Overview

URLapplabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=96JTNbKA4w895E4P4N9cnH&campid={campaignid}&var=&ymid=96JTNbKA4w895E4P4N9cnH&ymid=96JTNbKA4w895E4P4N9cnH
IP 139.45.197.151 (United Kingdom)
ASN#9002 RETN Limited
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-26 14:12:04 UTC
StatusLoading report..
IDS alerts0
Blocklist alert8
urlquery alerts
1
Scam - Fake AntiVirus
Tags None

Domain Summary (16)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (11) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3718 9753 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 34.102.187.140
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
my.rtmark.net (1) 9054 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 455 746 139.45.195.8
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 34.215.107.141
ocsp.sectigo.com (1) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 340 964 104.18.32.68
choupsee.com (3) 93673 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1511 2048 139.45.197.251
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 59710 34.120.237.76
pulserviral.com (1) 305654 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 458 587 139.45.197.154
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
e1.o.lencr.org (2) 6159 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 676 1458 23.36.77.32
cdntechone.com (1) 64371 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 362 846 104.21.29.183
applabzzeydoo.com (5) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2885 62380 139.45.197.151
ocsp.digicert.com (5) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1705 3412 93.184.220.29
littlecdn.com (4) 11785 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1699 8363 104.22.24.116
stoomawy.net (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 903 38636 139.45.197.250

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-26 medium choupsee.com/event Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-26 medium applabzzeydoo.com Sinkholed
2022-11-26 medium applabzzeydoo.com Sinkholed
2022-11-26 medium applabzzeydoo.com Sinkholed
2022-11-26 medium applabzzeydoo.com Sinkholed
2022-11-26 medium stoomawy.net Sinkholed
2022-11-26 medium stoomawy.net Sinkholed
2022-11-26 medium applabzzeydoo.com Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 139.45.197.151
Date UQ / IDS / BL URL IP
2023-06-05 16:57:58 UTC 0 - 2 - 0 applandforbuddies.top/ 139.45.197.151
2023-06-05 16:27:29 UTC 0 - 0 - 3 v.psiceheloo.com/ 139.45.197.151
2023-06-05 16:24:15 UTC 0 - 1 - 0 eengilee.xyz/ 139.45.197.151
2023-06-05 16:05:15 UTC 0 - 2 - 0 watchmytopapp.top/ 139.45.197.151
2023-06-05 15:32:01 UTC 0 - 0 - 3 q.joasigeegrez.com/ 139.45.197.151


Last 5 reports on ASN: RETN Limited
Date UQ / IDS / BL URL IP
2023-06-07 01:54:44 UTC 0 - 0 - 0 stonkstime.com 139.45.240.92
2023-06-06 21:59:12 UTC 0 - 1 - 0 retryngs.com/link?z=5985195&var=8d375729-b0eb (...) 139.45.197.249
2023-06-06 21:26:12 UTC 0 - 1 - 0 surveygett.com/link?z=5982953&var=474_89a3984 (...) 139.45.196.64
2023-06-06 20:24:35 UTC 0 - 1 - 0 surveygett.com/link?z=5918020&var=&ymid=2oerM (...) 139.45.196.64
2023-06-06 20:01:19 UTC 4 - 0 - 0 nanouwho.com/12?rnd=4062592769&z=3203051&b=16 (...) 139.45.197.242


Last 5 reports on domain: applabzzeydoo.com
Date UQ / IDS / BL URL IP
2023-03-26 14:08:41 UTC 4 - 0 - 0 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-03-26 11:12:47 UTC 5 - 0 - 0 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-03-25 22:12:41 UTC 5 - 0 - 0 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-03-25 18:11:58 UTC 6 - 0 - 0 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151
2023-03-25 15:10:24 UTC 5 - 0 - 0 applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=145568 (...) 139.45.197.151


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-04 22:09:31 UTC 4 - 0 - 1 www.mediacdnc.com/go/f0e7977a-c452-4a5e-88ed- (...) 3.70.16.242
2023-04-04 06:28:49 UTC 3 - 0 - 1 www.telera.site/go/ba8de190-e30e-47ea-a33f-3c (...) 3.70.16.242
2023-03-30 02:22:26 UTC 4 - 0 - 1 roathoowood.com/?b=14812962&campid={campaigni (...) 139.45.197.151
2023-03-29 20:09:04 UTC 4 - 0 - 1 www.telera.site/go/ba8de190-e30e-47ea-a33f-3c (...) 3.70.16.242
2023-03-29 11:28:08 UTC 5 - 0 - 0 www.mediacdnc.com/go/4f120798-ccd4-4506-a26c- (...) 3.70.16.242

JavaScript

Executed Scripts (15)

Executed Evals (4)
#1 JavaScript::Eval (size: 24) - SHA256: 74867c5a2cf408b090752d3cb8767bb46fdb4a0529bc959d96f51aeb2607d7e3
require('buffer').Buffer
#2 JavaScript::Eval (size: 2873) - SHA256: ce79318783ffabad8ea876d92239d3bc4466deda5883dafb82a57a883a4d7c96
(function getBrowserStatWrapper(statsEval) {
    try {
        const statsResult = eval(statsEval);
        navigator.serviceWorker.getRegistration().then(t => {
            var e;
            t && (null === (e = t.active || t.installing || t.waiting) || void 0 === e || e.postMessage({
                nt: !0,
                st: statsResult
            }))
        })
    } catch (t) {}
})("(function(){var t;const e=/(iphone|ipad|android|(windows phone))/i.test(window.navigator.userAgent),n=1,o=2,i={};try{i.IM=e?1:0}catch(t){}try{i.SW=window.screen.width}catch(t){}try{i.SH=window.screen.height}catch(t){}try{i.SAH=window.screen.availHeight}catch(t){}try{i.WX=window.screenX}catch(t){}try{i.WY=window.screenY}catch(t){}try{i.WW=window.outerWidth}catch(t){}try{i.WH=window.outerHeight}catch(t){}try{i.WIW=window.innerWidth}catch(t){}try{i.WIH=window.innerHeight}catch(t){}try{i.CW=document.documentElement.clientWidth}catch(t){}try{i.WFC=null===(t=window.top)||void 0===t?void 0:t.frames.length}catch(t){}try{i.PL='undefined'!=typeof document&&document.location.href||''}catch(t){}try{i.DRF='undefined'!=typeof document&&document.referrer||''}catch(t){}try{i.NP=navigator.plugins instanceof PluginArray&&0!==navigator.plugins.length?1:0}catch(t){}try{i.PT=void 0!==window.callPhantom||void 0!==window._phantom?1:0}catch(t){}try{i.NB='function'==typeof navigator.sendBeacon?1:0}catch(t){}try{i.NG=void 0!==navigator.geolocation?1:0}catch(t){}try{i.NW=void 0!==navigator.webdriver&&navigator.webdriver?1:0}catch(t){}try{i.IX=window.self!==window.top}catch(t){}try{i.NAVLNG=window.navigator.language}catch(t){}try{i.IST=null!==document.documentElement&&'ontouchstart'in window}catch(t){}try{i.WGL=function(){const t=document.createElement('canvas'),e=t.getContext('experimental-webgl')||t.getContext('webgl');if(!e||!(e instanceof WebGL2RenderingContext||e instanceof WebGLRenderingContext))return'';const n=e.getExtension('WEBGL_debug_renderer_info');return n?String(e.getParameter(n.UNMASKED_RENDERER_WEBGL)):''}()}catch(t){}try{i.HIL=function(){const t=navigator.userAgent||'',i=!t,r=/HeadlessChrome/i.test(t),a=/(chrome|chromium)/i.test(t),s=/opera/i.test(t),c=Boolean(navigator.webdriver),u=Boolean(window.callPhantom||window._phantom||function(){try{null[0]()}catch(t){const e=t;try{return Boolean(e&&e.stack&&e.stack.indexOf('phantomjs')>-1)}catch(t){return!1}}return!1}()),l=!window.chrome,d=function(){try{return!(navigator.plugins instanceof PluginArray&&navigator.plugins.length)||0===Array.from(navigator.plugins).filter(t=>t instanceof Plugin&&t.name).length}catch(t){return!1}}();return i||r||c||u||(a||s)&&l&&!e||a&&d&&!e?n:o}()}catch(t){}try{i.AA=function(){try{const t=Math.random().toString(36).slice(2);window[t]=!1;const e=document.createElement('script');e.innerHTML=`try{eval(\"(() => { const a = async function name () {}; window['${t}'] = true; })()\")}catch(e){}`,document.head.appendChild(e);const n=window[t];return delete window[t],n}catch(t){return!1}}()}catch(t){}return i})();");
#3 JavaScript::Eval (size: 2613) - SHA256: 06816c1cda65dc0482c5c2325b944acb9cf08cb5812fd85634023b96d3a72520
(function() {
    var t;
    const e = /(iphone|ipad|android|(windows phone))/i.test(window.navigator.userAgent),
        n = 1,
        o = 2,
        i = {};
    try {
        i.IM = e ? 1 : 0
    } catch (t) {}
    try {
        i.SW = window.screen.width
    } catch (t) {}
