| wavebrowserbase.com/ |  34.230.145.12 | 301 Moved Permanently | 134 B |
IP34.230.145.12:0
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4aa7a432bb447f094408f1bd6229c605 1965c4952cc8c082a6307ed67061a57aab6632fa 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET / HTTP/1.1
Host: wavebrowserbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Thu, 08 Dec 2022 22:13:28 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://ntp.mywavehome.net:443/
|
|
| r3.o.lencr.org/ |  23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf2acd891dc6eb1f09f57a2b086791781 1e2088306501a61edcca1ade62c4d54f23b3b083 51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13465
Expires: Fri, 09 Dec 2022 01:57:53 GMT
Date: Thu, 08 Dec 2022 22:13:28 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashaea93551fa9deb76ae49a3b4019d64fe e3b8862057ebe839959228e42246d7b1807fc90c 7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11539
Expires: Fri, 09 Dec 2022 01:25:47 GMT
Date: Thu, 08 Dec 2022 22:13:28 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashc3470f9f0a4df8c1496b577fa9435ff6 f83b0226bb57ed0f3e1acdad61b940414add135d f542579e3a3577a646babde862282c2afda6ed784360a915143216100f7a3d91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5705
Expires: Thu, 08 Dec 2022 23:48:33 GMT
Date: Thu, 08 Dec 2022 22:13:28 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashbf0c602d32b3c14606f22a86183b5e3c 6eabd8d83475eba731968abe1a05a8bfd272f160 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 22:08:14 GMT
content-type: application/json
age: 314
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 4g6IQCWliryShscOpVG02UEqMzF6H0azP4OnuoAM+HdkHImrx8ZWOraLlLA7KVxSYDAv3x2kQCI=
x-amz-request-id: TTPJCVP4HQTZFY4P
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 21:48:04 GMT
age: 1524
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 22:13:28 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 22:07:58 GMT
age: 330
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashfd55f4aaaab6ec40bc7dc10252cd819a a72523f60be265a391fa9edc43e0a93418ad1fd0 bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3071
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:29 GMT
Last-Modified: Thu, 08 Dec 2022 21:22:18 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.158 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.158:0
Hash95d0ee35064052e5f4689de39101b724 a89b5b6f1f46543c1714a8f347e5c49cf29e4b10 ef5e38c6de63119ce912cfe980050ca8bf36276a42ac784a1e7779834a1c4291
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=166288
Date: Thu, 08 Dec 2022 22:13:29 GMT
Etag: "63924819-1d7"
Expires: Sat, 10 Dec 2022 20:24:57 GMT
Last-Modified: Thu, 08 Dec 2022 20:24:57 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: olBBQPYQq4vTlA5XlRqJgCs-aeEWcrlOvIUiVuD2opAJ1GWaxzKNuw==
|
|
| push.services.mozilla.com/ | 34.215.91.121 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP34.215.91.121:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3zo6B/LsPZn0OtPWSMIJgQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TTf42eh/78EZwrWqySx5YL2VgqM=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.jsdelivr.net/npm/@mdi/font@4.x/css/materialdesignicons.min.css | 151.101.65.229 | 200 OK | 37 kB |
URL HTTP/2cdn.jsdelivr.net/npm/@mdi/font@4.x/css/materialdesignicons.min.css IP151.101.65.229:0
File typeASCII text, with very long lines (65536), with no line terminators Hashced9d5cb041c7426f9c832a05a9da490 747f551dd11fecb6f64c82df8dbaecdd0192c064 32aeb188222df7d49cd3df40d8dc05a3c93e3f2d9f17d930a7ad10fdfaa8b87d
GET /npm/@mdi/font@4.x/css/materialdesignicons.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.9.95
x-jsd-version-type: version
etag: W/"3690d-+C8LymUllOTB/eRBaefREVF0ZzU"
content-encoding: gzip
accept-ranges: bytes
date: Thu, 08 Dec 2022 22:13:29 GMT
age: 38613
x-served-by: cache-fra-eddf8230100-FRA, cache-bma1637-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 37279
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/icon?family=Material+Icons&display=swap | 142.250.74.106 | 200 OK | 1.8 kB |
URL HTTP/2fonts.googleapis.com/icon?family=Material+Icons&display=swap IP142.250.74.106:0
Hashdd655efeb5722b71cf02304bc20748a0 c8c3ef7ee19c8e98ccce013a2b8db73b41743d34 f43914e2a26f179391d6dd08b59c71bc3117964a2523187ea15a3add2ceaa633
GET /icon?family=Material+Icons&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 22:13:29 GMT
date: Thu, 08 Dec 2022 22:13:29 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6ec5f6261a8262e9f94b29627f54cefe 7ac766cf2ac8c2d960ec033388a767ff8a7d45e2 5f6ee11d840909fc5272c2c32f7874d55f49d831abc88d527e35562d218890f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css2?family=Open+Sans&display=swap | 142.250.74.106 | 200 OK | 1.4 kB |
URL HTTP/2fonts.googleapis.com/css2?family=Open+Sans&display=swap IP142.250.74.106:0
Hash044cf7d5ec5644e59162c1e639d9c9db 1838a7589d4537bac81e56b8095a576d6f9a1ff3 dd597922e838203a6000c61eb11a1b608070a1df48cd760935816c96984d97c9
GET /css2?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 08 Dec 2022 22:13:29 GMT
date: Thu, 08 Dec 2022 22:13:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/85.2f85134618dbeeeb4f3c.js | 143.204.55.81 | 200 OK | 799 B |
URL HTTP/2cdn.mywavehome.net/prod/public/85.2f85134618dbeeeb4f3c.js IP143.204.55.81:0
File typeASCII text, with very long lines (799), with no line terminators Hash0c297cfb98aa513cb4b628d028085dda fd6e19f3f86dd6d58d0d2b2af591051c97f32676 83bdf8178c0e160053073332a81042903959d90ef6a0b9c022cbc6ccf953aaa4
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/85.2f85134618dbeeeb4f3c.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
content-length: 799
last-modified: Mon, 21 Nov 2022 17:39:20 GMT
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Dec 2022 17:04:11 GMT
etag: "0c297cfb98aa513cb4b628d028085dda"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dFgPpjoXfa30qw9MB8LRUnDzBIQeJb3k_aJ6ftMD8Xf9z-Tme_McLA==
age: 18560
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0e9eef4ed41ef94e9ea175ad243e294e b6f83e508270413dabe55e2884b5409ca7978e24 0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ntp.mywavehome.net/ | 18.213.241.115 | 200 OK | 99 kB |
IP18.213.241.115:0
Hashcf43d12f9889d017a22cc5ae68b9a15f 77d9068d8215f25b4e440a0dc03ba4f7c777c03f 901a6fda85ce02c466e14e09ba194fbae7113168a01976a60f87a945bc57917c
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET / HTTP/1.1
Host: ntp.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:29 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=kiDsHfEn8rpuM9lNsFjiu+PzmHyzbVUt4dg9BPq+zgKQUiRpItvTtYv/q0ua1lWu1WLO8X2i2cYbaQtHdQcfQ86avjgwwY4s/MrXt7GCc9xLYm1er5aW6ZY2vhNg; Expires=Thu, 15 Dec 2022 22:13:29 GMT; Path=/
AWSALBCORS=kiDsHfEn8rpuM9lNsFjiu+PzmHyzbVUt4dg9BPq+zgKQUiRpItvTtYv/q0ua1lWu1WLO8X2i2cYbaQtHdQcfQ86avjgwwY4s/MrXt7GCc9xLYm1er5aW6ZY2vhNg; Expires=Thu, 15 Dec 2022 22:13:29 GMT; Path=/; SameSite=None; Secure
server: nginx/1.22.0
x-powered-by: Express
content-security-policy: default-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf' *.googleapis.com;prefetch-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com * *.googleapis.com;img-src 'self' data: mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *;font-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *;media-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf';frame-src 'self' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.google.com *.bing.com *.youtube.com youtube.com *.youtube-nocookie.com youtube-nocookie.com *.vimeo.com vimeo.com *.navigateto.net 'nonce-asdf' *.17track.net;style-src 'self' 'unsafe-inline' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.googleapis.com *.navigateto.net *.jsdelivr.net;script-src 'self' 'unsafe-eval' mywavehome.net mywavehome.net:* *.mywavehome.net *.mywavehome.net:* localhost:* localhost:* ws://localhost:* *.mywavehome.net mywavehome.net *.wavebrowserbase.com wavebrowserbase.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.doubleclick.net *.wikipedia.org wikipedia.org chrome-search://local-ntp *.onesignal.com onesignal.com *.navigateto.net 'nonce-asdf' *.17track.net *.googletagmanager.com *.google-analytics.com
etag: W/"925e0-SHjjauNhm7cawoaeQx9RO8m7Amc"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0e9eef4ed41ef94e9ea175ad243e294e b6f83e508270413dabe55e2884b5409ca7978e24 0e741ca8d92717128bca7aed937bca43519a8d20a9d3dd8670da656ad51a695e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9809
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 22:13:30 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9809
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 22:13:30 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9809
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 22:13:30 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash7b8c1870f03a90aac6370fc69516f95f 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9809
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 22:13:30 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb87d6543345f73653ed4a49b37d7c959 c4f26846b8b72293368ff16915d49297cf12bbb9 aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:35:32 GMT
age: 81478
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash57be99ac898a37d73f2ba4a24f56248f 04e32eb45581201a6a1863200e4d139df48285e6 a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 83372
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8c94003641bb5a7595e7004f80f95d22 3446450df60d732f9021d5bfd5f5f7c6c870d9ec 4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 82615
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg | 34.120.237.76 | 200 OK | 8.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash98d2cf29c710d25bd2f03ff216fdd369 b8eb2e11f9655f19334befc036f21489a6473827 614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1NxVGtHN-I6GUi6qSk7qTGZDDdIZk1Io2yP6Abe1mtlMNi12oR8hgQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 20:33:11 GMT
age: 6019
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg | 34.120.237.76 | 200 OK | 7.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash24d89b69ba37bf23c5d576aff4063caf 3d46a21b4da571d7e4962e335c18a28ca5f81ecf 09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wFqXeAYHSBcj85PiuqhV790clAMWg_NHMCO5Q5WARXDaohFWZdeCig==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:19:17 GMT
age: 82453
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg | 34.120.237.76 | 200 OK | 9.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc408efaa98ac2ce63bb1618368d10c15 a51bbb49ebd862d04eaee465d0a35b22dcd21391 077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 22:13:26 GMT
age: 4
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| mywavehome.net/home/api?apiKey=talcwindowliquidartichoke5&homeTime=2022-12-08%2022:13:29&ip_address=91.90.42.154&sv=1&types=web | 52.87.131.235 | 200 OK | 11 kB |
URL HTTP/2mywavehome.net/home/api?apiKey=talcwindowliquidartichoke5&homeTime=2022-12-08%2022:13:29&ip_address=91.90.42.154&sv=1&types=web IP52.87.131.235:0
File typeASCII text, with very long lines (15405) Hash66b6c09932357536fee8ec5ee56cb434 6912598695abde44c4fa7b2fbbe1a209f90b0475 2c09a44cf006c11e2fa07fadcb2a9a915c7ba3e6766f485c2e9b074a2461bc6e
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /home/api?apiKey=talcwindowliquidartichoke5&homeTime=2022-12-08%2022:13:29&ip_address=91.90.42.154&sv=1&types=web HTTP/1.1
Host: mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: user-agent
Referer: https://ntp.mywavehome.net/
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:30 GMT
content-type: text/html; charset=utf-8
content-length: 9430
cache-control: private
content-encoding: gzip
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-credentials: *
x-aspnet-version: 4.0.30319
set-cookie: data={"UserId":"4f182aae-3008-45b2-9f31-e05e94f04b03","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; domain=.mywavehome.net; expires=Fri, 09-Dec-2022 04:13:30 GMT; path=/; secure; SameSite=None
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| ntp.mywavehome.net/favicon.ico | 18.213.241.115 | 200 OK | 3.6 kB |
