ef1ea51dd00cdca486d8a56b883209d6542f79
Analyzer Verdict Alert quad9 Sinkholed
GET /watchnew?key=0d90779d5172c783ebd7800dad489a3d HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=14457359; expires=Thu, 27 Oct 2022 01:46:48 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNDQ1NzM1OSwiayI6IjBkOTA3NzlkNTE3MmM3ODNlYmQ3ODAwZGFkNDg5YTNkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMDI2NzEsInBpZCI6ODI0NDIsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjEsImFpZCI6NSwicHQiOjQsInBrIjoic3NraDN5a2YiLCJjcGtzIjp7ICIyOCI6IjFhZGYzZGJiNTJlNzZlOWI1NTllNzM2MmUzYjllODZiIiwiNDYiOiJkZjU5NTFmMjNiMWI0NTdlNjk5ZTVhMWU4ZTgxODc3NCJ9LCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHA6Ly93YXB0cmljay5jb20vIn19.6k1zLKsdRe0HVR9_pedaogRuSi3jCy7OzdKkuB7rToQ; expires=Wed, 26 Oct 2022 01:47:48 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3727049a3495880b14baccfb67b73069
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
samp.waptrick.org/imgs/htmlcssv11/back_home_icon32x32.png
200 OK 459 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/back_home_icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 208c830c05cacb548355849c1dd3bd81
087981869aa8e1ed51b7a5d36f74bad3ca24dc08
64253536f1c9ed9b084061ac08f0f80f068dab87302fa8114821a08d7d7fc483
GET /imgs/htmlcssv11/back_home_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Wed, 09 Apr 2014 08:31:00 GMT
Accept-Ranges: bytes
ETag: "0fa369ce53cf1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 459
friendshipmale.com/sfp.js
200 OK 28 kB URL HTTP/1.1 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
Analyzer Verdict Alert quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 2bdf10f0fd80497c4502cf9b2fa20761
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Wed, 26 Oct 2022 01:46:47 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rjU%2F0VXGSUkjdUEMPsB9KvY5rAEIB414HlKALGjrjeZSNV4%2BUOi6gRZ0EVkkEArAfOmIabNNyXRuQd08oPlW9yH%2F%2BSnMqkzJJQL%2FyKNKht2m8wl8KMT6ZcCOrHV%2FiPyt%2BsqpKcY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75ff8534f84fb50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
syndication.exdynsrv.com/v1/api.php
200 OK 2.8 kB URL HTTP/1.1 syndication.exdynsrv.com/v1/api.php
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (4940), with no line terminators
Hash e620c33070776255a55bfaaed86bd220
422c0a1ec88345c02b5df10497afa1689bf6329e
2d07350a16c55ef7a32cba36176ab1e89f135c61a556d2af05cd6630e4d3f3d8
POST /v1/api.php HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: text/plain
Content-Length: 254
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%22635891888ed149.863713164264723371%22%3B%7D; expires=Fri, 25-Oct-2024 01:46:48 GMT; Max-Age=63072000; path=/; domain=exdynsrv.com
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
addresseepaper.com/sfp.js
200 OK 28 kB URL HTTP/1.1 addresseepaper.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash b1fa950e77a7db5425f9a5257af02e9c
2d5580451f34ad96218f8b97edf9708f9ee1be87
d999c4320df27dc4a1d3de5aec22bb3ef201560b47a7eff3f28f4133c1997a14
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 5869ebceee5fd2108f1f5c29fd9984c2
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Wed, 26 Oct 2022 01:46:48 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VTcfga%2BHzaunno%2BHLFwMDU%2BoCJrJQalffaq9OY%2BeJXpPDvw1zSokF1lVxl5jRq4qSGa6NzNp7LznbMb9iDPv5an98CGW66mDxu%2FgRb%2FXRnOcXo3ykXptkkt%2BXaUiIuZzkr6Imlw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75ff85354e1188a3-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 787b1fc5d5f4cff91f5aee14f0cc2abf
a27036e3eeb9e273c9d9b5175237ff400b341c92
02cf018bf2716a3128a827ea3cc1daca23e98e0469c0dd24807e140af1a8f7b2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=130435
Date: Wed, 26 Oct 2022 01:46:48 GMT
Etag: "6357d705-1d7"
Expires: Thu, 27 Oct 2022 14:00:43 GMT
Last-Modified: Tue, 25 Oct 2022 12:31:01 GMT
Server: ECS (nyb/1D11)
X-Cache: Miss from cloudfront
Via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: XHAkcr6Ac1S5HJojpclby6FJPLdtM2O0COaTmMdNsHzPWQSZk97Thw==
Age: 5382
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 787b1fc5d5f4cff91f5aee14f0cc2abf
a27036e3eeb9e273c9d9b5175237ff400b341c92
02cf018bf2716a3128a827ea3cc1daca23e98e0469c0dd24807e140af1a8f7b2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=127774
Date: Wed, 26 Oct 2022 01:46:48 GMT
Etag: "6357d705-1d7"
Expires: Thu, 27 Oct 2022 13:16:22 GMT
Last-Modified: Tue, 25 Oct 2022 12:31:01 GMT
Server: ECS (nyb/1D24)
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 89BDf0YRMoAFYrnxojS7TmChEaN8232KAsquX6QdQbtwZGzgxim-aw==
Age: 2721
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash b0531cdf55212b43bf607b695cabefd3
2e22e1336cbc697aaeefaf661763a3707d4e8650
b1f3ce3ea45e0d19bf8b08053f7f22b930f099e4997ea0b6cb2f0b4557b6826a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:48 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://waptrick.com
access-control-allow-credentials: true
set-cookie: uid_id2=0589ccf4-a05d-4359-896f-6d5edabcce9c:2:1; expires=Sat, 23 Oct 2032 01:46:48 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 4d323506e9a21b5d56480106993f4562
6dfec2b0bcd823f3f03fbbf8aa6328e35e8e337d
59a823f76335a654659bb8e935260a572419882c0706be029b6ae82ee95cf842
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:48 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://waptrick.com
access-control-allow-credentials: true
set-cookie: uid_id2=24d89ff6-0999-4327-96bc-59bbfcd386b4:1:1; expires=Sat, 23 Oct 2032 01:46:48 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
samp.waptrick.org/imgs/htmlcssv11/more_content_icon32x32.png
200 OK 778 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/more_content_icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash baec56d8e9b034c2849690fa5897ad47
d2ac9cce0eabd87eb375969970cc0647c03ec881
67c48950a529b391622aaddeaea1fe85fbb53c68557ecef82dbfc2c955171e2c
GET /imgs/htmlcssv11/more_content_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Wed, 09 Apr 2014 12:11:00 GMT
Accept-Ranges: bytes
ETag: "0227c5ec53cf1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 778
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VPUU4EMQi9ihfYCTygA/vttyYaD9DpdBNjXI2aqAmHtzPGFULLA/IegIAD0wF2BT5qOapn8BQ0KSY2zZvbu1TOz/r68fbYnqaXcx+4ONLgIM2ZihmNmhOFpzGnumIGsoS7R2iypSQNh4nqlk3EHOmUD/fXe/BwUI53U0wm5D74RVnEPHhQ9ZU1Ji8ys3BRFJ0hA+TiDlYrDCmd2lzXFoJ1UWlcamzc9H9Ce3nel/ldw3VT/iuksAoUeeAL0BxGubfr+/e5ZV7Gx+EoYbJlttMMMdXta0uvXq1anFYCWYhhOS29Q5dVuvwAp64uIHsBAAA=
200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VPUU4EMQi9ihfYCTygA/vttyYaD9DpdBNjXI2aqAmHtzPGFULLA/IegIAD0wF2BT5qOapn8BQ0KSY2zZvbu1TOz/r68fbYnqaXcx+4ONLgIM2ZihmNmhOFpzGnumIGsoS7R2iypSQNh4nqlk3EHOmUD/fXe/BwUI53U0wm5D74RVnEPHhQ9ZU1Ji8ys3BRFJ0hA+TiDlYrDCmd2lzXFoJ1UWlcamzc9H9Ce3nel/ldw3VT/iuksAoUeeAL0BxGubfr+/e5ZV7Gx+EoYbJlttMMMdXta0uvXq1anFYCWYhhOS29Q5dVuvwAp64uIHsBAAA=
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA0VPUU4EMQi9ihfYCTygA/vttyYaD9DpdBNjXI2aqAmHtzPGFULLA/IegIAD0wF2BT5qOapn8BQ0KSY2zZvbu1TOz/r68fbYnqaXcx+4ONLgIM2ZihmNmhOFpzGnumIGsoS7R2iypSQNh4nqlk3EHOmUD/fXe/BwUI53U0wm5D74RVnEPHhQ9ZU1Ji8ys3BRFJ0hA+TiDlYrDCmd2lzXFoJ1UWlcamzc9H9Ce3nel/ldw3VT/iuksAoUeeAL0BxGubfr+/e5ZV7Gx+EoYbJlttMMMdXta0uvXq1anFYCWYhhOS29Q5dVuvwAp64uIHsBAAA= HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263589188aa6797.521535283528286763%22%3B%7D; expires=Fri, 25 Oct 2024 01:46:48 GMT; path=; domain=.exdynsrv.com;
__upt=%7B%22v%22%3A1%2C%22id%22%3A%2263589188aa6797.521535283528286763%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D; expires=Fri, 25 Oct 2024 01:46:48 GMT; path=/; domain=.exdynsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
samp.waptrick.org/imgs/htmlcssv11/new_music_icon32x32.png
200 OK 1.9 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/new_music_icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5403612166c9a0c55ae1006dfb55528f
6b043201338f85e7eb69a12465059ee8502e3367
7747dc4e3f40289c701afbf500a4956d9167867a6c2b62933027118dbec403ac
GET /imgs/htmlcssv11/new_music_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Mon, 26 Jan 2015 11:03:00 GMT
Accept-Ranges: bytes
ETag: "08ac7a55739d01:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 1947
s3t3d2y8.afcdn.net/widget-branding-logo.png
200 OK 1.5 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/widget-branding-logo.png
IP
ASN #60068 Datacamp Limited
File type PNG image data, 94 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a95be207bf27c9a91720b8ac81976ca
6412e94ce13924fede8b1bec73cb8e049b76688c
5325d5beb64d82d48d3f7d78b606ee93b8e975a55868bba038905329ed1044b9
GET /widget-branding-logo.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: image/png
Content-Length: 1547
Connection: keep-alive
Last-Modified: Mon, 15 Apr 2019 09:03:59 GMT
ETag: "5cb448ff-60b"
Expires: Fri, 30 Jun 2023 16:01:02 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1688195204
Server: CDN77-Turbo
X-Robots-Tag: noindex, follow
X-77-NZT: AblMCQ2kLSv/hPSZAA
X-77-NZT-Ray: ffffffff437be23088915863be45322b
X-Cache: HIT
X-Age: 10089604
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VPW0rEUAzdihtoyfvmzrffCooLaG9bEHFGVFDhLN7bImMOCUnOIQ8hkYFpEL8RPlmcLFF5rDSajOyGu/sHGONrevt8f24v4+W8wp2NAi4pZCgU7tRFSVQTztyZKrUriqtTRIIdCuoQV7M9G4mIkYSnx9vDuUMIPe4rIYlD900I9aycmevCVscMLawcJmFFtBeYM4XNg0VjpVampVWVZTZtHFPdR9P/C+3yetxyXMGpkI6/BpRNxQQDXwtDN8JBTx8/5wZc5f1vieq6Z36MUbAZ7RuXbLPqNpdlkrmuwTXbppsuG7FH+QVdmsDkewEAAA==
200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VPW0rEUAzdihtoyfvmzrffCooLaG9bEHFGVFDhLN7bImMOCUnOIQ8hkYFpEL8RPlmcLFF5rDSajOyGu/sHGONrevt8f24v4+W8wp2NAi4pZCgU7tRFSVQTztyZKrUriqtTRIIdCuoQV7M9G4mIkYSnx9vDuUMIPe4rIYlD900I9aycmevCVscMLawcJmFFtBeYM4XNg0VjpVampVWVZTZtHFPdR9P/C+3yetxyXMGpkI6/BpRNxQQDXwtDN8JBTx8/5wZc5f1vieq6Z36MUbAZ7RuXbLPqNpdlkrmuwTXbppsuG7FH+QVdmsDkewEAAA==
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA0VPW0rEUAzdihtoyfvmzrffCooLaG9bEHFGVFDhLN7bImMOCUnOIQ8hkYFpEL8RPlmcLFF5rDSajOyGu/sHGONrevt8f24v4+W8wp2NAi4pZCgU7tRFSVQTztyZKrUriqtTRIIdCuoQV7M9G4mIkYSnx9vDuUMIPe4rIYlD900I9aycmevCVscMLawcJmFFtBeYM4XNg0VjpVampVWVZTZtHFPdR9P/C+3yetxyXMGpkI6/BpRNxQQDXwtDN8JBTx8/5wZc5f1vieq6Z36MUbAZ7RuXbLPqNpdlkrmuwTXbppsuG7FH+QVdmsDkewEAAA== HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Credentials: true