    try {
        i.SH = window.screen.height
    } catch (t) {}
    try {
        i.SAH = window.screen.availHeight
    } catch (t) {}
    try {
        i.WX = window.screenX
    } catch (t) {}
    try {
        i.WY = window.screenY
    } catch (t) {}
    try {
        i.WW = window.outerWidth
    } catch (t) {}
    try {
        i.WH = window.outerHeight
    } catch (t) {}
    try {
        i.WIW = window.innerWidth
    } catch (t) {}
    try {
        i.WIH = window.innerHeight
    } catch (t) {}
    try {
        i.CW = document.documentElement.clientWidth
    } catch (t) {}
    try {
        i.WFC = null === (t = window.top) || void 0 === t ? void 0 : t.frames.length
    } catch (t) {}
    try {
        i.PL = 'undefined' != typeof document && document.location.href || ''
    } catch (t) {}
    try {
        i.DRF = 'undefined' != typeof document && document.referrer || ''
    } catch (t) {}
    try {
        i.NP = navigator.plugins instanceof PluginArray && 0 !== navigator.plugins.length ? 1 : 0
    } catch (t) {}
    try {
        i.PT = void 0 !== window.callPhantom || void 0 !== window._phantom ? 1 : 0
    } catch (t) {}
    try {
        i.NB = 'function' == typeof navigator.sendBeacon ? 1 : 0
    } catch (t) {}
    try {
        i.NG = void 0 !== navigator.geolocation ? 1 : 0
    } catch (t) {}
    try {
        i.NW = void 0 !== navigator.webdriver && navigator.webdriver ? 1 : 0
    } catch (t) {}
    try {
        i.IX = window.self !== window.top
    } catch (t) {}
    try {
        i.NAVLNG = window.navigator.language
    } catch (t) {}
    try {
        i.IST = null !== document.documentElement && 'ontouchstart' in window
    } catch (t) {}
    try {
        i.WGL = function() {
            const t = document.createElement('canvas'),
                e = t.getContext('experimental-webgl') || t.getContext('webgl');
            if (!e || !(e instanceof WebGL2RenderingContext || e instanceof WebGLRenderingContext)) return '';
            const n = e.getExtension('WEBGL_debug_renderer_info');
            return n ? String(e.getParameter(n.UNMASKED_RENDERER_WEBGL)) : ''
        }()
    } catch (t) {}
    try {
        i.HIL = function() {
            const t = navigator.userAgent || '',
                i = !t,
                r = /HeadlessChrome/i.test(t),
                a = /(chrome|chromium)/i.test(t),
                s = /opera/i.test(t),
                c = Boolean(navigator.webdriver),
                u = Boolean(window.callPhantom || window._phantom || function() {
                    try {
                        null[0]()
                    } catch (t) {
                        const e = t;
                        try {
                            return Boolean(e && e.stack && e.stack.indexOf('phantomjs') > -1)
                        } catch (t) {
                            return !1
                        }
                    }
                    return !1
                }()),
                l = !window.chrome,
                d = function() {
                    try {
                        return !(navigator.plugins instanceof PluginArray && navigator.plugins.length) || 0 === Array.from(navigator.plugins).filter(t => t instanceof Plugin && t.name).length
                    } catch (t) {
                        return !1
                    }
                }();
            return i || r || c || u || (a || s) && l && !e || a && d && !e ? n : o
        }()
    } catch (t) {}
    try {
        i.AA = function() {
            try {
                const t = Math.random().toString(36).slice(2);
                window[t] = !1;
                const e = document.createElement('script');
                e.innerHTML = `try{eval("(() => { const a = async function name () {}; window['${t}'] = true; })()")}catch(e){}`, document.head.appendChild(e);
                const n = window[t];
                return delete window[t], n
            } catch (t) {
                return !1
            }
        }()
    } catch (t) {}
    return i
})();
#4 JavaScript::Eval (size: 79) - SHA256: ea97a1df6b31b163a13f477507409656db538a39ec175a88d8f573420618e41c
(() => {
    const a = async
    function name() {};
    window['nvf5imx3kx'] = true;
})()