URL HTTP/2ntp.mywavehome.net/favicon.ico IP18.213.241.115:0
Hash3f144ce1b4e394a8def7a06158fb60cc 75191675b1f431320cc4b77b30531334ec6c7a6b 3a1b295d78b631b79867bae2ea2b53a0c29cd152ebfe6aa32bfead8d715ed114
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /favicon.ico HTTP/1.1
Host: ntp.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: AWSALB=kiDsHfEn8rpuM9lNsFjiu+PzmHyzbVUt4dg9BPq+zgKQUiRpItvTtYv/q0ua1lWu1WLO8X2i2cYbaQtHdQcfQ86avjgwwY4s/MrXt7GCc9xLYm1er5aW6ZY2vhNg; AWSALBCORS=kiDsHfEn8rpuM9lNsFjiu+PzmHyzbVUt4dg9BPq+zgKQUiRpItvTtYv/q0ua1lWu1WLO8X2i2cYbaQtHdQcfQ86avjgwwY4s/MrXt7GCc9xLYm1er5aW6ZY2vhNg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:30 GMT
content-type: image/x-icon
set-cookie: AWSALB=6AeFlcQI2gzJHfwETqKIHebYAOw26UJLnJ2YbjUWc2S8BpLaUP0/VpbM5EH3Ws0Mtb0zNxK5YsfW+flQup8vKbAnxVGvrIMo3CCib/V0PfeF3ye+UBf98P/Xzh3g; Expires=Thu, 15 Dec 2022 22:13:30 GMT; Path=/
AWSALBCORS=6AeFlcQI2gzJHfwETqKIHebYAOw26UJLnJ2YbjUWc2S8BpLaUP0/VpbM5EH3Ws0Mtb0zNxK5YsfW+flQup8vKbAnxVGvrIMo3CCib/V0PfeF3ye+UBf98P/Xzh3g; Expires=Thu, 15 Dec 2022 22:13:30 GMT; Path=/; SameSite=None; Secure
server: nginx/1.22.0
x-powered-by: Express
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Fri, 29 Oct 2021 14:39:48 GMT
etag: W/"47e-17ccc7e1720"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9 | 142.250.74.168 | 200 OK | 75 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=G-ZDEB536PB9 IP142.250.74.168:0
File typeASCII text, with very long lines (25283) Hash1cc9adc63e0eccdc67b3b2f7d682568c 2b8a13406fb97b59e6da6c15cada50666ff819ab 59d01d0bee26786671ee5c9502625ae93a1e574b2e122cead982156fc1cc3970
GET /gtag/js?id=G-ZDEB536PB9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 22:13:30 GMT
expires: Thu, 08 Dec 2022 22:13:30 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75233
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hash795e67bdfadc3c890a663080413b56b7 fdefde3befb6aceac3c337c34c8d738f5091908c 8375b55cfc13989b0cf96293b7bead2ce5811a993b3445da1776ca7015c36985
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| mywavehome.net/home/api?apiKey=talcwindowliquidartichoke5&homeTime=2022-12-08%2022:13:29&ip_address=91.90.42.154&sv=1&types=web | 52.87.131.235 | 200 OK | 9.4 kB |
URL HTTP/2mywavehome.net/home/api?apiKey=talcwindowliquidartichoke5&homeTime=2022-12-08%2022:13:29&ip_address=91.90.42.154&sv=1&types=web IP52.87.131.235:0
File typeJSON data\012- , ASCII text, with very long lines (15399), with no line terminators Hash529b3f8c20971bee5c23fc6362940ea9 4277ab19fdcfd1bbba678eab1cf44399e8df99c9 721ec30f97adf18a3b734444e87eb94e534500f3418727df24567e4ca7c9136d
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /home/api?apiKey=talcwindowliquidartichoke5&homeTime=2022-12-08%2022:13:29&ip_address=91.90.42.154&sv=1&types=web HTTP/1.1
Host: mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ntp.mywavehome.net/
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:30 GMT
content-type: text/html; charset=utf-8
content-length: 9427
cache-control: private
content-encoding: gzip
server: Microsoft-IIS/10.0
x-aspnetmvc-version: 5.2
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-credentials: *
x-aspnet-version: 4.0.30319
set-cookie: data={"UserId":"e9d58772-276d-44d2-b26a-4ef8d4ff0a19","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; domain=.mywavehome.net; expires=Fri, 09-Dec-2022 04:13:30 GMT; path=/; secure; SameSite=None
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-ZDEB536PB9>m=2oebu0&_p=1586198562&_gaz=1&cid=2129446224.1670537610&ul=en-us&sr=1280x1024&_eu=BA&_s=1&uid=155c6847-7647-4f39-a46e-33ef52243dac&sid=1670537610&sct=1&seg=0&dl=https%3A%2F%2Fntp.mywavehome.net%2F&dt=New%20Tab&en=page_view&_fv=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=155c6847-7647-4f39-a46e-33ef52243dac&ep.project=ntp | 216.239.32.36 | 204 No Content | 0 B |
URL HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-ZDEB536PB9>m=2oebu0&_p=1586198562&_gaz=1&cid=2129446224.1670537610&ul=en-us&sr=1280x1024&_eu=BA&_s=1&uid=155c6847-7647-4f39-a46e-33ef52243dac&sid=1670537610&sct=1&seg=0&dl=https%3A%2F%2Fntp.mywavehome.net%2F&dt=New%20Tab&en=page_view&_fv=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=155c6847-7647-4f39-a46e-33ef52243dac&ep.project=ntp IP216.239.32.36:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /g/collect?v=2&tid=G-ZDEB536PB9>m=2oebu0&_p=1586198562&_gaz=1&cid=2129446224.1670537610&ul=en-us&sr=1280x1024&_eu=BA&_s=1&uid=155c6847-7647-4f39-a46e-33ef52243dac&sid=1670537610&sct=1&seg=0&dl=https%3A%2F%2Fntp.mywavehome.net%2F&dt=New%20Tab&en=page_view&_fv=1&_ss=1&_ee=1&ep.transport_type=beacon&ep.transaction_id=155c6847-7647-4f39-a46e-33ef52243dac&ep.project=ntp HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
access-control-allow-origin: *
pragma: no-cache
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
date: Thu, 08 Dec 2022 03:11:57 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/plain
age: 68493
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash32d90ff0cc366730c3633c1201b4c058 f4175292b607197a15085e14bf69df301dff6706 b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.mywavehome.net/prod/public/83.1669924ecbb490d46c0b.js | 143.204.55.81 | 200 OK | 758 B |
URL HTTP/2cdn.mywavehome.net/prod/public/83.1669924ecbb490d46c0b.js IP143.204.55.81:0
File typeASCII text, with very long lines (1877), with no line terminators Hash5cf12a04f771c69ceb6dc125fc7d723c 84821aed1c902cdba74835b923413e689a27e524 fb5d9823da6136916a13520289bd36fa37f875dd5ecd402aa9b20f53f7536eba
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/83.1669924ecbb490d46c0b.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Mon, 21 Nov 2022 17:39:20 GMT
server: AmazonS3
content-encoding: br
date: Thu, 08 Dec 2022 03:46:24 GMT
etag: W/"f6f87da3925a3318b993f1575ffcc9e3"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rM_z6kIv1dtoiothqlJ_coLJ6Xhm7wX0RSyCHIa0rQjQqws7uZVl-A==
age: 66427
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash32d90ff0cc366730c3633c1201b4c058 f4175292b607197a15085e14bf69df301dff6706 b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:34:15 GMT
expires: Thu, 07 Dec 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 95956
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/wave-home.png?efdf7bdaeb2030eb7fac158d61e1148b | 143.204.55.81 | 200 OK | 168 kB |
URL HTTP/2cdn.mywavehome.net/prod/public/wave-home.png?efdf7bdaeb2030eb7fac158d61e1148b IP143.204.55.81:0
File typePNG image data, 400 x 236, 8-bit/color RGBA, non-interlaced\012- data Size168 kB (168337 bytes) Hashced45a8465e55f2d5b52bc68d0f90a72 6d9205b12c5bde3fc881cf0d2a647b71b3b8bb4d d6d05aa79a9d2a384ead0698e6a8ce9980cc4d9f2440805c84be4dee7e855399
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/wave-home.png?efdf7bdaeb2030eb7fac158d61e1148b HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 168337
date: Thu, 08 Dec 2022 09:57:41 GMT
last-modified: Wed, 30 Nov 2022 21:56:27 GMT
etag: "ced45a8465e55f2d5b52bc68d0f90a72"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _DuQeqOOxSfzS2aJjLMeTh6BVKNDb-lembh0orYU5jnsKhc0-yRi6A==
age: 44151
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 | 216.58.207.227 | 200 OK | 128 kB |
URL HTTP/2fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data Size128 kB (128352 bytes) Hash53436aca8627a49f4deaaa44dc9e3c05 0bc0c675480d94ec7e8609dda6227f88c5d08d2c 8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 20:33:17 GMT
expires: Fri, 08 Dec 2023 20:33:17 GMT
cache-control: public, max-age=31536000
age: 6014
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| api.mywavehome.net/gglnt?clientId=2129446224.1670537610 | 184.73.160.174 | 200 OK | 0 B |
URL HTTP/2api.mywavehome.net/gglnt?clientId=2129446224.1670537610 IP184.73.160.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /gglnt?clientId=2129446224.1670537610 HTTP/1.1
Host: api.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:31 GMT
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| api.mywavehome.net/gglnt?clientId=2129446224.1670537610 | 184.73.160.174 | 200 OK | 0 B |
URL HTTP/2api.mywavehome.net/gglnt?clientId=2129446224.1670537610 IP184.73.160.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /gglnt?clientId=2129446224.1670537610 HTTP/1.1
Host: api.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Content-Length: 0
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:31 GMT
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.158 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.158:0
Hash735d2e4ff9dc3d6d78ed4864f230d98b abbb5ccb96a207646a079152a31ae5268510fe34 2b535c24502b26a8eeea245c7b35197427f1c39d8a291388ed4174e039e602a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164604
Date: Thu, 08 Dec 2022 22:13:31 GMT
Etag: "63923a0d-1d7"
Expires: Sat, 10 Dec 2022 19:56:55 GMT
Last-Modified: Thu, 08 Dec 2022 19:25:01 GMT
Server: ECS (nyb/1D29)
X-Cache: Miss from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6RlE3TaNja-hh_lv2koEoSg8vVQtbH4ag5nFvnPgQcEhFkVy-RJG6w==
Age: 1914
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.158 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.158:0
Hash735d2e4ff9dc3d6d78ed4864f230d98b abbb5ccb96a207646a079152a31ae5268510fe34 2b535c24502b26a8eeea245c7b35197427f1c39d8a291388ed4174e039e602a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=168291
Date: Thu, 08 Dec 2022 22:13:31 GMT
Etag: "63923a0d-1d7"
Expires: Sat, 10 Dec 2022 20:58:22 GMT
Last-Modified: Thu, 08 Dec 2022 19:25:01 GMT
Server: ECS (dcb/7EA3)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -vbPZLN9kQfpxFo90PHAqTpbRPSMBCHYsX4PVF8S42TmPabNUpayaA==
Age: 5602
|
|
| cdn.mywavehome.net/prod/public/vendors~layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~d13e570c.0f6f3211ca2189fc62a0.js | 143.204.55.81 | 200 OK | 34 kB |
URL HTTP/2cdn.mywavehome.net/prod/public/vendors~layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~d13e570c.0f6f3211ca2189fc62a0.js IP143.204.55.81:0
Hashdf8875ae241521ca0ce0b47f50afd4e6 e40cca7579e541cd79692ddd2d7355cc7890031e 18b3ee7afdbd611fce6479e92a411e8ba495f1e5bae2e68ec05077bfc69e8ff2
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/vendors~layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~d13e570c.0f6f3211ca2189fc62a0.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:26 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 11:37:25 GMT
etag: W/"b6ee5d0d176d2770031d3f1456d3f199"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7J4RZv9jJTZ_lFQlnvJr18FSxU9W8f_lKtPmibLvtMgTd4yhXPhbdw==
age: 77102
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2556512b197b09798af71bea10bb4bbb 23b647aca5f8294ae82fa8cc7e2215ebe3347b60 3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/g/collect?v=2&tid=G-ZDEB536PB9&cid=2129446224.1670537610>m=2oebu0&aip=1&uid=155c6847-7647-4f39-a46e-33ef52243dac | 64.233.165.154 | 204 No Content | 0 B |
URL HTTP/2stats.g.doubleclick.net/g/collect?v=2&tid=G-ZDEB536PB9&cid=2129446224.1670537610>m=2oebu0&aip=1&uid=155c6847-7647-4f39-a46e-33ef52243dac IP64.233.165.154:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-ZDEB536PB9&cid=2129446224.1670537610>m=2oebu0&aip=1&uid=155c6847-7647-4f39-a46e-33ef52243dac HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://ntp.mywavehome.net
date: Thu, 08 Dec 2022 22:13:31 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2556512b197b09798af71bea10bb4bbb 23b647aca5f8294ae82fa8cc7e2215ebe3347b60 3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 22:13:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.158 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.158:0
Hash735d2e4ff9dc3d6d78ed4864f230d98b abbb5ccb96a207646a079152a31ae5268510fe34 2b535c24502b26a8eeea245c7b35197427f1c39d8a291388ed4174e039e602a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162690
Date: Thu, 08 Dec 2022 22:13:31 GMT
Etag: "63923a0d-1d7"
Expires: Sat, 10 Dec 2022 19:25:01 GMT
Last-Modified: Thu, 08 Dec 2022 19:25:01 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gIf3KnCvinnzYcti14pOaAaK0Anx7bOGcOIzoIjtA6tEHpodZKQWHA==
|
|
| cdn.mywavehome.net/prod/public/layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~layout-~3112bf8e.66e2ec215c0c54fc32dd.js | 143.204.55.81 | 200 OK | 106 kB |
URL HTTP/2cdn.mywavehome.net/prod/public/layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~layout-~3112bf8e.66e2ec215c0c54fc32dd.js IP143.204.55.81:0
File typeUnicode text, UTF-8 text, with very long lines (65535), with no line terminators Size106 kB (105783 bytes) Hash0b6aa6eb6f035f7adc954c7942e36e72 4fb82154362da303713c67800496724d6c286f92 a02f5effa8f07f2d299615499abe285bac1c629d6f3412c3801c70f7e6494de9
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~layout-~3112bf8e.66e2ec215c0c54fc32dd.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 19:39:49 GMT
server: AmazonS3
content-encoding: br
date: Thu, 08 Dec 2022 15:45:34 GMT
etag: W/"8b46ac9661e3e2e40c2d660defd1d5c8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: VdK_syIMwEt_ICtLoCsxt6IxdGNhrUZx-_1TKDZXxlcn0cjsxf5t4g==
age: 58949
X-Firefox-Spdy: h2
|
|
| api.wavebrowserbase.com/api/error | 52.6.194.135 | 200 OK | 0 B |
URL HTTP/2api.wavebrowserbase.com/api/error IP52.6.194.135:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /api/error HTTP/1.1
Host: api.wavebrowserbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://ntp.mywavehome.net/
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:31 GMT
content-length: 0
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
access-control-allow-origin: *
access-control-allow-headers: content-type
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| api.wavebrowserbase.com/api/error | 52.6.194.135 | 200 OK | 45 B |
URL HTTP/2api.wavebrowserbase.com/api/error IP52.6.194.135:0
File typeJSON data\012- , ASCII text, with no line terminators Hash47e585cf4af1da39769704b27e0e3944 81e060a918a96538db5cb7e7398b8a4033c5429b 3a4e9bf5648582bad137e466b76b971d7d31872a5004017d6e8a0451f72c83a6
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /api/error HTTP/1.1
Host: api.wavebrowserbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ntp.mywavehome.net/
Content-Type: application/json
Origin: https://ntp.mywavehome.net
Content-Length: 1913
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:31 GMT
content-type: application/json
content-length: 45
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
x-content-type-options: nosniff
access-control-allow-origin: *
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| api.wavebrowserbase.com/evn/sbhh_shown?ip_address=91.90.42.154&sv=1&apiKey=talcwindowliquidartichoke5 | 52.6.194.135 | 200 OK | 45 B |
URL HTTP/2api.wavebrowserbase.com/evn/sbhh_shown?ip_address=91.90.42.154&sv=1&apiKey=talcwindowliquidartichoke5 IP52.6.194.135:0
File typeJSON data\012- , ASCII text, with no line terminators Hashcd35ab9a93f56d4b0f069d48118c8dd1 8438c5a31e35b13c8822738d5b2a612817c539d4 397955291c082325a3a174611cb34354cc7e4aa05dc6f93190bf8c83083c24c1
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /evn/sbhh_shown?ip_address=91.90.42.154&sv=1&apiKey=talcwindowliquidartichoke5 HTTP/1.1
Host: api.wavebrowserbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2
Origin: https://ntp.mywavehome.net
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 22:13:32 GMT
content-type: text/plain
content-length: 45
cache-control: no-cache
pragma: no-cache
expires: -1
server: Microsoft-IIS/10.0
x-content-type-options: nosniff
access-control-allow-origin: *
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash3d44d17585c9a536c8da0e75ed90d175 9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1 6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 12:11:26 GMT
age: 36131
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~layout-~dcca04b9.ebc96b91f78fdb7788ed.js | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~layout-~dcca04b9.ebc96b91f78fdb7788ed.js IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/layout-default-layout-obed-vue~layout-default-layout-obem-vue~layout-default-layout-obff-vue~layout-~dcca04b9.ebc96b91f78fdb7788ed.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:25 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 11:28:42 GMT
etag: W/"0e1da61e48bc8af3c57aafe70d8b81b5"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: sCrSXF4dPZpjcO_csBlzB4FznE9LhkLTE8I5us7bqyUQZjqu3T88GA==
age: 38690
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/82.06700032270d93845615.js | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/82.06700032270d93845615.js IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/82.06700032270d93845615.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 18:36:09 GMT
server: AmazonS3
content-encoding: br
date: Thu, 08 Dec 2022 01:07:47 GMT
etag: W/"7569074a88443012c97d79a4ee23f523"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BSeoLJxisuJM3JV4Za6iiX6kDlROYXng_rgR7zqkZeE9uOl1_xGXVw==
age: 76416
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/common.501af2fc5f35efed730a.css | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/common.501af2fc5f35efed730a.css IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/common.501af2fc5f35efed730a.css HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 14:44:25 GMT
etag: W/"f7b920bcdbb2ac5838adb75efbe09e0a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: D9poV3MIKf28ma3D2U2e0smaBhhMLWvsZxXa_eNoeADU9FSsmO_5WA==
age: 70958
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/layout-default-layout-obff-vue.9c1880249c73ec430f79.js | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/layout-default-layout-obff-vue.9c1880249c73ec430f79.js IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/layout-default-layout-obff-vue.9c1880249c73ec430f79.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Cookie: data={"UserId":"155c6847-7647-4f39-a46e-33ef52243dac","Keyword":"","UserClass":"20221208","TrackingId":null,"GGLNT":null,"GCLID":null,"AdProvider":"appfocus1","Source":"","Implementation":"wav"}; _ga_ZDEB536PB9=GS1.1.1670537610.1.0.1670537610.60.0.0; _ga=GA1.1.2129446224.1670537610
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:25 GMT
server: AmazonS3
content-encoding: br
date: Thu, 08 Dec 2022 09:09:51 GMT
etag: W/"4046b59058fae9aee6c9dafab70c63b4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7tAN_jwNyajoyUPcMm74fW2Dnen9prQPEhL6cQfQtxdUn3mGoGrVbQ==
age: 47021
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/common.5d077802755d03f1d907.css | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/common.5d077802755d03f1d907.css IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/common.5d077802755d03f1d907.css HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: text/css
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 14:44:25 GMT
etag: W/"f7b920bcdbb2ac5838adb75efbe09e0a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nwCA-NCYY2VBC0o44LZGjbAJsZGu7Qg9T1YxXgiWyq-w796Jm5LlOA==
age: 27419
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/vendors~app.5d077802755d03f1d907.js | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/vendors~app.5d077802755d03f1d907.js IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/vendors~app.5d077802755d03f1d907.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:26 GMT
server: AmazonS3
content-encoding: gzip
date: Thu, 08 Dec 2022 14:44:25 GMT
etag: W/"bca5e3580966d1c21a66fdde20109936"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GjEUzjKZwsPb0XaU23sF2bEoqFshQYzwhVsjkYMBXyBsy4StV0W7Jg==
age: 48290
X-Firefox-Spdy: h2
|
|
| cdn.mywavehome.net/prod/public/app.501af2fc5f35efed730a.js | 143.204.55.81 | 200 OK | 0 B |
URL HTTP/2cdn.mywavehome.net/prod/public/app.501af2fc5f35efed730a.js IP143.204.55.81:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /prod/public/app.501af2fc5f35efed730a.js HTTP/1.1
Host: cdn.mywavehome.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ntp.mywavehome.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
content-type: application/x-javascript
last-modified: Wed, 30 Nov 2022 21:56:23 GMT
server: AmazonS3
content-encoding: br
date: Thu, 08 Dec 2022 22:06:55 GMT
etag: W/"78e763afb4114e39fd0989a59acd2759"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pxwh8WOJAjxrSN8VNSctCIGOlLPrtzjS3u_jndYSQWWRk6hi-IALbw==
age: 70181
X-Firefox-Spdy: h2
|
|
0.0.0.0