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263589188b06885.56216226439769885%22%3B%7D; expires=Fri, 25 Oct 2024 01:46:48 GMT; path=; domain=.exdynsrv.com;
__upt=%7B%22v%22%3A1%2C%22id%22%3A%2263589188b06885.56216226439769885%22%2C%22pcma%22%3A%22%22%2C%22acma%22%3A%22511.0199%22%7D; expires=Fri, 25 Oct 2024 01:46:48 GMT; path=/; domain=.exdynsrv.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/41682/dd9b510841c8ba455794fcea798782fdffbd7b72.jpg
200 OK 21 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/library/41682/dd9b510841c8ba455794fcea798782fdffbd7b72.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 8c04ff3ef94c9ec28ae95b743cc02abe
dd9b510841c8ba455794fcea798782fdffbd7b72
02f4fa2f352a7da6201290a02559e1feaf2efcce8c99818e9147cbedbf14fb34
GET /library/41682/dd9b510841c8ba455794fcea798782fdffbd7b72.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: image/jpeg
Content-Length: 21142
Connection: keep-alive
Last-Modified: Fri, 07 Jan 2022 19:24:20 GMT
ETag: "61d89364-5296"
Expires: Sun, 22 Oct 2023 17:16:50 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
X-Cache-OP: HIT
X-Accel-Expires: @1697996583
Server: CDN77-Turbo
X-77-NZT: AblMCQ2yF+P/4WUEAA
X-77-NZT-Ray: ffffffff0a7ae3308891586376af332b
X-Cache: HIT
X-Age: 288225
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
s3t3d2y8.afcdn.net/library/551406/886d0b1e550dc5e1e5c1903e762b95656239f32d.jpg
200 OK 21 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/library/551406/886d0b1e550dc5e1e5c1903e762b95656239f32d.jpg
IP
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 08d3d91aef96f39036fb8e2c2384dbfe
886d0b1e550dc5e1e5c1903e762b95656239f32d
893ba0ad90251cc9896a4e0161a7184b35a2cc89f5618183adbf07e20689f77d
GET /library/551406/886d0b1e550dc5e1e5c1903e762b95656239f32d.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: image/jpeg
Content-Length: 21446
Connection: keep-alive
Last-Modified: Sat, 30 Jul 2022 00:39:56 GMT
ETag: "62e47ddc-53c6"
Expires: Sun, 30 Jul 2023 00:47:58 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1690680274
Server: CDN77-Turbo
X-Robots-Tag: noindex, follow
X-77-NZT: AblMCQ0amXP/Ngl0AA
X-77-NZT-Ray: ffffffff940ce430889158637c98332b
X-Cache: HIT
X-Age: 7604534
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
cudgelridge.com/watchnew?shu=b89d0ab2076f80b0070cfb9e9cac41785727237e47fc21ef8723584d4ee90c665de09b3f6147d13ecc651d654320c7f25c255ddcbf8ca2a3ef16d931d9acdc7bb76027261d36d7505b797237304eba3b47415c69&pst=1666748868&rmtc=t&uuid=&pii=&in=false&key=0d90779d5172c783ebd7800dad489a3d&refer=http%3A%2F%2Fwaptrick.com%2F
200 OK 1.7 kB URL HTTP/1.1 cudgelridge.com/watchnew?shu=b89d0ab2076f80b0070cfb9e9cac41785727237e47fc21ef8723584d4ee90c665de09b3f6147d13ecc651d654320c7f25c255ddcbf8ca2a3ef16d931d9acdc7bb76027261d36d7505b797237304eba3b47415c69&pst=1666748868&rmtc=t&uuid=&pii=&in=false&key=0d90779d5172c783ebd7800dad489a3d&refer=http%3A%2F%2Fwaptrick.com%2F
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2312)
Hash 15ef7341276e6201a9afa5de43062e33
64cf160932386da58d68e4105d37bae8db1e164c
bf1aa5e577ad7d258d40865d5535a96b94de6fe592040813dc7993b2abca8862
Analyzer Verdict Alert quad9 Sinkholed
GET /watchnew?shu=b89d0ab2076f80b0070cfb9e9cac41785727237e47fc21ef8723584d4ee90c665de09b3f6147d13ecc651d654320c7f25c255ddcbf8ca2a3ef16d931d9acdc7bb76027261d36d7505b797237304eba3b47415c69&pst=1666748868&rmtc=t&uuid=&pii=&in=false&key=0d90779d5172c783ebd7800dad489a3d&refer=http%3A%2F%2Fwaptrick.com%2F HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cudgelridge.com/watchnew?key=0d90779d5172c783ebd7800dad489a3d
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://waptrick.com/
Access-Control-Allow-Origin: http://waptrick.com/
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=14457359; expires=Thu, 27 Oct 2022 01:46:48 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 27 Oct 2022 01:46:48 GMT; secure; SameSite=None
uncs=1; expires=Thu, 27 Oct 2022 01:46:48 GMT; secure; SameSite=None
pdhtkv5=true; expires=Thu, 27 Oct 2022 01:46:48 GMT; secure; SameSite=None
uncs5=1; expires=Thu, 27 Oct 2022 01:46:48 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3af1631de47ca96d31c472dbff323942
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3c9eb4f5d99613a73e71df55e8a5d83e
f0a75dfd250b74f88c3ee597d2cae20bad696819
b54395b70fe53f079c9f4576f82f131c1e13e0c88cec8ff07b14258147d4128a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B54395B70FE53F079C9F4576F82F131C1E13E0C88CEC8FF07B14258147D4128A"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4778
Expires: Wed, 26 Oct 2022 03:06:26 GMT
Date: Wed, 26 Oct 2022 01:46:48 GMT
Connection: keep-alive
samp.waptrick.org/imgs/htmlcssv11/golge_10px.png
200 OK 91 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/golge_10px.png
IP
File type PNG image data, 2 x 10, 8-bit gray+alpha, non-interlaced\012- data
Hash 3adcffb90087422d4d7cfeb880a49597
4462b6a9ecf51133959b333e8014b9b3c9927031
ea5c7819f351e03a6adbb3957c73e8f1b516039869c2667da27b188c92121a65
GET /imgs/htmlcssv11/golge_10px.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 31 Aug 2012 07:13:58 GMT
Accept-Ranges: bytes
ETag: "03f38304887cd1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 91
lowhardboiledadjoin.com/pixel/purst?dl=0&th=0&sc=0&rs=2447&rd=2447&fd=712&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 lowhardboiledadjoin.com/pixel/purst?dl=0&th=0&sc=0&rs=2447&rd=2447&fd=712&bv=22.8.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2447&rd=2447&fd=712&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: lowhardboiledadjoin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 26 Oct 2022 01:46:48 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.cloudimagesb.com/cti/60/ce/c4/60cec442407f9abe013ac98b00e12cb9/1627915957.png
200 OK 106 kB URL HTTP/2 cdn.cloudimagesb.com/cti/60/ce/c4/60cec442407f9abe013ac98b00e12cb9/1627915957.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Size 106 kB (106115 bytes)
Hash 9281fd8d87dda51e160328a923b9a454
fb36ebbd8cc7c4c4871e5cf947ae64a9f567c039
41544e4c12d24c819661b9609eff83f0f2ed1a6fce359a8cc32cbb77c64118da
GET /cti/60/ce/c4/60cec442407f9abe013ac98b00e12cb9/1627915957.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cudgelridge.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:48 GMT
content-type: image/png
content-length: 106115
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 14:52:46 GMT
etag: "610806be-19e83"
expires: Fri, 28 Oct 2022 01:46:48 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
samp.waptrick.org/imgs/waptrick_html_flag.png
200 OK 2.2 kB URL HTTP/1.1 samp.waptrick.org/imgs/waptrick_html_flag.png
IP
File type PNG image data, 155 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8dabbade5c7050e85ed02fd7ffea93db
efaf45364e8d6041a27e1246a07591b002a67b2e
106ebe3072f58bb44727eb4d1700f1a8f7ca3b106282a36227245873fbbb3e46
GET /imgs/waptrick_html_flag.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 12 Dec 2019 07:05:11 GMT
Accept-Ranges: bytes
ETag: "fae0a77ebab0d51:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 2230
samp.waptrick.org/imgs/htmlcssv11/newheader_sprite.png
200 OK 7.7 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/newheader_sprite.png
IP
File type PNG image data, 132 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash c69713a312d1b997f56a3cb735d20c18
e5cf3bfddfe63e46bae6878a3822b60df05708ac
1283d6887d31cbf075e56f03e88b9300ef4a5a1504203880046b7189b4e2dcef
GET /imgs/htmlcssv11/newheader_sprite.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 18 Apr 2013 10:39:32 GMT
Accept-Ranges: bytes
ETag: "0cadd2213cce1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 7735
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:49 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8789e577ce8d770877594d918cad5d78
Strict-Transport-Security: max-age=0; includeSubdomains
samp.waptrick.org/special/videovak/videovak_336x280_4_en.jpg
200 OK 17 kB URL HTTP/1.1 samp.waptrick.org/special/videovak/videovak_336x280_4_en.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 336x280, components 3\012- data
Hash f92efe09b247881c8284d0914e2d2136
d3e59868afe132ebe0c8ec7debbebf3d802a5a12
7f4d3a63068161400ecc8187c08706ca359c2ff977a3dc32bfa82e076eccb485
GET /special/videovak/videovak_336x280_4_en.jpg HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/jpeg
Last-Modified: Fri, 10 Jan 2020 09:52:51 GMT
Accept-Ranges: bytes
ETag: "3158bcb89bc7d51:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 17258
samp.waptrick.org/imgs/htmlcssv11/whatsapp_icon32x32.png
200 OK 3.1 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/whatsapp_icon32x32.png
IP
File type PNG image data, 36 x 37, 8-bit/color RGBA, non-interlaced\012- data
Hash af1b134ddf468446228d0fb5f69c62d0
9ffd6a9d6d624e3ca00a6c49df8c0762aefeba30
f9f611dc16257617b61ba4b01892a5eeda564ed9430c14e0edf86d872d729097
GET /imgs/htmlcssv11/whatsapp_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 09 May 2019 10:03:17 GMT
Accept-Ranges: bytes
ETag: "89cf366c4e6d51:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 3057
samp.waptrick.org/imgs/htmlcssv11/white_transparent_bg.png
200 OK 156 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/white_transparent_bg.png
IP
File type PNG image data, 50 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 393837b5c8fb68fcb4d40762f47409ad
78a9a294025c862052fe164d785b2687cbdbdc7b
2bfe590cdd9bc99659992219cc6ece86327ffcb6e66ab95cd0e04098708467a8
GET /imgs/htmlcssv11/white_transparent_bg.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 13 Jul 2012 08:36:56 GMT
Accept-Ranges: bytes
ETag: "0419a9d260cd1:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 156
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ba32ecbfae5af0d679b4ec45e0fa468
6a5ea8de933ccfc4c9dc34c2589034ace6f4d333
df165dd24099f02972768440ccfab74386f7b473fce13d1049ccf23b91bf0f79
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF165DD24099F02972768440CCFAB74386F7B473FCE13D1049CCF23B91BF0F79"
Last-Modified: Sun, 23 Oct 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17297
Expires: Wed, 26 Oct 2022 06:35:06 GMT
Date: Wed, 26 Oct 2022 01:46:49 GMT
Connection: keep-alive
insistinestimable.com/sbar.json?key=dafe7e98dace1e50d48969e5c8a626a4&uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4%3A1%3A1
200 OK 3.9 kB URL HTTP/1.1 insistinestimable.com/sbar.json?key=dafe7e98dace1e50d48969e5c8a626a4&uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4%3A1%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (5690), with no line terminators
Hash b95fb22c691529a0213e74dd7ab9deef
e3220cbc2619f05450feec3c242d5402da18a503
61869d9c8b017ef0e15ba1d85bf0b96012503cc3df675c9c8d12366c31d4e4d7
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=dafe7e98dace1e50d48969e5c8a626a4&uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4%3A1%3A1 HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:49 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://waptrick.com
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15627934; expires=Thu, 27 Oct 2022 01:46:49 GMT; secure; SameSite=None
uid_id2=24d89ff6-0999-4327-96bc-59bbfcd386b4:1:1; expires=Wed, 02 Nov 2022 01:46:49 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 27 Oct 2022 01:46:49 GMT; secure; SameSite=None
uncs=1; expires=Thu, 27 Oct 2022 01:46:49 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 27 Oct 2022 01:46:49 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 27 Oct 2022 01:46:49 GMT; secure; SameSite=None
slecdafe7e98dace1e50d48969e5c8a626a4=[3364902]; expires=Wed, 26 Oct 2022 01:46:54 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: af2c657f1698c98ba4aec0cfee9667b3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 279 B IP
Hash f142b94df21747dfbdfc3b6aaf702a3b
b27d5ca0c9f968f68cb427cfb1a2c1ed35378a41
7df07819035cf7a775d7abab7a54607efdebeda0b51c78830eb8ef4bec0f10ba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2977
Cache-Control: max-age=145674
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 01:46:50 GMT
Etag: "63581bf3-117"
Expires: Thu, 27 Oct 2022 18:14:44 GMT
Last-Modified: Tue, 25 Oct 2022 17:25:07 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 279
insistinestimable.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxRut3s3hx8%2BDKOtBQZiDiIKZdPfM9Ey7h8UYI8HsZtlVzE2rq6on5VR3NVXd05OcgosSb5N%2FQDpvkg2rQRS8ushkYQ8BYcdTDuZPEETYkweZ2eDoB833vX7v8L731ZcHxQVxUdDzlZt6RypFl1p1t%2FbGpuddr63LtBjUBp3gk6B5vWb6b4dB3X2z9r5gPb3ku57req5XW5VGxHqwNCUhs5PQq4duvenXvVYTA%2FNfbAsHljrg%2FQvyIiSfLDxyrkGyMdLk%2BxVhe7nO3novKRTNtUGfH3%2BU9lJdpkjmY2wcxOnxpRraPll9CJ0ezexC9%2F8RRnJCnMcPEaXHlyYR9Q9nPiMFkSLiz6HsjyHUGJKOwfQ9SP6EAIzj1gbS5P4tbUq6%2FYylU3ZCFp7%2BCVlOyMJv15Am3y0rOajd1arIpU4tBnEFORhDdsfIilPkO1cgy1Ow%2FHNI%2FgtZerqONDncsEpD8vPX%2FCbvhHEcLLphGC42G357MQwittgKoyhmvNEJouYsICnHkPEYSgxBrYNi%2BkkHReygyBwk%2FLzGPM9ru5xRtxMy1uBtEQXc9Wg79qjnBh0UbLrDEHk2BFNDMLOLzOyiJ4cwxc%2BwWxUsd2Bzgj6vUAqC0hKUlKCUBGVOUParI66sb6v7XNki8i67f9kb1Ujn3QN6pPOuSMlBdkFemAX3e%2F9r9MR5jdNYtEXY4ZQJT7Rc3uyEQSharEMDP6BNWFlB2iuzNXemR9x%2FHtm0L%2F8fET2FVadg8iXQ4lXQctT2XdCtUbPjYic9KWmWG8l6daYTcF0hyxeQbzsH6oK8PPPR2Hwdgp3d%2BDS6OfnjwV9gpkJmKnwmHxF01d7oji7J4R1dWvLDRpbLRO7Q6XHv5jQXV7%2F5QGyX2vC1FTt88A6bEtPx5ENh83Wacpl2Lfl2WXIuzKo2TJCf1uzHIrpd2K3lwqRFtn773dW1JDPCWqnTMaicEPL4DExOyP9%2BPJq921e%2B2IM0Y5iiQlKckcuC1Kdg2S5sNvdvNYFRc02UOSiLamT8aP5TSQIl5phGFey%2FcDSfD%2BweusYBze8hTSr0TYW%2BqkDVELa4Osozc3bj18asEClnFCnjHEbKqP1n4Vp5Xms3Gi4NwpbXblPRjpp%2BJw48TqnfDPwgoA3kdsI297%2F6GwAA%2F%2F8BAAD%2F%2F4Lhv8%2BCBAAA
200 OK 7 B URL HTTP/1.1 insistinestimable.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxRut3s3hx8%2BDKOtBQZiDiIKZdPfM9Ey7h8UYI8HsZtlVzE2rq6on5VR3NVXd05OcgosSb5N%2FQDpvkg2rQRS8ushkYQ8BYcdTDuZPEETYkweZ2eDoB833vX7v8L731ZcHxQVxUdDzlZt6RypFl1p1t%2FbGpuddr63LtBjUBp3gk6B5vWb6b4dB3X2z9r5gPb3ku57req5XW5VGxHqwNCUhs5PQq4duvenXvVYTA%2FNfbAsHljrg%2FQvyIiSfLDxyrkGyMdLk%2BxVhe7nO3novKRTNtUGfH3%2BU9lJdpkjmY2wcxOnxpRraPll9CJ0ezexC9%2F8RRnJCnMcPEaXHlyYR9Q9nPiMFkSLiz6HsjyHUGJKOwfQ9SP6EAIzj1gbS5P4tbUq6%2FYylU3ZCFp7%2BCVlOyMJv15Am3y0rOajd1arIpU4tBnEFORhDdsfIilPkO1cgy1Ow%2FHNI%2FgtZerqONDncsEpD8vPX%2FCbvhHEcLLphGC42G357MQwittgKoyhmvNEJouYsICnHkPEYSgxBrYNi%2BkkHReygyBwk%2FLzGPM9ru5xRtxMy1uBtEQXc9Wg79qjnBh0UbLrDEHk2BFNDMLOLzOyiJ4cwxc%2BwWxUsd2Bzgj6vUAqC0hKUlKCUBGVOUParI66sb6v7XNki8i67f9kb1Ujn3QN6pPOuSMlBdkFemAX3e%2F9r9MR5jdNYtEXY4ZQJT7Rc3uyEQSharEMDP6BNWFlB2iuzNXemR9x%2FHtm0L%2F8fET2FVadg8iXQ4lXQctT2XdCtUbPjYic9KWmWG8l6daYTcF0hyxeQbzsH6oK8PPPR2Hwdgp3d%2BDS6OfnjwV9gpkJmKnwmHxF01d7oji7J4R1dWvLDRpbLRO7Q6XHv5jQXV7%2F5QGyX2vC1FTt88A6bEtPx5ENh83Wacpl2Lfl2WXIuzKo2TJCf1uzHIrpd2K3lwqRFtn773dW1JDPCWqnTMaicEPL4DExOyP9%2BPJq921e%2B2IM0Y5iiQlKckcuC1Kdg2S5sNvdvNYFRc02UOSiLamT8aP5TSQIl5phGFey%2FcDSfD%2BweusYBze8hTSr0TYW%2BqkDVELa4Osozc3bj18asEClnFCnjHEbKqP1n4Vp5Xms3Gi4NwpbXblPRjpp%2BJw48TqnfDPwgoA3kdsI297%2F6GwAA%2F%2F8BAAD%2F%2F4Lhv8%2BCBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSwWskxRut3s3hx8%2BDKOtBQZiDiIKZdPfM9Ey7h8UYI8HsZtlVzE2rq6on5VR3NVXd05OcgosSb5N%2FQDpvkg2rQRS8ushkYQ8BYcdTDuZPEETYkweZ2eDoB833vX7v8L731ZcHxQVxUdDzlZt6RypFl1p1t%2FbGpuddr63LtBjUBp3gk6B5vWb6b4dB3X2z9r5gPb3ku57req5XW5VGxHqwNCUhs5PQq4duvenXvVYTA%2FNfbAsHljrg%2FQvyIiSfLDxyrkGyMdLk%2BxVhe7nO3novKRTNtUGfH3%2BU9lJdpkjmY2wcxOnxpRraPll9CJ0ezexC9%2F8RRnJCnMcPEaXHlyYR9Q9nPiMFkSLiz6HsjyHUGJKOwfQ9SP6EAIzj1gbS5P4tbUq6%2FYylU3ZCFp7%2BCVlOyMJv15Am3y0rOajd1arIpU4tBnEFORhDdsfIilPkO1cgy1Ow%2FHNI%2FgtZerqONDncsEpD8vPX%2FCbvhHEcLLphGC42G357MQwittgKoyhmvNEJouYsICnHkPEYSgxBrYNi%2BkkHReygyBwk%2FLzGPM9ru5xRtxMy1uBtEQXc9Wg79qjnBh0UbLrDEHk2BFNDMLOLzOyiJ4cwxc%2BwWxUsd2Bzgj6vUAqC0hKUlKCUBGVOUParI66sb6v7XNki8i67f9kb1Ujn3QN6pPOuSMlBdkFemAX3e%2F9r9MR5jdNYtEXY4ZQJT7Rc3uyEQSharEMDP6BNWFlB2iuzNXemR9x%2FHtm0L%2F8fET2FVadg8iXQ4lXQctT2XdCtUbPjYic9KWmWG8l6daYTcF0hyxeQbzsH6oK8PPPR2Hwdgp3d%2BDS6OfnjwV9gpkJmKnwmHxF01d7oji7J4R1dWvLDRpbLRO7Q6XHv5jQXV7%2F5QGyX2vC1FTt88A6bEtPx5ENh83Wacpl2Lfl2WXIuzKo2TJCf1uzHIrpd2K3lwqRFtn773dW1JDPCWqnTMaicEPL4DExOyP9%2BPJq921e%2B2IM0Y5iiQlKckcuC1Kdg2S5sNvdvNYFRc02UOSiLamT8aP5TSQIl5phGFey%2FcDSfD%2BweusYBze8hTSr0TYW%2BqkDVELa4Osozc3bj18asEClnFCnjHEbKqP1n4Vp5Xms3Gi4NwpbXblPRjpp%2BJw48TqnfDPwgoA3kdsI297%2F6GwAA%2F%2F8BAAD%2F%2F4Lhv8%2BCBAAA HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Cookie: u_pl=15627934; uid_id2=24d89ff6-0999-4327-96bc-59bbfcd386b4:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecdafe7e98dace1e50d48969e5c8a626a4=[3364902]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0081f43aa1cb827685c0dd68747440d3
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 828e18f94b117185ae1741950339f151
9e5be482e5cb0e4b214b064b936b15d2718d1c99
add008da2c5eff2e1e787e88d616cc7f3003c4ea5a5e81b9158dfa64ce290199
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "ADD008DA2C5EFF2E1E787E88D616CC7F3003C4EA5A5E81B9158DFA64CE290199"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16413
Expires: Wed, 26 Oct 2022 06:20:23 GMT
Date: Wed, 26 Oct 2022 01:46:50 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 828e18f94b117185ae1741950339f151
9e5be482e5cb0e4b214b064b936b15d2718d1c99
add008da2c5eff2e1e787e88d616cc7f3003c4ea5a5e81b9158dfa64ce290199
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "ADD008DA2C5EFF2E1E787E88D616CC7F3003C4EA5A5E81B9158DFA64CE290199"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16413
Expires: Wed, 26 Oct 2022 06:20:23 GMT
Date: Wed, 26 Oct 2022 01:46:50 GMT
Connection: keep-alive
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/css/animate.css
200 OK 5.5 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/css/animate.css
IP
Hash 21f161968edd59617782250723935f44
cbbf10e0f602586e16716068a2bc818a874e0e94
35f91f778b8f59ccafbad216d08f539ee244a3f940b41af347bd56b534e5572d
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:50 GMT
content-type: text/css
last-modified: Mon, 17 Jan 2022 14:25:59 GMT
etag: W/"61e57c77-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 3616625
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=InPisv%2FgcWBGmAWoRJSiVppkg6epoALMggepEHI%2FYPAZ4j7WK9A69QKPIFzZnoQk7Z845YQHJpY5LykvMA5jS8d9O02gAkQjeEJpYYWbiWJkUG9hc0gfa0sE5ET8nmRrJto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ff85403a557312-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
samp.waptrick.org/special/imgs/arrow2.gif
200 OK 12 kB URL HTTP/1.1 samp.waptrick.org/special/imgs/arrow2.gif
IP
File type GIF image data, version 89a, 41 x 43\012- data
Hash f8189d98cbf1b8071b0df6ab8e637d97
b50d92ab9ff465669c3fdc3eae879c68b7561ff2
199258e3d406ba3d92ea0d3286a3fb6b482c53719d30ada80fdf225854ed8575
GET /special/imgs/arrow2.gif HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/gif
Last-Modified: Tue, 26 Mar 2019 06:53:24 GMT
Accept-Ranges: bytes
ETag: "264949ba0e3d41:0"
Server: Microsoft-IIS/8.5
Date: Wed, 26 Oct 2022 01:46:47 GMT
Connection: close
Content-Length: 11840
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/img/icon.jpg
200 OK 60 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/img/icon.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=821, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1232], progressive, precision 8, 281x290, components 3\012- data
Hash 9337eb4f9526f6d16e6d1602d8fee3ae
203c7272c5a60a752db43857b2d337d644f690f5
1e803197ccab280a9285cdae1adbea170504d59ef0bbf02aab3d9785c0871422
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/img/icon.jpg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:50 GMT
content-type: image/jpeg
content-length: 59931
last-modified: Tue, 08 Feb 2022 14:18:00 GMT
etag: "62027b98-ea1b"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 7227749
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KY6qspKUnAbt9qvY7lcgPnduooLS2SvL6i4UtLmonqpWtHAi5%2FbfOMeAZsCtnCYpxwTbfcU4Z8bBy7EdW4v%2B5RHiNhMVDnGr24RbOvvUwjsSEGObAePz4lAHhPG4RxkDc7Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ff85407a847312-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 828e18f94b117185ae1741950339f151
9e5be482e5cb0e4b214b064b936b15d2718d1c99
add008da2c5eff2e1e787e88d616cc7f3003c4ea5a5e81b9158dfa64ce290199
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "ADD008DA2C5EFF2E1E787E88D616CC7F3003C4EA5A5E81B9158DFA64CE290199"
Last-Modified: Mon, 24 Oct 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16413
Expires: Wed, 26 Oct 2022 06:20:23 GMT
Date: Wed, 26 Oct 2022 01:46:50 GMT
Connection: keep-alive
insistinestimable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Findex.html&l=1688&fd=39
200 OK 0 B URL HTTP/1.1 insistinestimable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Findex.html&l=1688&fd=39
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Findex.html&l=1688&fd=39 HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
insistinestimable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Fcss%2Fanimate.css&l=79245&fd=116
200 OK 0 B URL HTTP/1.1 insistinestimable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Fcss%2Fanimate.css&l=79245&fd=116
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Fcss%2Fanimate.css&l=79245&fd=116 HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
insistinestimable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Fjs%2Fscript.js&l=468&fd=111
200 OK 0 B URL HTTP/1.1 insistinestimable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Fjs%2Fscript.js&l=468&fd=111
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F13%2Fjs%2Fscript.js&l=468&fd=111 HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/index.html
200 OK 1.1 kB URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/index.html
IP
File type HTML document text\012- HTML document, ASCII text
Hash 4a87f3ba3a432257009d7eed44a40c58
7f20de84ca12d0dad68c1aa67a47aa2b3142e620
dcb8a97a1cc23cc4564e13b9f24fddee405fbc776079fe9391ea9a73fcb061dc
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:50 GMT
content-type: text/html
last-modified: Wed, 09 Feb 2022 11:16:34 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 86471
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0IPvnr5XNkHTalUL8ABBRolip5QAXXJsClq5jLK1cGnSD3A1HDKm3iwABPLlKL4qW21UBP%2FaBOnz7sEJCNeTiSUa%2FVJFCP5Ys2LaGMBWqcf5BcPDqI3keVXpYVsfEikH0QoRvHo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ff853f2ec1b511-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 19 Oct 2022 20:16:43 GMT
Expires: Thu, 19 Oct 2023 20:16:43 GMT
Cache-Control: public, max-age=31536000
Age: 538207
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 19 Oct 2022 20:16:43 GMT
Expires: Thu, 19 Oct 2023 20:16:43 GMT
Cache-Control: public, max-age=31536000
Age: 538207
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
insistinestimable.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd9NZPFj58LUcaFgtALEQXTqer%2F5SwGY4wEM5NhRjE7ff%2Bq8%2BxX9Yr3qro6WQUHJe46X0Aqp5MJo0EU3DpIZ2AWAWHaVRbmIwgizMqFdE%2Bw9UJx76lzFuee%2B748yC%2BIj5yer9w0O0prutSs%2BpU3NoPgemVdJfmgMui0Pmk1rlds%2F%2B2wVfXfrLwvec8s1fzA9wM%2FqKwqKyMzWJqSUOlJGFRDv9qoVYNmAwP7X%2BxyD456EP0L8iKUmCw88q5B8TGS%2BPsV6XqZSd96L841zYxFXxx%2FlPQSUySI52NkPUTJ8aUaxj1ZfQiTHM3swvT%2FETI1Id7jh2DJ8aVJsP7hzCfTkAmYeA5Ffwypx1B0DG7uQYknBOACtzaQxPdvGVvQ7WcsnbITsvD0T6hiQhZ%2Bu4Yk%2Fm5Zq0HlrtF5pkziMIhKqMEYqjtGmp8i27kCVZyCZ59DiV%2FI0tN1JPHhhtMGSpy%2FVmuIThhFrUU%2FDMPFRr3WXgxbjC82Q8YiLuqdFmvMAlJqDBWNoeUQ1HnIp5%2FykEce8tRDLM4rPAiCti849Tsh53XRlqwl%2FIC2o4AGfquDnE93GCJLh%2BB6CG53kdpd9NQQNv8ZbquEEx5cRtAXJQpJUDiCghIUiqDICIp%2BeSS0q7nyvtAuZ8Flr132ejkyWfeAHpmsKxNykF6QF2bB%2Fd7%2FGj15XhE0km0ZdgTlMpBNXzQ6YSuUTd6hrVqLNuBUCeWuzNbcmR5x%2F3mk0778fzB6CqdPwdVLoPmroMWoXfNBt0aNjo%2Bd5KSgaWYV71W5iSFMiTRbQLbtHegL8vLMR33zdUh%2BduNTdnPyx4O%2FwG2J1Jb4TD0i6Oq90R1TkMM7pnDkh400U7HaodPj3s1oJq9%2B84HcLowVaytu%2BOAdPiWm48mH0mXrNBEq6Try7bISQtpVY7kkP625jyW7nbut5dwmebp%2B%2B93VtTi10jllkjGomhDy%2BAxcTcj%2FfjyavdtXvtiDsmPYvEScn5HLgjKn4OkuXDr37wyB1XMNSz0UeTmyNTb%2FqRWBlnNMWQn3L8zm84HbQ9d6oNk9JHGJvi3R1yWoHsLlV0dZas9u%2FFqfFZj2Rkxb75Bpq%2FefhevUeaXuizaTkWwz2Wg2IskFazaZzyPO6qLT4cjchG%2Fuf%2FU3AAAA%2F%2F8BAAD%2F%2FwI1aieCBAAA
200 OK 7 B URL HTTP/1.1 insistinestimable.com/impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd9NZPFj58LUcaFgtALEQXTqer%2F5SwGY4wEM5NhRjE7ff%2Bq8%2BxX9Yr3qro6WQUHJe46X0Aqp5MJo0EU3DpIZ2AWAWHaVRbmIwgizMqFdE%2Bw9UJx76lzFuee%2B748yC%2BIj5yer9w0O0prutSs%2BpU3NoPgemVdJfmgMui0Pmk1rlds%2F%2B2wVfXfrLwvec8s1fzA9wM%2FqKwqKyMzWJqSUOlJGFRDv9qoVYNmAwP7X%2BxyD456EP0L8iKUmCw88q5B8TGS%2BPsV6XqZSd96L841zYxFXxx%2FlPQSUySI52NkPUTJ8aUaxj1ZfQiTHM3swvT%2FETI1Id7jh2DJ8aVJsP7hzCfTkAmYeA5Ffwypx1B0DG7uQYknBOACtzaQxPdvGVvQ7WcsnbITsvD0T6hiQhZ%2Bu4Yk%2Fm5Zq0HlrtF5pkziMIhKqMEYqjtGmp8i27kCVZyCZ59DiV%2FI0tN1JPHhhtMGSpy%2FVmuIThhFrUU%2FDMPFRr3WXgxbjC82Q8YiLuqdFmvMAlJqDBWNoeUQ1HnIp5%2FykEce8tRDLM4rPAiCti849Tsh53XRlqwl%2FIC2o4AGfquDnE93GCJLh%2BB6CG53kdpd9NQQNv8ZbquEEx5cRtAXJQpJUDiCghIUiqDICIp%2BeSS0q7nyvtAuZ8Flr132ejkyWfeAHpmsKxNykF6QF2bB%2Fd7%2FGj15XhE0km0ZdgTlMpBNXzQ6YSuUTd6hrVqLNuBUCeWuzNbcmR5x%2F3mk0778fzB6CqdPwdVLoPmroMWoXfNBt0aNjo%2Bd5KSgaWYV71W5iSFMiTRbQLbtHegL8vLMR33zdUh%2BduNTdnPyx4O%2FwG2J1Jb4TD0i6Oq90R1TkMM7pnDkh400U7HaodPj3s1oJq9%2B84HcLowVaytu%2BOAdPiWm48mH0mXrNBEq6Try7bISQtpVY7kkP625jyW7nbut5dwmebp%2B%2B93VtTi10jllkjGomhDy%2BAxcTcj%2FfjyavdtXvtiDsmPYvEScn5HLgjKn4OkuXDr37wyB1XMNSz0UeTmyNTb%2FqRWBlnNMWQn3L8zm84HbQ9d6oNk9JHGJvi3R1yWoHsLlV0dZas9u%2FFqfFZj2Rkxb75Bpq%2FefhevUeaXuizaTkWwz2Wg2IskFazaZzyPO6qLT4cjchG%2Fuf%2FU3AAAA%2F%2F8BAAD%2F%2FwI1aieCBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RST2sk1Rd9NZPFj58LUcaFgtALEQXTqer%2F5SwGY4wEM5NhRjE7ff%2Bq8%2BxX9Yr3qro6WQUHJe46X0Aqp5MJo0EU3DpIZ2AWAWHaVRbmIwgizMqFdE%2Bw9UJx76lzFuee%2B748yC%2BIj5yer9w0O0prutSs%2BpU3NoPgemVdJfmgMui0Pmk1rlds%2F%2B2wVfXfrLwvec8s1fzA9wM%2FqKwqKyMzWJqSUOlJGFRDv9qoVYNmAwP7X%2BxyD456EP0L8iKUmCw88q5B8TGS%2BPsV6XqZSd96L841zYxFXxx%2FlPQSUySI52NkPUTJ8aUaxj1ZfQiTHM3swvT%2FETI1Id7jh2DJ8aVJsP7hzCfTkAmYeA5Ffwypx1B0DG7uQYknBOACtzaQxPdvGVvQ7WcsnbITsvD0T6hiQhZ%2Bu4Yk%2Fm5Zq0HlrtF5pkziMIhKqMEYqjtGmp8i27kCVZyCZ59DiV%2FI0tN1JPHhhtMGSpy%2FVmuIThhFrUU%2FDMPFRr3WXgxbjC82Q8YiLuqdFmvMAlJqDBWNoeUQ1HnIp5%2FykEce8tRDLM4rPAiCti849Tsh53XRlqwl%2FIC2o4AGfquDnE93GCJLh%2BB6CG53kdpd9NQQNv8ZbquEEx5cRtAXJQpJUDiCghIUiqDICIp%2BeSS0q7nyvtAuZ8Flr132ejkyWfeAHpmsKxNykF6QF2bB%2Fd7%2FGj15XhE0km0ZdgTlMpBNXzQ6YSuUTd6hrVqLNuBUCeWuzNbcmR5x%2F3mk0778fzB6CqdPwdVLoPmroMWoXfNBt0aNjo%2Bd5KSgaWYV71W5iSFMiTRbQLbtHegL8vLMR33zdUh%2BduNTdnPyx4O%2FwG2J1Jb4TD0i6Oq90R1TkMM7pnDkh400U7HaodPj3s1oJq9%2B84HcLowVaytu%2BOAdPiWm48mH0mXrNBEq6Try7bISQtpVY7kkP625jyW7nbut5dwmebp%2B%2B93VtTi10jllkjGomhDy%2BAxcTcj%2FfjyavdtXvtiDsmPYvEScn5HLgjKn4OkuXDr37wyB1XMNSz0UeTmyNTb%2FqRWBlnNMWQn3L8zm84HbQ9d6oNk9JHGJvi3R1yWoHsLlV0dZas9u%2FFqfFZj2Rkxb75Bpq%2FefhevUeaXuizaTkWwz2Wg2IskFazaZzyPO6qLT4cjchG%2Fuf%2FU3AAAA%2F%2F8BAAD%2F%2FwI1aieCBAAA HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Cookie: u_pl=15627934; uid_id2=24d89ff6-0999-4327-96bc-59bbfcd386b4:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecdafe7e98dace1e50d48969e5c8a626a4=[3364902]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c10298414ca0e3ef570afe946d4b6a4d
Strict-Transport-Security: max-age=0; includeSubdomains
insistinestimable.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 insistinestimable.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: insistinestimable.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Cookie: u_pl=15627934; uid_id2=24d89ff6-0999-4327-96bc-59bbfcd386b4:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecdafe7e98dace1e50d48969e5c8a626a4=[3364902]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
unseenreport.com/pxf.gif?uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=bf0d7612e94ed920aec918d8bc477e4f&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=bf0d7612e94ed920aec918d8bc477e4f&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=bf0d7612e94ed920aec918d8bc477e4f&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c5f08b42bbf34a49a6307261b1090568
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=dafe7e98dace1e50d48969e5c8a626a4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=dafe7e98dace1e50d48969e5c8a626a4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=24d89ff6-0999-4327-96bc-59bbfcd386b4&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=14.29&b_frame=0&pk=dafe7e98dace1e50d48969e5c8a626a4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=1 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 26 Oct 2022 01:46:50 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 71cde884a9a48d3f336813e6284c470d
Strict-Transport-Security: max-age=0; includeSubdomains
waptrick.com/favicon.ico
301 Moved Permanently 1.5 kB IP
File type gzip compressed data, from NTFS filesystem (NT)\012- data
Hash 0224583c0e5db4f0e32c5bff35b2e5ae
95e3f8b3ca7aa74b17b32b3aec84d59588e7a28c
0ce8ee4119351f3f007a3c678d5ca75d75cb5e970d6eb2fe2a482c0868e259e4
GET /favicon.ico HTTP/1.1
Host: waptrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/en/free/mp3/Cediz/
Cookie: uuid=0x544c9ae2cabeecb6; adsterra=Y; dom3ic8zudi28v8lr6fgphwffqoz0j6c=24d89ff6-0999-4327-96bc-59bbfcd386b4%3A1%3A1; sb_main_dafe7e98dace1e50d48969e5c8a626a4=1; sb_count_dafe7e98dace1e50d48969e5c8a626a4=1; ppu_main_bf0d7612e94ed920aec918d8bc477e4f=1
HTTP/1.1 301 Moved Permanently
Server: Microsoft-IIS/7.5
Date: Wed, 26 Oct 2022 01:47:12 GMT
Content-type: text/html
Location: http://samp.waptrick.org/favicon.ico
Connection: close
Content-encoding: gzip
waptrick.one/en/free/mp3/cediz
301 Moved Permanently 0 B URL HTTP/1.1 waptrick.one/en/free/mp3/cediz
IP
GET /en/free/mp3/cediz HTTP/1.1
Host: waptrick.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Microsoft-IIS/7.5
Date: Wed, 26 Oct 2022 01:47:08 GMT
Content-type: text/html
Pragma: no-cache
Cache-control: max-age=0, no-store, no-cache, must-revalidate
Vary: accept-encoding, user-agent
Location: http://waptrick.com/en/free/mp3/Cediz/
Connection: close
Content-encoding: gzip
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/css/style.css
200 OK 0 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/css/style.css
IP
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/13/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 26 Oct 2022 01:46:50 GMT
content-type: text/css
last-modified: Wed, 09 Feb 2022 11:16:21 GMT
etag: W/"6203a285-2751"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 130165
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XOYlXaAIH7n48URScbURfvt8fu3SLOca%2BnO00kbKNdyLLzKNgCaARWwoVs6Nw19qd4aj8jHRxWlhXjQTHrrWVo%2B4YEmYI0MT4SPVfgkqgM9p9PDYpK%2F4wmxy1xH1uzCa4Zg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ff85403a527312-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
waptrick.net/en/free/mp3/Cediz
301 Moved Permanently 0 B URL HTTP/1.1 waptrick.net/en/free/mp3/Cediz
IP
Analyzer Verdict Alert fortinet Phishing
GET /en/free/mp3/Cediz HTTP/1.1
Host: waptrick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Microsoft-IIS/7.5
Date: Wed, 26 Oct 2022 01:47:08 GMT
Content-type: text/html
Location: http://waptrick.one/en/free/mp3/cediz
Connection: close
Content-encoding: gzip
104.36.23.145
18.193.142.27
23.36.77.32
185.76.9.19
95.211.229.246
104.21.76.10
93.184.220.29