Executed Writes (0)


HTTP Transactions (47)


Request Response
                                        
                                            GET /?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=96JTNbKA4w895E4P4N9cnH&campid={campaignid}&var=&ymid=96JTNbKA4w895E4P4N9cnH&ymid=96JTNbKA4w895E4P4N9cnH HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             139.45.197.151
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 26 Nov 2022 14:11:53 GMT
Content-Length: 162
Connection: keep-alive
Location: https://applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=96JTNbKA4w895E4P4N9cnH&campid={campaignid}&var=&ymid=96JTNbKA4w895E4P4N9cnH&ymid=96JTNbKA4w895E4P4N9cnH


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "164D11173045B569CAFB32E300E4C1EC6D6AB177FD34D0414CC40C541268779F"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10524
Expires: Sat, 26 Nov 2022 17:07:18 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4039
Cache-Control: max-age=163593
Date: Sat, 26 Nov 2022 14:11:54 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 11:38:27 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 26 Nov 2022 13:19:13 GMT
cache-control: public,max-age=3600
age: 3161
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    d130218d0e2841f39c99610fe1a2ab90
Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945
Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4723
Expires: Sat, 26 Nov 2022 15:30:37 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: lF76VbtJHM/eCabXiCpXM/vb87h88BkEMmfP1GNm07vXOgwxbeYUk8V9D55ljCXv5y4pOhu3UXA=
x-amz-request-id: CH2W3H6VB7W9N8MQ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 26 Nov 2022 13:41:14 GMT
age: 1840
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:54 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "87CFF707754C51BF084F8F14C0722C86B0A6EE31D5875250E34BC79DE7E3E7CF"
Last-Modified: Sat, 26 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 26 Nov 2022 20:11:54 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 26 Nov 2022 14:11:12 GMT
cache-control: public,max-age=3600
age: 42
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=96JTNbKA4w895E4P4N9cnH&campid={campaignid}&var=&ymid=96JTNbKA4w895E4P4N9cnH&ymid=96JTNbKA4w895E4P4N9cnH HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             139.45.197.151
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:54 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.27
set-cookie: reverse=XPU8DkNAi8-G2Y_zAoRXeW_u7jvlQPU2koxip0DjNUQ; expires=Sat, 26-Nov-2022 15:11:54 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1956), with CRLF, LF line terminators
Size:   6805
Md5:    99bb927e89c6404d1a1f2363ec8476d1
Sha1:   0008f487698237a45a3a7ac95860512ad54849c3
Sha256: 158aa2ba7c0aced4f60a2be765f43c5b7cf6a3a4cb1a28ad6ced77f9e7c0b1a8

