Report - www.scamadviser.com/check-website/dexpredict.com

Report Overview

Submitted URL
www.scamadviser.com/check-website/dexpredict.com
IP
172.67.8.189
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 08:49:20
Access
public
Website Title
Scamadviser - Tell your Story
Final URL
www.scamadviser.com/report-a-scam?_gl=1*yy2tfp*_up*MQ..*_ga*MTk4MDgyNjA5Ny4xNzE0MTIxMzM2*_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
imgsct.cookiebot.com	unknown	2010-01-21	2023-11-22	2024-04-24	480 B	723 B	104.110.3.72
consent.cookiebot.com	4972	2010-01-21	2014-02-26	2024-04-25	1.3 kB	158 kB	104.84.152.234
www.scamadviser.com	121790	2011-07-05	2012-05-22	2024-04-18	26 kB	1.3 MB	104.22.39.245
bshr.ezodn.com	unknown	2020-04-22	2023-05-10	2024-04-25	543 B	901 B	104.21.87.79
vjs.zencdn.net	4968	2011-12-27	2012-05-21	2024-04-24	416 B	7.5 kB	151.101.2.217
g.ezoic.net	20898	2012-01-10	2017-10-23	2024-02-28	18 kB	6.5 kB	3.69.213.60
p.typekit.net	620	2010-08-02	2012-05-23	2024-04-25	541 B	338 B	23.36.76.184
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-04-26	1.4 kB	280 kB	142.250.74.168
go.ezodn.com	8380	2020-04-22	2020-04-24	2024-04-25	1.3 kB	14 kB	188.114.97.1
use.typekit.net	494	2010-08-02	2012-07-05	2024-04-24	433 B	1.6 kB	23.36.76.186
consentcdn.cookiebot.com	5676	2010-01-21	2018-05-23	2024-04-25	1.0 kB	2.3 kB	104.110.3.72
www.humix.com	unknown	1997-10-20	2016-10-21	2024-03-26	400 B	6.9 kB	172.67.136.206
g.ezodn.com	57919	2020-04-22	2020-05-19	2024-04-24	1.7 kB	128 kB	188.114.97.1
apis.google.com	105	1997-09-15	2013-05-06	2024-04-24	408 B	22 kB	142.250.74.110

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	consentcdn.cookiebot.com/sdk/bc-v4.min.html	585 B	2023-04-05	2024-05-06
Pretty URL consentcdn.cookiebot.com/sdk/bc-v4.min.html IP 104.110.3.72 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-05 07:33:45 Last Seen2024-05-06 20:18:48 Times Seen5534 Hash 019b8aaa9f25d986d68395a8c6277be0 4d07e0b8c06f0a26b5be2caaf5c03d72b7c3d630 9ba37511ff74e293467e2c283d7045d2d63d999a1e700a41467f6bcf845329a2 Loading...

	www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..	746 B	2024-04-03	2024-05-02
Pretty URL www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-03 15:38:10 Last Seen2024-05-02 17:01:33 Times Seen11 Hash e0e6c29f2e074ae8b2ba57b1a383deb1 683f01fb50f68af1f4ed9192eecbbc3c7bfb1f40 af26c0a0cb312140270650fc6eca66a415ecec5f8cfbc116a8d25176fbdc616c Loading...

		Size	First Seen	Last Seen
	#1 Eval - 3fe45df35e95b2b019c6975eaeaa052d	249 B	2024-02-25	2024-05-02
Pretty Observations First Seen2024-02-25 16:30:51 Last Seen2024-05-02 17:01:34 Times Seen15 Hash 3fe45df35e95b2b019c6975eaeaa052d b4ae7df4ec7361a94e95ff8b2f7fdc5b4da63626 1646b396b5f8a716665b171e3756d0e155f2c613ebb58ea2c1c0ef27362e85ba Loading...

HTTP Transactions (69)

	URL	IP	Size
	consent.cookiebot.com/uc.js	104.84.152.234	34 kB
URL consent.cookiebot.com/uc.js IP 104.84.152.234:0 ASN #20940 Akamai International B.V. File type JavaScript source, ASCII text, with very long lines (65499) Size 34 kB (34251 bytes) Hash efa7232b42c346b1a41e9f1489c6602a 6808e3efcc30292b6708208c9a05550c34adbd0c 6dec01698bd7318ccee3dae6e824f02ff358d309dbe5a97f21b70a726c903421 HTTP Headers `GET /uc.js HTTP/1.1 Host: consent.cookiebot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK content-type: application/javascript content-encoding: gzip last-modified: Mon, 15 Apr 2024 08:18:48 GMT accept-ranges: bytes etag: "9a398f8ad8fda1:0" vary: Accept-Encoding request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef access-control-expose-headers: Request-Context content-length: 34251 cache-control: public, max-age=346 expires: Fri, 26 Apr 2024 08:54:35 GMT date: Fri, 26 Apr 2024 08:48:49 GMT cross-origin-resource-policy: cross-origin X-Firefox-Spdy: h2`

	www.scamadviser.com/images/troupe-jaded.gif	104.22.39.245	43 B
URL www.scamadviser.com/images/troupe-jaded.gif IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type GIF image data, version 89a, 1 x 1 Size 43 B (43 bytes) Hash 325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b HTTP Headers `GET /images/troupe-jaded.gif HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: image/gif content-length: 43 cache-control: public, max-age=31536000 cf-bgj: imgq:85,h2pri cf-polished: status=not_needed display: staticcontent_sol etag: "661d3887-2b-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Ezoic-Excludewebp,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;4a6136e0ad9a54fe88d67713f0b36422;2-36202-99;d6630d50-1ae3-41c6-5ccf-2fab36fc1da6 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 cf-cache-status: HIT age: 929512 accept-ranges: bytes x-content-type-options: nosniff server: cloudflare cf-ray: 87a550e6ca08929e-CPH alt-svc: h3=":443"; ma=86400

	consent.cookiebot.com/Framework/IAB/consent-sdk-2.2.js	104.84.152.234	88 kB
URL consent.cookiebot.com/Framework/IAB/consent-sdk-2.2.js IP 104.84.152.234:0 ASN #20940 Akamai International B.V. File type JavaScript source, Unicode text, UTF-8 text, with very long lines (62169), with LF, NEL line terminators Size 88 kB (87947 bytes) Hash 37d4784e3dc62547045c55dcde5684db 2254c9a07745ba5e7420bd9497def364c1c9490e 29bb04af5dc94a46658059c4a70febb0d2f9e0a2824651a756462063e8c58e3a HTTP Headers `GET /Framework/IAB/consent-sdk-2.2.js HTTP/1.1 Host: consent.cookiebot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK content-type: application/javascript content-encoding: gzip last-modified: Mon, 15 Apr 2024 08:18:48 GMT accept-ranges: bytes etag: "bf4d838ad8fda1:0" vary: Accept-Encoding request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef access-control-expose-headers: Request-Context content-length: 87947 cache-control: public, max-age=133 expires: Fri, 26 Apr 2024 08:51:03 GMT date: Fri, 26 Apr 2024 08:48:50 GMT X-Firefox-Spdy: h2`

	consentcdn.cookiebot.com/consentconfig/fd5b0202-1e7b-4c1d-b889-4a0c79321b34/scamadviser.com/configuration.js	104.110.3.72	666 B
URL consentcdn.cookiebot.com/consentconfig/fd5b0202-1e7b-4c1d-b889-4a0c79321b34/scamadviser.com/configuration.js IP 104.110.3.72:0 ASN #16625 AKAMAI-AS File type ASCII text, with very long lines (3350), with no line terminators Size 666 B (666 bytes) Hash 8a3c73af6a57833a71b82e3e9b214902 3f888c2b428fd73495ee17b544178b7d8e921f7a 16d3940133659e202c9d2a17430b384fd9ff866734f3c54231593fdb672bb2b0 HTTP Headers `GET /consentconfig/fd5b0202-1e7b-4c1d-b889-4a0c79321b34/scamadviser.com/configuration.js HTTP/1.1 Host: consentcdn.cookiebot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes content-type: application/x-javascript etag: "8a3c73af6a57833a71b82e3e9b214902:1713399581.183419" last-modified: Thu, 18 Apr 2024 00:19:41 GMT server: AkamaiNetStorage vary: Accept-Encoding content-encoding: gzip cache-control: max-age=64923 expires: Sat, 27 Apr 2024 02:50:53 GMT date: Fri, 26 Apr 2024 08:48:50 GMT content-length: 666 server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1714121330097_388255644_166153406_40_772_3_9_21";dur=1 cross-origin-resource-policy: cross-origin X-Firefox-Spdy: h2

	www.humix.com/video.js	172.67.136.206	6.2 kB
URL www.humix.com/video.js IP 172.67.136.206:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (751) Size 6.2 kB (6230 bytes) Hash a59902cfe4c0c59b2671b9add6e1adbb bbe8ec475a089d318895ea38f113bbe2cfca75dc bfe59c4e8293bbe4f752abe21caa6e65377288effe4b44eb347e33aa36ee8ef7 HTTP Headers `GET /video.js HTTP/1.1 Host: www.humix.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: application/javascript cache-control: max-age=3600, public vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex last-modified: Fri, 26 Apr 2024 08:08:54 GMT cf-cache-status: HIT report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1X6aB5%2FGF2kvn0Y0dmcT%2B6UyDYags0cZWlCo4W0Z0%2BlZe3kaq5c6ZPWneG0ODscYu5lesBpfMyA87Vu%2FEEEzZqC4V%2F9vmhZ8MjhTAHXJHokMWVVyXctv9%2FrWJ88EEZ4y"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a550e7591b56c3-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	www.scamadviser.com/fonts/fontawesome-webfont.woff2?20fd1704ea223900efa9fd4e869efb08	104.22.39.245	81 kB
URL www.scamadviser.com/fonts/fontawesome-webfont.woff2?20fd1704ea223900efa9fd4e869efb08 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459 Size 81 kB (81409 bytes) Hash f43a3601e7ca202dad96b077f8aeae77 199ffbf95ec56c1ea59160f823600177a88a132e 0c6a893a00b8780b4357660e845349b1b24d772dbd2cd4bf162245b76803940d HTTP Headers GET /fonts/fontawesome-webfont.woff2?20fd1704ea223900efa9fd4e869efb08 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.scamadviser.com/check-website/dexpredict.com DNT: 1 Connection: keep-alive Cookie: user_country=NO Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: font/woff2 cache-control: public, max-age=31536000 display: staticcontent_sol etag: "661d3887-12d68-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;6792142faffddd7d62e9794e1724e1e2;2-36202-99;94b11f85-3ef5-4b43-7cc5-7a9173ccfab8 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: cf-cache-status: HIT age: 929462 x-content-type-options: nosniff server: cloudflare cf-ray: 87a550e6b9ed929e-CPH alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/dist/app.js?id=aaaf3e856ebde691ec5f13166a955151	104.22.39.245	198 kB
URL www.scamadviser.com/dist/app.js?id=aaaf3e856ebde691ec5f13166a955151 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 198 kB (197637 bytes) Hash 6fa49de9e28309a505aa7c91127b26bc 2681e7496b486051795ac9fc07cb6fc340494147 80c1e3d8c5f4dfdde77bd16341245febf18988d797ee4e6d936501ac07a40ad1 HTTP Headers `GET /dist/app.js?id=aaaf3e856ebde691ec5f13166a955151 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=589458 display: staticcontent_sol etag: W/"6628aaf0-8fe92-gzip" last-modified: Wed, 24 Apr 2024 06:47:12 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;74bc2ada9a386d82e72888ce9fb2efb0;2-36202-102;52223d52-c660-4140-413c-b35dc0e9482c x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 x-sol: pub_site cf-cache-status: HIT age: 179846 x-content-type-options: nosniff server: cloudflare cf-ray: 87a550e6ca0e929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/parsonsmaize/abilene.js?gcb=195-5&cb=33	104.22.39.245	6.4 kB
URL www.scamadviser.com/parsonsmaize/abilene.js?gcb=195-5&cb=33 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (6241), with no line terminators Size 6.4 kB (6405 bytes) Hash ee217930afee2722d26f490a10c68905 3d747cc56565ed4ad0aefa39d2374d9ec92599c1 c937400edb14ee9964073e72d1e9629d3bf554101b9914dd5d48abf15f7157ab HTTP Headers `GET /parsonsmaize/abilene.js?gcb=195-5&cb=33 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=6254 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929513 last-modified: Mon, 15 Apr 2024 14:36:56 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a550e79bb1929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	consentcdn.cookiebot.com/sdk/bc-v4.min.html	104.110.3.72	392 B
URL consentcdn.cookiebot.com/sdk/bc-v4.min.html IP 104.110.3.72:0 ASN #16625 AKAMAI-AS File type HTML document, ASCII text, with very long lines (627), with no line terminators Size 392 B (392 bytes) Hash 3d08665fa4c7bcf9fa2dcbbc7efe1d0f ba57ecee011a4b99d4bb56707325c8e4d0fb8a2b 738e5435f2d18427d291a0d6289eee0ebbc87b596d6003919f255760ac293104 HTTP Headers GET /sdk/bc-v4.min.html HTTP/1.1 Host: consentcdn.cookiebot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK accept-ranges: bytes content-type: text/html etag: "3d08665fa4c7bcf9fa2dcbbc7efe1d0f:1649057029.895163" last-modified: Mon, 04 Apr 2022 07:23:49 GMT server: AkamaiNetStorage x-akamai-transformed: 9 - 0 pmb=mRUM,1 vary: Accept-Encoding content-encoding: gzip cache-control: max-age=31536000 expires: Sat, 26 Apr 2025 08:48:50 GMT date: Fri, 26 Apr 2024 08:48:50 GMT content-length: 392 server-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc="1714121330309_388255644_166153450_25_989_2_0_21";dur=1 cross-origin-embedder-policy: require-corp cross-origin-resource-policy: cross-origin X-Firefox-Spdy: h2

	g.ezodn.com/cmp/v2/v.js?v=4	188.114.97.1	12 kB
URL g.ezodn.com/cmp/v2/v.js?v=4 IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (4651), with no line terminators Size 12 kB (11723 bytes) Hash 77304d2e4bf5f93eea562bc8d89abdeb 1edaa0e5232da58ba84f56c81d91518b9d16f71e dce8ae752b8ed25d878707381a347b8889bfde191cd468eac141c5526a1f13dc HTTP Headers `GET /cmp/v2/v.js?v=4 HTTP/1.1 Host: g.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: text/javascript; charset=utf-8 cache-control: public, max-age=15780000 last-modified: Wed, 20 Sep 2023 17:04:30 GMT vary: Accept-Encoding cf-cache-status: HIT age: 13228700 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k6JVKvtD%2BhuuMte%2B1hafz2fOAyxwdYTQIu%2BhZTkMe8bfr67YS4EYn1byorZy0v6qs9cMjIhKkmvswSRTTvMEJAVc6gRDmVAnoOYxg03bRwUHLtTa7L24btQbWw%2BvPw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a550e92f4a56b4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	p.typekit.net/p.css?s=1&k=qrx0mnk&ht=tk&f=14541.14542.14545.14548.14549.14550.31139.31140.31141.31142.31143.31144.31145.31146&a=88461194&app=typekit&e=css	23.36.76.184	5 B
URL p.typekit.net/p.css?s=1&k=qrx0mnk&ht=tk&f=14541.14542.14545.14548.14549.14550.31139.31140.31141.31142.31143.31144.31145.31146&a=88461194&app=typekit&e=css IP 23.36.76.184:0 ASN #20940 Akamai International B.V. File type ASCII text Size 5 B (5 bytes) Hash 83d24d4b43cc7eef2b61e66c95f3d158 f0cafc285ee23bb6c28c5166f305493c4331c84d 1c0ff118a4290c99f39c90abb38703a866e47251b23cca20266c69c812ccafeb HTTP Headers GET /p.css?s=1&k=qrx0mnk&ht=tk&f=14541.14542.14545.14548.14549.14550.31139.31140.31141.31142.31143.31144.31145.31146&a=88461194&app=typekit&e=css HTTP/1.1 Host: p.typekit.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://use.typekit.net/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx content-type: text/css content-length: 5 last-modified: Tue, 07 Mar 2023 19:56:00 GMT etag: "640796d0-5" cache-control: public, max-age=604800 access-control-allow-origin: * cross-origin-resource-policy: cross-origin accept-ranges: bytes date: Fri, 26 Apr 2024 08:48:50 GMT X-Firefox-Spdy: h2`

	www.scamadviser.com/detroitchicago/tuscon.js?gcb=5&cb=14	104.22.39.245	19 kB
URL www.scamadviser.com/detroitchicago/tuscon.js?gcb=5&cb=14 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (437) Size 19 kB (18702 bytes) Hash 9958a37cade3d23821e7c16a878dfbe1 0dc1c489291f813a3758957db2de13155c6adf35 18064c25de354e9afeaa0c7d43f0991cba0850173e05834efaf0f0dbeabdf255 HTTP Headers `GET /detroitchicago/tuscon.js?gcb=5&cb=14 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=6955 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929428 last-modified: Mon, 15 Apr 2024 14:38:22 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a550eb5b86929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/edmontonalberta/calgary.js?cb=32	104.22.39.245	37 kB
URL www.scamadviser.com/edmontonalberta/calgary.js?cb=32 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (570) Size 37 kB (36636 bytes) Hash f0fb79ee27ca9ae9fca1cf131dbe2120 ef70c16b585031b069815a9b2242df8ab5ad2587 46075e88a191afd25d0dac3e1678c78a23f0ad9c9a3cb62f81e0dc13ec1548db HTTP Headers `GET /edmontonalberta/calgary.js?cb=32 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=4927 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929463 last-modified: Mon, 15 Apr 2024 14:37:47 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a550eaaa1c929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/detroitchicago/wichita.js?gcb=195-5&cb=12	104.22.39.245	22 kB
URL www.scamadviser.com/detroitchicago/wichita.js?gcb=195-5&cb=12 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (2642), with no line terminators Size 22 kB (21578 bytes) Hash 5400d57d3c99621a705f935a7f03be29 b1bebf7179d6fbcf789eae5bbe363e0e25245669 1d7a77f24fc31abf310ccb240b2e0a49f2582823f990eef11a3abc37f286ea12 HTTP Headers `GET /detroitchicago/wichita.js?gcb=195-5&cb=12 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929512 last-modified: Mon, 15 Apr 2024 14:36:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a550ea2906929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400`

	www.scamadviser.com/detroitchicago/vista.js?gcb=195-5&cb=6	104.22.39.245	20 kB
URL www.scamadviser.com/detroitchicago/vista.js?gcb=195-5&cb=6 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (1054), with no line terminators Size 20 kB (19552 bytes) Hash e2b7b241b452315e99f029fe0cea92dc de8c84e7ad58a0af30e61a5ab3a24fdc25d6e8e0 4559f063977072488f6dd2c96ff11fa2dbfc62c9e26d1b8c2c80c48a85964ecc HTTP Headers `GET /detroitchicago/vista.js?gcb=195-5&cb=6 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=1067 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929512 last-modified: Mon, 15 Apr 2024 14:36:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a550ea290f929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	bshr.ezodn.com/?bf=30000&dc=1254144	104.21.87.79	0 B
URL bshr.ezodn.com/?bf=30000&dc=1254144 IP 104.21.87.79:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers OPTIONS /?bf=30000&dc=1254144 HTTP/1.1 Host: bshr.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type,x-pingback Referer: https://www.scamadviser.com/ Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: text/plain; charset=utf-8 content-length: 0 access-control-allow-credentials: true access-control-allow-headers: content-type,x-pingback access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u9A8HcrnTV1mQIzC2MyM%2BIIUR6J8vq7su4BsLIEvuTRNMmmmom7vWXFzoLtc%2FdVT5GAtmGwDGUw3lI01%2FPI8AOZOFNA0FvWVl53Ke8kzqxhUSfjuZGeIyCYj%2BrVaD%2FRESg%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a550ec8c745694-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	g.ezoic.net/detroitchicago/imp.gif	3.69.213.60	43 B
URL g.ezoic.net/detroitchicago/imp.gif IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type GIF image data, version 89a, 1 x 1 Size 43 B (43 bytes) Hash f837aa60b6fe83458f790db60d529fc9 14af87ccec7f81bb28d53c84da2fd5a9d5925cda dcecab1355b5c2b9ecef281322bf265ac5840b4688748586e9632b473a5fe56b HTTP Headers `POST /detroitchicago/imp.gif HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 1284 Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-credentials: true access-control-allow-headers: Content-Type, Content-Type access-control-allow-methods: GET, POST, PUT, OPTIONS, HEAD, PUT, POST, GET, OPTIONS access-control-allow-origin: https://www.scamadviser.com, https://www.scamadviser.com access-control-max-age: 1728000, 1728000 cache-control: private, max-age=0, must-revalidate, no-cache, no-store content-type: image/gif date: Fri, 26 Apr 2024 08:48:50 GMT expires: Thu, 25 Apr 2024 08:48:50 GMT vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers x-middleton-display: imp_sol content-length: 43 X-Firefox-Spdy: h2

	g.ezodn.com/cmp/v2/v.js?v=4	188.114.96.1	1.7 kB
URL g.ezodn.com/cmp/v2/v.js?v=4 IP 188.114.96.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (4651), with no line terminators Size 1.7 kB (1724 bytes) Hash 77304d2e4bf5f93eea562bc8d89abdeb 1edaa0e5232da58ba84f56c81d91518b9d16f71e dce8ae752b8ed25d878707381a347b8889bfde191cd468eac141c5526a1f13dc HTTP Headers `GET /cmp/v2/v.js?v=4 HTTP/1.1 Host: g.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: text/javascript; charset=utf-8 cache-control: public, max-age=15780000 last-modified: Wed, 20 Sep 2023 17:04:30 GMT vary: Accept-Encoding cf-cache-status: HIT age: 13228699 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fm%2FeankkvNE2%2BePjhx5oXTRomOyLR3OdsAh21wFEybpp43Zk6Xj1%2BZ%2FnS45MxhRpwrlW1%2BF2krS0eMDpLm3OF%2FMTVdDIEcawRilHD4%2Bk8lj7Q6KTrYzYz8BZuB9koQ%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a550e6ee13568f-OSL content-encoding: br alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	apis.google.com/js/platform.js	142.250.74.110	21 kB
URL apis.google.com/js/platform.js IP 142.250.74.110:0 ASN #15169 GOOGLE File type JavaScript source, ASCII text, with very long lines (2050) Size 21 kB (21303 bytes) Hash e66acfdb2f1dfcff8c6dba736dd4ab6d 36026360b6c8d750488ef2c739e04969f8c5bcd7 742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3 HTTP Headers `GET /js/platform.js HTTP/1.1 Host: apis.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK accept-ranges: bytes vary: Accept-Encoding content-encoding: gzip content-type: text/javascript access-control-allow-origin: * content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="gapi-team" report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} timing-allow-origin: * content-length: 21303 date: Fri, 26 Apr 2024 08:48:50 GMT expires: Fri, 26 Apr 2024 08:48:50 GMT cache-control: private, max-age=1800, stale-while-revalidate=1800 etag: "d8cc7aca923e8ade" x-content-type-options: nosniff server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 X-Firefox-Spdy: h2

	go.ezodn.com/porpoiseant/ezjitpos.js?gcb=195-5&cb=174	188.114.97.1	1.4 kB
URL go.ezodn.com/porpoiseant/ezjitpos.js?gcb=195-5&cb=174 IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (961) Size 1.4 kB (1446 bytes) Hash ac42de6b79d43fcd8b877feb42bd0042 daedba5e1148a24a130a07d214f2ac4a0c9a0558 5e9978378d99156fa6d6b3c5d804cafb508d17913e064a3e5b7eccd392c15011 HTTP Headers `GET /porpoiseant/ezjitpos.js?gcb=195-5&cb=174 HTTP/1.1 Host: go.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/javascript cache-control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex last-modified: Fri, 26 Apr 2024 00:15:55 GMT cf-cache-status: HIT age: 30504 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kOeqP1Fm8b5sv60Py9%2BUJrU2Fnc3bUr%2FUZIs3pS%2BtY0NFdshsvoJ1bTt3OjABwwpW7lPQWcxoWrnh%2F7ydGnYF4cQcfwYwKupgO3AeZ%2FdNWvhLi6c1PVLbS5YoDNpq7w%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a55109f98956b4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNTQ2MzI1MTA4MDI2NjA1OCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWJveC0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNTQ2MzI1MTA4MDI2NjA1OCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWJveC0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNTQ2MzI1MTA4MDI2NjA1OCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWJveC0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:48:55 GMT expires: Thu, 25 Apr 2024 08:48:55 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	go.ezodn.com/porpoiseant/ezicsticky.js?gcb=195-5&cb=174	188.114.97.1	2.5 kB
URL go.ezodn.com/porpoiseant/ezicsticky.js?gcb=195-5&cb=174 IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (617) Size 2.5 kB (2543 bytes) Hash 22a51abd2e50a54243723f5e9e93dc67 07a0872d54c4d7496951405dd62f6749a6fb2c5f 1cb319ead41ac1d964d25f4eccd9b363854131f3813899820e57cf4f08f71063 HTTP Headers `GET /porpoiseant/ezicsticky.js?gcb=195-5&cb=174 HTTP/1.1 Host: go.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/javascript cache-control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex last-modified: Fri, 26 Apr 2024 00:15:45 GMT cf-cache-status: HIT age: 30504 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=063W5RvklqTqR3COx04HqLP6WmVuoPIvvEv7%2BlxrgmJYnknrndLbN2w9KHk2XiUWJmbn2yaefAwjChH6BknmgQ%2BBdKY0fPhMWNbGZ16LFQ%2BJOAbFCGEame3VGtOjrZg%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a55108a8ad56b4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/images/static/favicon/favicon-16x16.png	104.22.39.245	84 kB
URL www.scamadviser.com/images/static/favicon/favicon-16x16.png IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Size 84 kB (83982 bytes) Hash a5386cea66df912b8ef264df237f412b 58fd1b24aa9083a64387d48294fd14a84a8da42f 292dc020489a76b8190480585fef984c783b9bbc0af14b4886451593ed82b77f HTTP Headers GET /images/static/favicon/favicon-16x16.png HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: image/png cache-control: public, max-age=31536000 cf-bgj: imgq:85,h2pri cf-polished: origSize=1203, status=vary_header_present display: staticcontent_sol etag: "661d3887-4b3-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Ezoic-Excludewebp,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;f829c40aafca2ebc964e50e989ae2abf;2-36202-99;3aa8880d-81d1-40e7-458c-b3e384aa510b x-ezoic-excludewebp: false x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 cf-cache-status: HIT age: 929463 x-content-type-options: nosniff server: cloudflare cf-ray: 87a550ed7fe6929e-CPH alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/beardeddragon/drake.js?gcb=5&cb=8	104.22.39.245	1.2 kB
URL www.scamadviser.com/beardeddragon/drake.js?gcb=5&cb=8 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (546) Size 1.2 kB (1161 bytes) Hash 0e769c2f187d138a4ad480e3daa6bf28 cfd56dddbc91e38537f7a8b61876a16947cec7f9 8e2e9642ce4893f96c168bd664e248170d5de361db3ae3a0280089d72b29dd20 HTTP Headers `GET /beardeddragon/drake.js?gcb=5&cb=8 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=4247 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929332 last-modified: Mon, 15 Apr 2024 14:40:03 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5510cf963929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.googletagmanager.com/gtag/js?id=G-PDETX06K4X&l=dataLayer&cx=c	142.250.74.168	98 kB
URL www.googletagmanager.com/gtag/js?id=G-PDETX06K4X&l=dataLayer&cx=c IP 142.250.74.168:0 ASN #15169 GOOGLE File type JavaScript source, ASCII text, with very long lines (5945) Size 98 kB (97675 bytes) Hash b93eb76e5f1a2f103d0f4c5ed16a9ba1 e1b5f4c6e3970a9e6fc86df470eb447e578caf3b b4c0a05932c51b16cbbb1e867c8ece225994d1b64e4379f7c1d1743bfe8ea780 HTTP Headers `GET /gtag/js?id=G-PDETX06K4X&l=dataLayer&cx=c HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Fri, 26 Apr 2024 08:48:56 GMT expires: Fri, 26 Apr 2024 08:48:56 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 97675 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiODE0Mjk5MzY0ODMzMzE3MCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiODE0Mjk5MzY0ODMzMzE3MCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiODE0Mjk5MzY0ODMzMzE3MCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:48:56 GMT expires: Thu, 25 Apr 2024 08:48:56 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiODE0Mjk5MzY0ODMzMzE3MCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiODE0Mjk5MzY0ODMzMzE3MCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiODE0Mjk5MzY0ODMzMzE3MCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:48:56 GMT expires: Thu, 25 Apr 2024 08:48:56 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	www.scamadviser.com/dist/app.css?id=d3959478c3b53a8e88618ab62fae4f1d	104.22.39.245	42 kB
URL www.scamadviser.com/dist/app.css?id=d3959478c3b53a8e88618ab62fae4f1d IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size 42 kB (42174 bytes) Hash b47e6c8e3f0205c55a2612d9f507282b 98d649e051c6554d53dd37b350fcb232f45c90f9 6cd8bf1e24233017606a3755b7cea91860abe52e2776230f392d671ebf3e087e HTTP Headers GET /dist/app.css?id=d3959478c3b53a8e88618ab62fae4f1d HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: text/css cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=255344 display: staticcontent_sol, orig_site_sol etag: W/"6628aaf0-3e570-gzip" last-modified: Wed, 24 Apr 2024 06:47:12 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;38871f462be320f0f32d001846389282;2-36202-102;bbd3816b-5be7-4724-6a10-db3dccdd8f36 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol, orig_site_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 x-sol: orig cf-cache-status: HIT age: 179846 x-content-type-options: nosniff server: cloudflare cf-ray: 87a550e6b9eb929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=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	3.69.213.60	0 B
URL g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=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 IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /detroitchicago/greenoaks.gif?orig=0&ds=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 HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:48:56 GMT expires: Thu, 25 Apr 2024 08:48:56 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	www.scamadviser.com/detroitchicago/raleigh.js?gcb=195-5&cb=7	104.22.39.245	2.2 kB
URL www.scamadviser.com/detroitchicago/raleigh.js?gcb=195-5&cb=7 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (1660), with no line terminators Size 2.2 kB (2211 bytes) Hash 42639702af49d736558389d95dd4790a 6deb088e5b413a086dd9a911a1661da38c006df1 9fba7686001b516b0414bef328255eca729f278c1d14d324c8567733426439a5 HTTP Headers `GET /detroitchicago/raleigh.js?gcb=195-5&cb=7 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:50 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=1673 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929512 last-modified: Mon, 15 Apr 2024 14:36:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a550ea290c929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/tardisrocinante/lazy_load.js?gcb=5&cb=6	104.22.39.245	12 kB
URL www.scamadviser.com/tardisrocinante/lazy_load.js?gcb=5&cb=6 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (7638) Size 12 kB (12119 bytes) Hash 0891715fe6a09db0823ac4b09584cac5 cc7aecdbfd8593e78fa0f13ccb10e60e7675be0e 0a143a0231b41e8939c3f61fb57070aab6570ec44467d96037be09fd9d9b0caa HTTP Headers `GET /tardisrocinante/lazy_load.js?gcb=5&cb=6 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=13945 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929467 last-modified: Mon, 15 Apr 2024 14:37:48 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5510bbf35929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/ajax/pop-ups	104.22.39.245	2 B
URL www.scamadviser.com/ajax/pop-ups IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JSON text data Size 2 B (2 bytes) Hash d751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 HTTP Headers POST /ajax/pop-ups HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-CSRF-TOKEN: L62E0gHSmCLEttJSg0d3ukG1Cazu3eGouXiaKOCZ X-Requested-With: XMLHttpRequest Content-Length: 21 Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImgrNGlONVpveURMQ3p6WG15YnZaNnc9PSIsInZhbHVlIjoieEV4WDQvMGFnOWUrSDlmeGh5UHQxN2NqUWxCcldBMzFZYzdaSXA2YXoyN0NKaExUTGlsWlNxYTVqRk1ldTg3a2s5NkQ1d28xYXdnVHFCbkhCMm9Jd044eFJKUVM4dFAvYVdaZGhFMmN3OE0wRldnMCtlWkZBOTZLalZ3TVlmQkoiLCJtYWMiOiI3MzViMWJlOTg5ZjFlMzVjZjhhMzk1MDY3ZDBiZDBhZjYwOWQ5MDcyMjA3NjNiYzg0MGM3MjE2YTFjMGM4ODBmIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6InRsZGg1bGg2STJuWUdVb3RWVko0SGc9PSIsInZhbHVlIjoiUFpWdFpVT2NRYU80cERGL0NGdVFTNWQ1TS8rSW9LRHN2TldpRCs0MW5sb1hERlF4OVRrVEpub3VZUzI1QmhtSUF1K1JtQUxYTkJIYWVWd0c0aFo4bzZPR1pKWHR2bS9FSmlXS3RnREZIVVhkWVd2Q1Vjd3BsYW1qMEFoVklKR2EiLCJtYWMiOiIyNzc5YTAyMmZmZjk0MzJlYWEwNTEyNDMyZDE3ZDFiMGI4Y2RjMGRlZDUxZmQ3NmZmOTdlYzcyNTM3ZDEwNTcwIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:59 GMT content-type: application/json content-length: 2 access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 cache-control: no-cache, private display: staticcontent_sol response: 200 set-cookie: XSRF-TOKEN=eyJpdiI6IkNXN2lnc2N4VVVwMDJWRmdWR3ZBWlE9PSIsInZhbHVlIjoiQnR0ZzdIR3g4NS9oVjRZQ2RvMHlsdmtXSEQ0N0ltVjhqQkpKVW9INHJVbWllQlVPVWNHY3JtTlRBRXhTcUdKcDVCb3liN0VEWmIvMmFxR2ZFSG4wY1B1QWNkai9oc2JmNUpSQWMrdFNqY0Ivdms0TFNvZEIwK2ROT3hKdFFPYUMiLCJtYWMiOiJkODBkYzA5OWE1MWU0MWM2NTk1MjhkMDYwODUxNzM4OTczOWZhNmRlMGRjNWZkYjJhMmIyMDQwMzdkODNlM2FjIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:48:59 GMT; Max-Age=7200; path=/; secure; samesite=lax website_session=eyJpdiI6IjNLSjVlaGhNWkttazgwN0s4SGN6QUE9PSIsInZhbHVlIjoieE04UERFQ1lrN0FzSFVTSzFwUGtqc1ZIVGlldnE5WVhHNVc4anllUzdVMGp5Z29CU2NNYkcwMFRidGs5V2JxalorRlVEbXFWN0QzMjQvbkszN3I3ZkwrV1RIMEJ1N05SNVFEREI1MzZJSzFkMnloNUMwenQ3RUdyTHVPTnlHTHoiLCJtYWMiOiIyNGRmMmNjNTkzMWUxNjFjYzk4YzgwNTdhODNiMWIwN2EyMjRlNGIwOTIzNTI1NGJmYzBkNWU5NDRkMWFlMzgwIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:48:59 GMT; Max-Age=7200; path=/; httponly; samesite=lax strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Inertia,Origin x-ezoic-cdn: Miss x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: no-cache, private cf-cache-status: DYNAMIC x-content-type-options: nosniff server: cloudflare cf-ray: 87a551250df9929e-CPH alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/ajax/pop-ups	104.22.39.245	2 B
URL www.scamadviser.com/ajax/pop-ups IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JSON text data Size 2 B (2 bytes) Hash d751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945 HTTP Headers POST /ajax/pop-ups HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-CSRF-TOKEN: L62E0gHSmCLEttJSg0d3ukG1Cazu3eGouXiaKOCZ X-Requested-With: XMLHttpRequest Content-Length: 20 Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6IkNXN2lnc2N4VVVwMDJWRmdWR3ZBWlE9PSIsInZhbHVlIjoiQnR0ZzdIR3g4NS9oVjRZQ2RvMHlsdmtXSEQ0N0ltVjhqQkpKVW9INHJVbWllQlVPVWNHY3JtTlRBRXhTcUdKcDVCb3liN0VEWmIvMmFxR2ZFSG4wY1B1QWNkai9oc2JmNUpSQWMrdFNqY0Ivdms0TFNvZEIwK2ROT3hKdFFPYUMiLCJtYWMiOiJkODBkYzA5OWE1MWU0MWM2NTk1MjhkMDYwODUxNzM4OTczOWZhNmRlMGRjNWZkYjJhMmIyMDQwMzdkODNlM2FjIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6IjNLSjVlaGhNWkttazgwN0s4SGN6QUE9PSIsInZhbHVlIjoieE04UERFQ1lrN0FzSFVTSzFwUGtqc1ZIVGlldnE5WVhHNVc4anllUzdVMGp5Z29CU2NNYkcwMFRidGs5V2JxalorRlVEbXFWN0QzMjQvbkszN3I3ZkwrV1RIMEJ1N05SNVFEREI1MzZJSzFkMnloNUMwenQ3RUdyTHVPTnlHTHoiLCJtYWMiOiIyNGRmMmNjNTkzMWUxNjFjYzk4YzgwNTdhODNiMWIwN2EyMjRlNGIwOTIzNTI1NGJmYzBkNWU5NDRkMWFlMzgwIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:04 GMT content-type: application/json content-length: 2 access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 cache-control: no-cache, private display: staticcontent_sol response: 200 set-cookie: XSRF-TOKEN=eyJpdiI6IktVaU9FV3pxdzZGTDJFU3pHcnVHZHc9PSIsInZhbHVlIjoiWFFaa0t0dmVHc2MxM09YV2RsTGJCVUtNbVgvVk5FVVBwdmxYNGNnNUlqUzhJRUdUcEhKeVF4V0Mzd3RMZGhzOWFGeE1SN2o0c01OOGU3WllRYkpWNHVNdjJ4QVZINzM3ZHZxMmtSbEZ4UFU5ZjZJME1yeTM5ZVpxZFIxbW9SZXQiLCJtYWMiOiIxYWU2NzIyMDUwMTM0YmRhZTA5YTc0MDlmZjRiOTIzOTZhYWFkMzVjMjg0NDBiNmJlYjY0ZWVjNTFiM2IzN2MyIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:49:04 GMT; Max-Age=7200; path=/; secure; samesite=lax website_session=eyJpdiI6InRuRnZmZW1pbkVWWURCb3NYVFBwNkE9PSIsInZhbHVlIjoiS3Y1VitWaFpkZlNvSVJUUVh6b3dzNUhsV2pjWCtqWWVpK0s3UUhjT1NOZnFWWkdKZlNmSzlFMTUzaDFtVHZjMnNDZGkxV3V3QW1makxwd05xVVVSd3BQVDlGYUZxTnl5Z1lOSzdFTk50dVpseW9QUEtOUlJjTnVqT3ZkZXVUbDQiLCJtYWMiOiIwNzQyY2JlZDk3ODhjNmM3OGVhNzU0MjY3ODA4NjcxMDFkOTM3NDVhMjA2MjZlMjk2YjM4MTJkNTJhODdjYmVlIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:49:04 GMT; Max-Age=7200; path=/; httponly; samesite=lax strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Inertia,Origin x-ezoic-cdn: Miss x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: no-cache, private cf-cache-status: DYNAMIC x-content-type-options: nosniff server: cloudflare cf-ray: 87a5514388d0929e-CPH alt-svc: h3=":443"; ma=86400

	go.ezodn.com/porpoiseant/ezjitscroll.js?gcb=195-5&cb=174	188.114.97.1	7.5 kB
URL go.ezodn.com/porpoiseant/ezjitscroll.js?gcb=195-5&cb=174 IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (1235) Size 7.5 kB (7526 bytes) Hash de8694d53affa448e82346939bfe1934 08c79e6609bb576e0c78416bedefa103b8e41b3e 5594bba711b66497fb5c8ca29d763c59fdb7e00cb1ae2270f7d4531735ddd4b3 HTTP Headers `GET /porpoiseant/ezjitscroll.js?gcb=195-5&cb=174 HTTP/1.1 Host: go.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/javascript cache-control: public, max-age=31536000 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex last-modified: Fri, 26 Apr 2024 00:16:20 GMT cf-cache-status: HIT age: 30504 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVr1KoG%2BWTEruNDt%2BYUKa6%2Bbh0CKO9KYGWxO6PJ1e6g4jcMlQVMOfghm8DUyjvWV92sxyWim%2FiI2286ZF13%2B4tF4lly%2FG2LbAWQnwH8B4Vom6MPIi%2BzUBjg43nHVlp4%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a55108a8ac56b4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=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	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNTQ2MzI1MTA4MDI2NjA1OCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWJveC0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6IjI3NiJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiMjczIn0seyJuYW1lIjoiaXNfZmxvYXRpbmciLCJ2YWwiOiJmYWxzZSJ9XSwiaXNfb3JpZyI6ZmFsc2V9LHsidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMzU3NzUzMTc1MDMwMDUzOCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWVkZ2UtMS0wIiwidF9lcG9jaCI6MTcxNDEyMTMyOCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoicG9zX3giLCJ2YWwiOiItMSJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiLTEifSx7Im5hbWUiOiJpc19mbG9hdGluZyIsInZhbCI6ImZhbHNlIn1dLCJpc19vcmlnIjpmYWxzZX0seyJ0eXBlIjoiaW1wcmVzc2lvbiIsImltcHJlc3Npb25faWQiOiI4MTQyOTkzNjQ4MzMzMTcwIiwiZG9tYWluX2lkIjoiMzYyMDIiLCJ1bml0IjoiZGl2LWdwdC1hZC1zY2FtYWR2aXNlcl9jb20tbWVkcmVjdGFuZ2xlLTItMCIsInRfZXBvY2giOjE3MTQxMjEzMjgsInBhZ2V2aWV3X2lkIjoiNGE3OWNhODAtYTU0YS00ODU2LTYxMTMtYzBlYTIzYWM4MWUxIiwiY29tcF9pZCI6MCwibGluZV9pdGVtX2lkIjowLCJjcmVhdGl2ZV9pZCI6MCwiZGF0YSI6W3sibmFtZSI6InBvc194IiwidmFsIjoiMCJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiOTM0In0seyJuYW1lIjoiaXNfZmxvYXRpbmciLCJ2YWwiOiJ0cnVlIn1dLCJpc19vcmlnIjpmYWxzZX0seyJ0eXBlIjoiaW1wcmVzc2lvbiIsImltcHJlc3Npb25faWQiOiI4ODYwMTcwMDI2MzAyMTM5IiwiZG9tYWluX2lkIjoiMzYyMDIiLCJ1bml0IjoiZGl2LWdwdC1hZC1zY2FtYWR2aXNlcl9jb20tZWRnZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6Ii0xIn0seyJuYW1lIjoicG9zX3kiLCJ2YWwiOiItMSJ9LHsibmFtZSI6ImlzX2Zsb2F0aW5nIiwidmFsIjoiZmFsc2UifV0sImlzX29yaWciOmZhbHNlfSx7InR5cGUiOiJpbXByZXNzaW9uIiwiaW1wcmVzc2lvbl9pZCI6IjY1ODE1MTIzOTgzMjk5NzEiLCJkb21haW5faWQiOiIzNjIwMiIsInVuaXQiOiJkaXYtZ3B0LWFkLXNjYW1hZHZpc2VyX2NvbS1tZWRyZWN0YW5nbGUtMy0wIiwidF9lcG9jaCI6MTcxNDEyMTMyOCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoicG9zX3giLCJ2YWwiOiI0OTAifSx7Im5hbWUiOiJwb3NfeSIsInZhbCI6IjE5MzAifSx7Im5hbWUiOiJpc19mbG9hdGluZyIsInZhbCI6ImZhbHNlIn1dLCJpc19vcmlnIjpmYWxzZX1d IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNTQ2MzI1MTA4MDI2NjA1OCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWJveC0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6IjI3NiJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiMjczIn0seyJuYW1lIjoiaXNfZmxvYXRpbmciLCJ2YWwiOiJmYWxzZSJ9XSwiaXNfb3JpZyI6ZmFsc2V9LHsidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMzU3NzUzMTc1MDMwMDUzOCIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLWVkZ2UtMS0wIiwidF9lcG9jaCI6MTcxNDEyMTMyOCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoicG9zX3giLCJ2YWwiOiItMSJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiLTEifSx7Im5hbWUiOiJpc19mbG9hdGluZyIsInZhbCI6ImZhbHNlIn1dLCJpc19vcmlnIjpmYWxzZX0seyJ0eXBlIjoiaW1wcmVzc2lvbiIsImltcHJlc3Npb25faWQiOiI4MTQyOTkzNjQ4MzMzMTcwIiwiZG9tYWluX2lkIjoiMzYyMDIiLCJ1bml0IjoiZGl2LWdwdC1hZC1zY2FtYWR2aXNlcl9jb20tbWVkcmVjdGFuZ2xlLTItMCIsInRfZXBvY2giOjE3MTQxMjEzMjgsInBhZ2V2aWV3X2lkIjoiNGE3OWNhODAtYTU0YS00ODU2LTYxMTMtYzBlYTIzYWM4MWUxIiwiY29tcF9pZCI6MCwibGluZV9pdGVtX2lkIjowLCJjcmVhdGl2ZV9pZCI6MCwiZGF0YSI6W3sibmFtZSI6InBvc194IiwidmFsIjoiMCJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiOTM0In0seyJuYW1lIjoiaXNfZmxvYXRpbmciLCJ2YWwiOiJ0cnVlIn1dLCJpc19vcmlnIjpmYWxzZX0seyJ0eXBlIjoiaW1wcmVzc2lvbiIsImltcHJlc3Npb25faWQiOiI4ODYwMTcwMDI2MzAyMTM5IiwiZG9tYWluX2lkIjoiMzYyMDIiLCJ1bml0IjoiZGl2LWdwdC1hZC1zY2FtYWR2aXNlcl9jb20tZWRnZS0yLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6Ii0xIn0seyJuYW1lIjoicG9zX3kiLCJ2YWwiOiItMSJ9LHsibmFtZSI6ImlzX2Zsb2F0aW5nIiwidmFsIjoiZmFsc2UifV0sImlzX29yaWciOmZhbHNlfSx7InR5cGUiOiJpbXByZXNzaW9uIiwiaW1wcmVzc2lvbl9pZCI6IjY1ODE1MTIzOTgzMjk5NzEiLCJkb21haW5faWQiOiIzNjIwMiIsInVuaXQiOiJkaXYtZ3B0LWFkLXNjYW1hZHZpc2VyX2NvbS1tZWRyZWN0YW5nbGUtMy0wIiwidF9lcG9jaCI6MTcxNDEyMTMyOCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoicG9zX3giLCJ2YWwiOiI0OTAifSx7Im5hbWUiOiJwb3NfeSIsInZhbCI6IjE5MzAifSx7Im5hbWUiOiJpc19mbG9hdGluZyIsInZhbCI6ImZhbHNlIn1dLCJpc19vcmlnIjpmYWxzZX1d HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:06 GMT expires: Thu, 25 Apr 2024 08:49:06 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6IjI2MiJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiNDUyNiJ9LHsibmFtZSI6ImlzX2Zsb2F0aW5nIiwidmFsIjoiZmFsc2UifV0sImlzX29yaWciOmZhbHNlfV0=	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6IjI2MiJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiNDUyNiJ9LHsibmFtZSI6ImlzX2Zsb2F0aW5nIiwidmFsIjoiZmFsc2UifV0sImlzX29yaWciOmZhbHNlfV0= IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJwYWdldmlld19pZCI6IjRhNzljYTgwLWE1NGEtNDg1Ni02MTEzLWMwZWEyM2FjODFlMSIsImNvbXBfaWQiOjAsImxpbmVfaXRlbV9pZCI6MCwiY3JlYXRpdmVfaWQiOjAsImRhdGEiOlt7Im5hbWUiOiJwb3NfeCIsInZhbCI6IjI2MiJ9LHsibmFtZSI6InBvc195IiwidmFsIjoiNDUyNiJ9LHsibmFtZSI6ImlzX2Zsb2F0aW5nIiwidmFsIjoiZmFsc2UifV0sImlzX29yaWciOmZhbHNlfV0= HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:06 GMT expires: Thu, 25 Apr 2024 08:49:06 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=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	3.69.213.60	0 B
URL g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=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 IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJkaXNwbGF5X2FkX3ZpZXdwb3J0X3B4IiwidmFsIjoiMCJ9LHsibmFtZSI6ImRpc3BsYXlfYWRfdmlld3BvcnRfY291bnQiLCJ2YWwiOiIwIn0seyJuYW1lIjoibmF0aXZlX2FkX3ZpZXdwb3J0X3B4IiwidmFsIjoiMCJ9LHsibmFtZSI6Im5hdGl2ZV9hZF92aWV3cG9ydF9jb3VudCIsInZhbCI6IjAifSx7Im5hbWUiOiJkaXNwbGF5X2FkX2RvY19weCIsInZhbCI6IjAifSx7Im5hbWUiOiJkaXNwbGF5X2FkX2RvY19jb3VudCIsInZhbCI6IjQifSx7Im5hbWUiOiJuYXRpdmVfYWRfZG9jX3B4IiwidmFsIjoiMCJ9LHsibmFtZSI6Im5hdGl2ZV9hZF9kb2NfY291bnQiLCJ2YWwiOiIwIn0seyJuYW1lIjoidmlld3BvcnRfc2l6ZSIsInZhbCI6IjEyODB4MTAyNCJ9LHsibmFtZSI6InZpZXdwb3J0X3B4IiwidmFsIjoiMTMxMDcyMCJ9LHsibmFtZSI6ImRvY19weCIsInZhbCI6IjEwMDA0NDgwIn0seyJuYW1lIjoiZG9jX2hlaWdodCIsInZhbCI6Ijc4MTYifV19XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:08 GMT expires: Thu, 25 Apr 2024 08:49:08 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNjU4MTUxMjM5ODMyOTk3MSIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0zLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNjU4MTUxMjM5ODMyOTk3MSIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0zLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNjU4MTUxMjM5ODMyOTk3MSIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0zLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:07 GMT expires: Thu, 25 Apr 2024 08:49:07 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNjU4MTUxMjM5ODMyOTk3MSIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0zLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNjU4MTUxMjM5ODMyOTk3MSIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0zLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiNjU4MTUxMjM5ODMyOTk3MSIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS0zLTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:09 GMT expires: Thu, 25 Apr 2024 08:49:09 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJmaWRfdmFsdWUiLCJ2YWwiOiIxMzcxIn1dfV0=	3.69.213.60	0 B
URL g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJmaWRfdmFsdWUiLCJ2YWwiOiIxMzcxIn1dfV0= IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJmaWRfdmFsdWUiLCJ2YWwiOiIxMzcxIn1dfV0= HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:09 GMT expires: Thu, 25 Apr 2024 08:49:09 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:09 GMT expires: Thu, 25 Apr 2024 08:49:09 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJzY3JvbGxfcGVyY2VudF92ZXJ0aWNhbCIsInZhbCI6IjEzIn1dfV0=	3.69.213.60	0 B
URL g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJzY3JvbGxfcGVyY2VudF92ZXJ0aWNhbCIsInZhbCI6IjEzIn1dfV0= IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJzY3JvbGxfcGVyY2VudF92ZXJ0aWNhbCIsInZhbCI6IjEzIn1dfV0= HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:09 GMT expires: Thu, 25 Apr 2024 08:49:09 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJ0X3VubG9hZCIsInZhbCI6IjE3MTQxMjEzNDk1NzMifV19XQ==	3.69.213.60	0 B
URL g.ezoic.net/detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJ0X3VubG9hZCIsInZhbCI6IjE3MTQxMjEzNDk1NzMifV19XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /detroitchicago/greenoaks.gif?orig=0&ds=W3sidHlwZSI6InBhZ2V2aWV3IiwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJkb21haW5faWQiOiIzNjIwMiIsInRfZXBvY2giOjE3MTQxMjEzMjgsImRhdGEiOlt7Im5hbWUiOiJ0X3VubG9hZCIsInZhbCI6IjE3MTQxMjEzNDk1NzMifV19XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:09 GMT expires: Thu, 25 Apr 2024 08:49:09 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ==	3.69.213.60	0 B
URL g.ezoic.net/porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /porpoiseant/army.gif?orig=0&sts=W3sidHlwZSI6ImltcHJlc3Npb24iLCJpbXByZXNzaW9uX2lkIjoiMjE4NjE0MDM0ODI2Mzc2MyIsImRvbWFpbl9pZCI6IjM2MjAyIiwidW5pdCI6ImRpdi1ncHQtYWQtc2NhbWFkdmlzZXJfY29tLW1lZHJlY3RhbmdsZS00LTAiLCJ0X2Vwb2NoIjoxNzE0MTIxMzI4LCJyZXZlbnVlIjowLCJiaWRfZmxvb3JfZmlsbGVkIjowLCJzdGF0X3NvdXJjZV9pZCI6MCwicGFnZXZpZXdfaWQiOiI0YTc5Y2E4MC1hNTRhLTQ4NTYtNjExMy1jMGVhMjNhYzgxZTEiLCJjb21wX2lkIjowLCJsaW5lX2l0ZW1faWQiOjAsImNyZWF0aXZlX2lkIjowLCJkYXRhIjpbeyJuYW1lIjoidmlld2VkIiwidmFsIjoiMSJ9XSwiaXNfb3JpZyI6ZmFsc2V9XQ== HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Content-Length: 0 TE: trailers `HTTP/2 204 No Content access-control-allow-origin: https://www.scamadviser.com cache-control: private, max-age=0, must-revalidate, no-cache, no-store date: Fri, 26 Apr 2024 08:49:10 GMT expires: Thu, 25 Apr 2024 08:49:10 GMT vary: Accept-Encoding x-middleton-display: ezp_sol X-Firefox-Spdy: h2`

	www.scamadviser.com/cdn-cgi/rum?	104.22.39.245	0 B
URL www.scamadviser.com/cdn-cgi/rum? IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers POST /cdn-cgi/rum? HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Content-Length: 727 Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin TE: trailers `HTTP/3 204 No Content date: Fri, 26 Apr 2024 08:49:10 GMT access-control-allow-origin: https://www.scamadviser.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true server: cloudflare cf-ray: 87a5516a482c929e-CPH x-frame-options: DENY x-content-type-options: nosniff`

	consent.cookiebot.com/uc.js	104.84.152.234	34 kB
URL consent.cookiebot.com/uc.js IP 104.84.152.234:0 ASN #20940 Akamai International B.V. File type JavaScript source, ASCII text, with very long lines (65499) Size 34 kB (34251 bytes) Hash efa7232b42c346b1a41e9f1489c6602a 6808e3efcc30292b6708208c9a05550c34adbd0c 6dec01698bd7318ccee3dae6e824f02ff358d309dbe5a97f21b70a726c903421 HTTP Headers `GET /uc.js HTTP/1.1 Host: consent.cookiebot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK content-type: application/javascript content-encoding: gzip last-modified: Mon, 15 Apr 2024 08:18:48 GMT accept-ranges: bytes etag: "9a398f8ad8fda1:0" vary: Accept-Encoding request-context: appId=cid-v1:89f47f4b-bed0-4db8-956b-d6e6dfac3fef access-control-expose-headers: Request-Context content-length: 34251 cache-control: public, max-age=325 expires: Fri, 26 Apr 2024 08:54:35 GMT date: Fri, 26 Apr 2024 08:49:10 GMT cross-origin-resource-policy: cross-origin X-Firefox-Spdy: h2`

	www.scamadviser.com/fonts/fontawesome-webfont.woff2?20fd1704ea223900efa9fd4e869efb08	104.22.39.245	78 kB
URL www.scamadviser.com/fonts/fontawesome-webfont.woff2?20fd1704ea223900efa9fd4e869efb08 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459 Size 78 kB (77826 bytes) Hash d16838b07b82c149f3cb405252aab361 57f0869a1ceda1c6d7dab2f5ba81987ce4bab206 41f9a796cc51391c8d4ab41d7d88d8f4d45d8296215c0d8cdf7fde88c481da4f HTTP Headers GET /fonts/fontawesome-webfont.woff2?20fd1704ea223900efa9fd4e869efb08 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. DNT: 1 Connection: keep-alive Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:10 GMT content-type: font/woff2 cache-control: public, max-age=31536000 display: staticcontent_sol etag: "661d3887-12d68-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;6792142faffddd7d62e9794e1724e1e2;2-36202-99;94b11f85-3ef5-4b43-7cc5-7a9173ccfab8 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: cf-cache-status: HIT age: 929483 x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516ab906929e-CPH alt-svc: h3=":443"; ma=86400

	vjs.zencdn.net/vttjs/0.14.1/vtt.min.js	151.101.2.217	7.1 kB
URL vjs.zencdn.net/vttjs/0.14.1/vtt.min.js IP 151.101.2.217:0 ASN #54113 FASTLY File type JavaScript source, Unicode text, UTF-8 text, with very long lines (20133) Size 7.1 kB (7089 bytes) Hash 52c6ba3260a51c570977f84d2bd7bf55 b368af66a643c948398083499d518165d9688fda 5a36011812516a45305217c2fc2d0a0b2fcf9e66e4c84708cc1b6818066024fc HTTP Headers `GET /vttjs/0.14.1/vtt.min.js HTTP/1.1 Host: vjs.zencdn.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK last-modified: Tue, 10 Apr 2018 19:42:19 GMT etag: "52c6ba3260a51c570977f84d2bd7bf55" cache-control: public, max-age=31536000 content-type: application/javascript; charset=utf-8 content-encoding: gzip date: Fri, 26 Apr 2024 08:49:10 GMT x-served-by: cache-hel1410033-HEL x-cache: HIT x-cache-hits: 130099 vary: Accept-Encoding access-control-allow-origin: * timing-allow-origin: * content-length: 7089 X-Firefox-Spdy: h2`

	g.ezodn.com/cmp/v2/v.js?v=4	188.114.97.1	93 kB
URL g.ezodn.com/cmp/v2/v.js?v=4 IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (4651), with no line terminators Size 93 kB (93234 bytes) Hash 77304d2e4bf5f93eea562bc8d89abdeb 1edaa0e5232da58ba84f56c81d91518b9d16f71e dce8ae752b8ed25d878707381a347b8889bfde191cd468eac141c5526a1f13dc HTTP Headers `GET /cmp/v2/v.js?v=4 HTTP/1.1 Host: g.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: text/javascript; charset=utf-8 cache-control: public, max-age=15780000 last-modified: Wed, 20 Sep 2023 17:04:30 GMT vary: Accept-Encoding cf-cache-status: HIT age: 13228705 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WXySu4mxZ8zUghSof%2FNk8veQcINnt3ry7QHyPZS94R4li69U3SVvhriJOS7Q1DgSH81%2FKVsNEC66BTolehWicDxEfdeDbb15lsXJ5RTVV2vg5M4qxsUmDY%2B0cGMKuw%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a5510caba256b4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	use.typekit.net/qrx0mnk.css	23.36.76.186	1.2 kB
URL use.typekit.net/qrx0mnk.css IP 23.36.76.186:0 ASN #20940 Akamai International B.V. File type Unicode text, UTF-8 text, with very long lines (516) Size 1.2 kB (1197 bytes) Hash 712e2b327d12816951f96c55d00291b0 e5b157240127f149afcb76488d7d5757efb77325 76231fbacb79d8eb1c7a7f0e84161acb4cc4402e40b697bcbb1ae3197bd52bbe HTTP Headers `GET /qrx0mnk.css HTTP/1.1 Host: use.typekit.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` `HTTP/2 200 OK server: nginx content-type: text/css;charset=utf-8 vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; cache-control: private, max-age=600, stale-while-revalidate=604800 timing-allow-origin: * access-control-allow-origin: * cross-origin-resource-policy: cross-origin content-encoding: gzip content-length: 1197 date: Fri, 26 Apr 2024 08:49:11 GMT X-Firefox-Spdy: h2`

	www.scamadviser.com/images/static/logo/logo.svg	104.22.39.245	1.6 kB
URL www.scamadviser.com/images/static/logo/logo.svg IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type SVG Scalable Vector Graphics image Size 1.6 kB (1597 bytes) Hash 402331ee4fb929d19634ab354e653acf c15d71a5055a78e6196637be68fcd4ee604c5eaa 5f82d8b7789eed05d89770e082899d2b2d29f07ba36042a3f248220942a52fef HTTP Headers GET /images/static/logo/logo.svg HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:11 GMT content-type: image/svg+xml cache-control: public, max-age=31536000 display: staticcontent_sol etag: W/"661d3887-b53-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Ezoic-Excludewebp,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;d10f56647a0e2fba6bd3ab58dfddb71a;2-36202-99;a19a8d47-0604-4a7f-4661-b43d493d0e4c x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: cf-cache-status: HIT age: 929536 x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516bebeb929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/images/troupe-jaded.gif	104.22.39.245	43 B
URL www.scamadviser.com/images/troupe-jaded.gif IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type GIF image data, version 89a, 1 x 1 Size 43 B (43 bytes) Hash 325472601571f31e1bf00674c368d335 2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b HTTP Headers GET /images/troupe-jaded.gif HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:11 GMT content-type: image/gif content-length: 43 cache-control: public, max-age=31536000 cf-bgj: imgq:85,h2pri cf-polished: status=not_needed display: staticcontent_sol etag: "661d3887-2b-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Ezoic-Excludewebp,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;4a6136e0ad9a54fe88d67713f0b36422;2-36202-99;d6630d50-1ae3-41c6-5ccf-2fab36fc1da6 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 cf-cache-status: HIT age: 929534 accept-ranges: bytes x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516c3c81929e-CPH alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/dist/app.js?id=aaaf3e856ebde691ec5f13166a955151	104.22.39.245	201 kB
URL www.scamadviser.com/dist/app.js?id=aaaf3e856ebde691ec5f13166a955151 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 201 kB (201038 bytes) Hash 6fa49de9e28309a505aa7c91127b26bc 2681e7496b486051795ac9fc07cb6fc340494147 80c1e3d8c5f4dfdde77bd16341245febf18988d797ee4e6d936501ac07a40ad1 HTTP Headers GET /dist/app.js?id=aaaf3e856ebde691ec5f13166a955151 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:10 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=589458 display: staticcontent_sol etag: W/"6628aaf0-8fe92-gzip" last-modified: Wed, 24 Apr 2024 06:47:12 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;74bc2ada9a386d82e72888ce9fb2efb0;2-36202-102;52223d52-c660-4140-413c-b35dc0e9482c x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 x-sol: pub_site cf-cache-status: HIT age: 179867 x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516ab914929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/tardisrocinante/vitals.js?gcb=5&cb=4	104.22.39.245	66 kB
URL www.scamadviser.com/tardisrocinante/vitals.js?gcb=5&cb=4 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (10662) Size 66 kB (65868 bytes) Hash 2ae1c0300ec064cd7fdad1a3670fc1f6 f6a49c128f58666eacbfad69229cdda3053be197 4c2df0892b2e68fb2a1baee0cbf0ad2aac11419d49c9b97f10a81455b03e6a93 HTTP Headers `GET /tardisrocinante/vitals.js?gcb=5&cb=4 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=11417 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929332 last-modified: Mon, 15 Apr 2024 14:40:03 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5510cf94f929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/dist/leave_review.js?id=32b0709a4407981cf5ed957ac4fcd3c8	104.22.39.245	146 kB
URL www.scamadviser.com/dist/leave_review.js?id=32b0709a4407981cf5ed957ac4fcd3c8 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 146 kB (146191 bytes) Hash 5059e2b4b54a6beafad47391b3515392 0c2f73eee5fed858da781d7fd94544b4463edb11 1e36bc2a2b945d46ea81004be178e571cabb899ceff69c3f75398374e2b3e5cb HTTP Headers GET /dist/leave_review.js?id=32b0709a4407981cf5ed957ac4fcd3c8 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:10 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=402208 display: staticcontent_sol etag: W/"6628aaf0-62320-gzip" last-modified: Wed, 24 Apr 2024 06:47:12 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;c420ab04d6b211a52bc88e02b335e513;2-36202-102;29490ecd-8b8e-459b-5dca-9d4bee46c227 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: max-age=432000 x-sol: pub_site cf-cache-status: HIT age: 179636 x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516ab91b929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/parsonsmaize/mulvane.js?gcb=195-5&cb=6	104.22.39.245	22 kB
URL www.scamadviser.com/parsonsmaize/mulvane.js?gcb=195-5&cb=6 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (1119), with no line terminators Size 22 kB (21908 bytes) Hash 394c510a598279890765749c9cee3930 9df117dd5d2b4b0ac64a3f1e562c847ab3f68e7f d9af49c10c5a8062e5fde477550c3669bdbd09fc5b9d6eee319e808740744e7d HTTP Headers GET /parsonsmaize/mulvane.js?gcb=195-5&cb=6 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:11 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=1132 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929533 last-modified: Mon, 15 Apr 2024 14:36:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516c3c9d929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	g.ezodn.com/cmp/v2/v.js?v=4	188.114.97.1	19 kB
URL g.ezodn.com/cmp/v2/v.js?v=4 IP 188.114.97.1:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (4651), with no line terminators Size 19 kB (19060 bytes) Hash 77304d2e4bf5f93eea562bc8d89abdeb 1edaa0e5232da58ba84f56c81d91518b9d16f71e dce8ae752b8ed25d878707381a347b8889bfde191cd468eac141c5526a1f13dc HTTP Headers `GET /cmp/v2/v.js?v=4 HTTP/1.1 Host: g.ezodn.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:11 GMT content-type: text/javascript; charset=utf-8 cache-control: public, max-age=15780000 last-modified: Wed, 20 Sep 2023 17:04:30 GMT vary: Accept-Encoding cf-cache-status: HIT age: 13228721 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5z9FCtPw5K3KB6%2F2wxlFSwSRDsqSNJZvfN9e8RD58bhMeRt86qvGucfQeb1f%2BMq2zHvCXkkA0HOMIFkjA6zSRQrgvoE56Kb85VqP58LTEM0sq6Xb4Vdeexa71EvE7A%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 87a5516c2aef56b4-OSL content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/images/stars/star-blank.svg	104.22.39.245	20 kB
URL www.scamadviser.com/images/stars/star-blank.svg IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type SVG Scalable Vector Graphics image Size 20 kB (19774 bytes) Hash 6bee7ddeb7ee1b2e9ce08e76c439e187 5ff32fe13623881a3b6d48c445625f15ff9fa330 aeb1b172b2ada6458410f9b7f2510380c51e00db68667cc02e47d66fba52d5eb HTTP Headers `GET /images/stars/star-blank.svg HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:49 GMT content-type: image/svg+xml cache-control: public, max-age=31536000 display: staticcontent_sol etag: W/"661d3887-2ed-gzip" last-modified: Mon, 15 Apr 2024 14:24:07 GMT response: 200 strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Ezoic-Excludewebp,User-Agent,Origin x-ezoic-cdn: Hit ds;mm;761493214e69819d498a404acfa5e2d4;2-36202-99;c54d2558-4b4d-470d-747a-fbfc375b1629 x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: cf-cache-status: HIT age: 929411 x-content-type-options: nosniff server: cloudflare cf-ray: 87a550e6c9fc929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/pageview/dexpredict.com	104.22.39.245	1.4 kB
URL www.scamadviser.com/pageview/dexpredict.com IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type data Size 1.4 kB (1375 bytes) Hash e430c06c9b7d86d3036709b3193a06e4 eccddcc4fe017414f1a8e7a724169f892d918e39 73b390d1fb6d0709f020464f19997c4863bedeb75d1d31509551fd5e38afe509 HTTP Headers POST /pageview/dexpredict.com HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br X-CSRF-TOKEN: L62E0gHSmCLEttJSg0d3ukG1Cazu3eGouXiaKOCZ X-Requested-With: XMLHttpRequest Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6InQrSGQvYWdFREhmUUcxbFVmUGVQa3c9PSIsInZhbHVlIjoiMlM4MDVIUUxDWFlTc1hKRzBYVStIenJ0d3lpS2FXQy83VzBRS3dwZEdLMzM2SzBmTzhKVzczcGxvMVN6MGxSVitRK3B6UzZLNG1qLzR5MzQwOEN2bEJGbldZdkRPemNSSFNVZzh3U25ML25PS3puYnUyQi9UUHBJTDFNRWh4R3IiLCJtYWMiOiI3NDg0Y2QyZGEzY2JhNGU4MTRjNjk2ZjQ5MWEzNWY3MjE1YTdkOGZiMjhkYTRlM2FmYzYxY2NkMmNjN2RlZWI4IiwidGFnIjoiIn0%3D; website_session=eyJpdiI6IldFLzFRR0doYlRkWEZCOU5nelNLZFE9PSIsInZhbHVlIjoiNm1yRUZBM3AvMkNPMXc2Sm5LeWZYSmFKeUJCZVFSeGpjQklaRDZHanNUc1kybTN2WGtQMDgwMVg0ZGpTUUVzbHNxcjFlbmh2WGIramZMMnVWanJaYk5nTEozeVJpVjdDeGVNcURlMFh5RDhMcnhCZkppaXdCUTdDVUxGUmlLWmIiLCJtYWMiOiJkOWM3OGE2OTA2YjgzOTU3NTZhMGFiODQ4MGMzOTk5ZGM0NjFiOGQ4MmU0ZGQxMWUyNWE0MTdiZTc3NTFlMzkzIiwidGFnIjoiIn0%3D Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache Content-Length: 0 TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:57 GMT content-type: text/html; charset=UTF-8 access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 cache-control: no-cache, private display: staticcontent_sol pagespeed: off response: 200 set-cookie: XSRF-TOKEN=eyJpdiI6ImgrNGlONVpveURMQ3p6WG15YnZaNnc9PSIsInZhbHVlIjoieEV4WDQvMGFnOWUrSDlmeGh5UHQxN2NqUWxCcldBMzFZYzdaSXA2YXoyN0NKaExUTGlsWlNxYTVqRk1ldTg3a2s5NkQ1d28xYXdnVHFCbkhCMm9Jd044eFJKUVM4dFAvYVdaZGhFMmN3OE0wRldnMCtlWkZBOTZLalZ3TVlmQkoiLCJtYWMiOiI3MzViMWJlOTg5ZjFlMzVjZjhhMzk1MDY3ZDBiZDBhZjYwOWQ5MDcyMjA3NjNiYzg0MGM3MjE2YTFjMGM4ODBmIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:48:57 GMT; Max-Age=7200; path=/; secure; samesite=lax website_session=eyJpdiI6InRsZGg1bGg2STJuWUdVb3RWVko0SGc9PSIsInZhbHVlIjoiUFpWdFpVT2NRYU80cERGL0NGdVFTNWQ1TS8rSW9LRHN2TldpRCs0MW5sb1hERlF4OVRrVEpub3VZUzI1QmhtSUF1K1JtQUxYTkJIYWVWd0c0aFo4bzZPR1pKWHR2bS9FSmlXS3RnREZIVVhkWVd2Q1Vjd3BsYW1qMEFoVklKR2EiLCJtYWMiOiIyNzc5YTAyMmZmZjk0MzJlYWEwNTEyNDMyZDE3ZDFiMGI4Y2RjMGRlZDUxZmQ3NmZmOTdlYzcyNTM3ZDEwNTcwIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:48:57 GMT; Max-Age=7200; path=/; httponly; samesite=lax strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Inertia,Origin x-ez-minify-html: NaN% 0 / 0 x-ezoic-cdn: Miss x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol x-middleton-response: 200 x-origin-cache-control: no-cache, private cf-cache-status: DYNAMIC x-content-type-options: nosniff server: cloudflare cf-ray: 87a5511649f2929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/detroitchicago/wichita.js?gcb=195-5&cb=12	104.22.39.245	8.2 kB
URL www.scamadviser.com/detroitchicago/wichita.js?gcb=195-5&cb=12 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (2642), with no line terminators Size 8.2 kB (8180 bytes) Hash 5400d57d3c99621a705f935a7f03be29 b1bebf7179d6fbcf789eae5bbe363e0e25245669 1d7a77f24fc31abf310ccb240b2e0a49f2582823f990eef11a3abc37f286ea12 HTTP Headers GET /detroitchicago/wichita.js?gcb=195-5&cb=12 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:11 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929533 last-modified: Mon, 15 Apr 2024 14:36:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5516c3ca1929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400`

	imgsct.cookiebot.com/1.gif?dgi=fd5b0202-1e7b-4c1d-b889-4a0c79321b34	104.110.3.72	35 B
URL imgsct.cookiebot.com/1.gif?dgi=fd5b0202-1e7b-4c1d-b889-4a0c79321b34 IP 104.110.3.72:0 ASN #16625 AKAMAI-AS File type GIF image data, version 89a, 1 x 1 Size 35 B (35 bytes) Hash c2196de8ba412c60c22ab491af7b1409 5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992 HTTP Headers `GET /1.gif?dgi=fd5b0202-1e7b-4c1d-b889-4a0c79321b34 HTTP/1.1 Host: imgsct.cookiebot.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/2 200 OK x-guploader-uploadid: ABPtcPrRBPcDXnAx28OaaVYMzDk2zUUgogx9LWnkCkh3Uq_VfqbwDabaDXxDGSBQVKu1-j65Pu64n0KVGA x-goog-generation: 1698061172769999 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 35 x-goog-hash: crc32c=rX4K2g==, md5=whlt6LpBLGDCKrSRr3sUCQ== x-goog-storage-class: STANDARD accept-ranges: bytes content-length: 35 access-control-allow-origin: * access-control-expose-headers: * server: UploadServer last-modified: Mon, 23 Oct 2023 11:39:32 GMT etag: "c2196de8ba412c60c22ab491af7b1409" content-type: image/gif date: Fri, 26 Apr 2024 08:49:11 GMT cache-control: public,max-age=1800 X-Firefox-Spdy: h2

	www.googletagmanager.com/gtm.js?id=GTM-W9DD2NF	142.250.74.168	83 kB
URL www.googletagmanager.com/gtm.js?id=GTM-W9DD2NF IP 142.250.74.168:0 ASN #15169 GOOGLE File type JavaScript source, ASCII text, with very long lines (5794) Size 83 kB (83136 bytes) Hash 76911cf1192e30ae025741325a7564d5 3d03f217cae03b9970950f97219a94b849afd5f5 48ca57318b306178538b0b7751f097f43d40dd40ea00fe38b564c79f54ec0bdb HTTP Headers `GET /gtm.js?id=GTM-W9DD2NF HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Fri, 26 Apr 2024 08:49:11 GMT expires: Fri, 26 Apr 2024 08:49:11 GMT cache-control: private, max-age=900 last-modified: Fri, 26 Apr 2024 06:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 83136 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

	www.scamadviser.com/beardeddragon/wyvern.js?cb=118	104.22.39.245	191 kB
URL www.scamadviser.com/beardeddragon/wyvern.js?cb=118 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators Size 191 kB (190758 bytes) Hash 399dfc86a4c2c81548b779ef00413e14 b7e3089fb955d128c80d13a922c0233f23025954 9653f918372a5c96e2763a32f1169cbfabf4c8672336c043c415c4a0e75986f5 HTTP Headers GET /beardeddragon/wyvern.js?cb=118 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:15 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=673324 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 49013 last-modified: Thu, 25 Apr 2024 19:12:22 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5518a39a1929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	www.scamadviser.com/account/info	104.22.39.245	1.2 kB
URL www.scamadviser.com/account/info IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JSON text data Size 1.2 kB (1216 bytes) Hash ae6a4c9d5ab0b28966f49d1c02c2e6a4 a8bbc6f01a834399a8a19b81cb7b592e97e78b7f 1fa48d4fb3114b29d5ad31948ea91e23d3adf129734f506a5eaafc488ac55db1 HTTP Headers `GET /account/info HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json, text/plain, / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/check-website/dexpredict.com Cookie: user_country=NO Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK date: Fri, 26 Apr 2024 08:48:55 GMT content-type: application/json cache-control: no-cache, private display: staticcontent_sol, orig_site_sol response: 200 set-cookie: XSRF-TOKEN=eyJpdiI6ImJ1WEpWMThxNEtpUzNEQVNjeHVYelE9PSIsInZhbHVlIjoiTWkwczRlTzVqVVZMV094L2tPVlE4eHRhamR0dmt4ZThZSGJOVlM2Umg1a1VhalFCOFpzMEhhbUViRi9BSXpRVHpxcE9WeThlbEFhY3NoN2lrTlN0NjZQcWRwUThlWjBWbW4xWU9wQTRPZm53WHpWWGlISThvUGFxaTFFUzBsZHMiLCJtYWMiOiI4NGYwY2Y5NjcwYzIwODcyZTlkY2Q0ODIzYjczZTk4MjNkZGFlYmY4MzBmNWM3N2EzMjhhYTE5NDg4MDEzMWNhIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:48:55 GMT; Max-Age=7200; path=/; secure; samesite=lax website_session=eyJpdiI6ImNya2IyTGJhMGlrYllDbzZhSHJ0T0E9PSIsInZhbHVlIjoiNG1xMTZCRCt2S3BVS2d6Z0dIeXl0QTVqOVNuc1J2RkxpdGJaSWQxWndOMTBpSGl5a2ZkYkwwVjRHcDBYbDdacklMcnNSajlISXFNWkd4YVZBcEphQW93dzJWc3hnNDBWOVhLU1B3WUlXUGJDeGQ2bjlaK1RiMW1OUkdxRWxQK1kiLCJtYWMiOiJhNzFlMjgyMGU0YjM0ODhlNjk5NTk5OWJjOTY2YWQ1NzQzNGFiZmM4NmUzZTFmMDFlZWEyZmZjMzhkMzJlMmVjIiwidGFnIjoiIn0%3D; expires=Fri, 26 Apr 2024 10:48:55 GMT; Max-Age=7200; path=/; httponly; samesite=lax strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding,X-Inertia,Origin x-ezoic-cdn: Bypass x-frame-options: SAMEORIGIN x-middleton-display: staticcontent_sol, orig_site_sol x-middleton-response: 200 x-origin-cache-control: no-cache, private x-sol: orig cf-cache-status: DYNAMIC x-content-type-options: nosniff server: cloudflare cf-ray: 87a5510c4828929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	g.ezoic.net/ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fparsonsmaize%2Fchanute.js%22%2C%22path%22%3A%22%2Fparsonsmaize%2Fchanute.js%3Fa%3Da%26cb%3D9%26dcb%3D195-5%26shcb%3D34%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D	3.69.213.60	0 B
URL g.ezoic.net/ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4XMTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fparsonsmaize%2Fchanute.js%22%2C%22path%22%3A%22%2Fparsonsmaize%2Fchanute.js%3Fa%3Da%26cb%3D9%26dcb%3D195-5%26shcb%3D34%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4XMTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fparsonsmaize%2Fchanute.js%22%2C%22path%22%3A%22%2Fparsonsmaize%2Fchanute.js%3Fa%3Da%26cb%3D9%26dcb%3D195-5%26shcb%3D34%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 content-type: text/plain; charset=utf-8 date: Fri, 26 Apr 2024 08:49:16 GMT server: Apache/2.4.39 (Ubuntu) vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers x-robots-tag: noindex content-length: 0 X-Firefox-Spdy: h2`

	www.scamadviser.com/parsonsmaize/chanute.js?a=a&cb=9&dcb=195-5&shcb=34	104.22.39.245	5.9 kB
URL www.scamadviser.com/parsonsmaize/chanute.js?a=a&cb=9&dcb=195-5&shcb=34 IP 104.22.39.245:0 ASN #13335 CLOUDFLARENET File type JavaScript source, ASCII text, with very long lines (2958) Size 5.9 kB (5932 bytes) Hash 84a3496289ece71b339ecd24a76c9a56 0aa9386788c79ca2b40f4e613d578059424f7d47 8cb6666ac5ca730743eb9537dfb26940c88ffcbf6965a5122760a9d1e46a1503 HTTP Headers GET /parsonsmaize/chanute.js?a=a&cb=9&dcb=195-5&shcb=34 HTTP/1.1 Host: www.scamadviser.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/report-a-scam?_gl=1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA.. Cookie: user_country=NO; XSRF-TOKEN=eyJpdiI6ImwvalVCOHpaZGZiNlBEaUdyWE1laVE9PSIsInZhbHVlIjoicHdnR3hsWmtDVFk5dzA5UHRNYVFpbE52U01yTW1jVG1PbzJLeCtXZFUweEM5T2FyblFkSUUyNFBTYlU2NzV2TjZQcEMvbjBVYVBPQldwUTFGWGF6Wi8rSXhjbExHRzBJYnB3djZwaFJpaWpiRkQ4TlJRZFRxRnRRNWExaWpJdFMiLCJtYWMiOiI1YmEzOWRhNTNlMjAyY2FkMzY1ZTVjNGVlZGMyZTgwMDUxOGNkOTFlY2QwODMyNjg0MzczNWY4YzBhZjkzMDYwIiwidGFnIjoiIn0%3D; website_session=eyJpdiI6ImpyalZPMmFtTkJtSi81aG1DWmx5M1E9PSIsInZhbHVlIjoiWThsL3ZwSWRpTnYvR3prRnpKUnFaTFZ4Ri9ZLzZvWXlaOG0vVFdRcDJLN3EwaU9lTmIwTGVjMEp0MUdWOW9uZS9EMkxkcVI1eERuRTBLYUdMSm9VMlFpUUhKMHV1Rk96U0RBWWplZG5XWkZqWmZvclh1QjJZMlplSUFQbWFZbksiLCJtYWMiOiJkMWZjZmMzNTViYWVjMDI2MTQ0M2JjYWVkY2UzZjcwNzNmNGI1ZGFjY2U5MTAwMDU1ZDM1MDRkMTRhM2M2YjNhIiwidGFnIjoiIn0%3D; cookieconsent_status=true Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/3 200 OK date: Fri, 26 Apr 2024 08:49:15 GMT content-type: application/javascript cache-control: public, max-age=31536000 cf-bgj: minify cf-polished: origSize=21786 vary: Accept-Encoding x-middleton-display: sol-js x-robots-tag: noindex cf-cache-status: HIT age: 929352 last-modified: Mon, 15 Apr 2024 14:40:03 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 87a5518a7a0f929e-CPH content-encoding: br alt-svc: h3=":443"; ma=86400

	g.ezoic.net/ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fbeardeddragon%2Fgilamonster.js%22%2C%22path%22%3A%22%2Fbeardeddragon%2Fgilamonster.js%3Fcb%3D300%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D	3.69.213.60	0 B
URL g.ezoic.net/ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4XMTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fbeardeddragon%2Fgilamonster.js%22%2C%22path%22%3A%22%2Fbeardeddragon%2Fgilamonster.js%3Fcb%3D300%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4XMTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fbeardeddragon%2Fgilamonster.js%22%2C%22path%22%3A%22%2Fbeardeddragon%2Fgilamonster.js%3Fcb%3D300%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 content-type: text/plain; charset=utf-8 date: Fri, 26 Apr 2024 08:49:16 GMT server: Apache/2.4.39 (Ubuntu) vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers x-robots-tag: noindex content-length: 0 X-Firefox-Spdy: h2`

	g.ezoic.net/ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4X*MTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fbeardeddragon%2Figuana.js%22%2C%22path%22%3A%22%2Fbeardeddragon%2Figuana.js%3Fcb%3D354%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D	3.69.213.60	0 B
URL g.ezoic.net/ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4XMTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fbeardeddragon%2Figuana.js%22%2C%22path%22%3A%22%2Fbeardeddragon%2Figuana.js%3Fcb%3D354%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D IP 3.69.213.60:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /ezqlog?d=%7B%22url%22%3A%22https%3A%2F%2Fwww.scamadviser.com%2Freport-a-scam%3F_gl%3D1yy2tfp_upMQ.._gaMTk4MDgyNjA5Ny4xNzE0MTIxMzM2_ga_PDETX06K4XMTcxNDEyMTMzNi4xLjAuMTcxNDEyMTMzNi4wLjAuMA..%22%2C%22name%22%3A%22%2Fbeardeddragon%2Figuana.js%22%2C%22path%22%3A%22%2Fbeardeddragon%2Figuana.js%3Fcb%3D354%22%2C%22user_agent%22%3A%22Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0%22%2C%22pageview_id%22%3A%2287c90ed3-bbf5-459a-790e-cb1f685461a9%22%7D HTTP/1.1 Host: g.ezoic.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.scamadviser.com DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers `HTTP/2 200 OK access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-allow-origin: https://www.scamadviser.com access-control-max-age: 1728000 content-type: text/plain; charset=utf-8 date: Fri, 26 Apr 2024 08:49:16 GMT server: Apache/2.4.39 (Ubuntu) vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers x-robots-tag: noindex content-length: 0 X-Firefox-Spdy: h2`

	www.googletagmanager.com/gtag/js?id=G-PDETX06K4X&l=dataLayer&cx=c	142.250.74.168	98 kB
URL www.googletagmanager.com/gtag/js?id=G-PDETX06K4X&l=dataLayer&cx=c IP 142.250.74.168:0 ASN #15169 GOOGLE File type JavaScript source, ASCII text, with very long lines (5945) Size 98 kB (97674 bytes) Hash 0574082600cb59379b84cb6fb8de26bc b80fce8446a8c725d1c4c429734587f3392ded7c c04f2e0373928f4e16e47646541e9cd6eb2590d5f5aea8bb65e0d74ca1b0edfa HTTP Headers `GET /gtag/js?id=G-PDETX06K4X&l=dataLayer&cx=c HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.scamadviser.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers` HTTP/3 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Fri, 26 Apr 2024 08:49:16 GMT expires: Fri, 26 Apr 2024 08:49:16 GMT cache-control: private, max-age=900 strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 97674 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (69)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP