| gauvaiho.net/zone?&pub=0&zone_id=4984707&is_mobile=false&domain=w.rationalunwaveringclick.buzz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=f068900a-4321-4f65-bc37-d91bd8cb652c&action=prerequest | 139.45.197.251 | 200 OK | 0 B |
URL POST HTTP/2gauvaiho.net/zone?&pub=0&zone_id=4984707&is_mobile=false&domain=w.rationalunwaveringclick.buzz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=f068900a-4321-4f65-bc37-d91bd8cb652c&action=prerequest IP139.45.197.251:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectgauvaiho.net Fingerprint7A:BC:57:20:5D:99:49:16:5F:C9:C1:4F:27:AA:47:0F:D8:A8:FA:57 ValidityFri, 19 Apr 2024 05:44:25 GMT - Thu, 18 Jul 2024 05:44:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4984707&is_mobile=false&domain=w.rationalunwaveringclick.buzz&var=&ymid=&var_3=&var_4=&dsig=&tg=1&sw=3.1.504&trace_id=f068900a-4321-4f65-bc37-d91bd8cb652c&action=prerequest HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://w.rationalunwaveringclick.buzz
DNT: 1
Connection: keep-alive
Referer: https://w.rationalunwaveringclick.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:33 GMT
content-length: 0
x-trace-id: 1cfc5700c2281096fde7c0e3e2ac36c7
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://w.rationalunwaveringclick.buzz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 755
Origin: https://w.rationalunwaveringclick.buzz
DNT: 1
Connection: keep-alive
Referer: https://w.rationalunwaveringclick.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:33 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 630832286cc55f2047ad71b6f1bde120
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://w.rationalunwaveringclick.buzz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 757
Origin: https://w.rationalunwaveringclick.buzz
DNT: 1
Connection: keep-alive
Referer: https://w.rationalunwaveringclick.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:33 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 815049e72b5bc2380e5e950eeae5a178
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://w.rationalunwaveringclick.buzz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| jouteetu.net/custom | 139.45.197.251 | 200 OK | 39 B |
IP139.45.197.251:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectjouteetu.net FingerprintF5:94:3C:5E:6B:54:1A:97:82:F8:7E:1F:C2:51:04:8C:FB:F5:CF:65 ValidityWed, 13 Mar 2024 19:38:02 GMT - Tue, 11 Jun 2024 19:38:01 GMT
Hash058b158c2be925f556454ef762d93538 cc6fc563b4b6baee880fdbc7fcfaa134978e33c9 ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: jouteetu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 758
Origin: https://w.rationalunwaveringclick.buzz
DNT: 1
Connection: keep-alive
Referer: https://w.rationalunwaveringclick.buzz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:33 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: d069af41a9ca7a25275b0900b954794b
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://w.rationalunwaveringclick.buzz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 0 B |
IP139.45.197.250:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://w.rationalunwaveringclick.buzz/
Origin: https://w.rationalunwaveringclick.buzz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:33 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://w.rationalunwaveringclick.buzz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
|
|
| amunfezanttor.com/event | 139.45.197.250 | 200 OK | 94 B |
IP139.45.197.250:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectamunfezanttor.com FingerprintAB:2C:60:54:FF:D7:D6:23:0E:87:1A:98:EC:94:B3:9B:29:1A:F3:AA ValidityWed, 10 Apr 2024 19:04:12 GMT - Tue, 09 Jul 2024 19:04:11 GMT
Hashb5eec44babb7b790bdf4b8e328c1470a bc1d9b58682ab905be54c15dc52683648b7e264d 786d9128e8269c77a5fe43925ee314cf8b09b5e6f3c25a2f045725a8d75163f0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://w.rationalunwaveringclick.buzz/
Content-Type: application/json
Content-Length: 1362
Origin: https://w.rationalunwaveringclick.buzz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:33 GMT
content-type: application/json; charset=utf-8
content-length: 94
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://w.rationalunwaveringclick.buzz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| w.rationalunwaveringclick.buzz/sw-check-permissions-4eee0.js?zoneId=4984707 | 188.114.96.1 | 200 OK | 443 B |
URL GET HTTP/3w.rationalunwaveringclick.buzz/sw-check-permissions-4eee0.js?zoneId=4984707 IP188.114.96.1:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerGoogle Trust Services LLC Subjectrationalunwaveringclick.buzz Fingerprint74:B5:AF:A4:4D:37:F1:50:45:ED:1A:2F:81:1D:20:A3:15:0B:B8:4D ValidityThu, 18 Apr 2024 03:26:34 GMT - Wed, 17 Jul 2024 03:26:33 GMT
File typeASCII text, with very long lines (462), with no line terminators Hash6f7036978357646f2eed9bb652a0693b bfd18b9153de844b1431a49a46488c6fe00bcd92 a43155c1606b05be40707dedd8133a33594357b99f3548d2880283192beae3f1
GET /sw-check-permissions-4eee0.js?zoneId=4984707 HTTP/1.1
Host: w.rationalunwaveringclick.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 10:18:33 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=566
etag: W/"236-5de2d285fa983"
last-modified: Wed, 04 May 2022 10:33:35 GMT
vary: Accept-Encoding
cache-control: max-age=604800
age: 143623
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=emDyoIzI8vOqXB26XCtC7ZEAyI4ZahYPmJv9CExjBGUmqg8%2BxheNVL7OW3QZtIb%2BPTJz7xILA572v95CeXR1%2BTrtN77EZ7zTsYVNdyTla7CGdBRc%2Fig0H%2FmIpLstiCEw6c0Y593H178%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
expires: Tue, 07 May 2024 18:24:50 GMT
link: <https://sec.movienightowl.com/sw-check-permissions-4eee0.js?zoneId=4984707>; rel="canonical"
x-cache: STALE
x-edge-location: noos
access-control-allow-origin: *
cf-cache-status: HIT
server: cloudflare
cf-ray: 87d744945ad27131-OSL
content-encoding: br
|
|
| w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db | 188.114.96.1 | 200 OK | 21 kB |
URL User Request GET HTTP/2w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db IP188.114.96.1:443
CertificateIssuerGoogle Trust Services LLC Subjectrationalunwaveringclick.buzz Fingerprint74:B5:AF:A4:4D:37:F1:50:45:ED:1A:2F:81:1D:20:A3:15:0B:B8:4D ValidityThu, 18 Apr 2024 03:26:34 GMT - Wed, 17 Jul 2024 03:26:33 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db HTTP/1.1
Host: w.rationalunwaveringclick.buzz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 10:18:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
last-modified: Mon, 31 Jul 2023 01:38:29 GMT
cache-control: max-age=604800
cf-cache-status: DYNAMIC
age: 2669
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UiAUYwWbQIw8Wtm8OPl8yhwaR2hX3Sc5UL2nhRDakiiLM3s36fy6B62uTAXbFC0OCLrcnFhq%2BUuhzPe4rBZEzaEhM4wm5VhfFaHmDtM%2BaAAq2Euq4Dio02NMVUPu%2Fwp0MMLYIcy%2BP00%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
expires: Thu, 09 May 2024 10:18:32 GMT
link: <https://sec.movienightowl.com/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db>; rel="canonical"
x-cache: MISS
x-edge-location: noos
access-control-allow-origin: *
server: cloudflare
cf-ray: 87d7448fde3556c9-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js | 139.45.197.251 | 200 OK | 37 kB |
URL GET HTTP/2gauvaiho.net/pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js IP139.45.197.251:443
Requested byhttps://w.rationalunwaveringclick.buzz/wbpage2/mob-cont-unp/index-zhsimp.html?td=www.thebuxfiles.com&cep=RaUwifbn5mW8H257JZGn4AKEd-MJOtGZ2l-rVdUxnzSRN6sAPPlyhqvkAxTIvYoOy2DMVM7nvRL8kHZsW6W6zT5o7p9OSrdKnDlUeLuF0MuTbepMb-y7rq40NEbuO0SYGGPpqkQz3RQLiqQQb6xbZ23CEK3S88GSU35ddpzdunAMseBJ69IoD8rLf17SVzv3GxPumvw5XE6bLzGJtmlWck7H8Xm-luPPewmRtQ84BpeaTD3fIvVS2n7WwU1AMuWKFw_jPVccfKmvKdT0kjx4_pmDzzmk6rOsvNAMqrFTfmyys_yFqE50oY7t5ylKOkcw-f_29pAfI6noH6VI6HiF_H4ygPQH830IqJ9rA9AOdJWFZxaAMm11RVqy_1nzhJCH&lptoken=178f142d6492684a93db CertificateIssuerLet's Encrypt Subjectgauvaiho.net Fingerprint7A:BC:57:20:5D:99:49:16:5F:C9:C1:4F:27:AA:47:0F:D8:A8:FA:57 ValidityFri, 19 Apr 2024 05:44:25 GMT - Thu, 18 Jul 2024 05:44:24 GMT
File typeJavaScript source, ASCII text, with very long lines (37142), with no line terminators Hash32d6dbd00a639e2cd10d1704b9159bd5 0dab4c95675393f1d0e13d20f13d80ee12e41d95 9f339e5efd7c959419a4e86bb4c5e9f07eae2ed839484846157be981917743de
GET /pfe/current/micro.tag.min.js?z=4984707&sw=/sw-check-permissions-4eee0.js HTTP/1.1
Host: gauvaiho.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w.rationalunwaveringclick.buzz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 02 May 2024 10:18:32 GMT
content-type: application/javascript
last-modified: Thu, 25 Apr 2024 10:48:52 GMT
etag: W/"662a3514-9116"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
|
|