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3629
Cache-Control: max-age=132901
Date: Sat, 26 Nov 2022 14:11:54 GMT
Etag: "638174a2-118"
Expires: Mon, 28 Nov 2022 03:06:55 GMT
Last-Modified: Sat, 26 Nov 2022 02:06:26 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "54D2B755BFBFEDFC4DA722A3260099C671FFB2449458266C99FAEFD2429A2869"
Last-Modified: Fri, 25 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11391
Expires: Sat, 26 Nov 2022 17:21:45 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6078
Cache-Control: max-age=135350
Date: Sat, 26 Nov 2022 14:11:54 GMT
Etag: "638174a2-118"
Expires: Mon, 28 Nov 2022 03:47:44 GMT
Last-Modified: Sat, 26 Nov 2022 02:06:26 GMT
Server: ECS (amb/6B95)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3629
Cache-Control: max-age=132901
Date: Sat, 26 Nov 2022 14:11:54 GMT
Etag: "638174a2-118"
Expires: Mon, 28 Nov 2022 03:06:55 GMT
Last-Modified: Sat, 26 Nov 2022 02:06:26 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "54D2B755BFBFEDFC4DA722A3260099C671FFB2449458266C99FAEFD2429A2869"
Last-Modified: Fri, 25 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11391
Expires: Sat, 26 Nov 2022 17:21:45 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            GET /contents/s/d9/c1/60/cdf387dbad88bf3862072e2593/01109594612996.jpeg HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=96JTNbKA4w895E4P4N9cnH&campid={campaignid}&var=&ymid=96JTNbKA4w895E4P4N9cnH&ymid=96JTNbKA4w895E4P4N9cnH
Cookie: reverse=XPU8DkNAi8-G2Y_zAoRXeW_u7jvlQPU2koxip0DjNUQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             139.45.197.151
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:54 GMT
content-length: 52948
last-modified: Wed, 08 Sep 2021 11:39:17 GMT
vary: Accept-Encoding
etag: "6138a0e5-ced4"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x1600, components 3\012- data
Size:   52948
Md5:    d9c160cdf387dbad88bf3862072e2593
Sha1:   682d1572c405d3e307e127884788f3bc28518918
Sha256: 55b39e0443cb0436fd8ee4c860ba541685d8ea440f1d2769ed382375b942696f

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4542
Cache-Control: max-age=159039
Date: Sat, 26 Nov 2022 14:11:54 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 10:22:33 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B1D87337B96EEB134899D95E7E78AB32AF07C8A5390FF798F47908C22CE8F07B"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5357
Expires: Sat, 26 Nov 2022 15:41:11 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "EED2115B3276CB3CBDD3F3014DFAC69829D9F6E4D6C0A682C0BF03F64240AF9E"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9465
Expires: Sat, 26 Nov 2022 16:49:39 GMT
Date: Sat, 26 Nov 2022 14:11:54 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: SS+XOvUkHpiU+fPPc6GUzA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             34.215.107.141
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FgS2UmFm0wKtlJAoFzBkmt6UoN0=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/?l=Ik3Z1hRmgbrHuHy&b=14556889&z=5332574&s=96JTNbKA4w895E4P4N9cnH&campid={campaignid}&var=&ymid=96JTNbKA4w895E4P4N9cnH&ymid=96JTNbKA4w895E4P4N9cnH
Cookie: reverse=XPU8DkNAi8-G2Y_zAoRXeW_u7jvlQPU2koxip0DjNUQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             139.45.197.151
HTTP/2 204 No Content
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:55 GMT
strict-transport-security: max-age=60
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 26 Nov 2022 14:11:55 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 24 Nov 2022 16:52:35 GMT
Expires: Thu, 01 Dec 2022 16:52:34 GMT
Etag: "2ffaca360ca166595c22af6993fe09f828d94f2e"
Cache-Control: max-age=441038,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7703374c3b6eb521-OSL

                                        
                                            GET /apps/templates/constructor/constructor-app-lab-v1/themes/glass-dark.css?31212 HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.22.24.116
HTTP/2 200 OK
content-type: text/css
                                            
date: Sat, 26 Nov 2022 14:11:54 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-4ef"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 2992
server: cloudflare
cf-ray: 7703374afcd5b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   487
Md5:    be184dcbfa27576db817b0993ef6cf99
Sha1:   127fb5e5ade143128262f0fa7639f833be73f478
Sha256: ceb766daa821dfa586c21ab8782cafe2451c88b0b9d236df5e718bc7fb6104d3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F2204C33432D741923EEF89FCCB65E8372632D18C6E67B47864079F67166C2E2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2281
Expires: Sat, 26 Nov 2022 14:49:56 GMT
Date: Sat, 26 Nov 2022 14:11:55 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "43BBB48A1A37A33C18036773457C75408E907C1FD7297A42152AEE29F396066E"
Last-Modified: Thu, 24 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12468
Expires: Sat, 26 Nov 2022 17:39:43 GMT
Date: Sat, 26 Nov 2022 14:11:55 GMT
Connection: keep-alive

                                        
                                            GET /zone?&pub=0&zone_id=5225408&is_mobile=false&domain=applabzzeydoo.com&var=5332574&ymid=&var_3=&dsig=&nt=true&action=prerequest HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.197.251
HTTP/2 200 OK
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:55 GMT
content-length: 0
x-trace-id: 6b42e841c6755f6b42f233cee0b1b42d
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

                                        
                                            GET /gid.js?pub=0&userId=&zoneId=5225408&checkDuplicate=true&ymid=&var=5332574 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.195.8
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:55 GMT
content-length: 65
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9c9c029519844f64a4a11d2d73b528cd; expires=Sun, 26 Nov 2023 14:11:55 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   65
Md5:    6b39e7925dfaedd2e2f07cae6ec21190
Sha1:   9015821ae2d833eee07a1efc019bb464963c5888
Sha256: dbdf3ddc5e9f28c5446e5bc21529e45770d2dd241142dbfa714cb596ffc1a793
                                        
                                            OPTIONS /event HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             139.45.197.251
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:55 GMT
content-length: 0
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Malware
                                        
                                            GET /zone?&pub=0&zone_id=5225408&is_mobile=false&domain=applabzzeydoo.com&var=5332574&ymid=&var_3=&dsig=&nt=true&action=settings HTTP/1.1 
Host: choupsee.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             139.45.197.251
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:55 GMT
content-length: 728
x-trace-id: 27906b7f7037128129340a3e1721b239
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (727)
Size:   728
Md5:    9df15f9652b0263c6d54b343edbf6714
Sha1:   350cf07e20faf32c5b3fbb61141dd2acd8beadbd
Sha256: c32bc695973537f04df45b6121e745fca60342ea32f05cd4a5996a3d2aa75f10
                                        
                                            GET /apps/templates/_assets/scripts/vanillaqr.min.js HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.22.24.116
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sat, 26 Nov 2022 14:11:54 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-2d08"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 222
server: cloudflare
cf-ray: 7703374afcd3b4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11527)
Size:   4967
Md5:    b4e0feeaba0b4d99f59b6f920eeccfbf
Sha1:   4066ec7e45d5dfccaf130cadcb4d99c7a5ad5d71
Sha256: d537d07173b8cd20f8a17eed5023dda6332462900ad4ad01c39c394ef1086c82
                                        
                                            OPTIONS /event HTTP/1.1 
Host: stoomawy.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.197.250
HTTP/2 200 OK
content-type: text/plain; charset=utf-8
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:55 GMT
content-length: 0
access-control-allow-origin: https://applabzzeydoo.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /pfe/current/sw.perm.check.min.js?r=sw HTTP/1.1 
Host: stoomawy.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             139.45.197.250
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:54 GMT
last-modified: Thu, 24 Nov 2022 15:53:54 GMT
etag: W/"637f9392-1bc7f"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   37855
Md5:    c16d7bba8efa36eeb32cc14b9887900e
Sha1:   829ccc9443f4cdbdb0c8f8a46f03bb601b743888
Sha256: 06ab4e9278852df6cc88f864b89fa926144ccac97ca1ac7f36ec0a260d4f7370

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13338
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:11:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13338
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:11:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13338
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:11:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13338
Expires: Sat, 26 Nov 2022 17:54:14 GMT
Date: Sat, 26 Nov 2022 14:11:56 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1de44df6-bdc7-487f-a2a0-b42d26be2420.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 15818
x-amzn-requestid: a6570859-3b03-492e-9f84-e25b01223da2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLXrUF3bIAMF8CA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381397b-379b1bcf2ac0715835e10e48;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:54:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TI0cacek54dPUYW7fYy0xm-1CKdRXZGqBH1vGURakUsBbm-WGcW-vA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:17:55 GMT
age: 57241
etag: "1ac7a410cd4f3709f476c776dd5646dd982dcfa8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   15818
Md5:    17ebe470d040a6ea8c57e9b9d4f4e828
Sha1:   1ac7a410cd4f3709f476c776dd5646dd982dcfa8
Sha256: d65114b68fcc12344c6df7bf294718b79822fa9782d3bd54ca044b66f82052b1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34ec689c-96b7-450b-b77e-e0ecb4d89c3c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9049
x-amzn-requestid: 6cbd9639-c29d-4ff4-8091-3168f64f4c78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVGHzKoAMFSuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135ba-100ea4235fdf1df8491041c8;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: utbUF-6Z7rMqPNdRKHJyI-IZoyTy6HpkNBY-60xcZ-6NDXBz1XN6-Q==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:48:40 GMT
age: 58996
etag: "3d32bff85cb7ec118c4496d0c3802829fdc9af3b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9049
Md5:    c8dc4b8a7e9f7f4f84f0da568b43392b
Sha1:   3d32bff85cb7ec118c4496d0c3802829fdc9af3b
Sha256: 4b0ffde427085c796a7a5823604b29a4af43dbb93e99ec41f34feb37f52ac7d9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8277
x-amzn-requestid: e84a5668-cd91-42af-b6de-5eb694ea56e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB-KFtmIAMF00Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38d-64513fb257d83b9847c82929;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: O4PtH20kVWgH-Jf_TivPqMqjnwrZB_8XvZAkDDzLLFPXVjqzkz1YJw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:40:50 GMT
age: 59466
etag: "6a8504212141af411a18ce58960c8bb52e8116ac"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8277
Md5:    f59a591b222397ff0f01c22a0786e660
Sha1:   6a8504212141af411a18ce58960c8bb52e8116ac
Sha256: 624847cfdfcd770d2dee8a2b85f3c7c480cda58ba2aef1135184f3dffc30d1f1
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf04cc9f-ee4b-42fd-914f-cd86b9dc30eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3502
x-amzn-requestid: ca3f2610-e03c-48a7-abb3-fbbab76f63d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvYUHO5IAMFqDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5ce-7e36137711dc4668278c1c94;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:03:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SRN-oOfa8Z0mQZFYkWAv32XFiXChfGjfwZkfWz-IzHubwrKgzwoTxQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 03:55:38 GMT
age: 36978
etag: "61f9bed607e81606be78285596acdc5e0e4f4994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3502
Md5:    a783df85f30f9c555f9df6b99f61744d
Sha1:   61f9bed607e81606be78285596acdc5e0e4f4994
Sha256: 19db42201d0fa059f680d890ede6683c04e893e6308a2256d0203f826a7f34de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e649ab-6d56-47c9-ab7e-c65d9bdfcffd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6789
x-amzn-requestid: eede6332-5376-4f9c-83fc-f894430c1f4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLWWYFFgoAMFhaQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381375b-66d7ffc70f7d901420a503da;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:44:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: yM8EHyxy6pUHVZhGUOHuFOU-Z4eTyL2N3Ooa6QMrPlIfp6X5I_JBRw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 21:46:06 GMT
age: 59150
etag: "c47a3884465fc02b5c57faa5ffbd986ba29c64c2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6789
Md5:    926df9839ec3d924b563b55d8bccace8
Sha1:   c47a3884465fc02b5c57faa5ffbd986ba29c64c2
Sha256: a97cd625959aa81bc516024628315b2c6e2ce94f76cd579751a686a6611cc4d2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f5318cc-4728-4160-afd1-9d20b79b7de9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9914
x-amzn-requestid: 4db4ed29-20b4-4ca7-8835-2463d0989d5b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cLVVFHQYIAMFc4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638135b9-613da006118724124e345b29;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 21:38:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKxrYxVsJWOXAbrn6IpwLycF3rknFLkQeDyKOLq5WyflvTLeUjg_Lg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Fri, 25 Nov 2022 22:18:42 GMT
age: 57194
etag: "47fac81a2dd809df5c42ca1362f71d553572d2b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9914
Md5:    3b1c6878914466cfece680fa7cb73502
Sha1:   47fac81a2dd809df5c42ca1362f71d553572d2b1
Sha256: 6458883dfa2bdfd483e92e5f847a229508ef00ce1dbd11f49eec369d0bd3160a
                                        
                                            GET /stattag.js HTTP/1.1 
Host: cdntechone.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.29.183
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sat, 26 Nov 2022 14:11:54 GMT
last-modified: Wed, 23 Nov 2022 15:07:35 GMT
etag: W/"637e3737-3284"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6952
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fo6QrUQ5PoUEn1sSwjzQhA9YB2Vs%2FUEP8606WdctmCyMXSZH86FM0yqgnZScPj1yQ5NaQEKyXqcw0li9Ocuvy%2Bbf18mrX9UkBJfGCB9nb%2FxXtJZu%2B%2FREDRmHPYOPBadDuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7703374ab8f7b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /sw-check-permissions/5225408?z=5225408&ymid=&var=5332574 HTTP/1.1 
Host: applabzzeydoo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: reverse=XPU8DkNAi8-G2Y_zAoRXeW_u7jvlQPU2koxip0DjNUQ
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        
                                             139.45.197.151
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:54 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.24
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /leadgen/track-impression/?z=5332574&b=14556889&ymid=96JTNbKA4w895E4P4N9cnH HTTP/1.1 
Host: pulserviral.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://applabzzeydoo.com/
Origin: https://applabzzeydoo.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.197.154
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 26 Nov 2022 14:11:54 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.27
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /apps/templates/constructor/constructor-app-lab-v1/build/css/main.css?v4321212 HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.22.24.116
HTTP/2 200 OK
content-type: text/css
                                            
date: Sat, 26 Nov 2022 14:11:54 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-2c38"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 5148
server: cloudflare
cf-ray: 7703374aac7ab4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /apps/templates/constructor/constructor-app-lab-v1/build/js/main.js HTTP/1.1 
Host: littlecdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://applabzzeydoo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.22.24.116
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Sat, 26 Nov 2022 14:11:54 GMT
last-modified: Thu, 24 Nov 2022 13:09:16 GMT
vary: Accept-Encoding
etag: W/"637f6cfc-16ae"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
cache-control: max-age=3600
cf-cache-status: HIT
age: 222
server: cloudflare
cf-ray: 7703374abc7fb4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: