r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12547
Expires: Sun, 15 Jan 2023 09:38:46 GMT
Date: Sun, 15 Jan 2023 06:09:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3063227f59d1935298b0620fa7919145
478e1d8bef04b1f95381cac01829c03b6779d420
619281d3b9753bc6d2845786da75e8566687362769517aacf90f953ffbb8407c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3478
Expires: Sun, 15 Jan 2023 07:07:37 GMT
Date: Sun, 15 Jan 2023 06:09:39 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 15 Jan 2023 05:42:05 GMT
content-type: application/json
age: 1654
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f7bd85a261739c122eefb74ffddaec99
e2e059b0740592e8591d432249aafe5fcb8af23c
71bdd130b8d143f228542f678e91c98ab4e5844fb9f47b036e15372660be25fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71BDD130B8D143F228542F678E91C98AB4E5844FB9F47B036E15372660BE25FD"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8637
Expires: Sun, 15 Jan 2023 08:33:36 GMT
Date: Sun, 15 Jan 2023 06:09:39 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VRMjYDXk6kKhiNrEdjPYKhTJjXQ3kyYLYZeVSoEIkYMRpGOXXd3xsWQX5Ud2kqgAv4GLNv8UO4Z1v3UILJQhsg==
x-amz-request-id: WNVR62VBGDXFQ31Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 15 Jan 2023 05:55:15 GMT
age: 864
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
learningsmag.site/watch-viriako-
301 Moved Permanently 707 B URL HTTP/1.1 learningsmag.site/watch-viriako-
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /watch-viriako- HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
keep-alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Sun, 15 Jan 2023 06:09:39 GMT
server: LiteSpeed
location: https://learningsmag.site/watch-viriako-
x-turbo-charged-by: LiteSpeed
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 15 Jan 2023 06:09:39 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 15 Jan 2023 05:17:25 GMT
age: 3134
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 1d8cd73ad70d987351a4e1e6f9df7a8a
2ff619d900fdfeae669081b61e336d1c1720eaa8
9dcd8be24dae675f15873651e4f842220a600b7d158b9f2aa0b1cbd08ced384f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 15 Jan 2023 06:09:39 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 12 Jan 2023 07:46:22 GMT
Expires: Thu, 19 Jan 2023 07:46:21 GMT
Etag: "2ff619d900fdfeae669081b61e336d1c1720eaa8"
Cache-Control: max-age=350801,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 789c719ebbc51c0a-OSL
ocsp.digicert.com/
200 OK 471 B IP
Hash c01ec61f7ca77158f474b3ab519c12fa
fc82ae0fcd73a83a980b75709a08e65239894e4a
f533e0fac9b92e79d4fbd6e70b42a83067de95f0a13cc737d7e5fa459baa4c54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 915
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:39 GMT
Last-Modified: Sun, 15 Jan 2023 05:54:24 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ha4YRJPmBnFNSkjzfrFuTQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EV4VkP2LWiv9IFXXTsKApeCvAbg=
learningsmag.site/watch-viriako-
301 Moved Permanently 0 B URL HTTP/2 learningsmag.site/watch-viriako-
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch-viriako- HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
vary: Accept-Encoding, Cookie
content-type: text/html; charset=UTF-8
expires: Sun, 15 Jan 2023 07:09:40 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
location: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
content-length: 0
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-215755349-1
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-215755349-1
IP
File type ASCII text, with very long lines (1921)
Hash 7a71892a090daaa10b3c5958b28f4d86
a839fce1bf86ffd4cdf5f59da017ad868a6e6405
98b11e3ca1a260dfb776483f01e5173ddb1d41d5739294fa74dfb3f0d77925ef
GET /gtag/js?id=UA-215755349-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 15 Jan 2023 06:09:40 GMT
expires: Sun, 15 Jan 2023 06:09:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44172
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e804586be26c88b95d554afe0ef24d5c
6f99b1fe2330c4661608f17819a4490a92ca296c
38894b7977e8f8e790a71eedf8144799a77ccceb49771e7458392ad7916293db
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 83579ff88cab4d4d05d4741599104d9c
fe74c219f8655a4ca36fe397884e55ab63d1288a
a492a770e88739fac8094f7b73f87474cee4ad2ccbf9f1963b935474544ef3f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
learningsmag.site/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 learningsmag.site/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (47826)
Hash c4d7cc056b49b00e05cc29cc59aa3d5a
48c426bec60099d2a8628df430ed682c72aab42a
8009c12f2674a8d38401f4b5faad1fef2cfcd18a8c927ed2561ae9d7de9b57b5
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Tue, 13 Dec 2022 17:48:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11616
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/css/classic-themes.min.css?ver=1
200 OK 217 B URL HTTP/2 learningsmag.site/wp-includes/css/classic-themes.min.css?ver=1
IP
Hash 95e891f28e44a9b314c09545d86be2b7
f9b13a8bd47273b086a0a07df15f314e0af0bc3e
5a5f39391fbf5b06db84b8f9716d53de575ee97a627d2c5f12f79a991a671eb5
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Tue, 13 Dec 2022 17:48:17 GMT
accept-ranges: bytes
content-length: 217
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=5496ac087ca179a9788dadb779dbc160
200 OK 4.4 kB URL HTTP/2 learningsmag.site/wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=5496ac087ca179a9788dadb779dbc160
IP
File type ASCII text, with very long lines (37284), with no line terminators
Hash 27030956e852bed965032a2925410e49
288971394afd12014c25e35b77f38e64e29013ca
7551e5be1a112fc449633dfdf0fd54d6280e0c66f823c0d532dc3be8ad6c7b63
GET /wp-content/plugins/td-composer/td-multi-purpose/style.css?ver=5496ac087ca179a9788dadb779dbc160 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 17:28:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4392
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/themes/Newspaper/style.css?ver=11.2
200 OK 24 kB URL HTTP/2 learningsmag.site/wp-content/themes/Newspaper/style.css?ver=11.2
IP
File type ASCII text, with very long lines (378)
Hash c9d4bfdb2609ba45c9143961e8e27b2a
405ae8d7a00bbf27621940515ac0f7b4cc9d4317
b7fa940fd5d895f6331fd9abfa5cb920d9469d0dc1bddc25aa8ec6fb317256ab
GET /wp-content/themes/Newspaper/style.css?ver=11.2 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 17:22:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 23858
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19669
Expires: Sun, 15 Jan 2023 11:37:30 GMT
Date: Sun, 15 Jan 2023 06:09:41 GMT
Connection: keep-alive
learningsmag.site/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=5496ac087ca179a9788dadb779dbc160
200 OK 22 kB URL HTTP/2 learningsmag.site/wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=5496ac087ca179a9788dadb779dbc160
IP
Hash 14981eb2edff5635ea0d1356379bf21c
07f7baef3e89e7eebc7b8d1d5c98be2611487eee
5baa98c303530745ceaa808585611ec0888e0baed4668173b4741b3aa8f76f7b
GET /wp-content/plugins/td-composer/legacy/Newspaper/assets/css/td_legacy_main.css?ver=5496ac087ca179a9788dadb779dbc160 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 17:28:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 22313
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19669
Expires: Sun, 15 Jan 2023 11:37:30 GMT
Date: Sun, 15 Jan 2023 06:09:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19669
Expires: Sun, 15 Jan 2023 11:37:30 GMT
Date: Sun, 15 Jan 2023 06:09:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f82c507da28e1b4557ea7f2bdf0f7fc
4be269ad35497a42bf7fce03d711ddf9496abbb4
f51879b87cb99b4883f320fe4abe44032968c42e32b88dc5f788b40ddc6494db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd45fb-ae78-4593-88df-aa9d625197e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10558
x-amzn-requestid: 46ac11b3-d99b-4dbf-bc92-8ad5d6664669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enjB8Hb1oAMF3xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bfb20c-2e6a19716318b0650102ba96;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 07:09:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: h3fHTYrXaZWIrm-iiwfejtgOg-rVCgqF7brXVmVbwLY9t1KgPHXwCg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 07:17:31 GMT
age: 82330
etag: "4be269ad35497a42bf7fce03d711ddf9496abbb4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 15d27349999654cef859ce88c7667481
9fff393bf1bfa3b7343f38377e8c8ba62f1c0330
86cb634ee11bcffc4f3ee27a2296391ef30db42fad0ff4175e972f326874f0a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22bc3d9c-c641-44bc-8984-14b267d61d21.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10853
x-amzn-requestid: 4c222ab3-cccb-47d4-807f-414e2260915d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: enKKoGmNoAMF6QQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63bf8a43-3b8bfa6343396d0e72695658;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 04:19:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Sa7Ga2ul0S-_xwpeI_7RmvQKmNxwiwBRi7FFDwsIE2vYlogEe75zJA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 07:57:22 GMT
age: 79939
etag: "9fff393bf1bfa3b7343f38377e8c8ba62f1c0330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91a664271b9042ab5a34c1259df6ab93
7ce177939ceed31dbe137996cace3f71eaab3cf4
08b872b4c8dc8d4b5e26d7c5e7985c144dcf45623737e6daf7813b2add8ab013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d821e79-af3a-4b67-a79e-90cdf9701001.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11285
x-amzn-requestid: 46c0b124-5916-4067-99af-2fa9812dfb2d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ev-1zHc4oAMFV6Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c311be-3ffbee9348f4351459ed0099;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 20:34:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8FcfGYx-mcEZzF4IoADT5iGnf0vTk2cACE4nseVdonXHBXOSno9vQw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 15 Jan 2023 04:27:28 GMT
age: 6133
etag: "7ce177939ceed31dbe137996cace3f71eaab3cf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a23d61d610c7b55d943fcb2636a01b65
82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065
28bf3039cc8c1213e64893c71bc150eda573223feb2cc15ad0814a44960d434a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33bbc100-e509-4a4f-8b98-1d44a52a7a3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9539
x-amzn-requestid: eb427fd6-c342-4a22-af45-ecc528cf4a8a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: epfDqEAZIAMFudQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c0787d-4f61ecd2422081224869da76;Sampled=0
x-amzn-remapped-date: Thu, 12 Jan 2023 21:15:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RRMRT2BC5p1x0Vh20ut0Kjbz2mnaNToUIbzIg9oczduvzYCckvFORA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 12:46:14 GMT
age: 62607
etag: "82c4c5170c7b586c2a7a1f2d2d5c9ff0219af065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato%3A400%2C700%7CPlayfair+Display%3A400%2C700%7COpen+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700&display=swap&ver=11.2
200 OK 7.5 kB URL HTTP/2 fonts.googleapis.com/css?family=Lato%3A400%2C700%7CPlayfair+Display%3A400%2C700%7COpen+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700&display=swap&ver=11.2
IP
Hash dad98d1f71daceddb2835fd4de4628d7
9b4fac5ba3c42db1f0d459f9734e4c8c5992e143
4b113d378bb4480337746fd0b360ae5e7ec3691dea88578d48db4f8f2f5060fc
GET /css?family=Lato%3A400%2C700%7CPlayfair+Display%3A400%2C700%7COpen+Sans%3A400%2C600%2C700%7CRoboto%3A400%2C500%2C700&display=swap&ver=11.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 15 Jan 2023 06:09:40 GMT
date: Sun, 15 Jan 2023 06:09:40 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcab30cec-aee2-45fb-abc6-f5fa756655b4.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcab30cec-aee2-45fb-abc6-f5fa756655b4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f0683862b6f86f1dbf71a69968174df
76d87452f0944626196eb7fa54492e5a3eaaa3b0
d2ae2476f0b8b00c7ce4c11c24c3d558ac76fec3ea430d510ca024dd8f1b037a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcab30cec-aee2-45fb-abc6-f5fa756655b4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9382
x-amzn-requestid: 6bae45b6-032c-497b-a7a3-0743c3eb3a14
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: euKqYGTvIAMF84Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c257db-57ece8ea4d49061f66ec695c;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 07:20:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: C7I0evRddZnsbwSpYsBF1jWyES_DWsUayIv2qYpX6ZY2PBtbl0tt1g==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 14 Jan 2023 12:05:46 GMT
age: 65035
etag: "76d87452f0944626196eb7fa54492e5a3eaaa3b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6aeed28818fc69d25e4e3f7c06b54d13
4970471fb02c861c2d71c158cfb26fe4b001e903
a347e0dc95057bc920e2cfab05e6ed8c2d7274794383c5bd65c1e40ec88521c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A347E0DC95057BC920E2CFAB05E6ED8C2D7274794383C5BD65C1E40EC88521C4"
Last-Modified: Sat, 14 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 15 Jan 2023 12:09:41 GMT
Date: Sun, 15 Jan 2023 06:09:41 GMT
Connection: keep-alive
learningsmag.site/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/classy/demo_style.css?ver=11.2
200 OK 130 B URL HTTP/2 learningsmag.site/wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/classy/demo_style.css?ver=11.2
IP
Hash d5d9ec9225979d0d73fa62cdd4d11622
9ebb8528170542f307c203668545a08c40e8ca76
f90bee3cc6d77d77a74d5610b43292f35522dc5396b37bc9a0743e1414230562
GET /wp-content/plugins/td-composer/legacy/Newspaper/includes/demos/classy/demo_style.css?ver=11.2 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 17:28:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 130
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=9214a050dc0a6c6eeaa5c1aa35f9cfe3
200 OK 58 kB URL HTTP/2 learningsmag.site/wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=9214a050dc0a6c6eeaa5c1aa35f9cfe3
IP
Hash de688ca7c013942b6c9632fc754e1077
d279a4b705e46c5669cafd14111b5a2a6d381aa9
f08a5a3b69e3224bdc857fb3749c1327c73cef2beada9b26c894ccc78265fb1c
GET /wp-content/plugins/td-standard-pack/Newspaper/assets/css/td_standard_pack_main.css?ver=9214a050dc0a6c6eeaa5c1aa35f9cfe3 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Sat, 31 Dec 2022 17:29:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 58372
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 learningsmag.site/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 7e058b51f939eacfa31cdface14dded5
9d732e5afdeb42edef9e1b9631b7e95e054787cc
4ece5b00423755d8f4121ce382c8ea4dc44c241f28f150abe19caa85d0b0acc1
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 19:36:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3995
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
warlockstallioniso.com/b3/a3/e2/b3a3e2c344364669890d83d80a4f24d7.js
200 OK 21 kB URL HTTP/1.1 warlockstallioniso.com/b3/a3/e2/b3a3e2c344364669890d83d80a4f24d7.js
IP
File type HTML document, ASCII text, with very long lines (60159), with no line terminators
Hash 73fe7fb7c670d2e56fe5516b77657866
2fc5f7af24eb903328bfadf0d70022546b07a6d0
157f8548560ba2571fc9183be5736343d2c6406ffff7a146e228d029b45a7134
GET /b3/a3/e2/b3a3e2c344364669890d83d80a4f24d7.js HTTP/1.1
Host: warlockstallioniso.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0ab8393349b4456f8786fcd7dffdfdfd
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
learningsmag.site/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 30 kB URL HTTP/2 learningsmag.site/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
File type ASCII text, with very long lines (65447)
Hash 3a1740685bd5c0bbd5f2b812e1eb7fb4
488e07695da787fed18361c50292aef35abb5e81
4a07aed2d8cf88afdec0b56b365b951c76d387db3459166b5a0d25e2e6cc95ef
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 17:48:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 30324
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/seo-automated-link-building/js/seo-automated-link-building.js?ver=6.1.1
200 OK 251 B URL HTTP/2 learningsmag.site/wp-content/plugins/seo-automated-link-building/js/seo-automated-link-building.js?ver=6.1.1
IP
Hash 8f9d0693de8466aad4b74849be086fa4
6f991470c23e7f84204127b650d6201c1121558e
ced4a5db40fb65508a6f6bd65d63da7696b2ab0987276b6cfcf4b56ec12e9f9f
GET /wp-content/plugins/seo-automated-link-building/js/seo-automated-link-building.js?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Mon, 03 Jan 2022 10:15:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 251
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
200 OK 2.4 kB URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP
File type ASCII text, with very long lines (11256), with no line terminators
Hash ce94f62588d05264ac0148712111cb11
518bcd922f54169aeb199c0ccbc5877165ac218e
84ab658a69c39f424be0b27f61d612447d01606fce33beb962cbea53627d8c81
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Wed, 30 Sep 2020 01:23:06 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2394
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1
200 OK 982 B URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1
IP
File type ASCII text, with very long lines (4186), with no line terminators
Hash 24f4d7f425e792ab35adaab50816e54a
9e25bf79b674ddb7ba09ad7f118c50ec473c02c8
1c78bfb4d523785a4ebd37bb1f79f214f9bdb16673f7cc50805f7f1a26ad7f83
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: text/css
last-modified: Sat, 08 Jun 2019 06:15:02 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 982
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 8.1 kB URL HTTP/2 learningsmag.site/wp-includes/js/underscore.min.js?ver=1.13.4
IP
File type ASCII text, with very long lines (18798)
Hash 561af8d77d2375e1d1e26e8002ec283a
d6515451d87708407c42682e40883eb12a439095
4201c65895f1d19417323b8e84d6c172a20d7b2e55ad94c00ee32a4f01570200
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:23 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 17:48:17 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 8067
date: Sun, 15 Jan 2023 06:09:23 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5
200 OK 1.8 kB URL HTTP/2 learningsmag.site/wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5
IP
File type ASCII text, with very long lines (566)
Hash 1f69067f92f55d2bc4ce9fc8d7e88c3e
8bada7ce9bfd3c38e6e93fbbe5277b747230149a
bd5616cdc0b8b70795f509d922ebd74ebd20fcc58fd1487d9db80a44082a34f0
GET /wp-content/plugins/td-cloud-library/assets/js/js_posts_autoload.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 17:28:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1818
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/comment-reply.min.js?ver=6.1.1
200 OK 1.2 kB URL HTTP/2 learningsmag.site/wp-includes/js/comment-reply.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (2946)
Hash 7d8acf37582bf5212cbf4e31105de2ac
19581f31ceed66b11804eb6a2b3d00d43f73f071
d48d28cdb9d3dd8b812129663e5cc8b373b67629e2e65988d2b274960f7b847f
GET /wp-includes/js/comment-reply.min.js?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 21:44:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1228
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.12.4
200 OK 3.5 kB URL HTTP/2 learningsmag.site/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.12.4
IP
File type ASCII text, with very long lines (7874)
Hash cd61520ca6e47a72be415a7371cd27e2
d6f8ef266d0f5eb9f8ff24119926cca2975ec165
a6d877f38d2e69a68cae07c058c660a6196c11cf3fa3ab68c3b00f02d9a19878
GET /wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.12.4 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 17:47:36 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3544
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5
200 OK 8.2 kB URL HTTP/2 learningsmag.site/wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5
IP
File type ASCII text, with very long lines (832)
Hash 187b934476ea17779b45a7776091a720
b21f1b36153d6818f8799a6edcf5e64016bd1b2f
b242a1a0cf213be41b572863f400ca631eb2c5c7f7186d4c1a201a145f794a8b
GET /wp-content/plugins/td-cloud-library/assets/js/js_files_for_front.min.js?ver=c19aec6a20dc470dea3def4ce71e04d5 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 17:28:55 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 8169
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1
200 OK 479 B URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (1191), with no line terminators
Hash 62b3593ce258f7488f936d31b1ab1b6e
34c14a9bf90463e4456add8d8d039453b8bb8b8e
be4b9efdf77f14940f6b8aa22e7287411cf0377f99009d49276b5cfa47c4f3ad
GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 21:44:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 479
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1
200 OK 482 B URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1
IP
File type HTML document, ASCII text, with very long lines (906), with no line terminators
Hash ee10cb02e8cc8d6e539046fe83b25812
9a1b8d643576b2110cb837103a6d552b2fc6d2b5
b4a8461651a9b67f352e0ba3d5fd368dcd7e0dee48414d8df119cf44555be26a
GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:23 GMT
content-type: application/javascript
last-modified: Thu, 21 Jan 2021 00:05:18 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 482
date: Sun, 15 Jan 2023 06:09:23 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17
200 OK 2.4 kB URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17
IP
File type ASCII text, with very long lines (6194)
Hash a308d30f89aef4785cd464ce70ed9aac
6f9d42bd8f775abc8563dfefd9548eaa634b7dd3
adff150530da3bbb5c97aa2f51c7fba28a9d688478faff7f57d37860e9f2cc0d
GET /wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:23 GMT
content-type: application/javascript
last-modified: Wed, 30 Sep 2020 01:23:06 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2443
date: Sun, 15 Jan 2023 06:09:23 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 4.6 kB URL HTTP/2 learningsmag.site/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
File type ASCII text, with very long lines (15660)
Hash 0232689bd203f330529b36a437f41a68
9046583f7469ad38297969f10a9513eb895d5316
feea9f30a6e454579bbeabf236b7abdb0c7de84dd2852422555ad67348c5e886
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Tue, 24 May 2022 21:44:24 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4619
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
200 OK 36 kB URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
IP
File type ASCII text, with very long lines (65266)
Hash eabd3755fb73f0e4ef1ac6e474373dd8
cd92121ebac48f10a27821172202bb1d06267663
37f62084aa872e3b695e87f549c236fda5828bc68036875a771768cd90bf2436
GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Tue, 13 Dec 2022 17:48:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 36433
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=11.2
200 OK 58 kB URL HTTP/2 learningsmag.site/wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=11.2
IP
File type ASCII text, with very long lines (670)
Hash b8970e63b68ab5694dd0e3b788b1bfb6
e88284c223aa0786ad0baf6628314e05d18a48b0
a7910832bd1ee3ee2509a068c19be4804f2e171cd83e80384b1fcde835218ae2
GET /wp-content/plugins/td-composer/legacy/Newspaper/js/tagdiv_theme.min.js?ver=11.2 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:40 GMT
content-type: application/javascript
last-modified: Sat, 31 Dec 2022 17:28:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 57624
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
warlockstallioniso.com/04ce039b2c7a7159c98e77a617848c89/invoke.js
200 OK 9.8 kB URL HTTP/1.1 warlockstallioniso.com/04ce039b2c7a7159c98e77a617848c89/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26980), with no line terminators
Hash 1605bf8f9d73d6316c440b7c80c73423
df2de33d87dd2e9e3f07a594b540f23c7be9f6b2
cf6c2a600e36dfa8a10607f4a075a6d206b623b06f17d73f9449b3691a44c99d
GET /04ce039b2c7a7159c98e77a617848c89/invoke.js HTTP/1.1
Host: warlockstallioniso.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a171008c996eff9351be86dda1dc33ff
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 19:33:54 GMT
expires: Thu, 11 Jan 2024 19:33:54 GMT
cache-control: public, max-age=31536000
age: 297347
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
200 OK 73 kB URL HTTP/2 learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (8124), with CRLF, LF line terminators
Hash 49732198c5a9aed992f5a0c819647248
7ab0c5b3246e09fbfce116dc0a801853513bee21
e52a3befca6f16bcecf0cc98e814c2781157a48f22a5ed4580f73c07236a4f44
GET /watch-viriako-leaked-viral-video-trends-on-twitter-reddit/ HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
vary: Accept-Encoding, Cookie
cache-control: max-age=3, must-revalidate
content-encoding: br
date: Sun, 15 Jan 2023 06:09:40 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 11 Jan 2023 07:51:59 GMT
expires: Thu, 11 Jan 2024 07:51:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 339462
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 13:33:13 GMT
expires: Sat, 13 Jan 2024 13:33:13 GMT
cache-control: public, max-age=31536000
age: 146188
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 13:33:12 GMT
expires: Sat, 13 Jan 2024 13:33:12 GMT
cache-control: public, max-age=31536000
age: 146189
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jan 2023 06:53:46 GMT
expires: Sat, 13 Jan 2024 06:53:46 GMT
cache-control: public, max-age=31536000
age: 170156
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6fc52c452b4176dabdd1a319c5e3fa51
e00b78bd1c6b5d71f2987fd9cdc8975804b668ae
224beac380dd44474b39343d4138c0e5d8a547523eb06a1c6d6c4a893d511e63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 15 Jan 2023 06:09:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 736c958448b6596d24bb99f0cf0b232d
c8137445dd9df3a26faeead5af609bf1a51654cf
f625ce9a12c763fcaa2fff8d6410de8f9f0ea6673531e6fc6d00e0f4ffe7a17d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=119037
Date: Sun, 15 Jan 2023 06:09:42 GMT
Etag: "63c2ae94-1d7"
Expires: Mon, 16 Jan 2023 15:13:39 GMT
Last-Modified: Sat, 14 Jan 2023 13:31:00 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990970.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VFJf7uWP_QchqVEi0kbR7q_8Hzn7f1XTVMfPya7hFhIiAPEhoPlVPQ==
Age: 6159
learningsmag.site/wp-content/themes/Newspaper/images/icons/newspaper.woff?19
200 OK 25 kB URL HTTP/2 learningsmag.site/wp-content/themes/Newspaper/images/icons/newspaper.woff?19
IP
File type Web Open Font Format, TrueType, length 24864, version 0.0\012- data
Hash b527d8ce3f034285f69b410d6ac6e58b
80c79fe969594d2f4c57027650872fdd7bba491d
ea9ad8f6ace011a694d664482cc6ca0acc2dd86a8d6b684154327ec84c0c95fd
GET /wp-content/themes/Newspaper/images/icons/newspaper.woff?19 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://learningsmag.site/wp-content/themes/Newspaper/style.css?ver=11.2
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:08:23 GMT
content-type: font/woff
last-modified: Sat, 31 Dec 2022 17:22:48 GMT
accept-ranges: bytes
content-length: 24864
date: Sun, 15 Jan 2023 06:08:23 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash ff4e50b692b6ed2dc55a80ba8db4538a
62535272ebff3fda0c02eed5da5ef4a9407a1eda
4c7bebb80354cf98a2ce317be5ff34eb20fbb79f9bd94ececf87347af1d38cbc
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://learningsmag.site
access-control-allow-credentials: true
set-cookie: uid_id2=1c204292-ea2b-4cd6-9e32-58e7c07766fa:2:1; expires=Wed, 12 Jan 2033 06:09:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
warlockstallioniso.com/1db3aafd9dd66cdbee8b3811d31815e0/invoke.js
200 OK 9.8 kB URL HTTP/1.1 warlockstallioniso.com/1db3aafd9dd66cdbee8b3811d31815e0/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26971), with no line terminators
Hash 9bbd7f09b044550d9940f0dd66afe95e
45762a65a97184b4b50aa5ce9de8e29497f6a3d2
e9571dd142560c4f91f5584f4a5ddd06b2990d74b321dc6b4a50772e940b7083
GET /1db3aafd9dd66cdbee8b3811d31815e0/invoke.js HTTP/1.1
Host: warlockstallioniso.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 930b26fac3499dd6c266958947e6b291
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 4c2ac41e72ddb54422e2aa800d83fc81
9f100513e69a0fbdad51b3dc41b40bf407a4e604
a97fe115476c48242766fdbbdc66c91e5e729d81f5124b4c78cdab7a3a6eb649
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://learningsmag.site
access-control-allow-credentials: true
set-cookie: uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; expires=Wed, 12 Jan 2033 06:09:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c1e2c212593a8866f8e8374546b2822f
0b5383c0b9732b2caa6e04e4a8c67d4b49cc4ad1
3ec1e6d2e773dda3d33cd03e9d9261e91c240010679029e99801c97c6aa4b9a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3EC1E6D2E773DDA3D33CD03E9D9261E91C240010679029E99801C97C6AA4B9A7"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6193
Expires: Sun, 15 Jan 2023 07:52:55 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c1e2c212593a8866f8e8374546b2822f
0b5383c0b9732b2caa6e04e4a8c67d4b49cc4ad1
3ec1e6d2e773dda3d33cd03e9d9261e91c240010679029e99801c97c6aa4b9a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3EC1E6D2E773DDA3D33CD03E9D9261E91C240010679029E99801C97C6AA4B9A7"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6193
Expires: Sun, 15 Jan 2023 07:52:55 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 4c2ac41e72ddb54422e2aa800d83fc81
9f100513e69a0fbdad51b3dc41b40bf407a4e604
a97fe115476c48242766fdbbdc66c91e5e729d81f5124b4c78cdab7a3a6eb649
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://learningsmag.site
access-control-allow-credentials: true
X-Firefox-Spdy: h2
warlockstallioniso.com/4b5fd53eceb9e6829aeca05a8c78645e/invoke.js
200 OK 9.8 kB URL HTTP/1.1 warlockstallioniso.com/4b5fd53eceb9e6829aeca05a8c78645e/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26971), with no line terminators
Hash b84ef7a7aafc0148ce4ddf9372da33e1
60e34b9cd0478ad838ec9c1b2569a9ea311eb65f
d57e55d624039d2a75d1b8f01b485d94e3bd27fbc1e73fe1096b64a8b4b7ad11
GET /4b5fd53eceb9e6829aeca05a8c78645e/invoke.js HTTP/1.1
Host: warlockstallioniso.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d0d1f7a92c216aa8bb50648216bfca67
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
blushmossy.com/f1/15/1a/f1151aaba3cde9272e9384a22cb1d66a.js
200 OK 13 kB URL HTTP/1.1 blushmossy.com/f1/15/1a/f1151aaba3cde9272e9384a22cb1d66a.js
IP
File type ASCII text, with very long lines (37149), with no line terminators
Hash 72647ee260076d25567754a3a3119630
e3a6fa0a840da545137bb9ee4d3390364916fb68
e15663c509321c98919ab4264b69181a2532ab68bbed8e51c10e30bf76dd32c2
Analyzer Verdict Alert quad9 Sinkholed
GET /f1/15/1a/f1151aaba3cde9272e9384a22cb1d66a.js HTTP/1.1
Host: blushmossy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 382c7d09cd5b912118811754a2290545
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
blushmossy.com/pixel/purst?dl=0&th=0&sc=0&rs=2716&rd=2716&fd=997&bv=22.10.v.9&tmpl=70
200 OK 0 B URL HTTP/1.1 blushmossy.com/pixel/purst?dl=0&th=0&sc=0&rs=2716&rd=2716&fd=997&bv=22.10.v.9&tmpl=70
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2716&rd=2716&fd=997&bv=22.10.v.9&tmpl=70 HTTP/1.1
Host: blushmossy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6fee9760d3d0d6c7e17975ff31ee8499
f8ba0e671269b4842fd0c071d921b846a34db18d
167f2703c926ea8d62542daf2b2ef64ecedde8797b446c8da2452d32952d712a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "167F2703C926EA8D62542DAF2B2EF64ECEDDE8797B446C8DA2452D32952D712A"
Last-Modified: Fri, 13 Jan 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6010
Expires: Sun, 15 Jan 2023 07:49:52 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
warlockstallioniso.com/36d2b2a4e576eed1699178758740043a/invoke.js
200 OK 9.8 kB URL HTTP/1.1 warlockstallioniso.com/36d2b2a4e576eed1699178758740043a/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26969), with no line terminators
Hash d8cae2b1cb0df683022e3731c146611a
bb6eca18e7298ac758784d7f3562aabef340589f
5e5304907a7fcac1ca39e730d5aa46ce82a6d93e571a37d382fdec8d68b9f556
GET /36d2b2a4e576eed1699178758740043a/invoke.js HTTP/1.1
Host: warlockstallioniso.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 05629f62decceedc43ef48d2b65d71ab
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f37152869236d1c2a34432a27d90672d
7423529d2caff0cdc49934bbf8dc44664853daf6
7ce566d4db07adc41d7000426e48a99ba7ae92a376b81713e1de2bf06309cbf4
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7CE566D4DB07ADC41D7000426E48A99BA7AE92A376B81713E1DE2BF06309CBF4"
Last-Modified: Fri, 13 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6989
Expires: Sun, 15 Jan 2023 08:06:11 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
preparationstube.com/1f/b3/e4/1fb3e43dbf8c4f6cfd40d58522d41de7.js
200 OK 13 kB URL HTTP/1.1 preparationstube.com/1f/b3/e4/1fb3e43dbf8c4f6cfd40d58522d41de7.js
IP
File type ASCII text, with very long lines (37135), with no line terminators
Hash 172f1986abdb41aee69a34fda63fc3df
70a0b9d76db396d3605be80890b572525750e318
2eccd27e784f5bfd0679ea5b37586b76223bdadc2bcf0fc6a8a031516b57351f
Analyzer Verdict Alert quad9 Sinkholed
GET /1f/b3/e4/1fb3e43dbf8c4f6cfd40d58522d41de7.js HTTP/1.1
Host: preparationstube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c936fe8838a4dbe73ada0f7b19579bc7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c397da3d1195c71f237fa2a3018de42
077e451d72e81060f3f0f3073810e01f5da0c130
106321c22ad7d3c35bba1d1f58f2fdd9ddc28f3818fbc155843ce4d636fc4a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "106321C22AD7D3C35BBA1D1F58F2FDD9DDC28F3818FBC155843CE4D636FC4A55"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6145
Expires: Sun, 15 Jan 2023 07:52:07 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c397da3d1195c71f237fa2a3018de42
077e451d72e81060f3f0f3073810e01f5da0c130
106321c22ad7d3c35bba1d1f58f2fdd9ddc28f3818fbc155843ce4d636fc4a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "106321C22AD7D3C35BBA1D1F58F2FDD9DDC28F3818FBC155843CE4D636FC4A55"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6145
Expires: Sun, 15 Jan 2023 07:52:07 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
preparationstube.com/watch.720488301404.js?key=04ce039b2c7a7159c98e77a617848c89&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 preparationstube.com/watch.720488301404.js?key=04ce039b2c7a7159c98e77a617848c89&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.720488301404.js?key=04ce039b2c7a7159c98e77a617848c89&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1 HTTP/1.1
Host: preparationstube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Location: https://preparationstube.com/watch.720488301404.js?key=04ce039b2c7a7159c98e77a617848c89&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=ce8e575c816fa6fa9925df3b0f901e1a19d0892389a4f032668622614e6d0bd60f6596f75b74a88cff7f46a69cb8e3d868ee1528c888faa20da4bf0f25d16d60c1b01fd07a694b7e7b33df4f002a495279076563c9da46cfce7f8a3eb908d04a720fb22f6da9&pst=1673763042&rmtc=t
Set-Cookie: u_pl=16752528; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.5nTxTEriDIAWEPbywpfd6ijfOM2aPn3COyhyAmsw4Kg; expires=Sun, 15 Jan 2023 06:10:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a0e6134e0a6967bdacc5222de17c3b54
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash f37152869236d1c2a34432a27d90672d
7423529d2caff0cdc49934bbf8dc44664853daf6
7ce566d4db07adc41d7000426e48a99ba7ae92a376b81713e1de2bf06309cbf4
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "7CE566D4DB07ADC41D7000426E48A99BA7AE92A376B81713E1DE2BF06309CBF4"
Last-Modified: Fri, 13 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6989
Expires: Sun, 15 Jan 2023 08:06:11 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe81e123e6bf48aa375b02652d736e05
49774161d588eaa6f7a219cd05d1708f204577ea
449bd1918357206fed2033d45a6f385227a13a2ecac3dc5d2166e1e5a67fd70e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "449BD1918357206FED2033D45A6F385227A13A2ECAC3DC5D2166E1E5A67FD70E"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17298
Expires: Sun, 15 Jan 2023 10:58:00 GMT
Date: Sun, 15 Jan 2023 06:09:42 GMT
Connection: keep-alive
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-34-min.jpg
200 OK 14 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-34-min.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x281, components 3\012- data
Hash 4a7320306dcdbbfa61a1983d41057c02
e770853d698766be5e163093aac7af0be9388d5e
088a3cc027becf61507f247dd2e92fd7e88ff56a38e9cee82f53bb761f27c42d
GET /wp-content/uploads/2023/01/learningsamg.site-34-min.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:42 GMT
content-type: image/jpeg
last-modified: Thu, 12 Jan 2023 04:58:42 GMT
accept-ranges: bytes
content-length: 13457
date: Sun, 15 Jan 2023 06:09:42 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 29 kB URL HTTP/2 friendshipmale.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash eba80aa6e4469fe5ca024bee57e4e96e
395a9b10bbc07b342308e15d2380efbef36dd4b2
7975f0abbd2c498e1261260bbf4242c5ce04c4801db22bff73271d8ee3a787e6
Analyzer Verdict Alert fortinet Malware
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:42 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d1d33b4bc7a09e71ad3aec206e7d5d20
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 15 Jan 2023 06:09:42 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DZr60xYrJMBYbRN6fGzOme%2FMqA2SAZIV2Wx%2BeAPqG54XN6Uk9kL8NoR6nS3me6m25WX%2FSSmaUR3xE5PfaiDwnpMO5BILpQIoqKLvRvEpzz5ydVrAyhigDFZd9Eu6fkE%2BRkJz0rM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71b0daef88aa-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
toxicrookie.com/watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 toxicrookie.com/watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1 HTTP/1.1
Host: toxicrookie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Location: https://toxicrookie.com/watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=2f30b82bbc952f86e3b40a9ead6f3ff7b18722df41008f5cafa93ee99b0efc601e936cc2ca40347fb12f042bfb76fb5c62fb760e6507ed93303a7f07ec6a81429412f5eea9087687ba3e0738b5a4d94e93e90fc5eea555530f4e413ad34b060857&pst=1673763042&rmtc=t
Set-Cookie: u_pl=16752581; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.Z7m81y4K1cqlNp_M28bxMu8bBbQuNqBtgl0vAxXE0Zg; expires=Sun, 15 Jan 2023 06:10:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 03aa7b9440e10acd0868e0f39502584a
Strict-Transport-Security: max-age=0; includeSubdomains
toxicrookie.com/watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 toxicrookie.com/watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1 HTTP/1.1
Host: toxicrookie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Location: https://toxicrookie.com/watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=c8a0cefb727e9f537e9ec4f69cefeef0d5a35736c0c6b178b6f959e43ae173e703e66f823e36c4a27c24e88b0d4016b860def039ddb1ad56a983474abe29be71265e6d21e29840bfef5da35f1a95dc69011e928d03957fc0603f69dc1425c1b6&pst=1673763042&rmtc=t
Set-Cookie: u_pl=16752556; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjc1MjU1NiwiayI6IjFkYjNhYWZkOWRkNjZjZGJlZThiMzgxMWQzMTgxNWUwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNzEwMDgyLCJwaWQiOjM5Mjk4MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjI3LCJwdCI6NCwicGsiOiJleTB2dWdzMSIsImNwa3MiOnsgIjI4IjoiMmY5MGIyZjRjNmIwMGMxNWJjNTdiN2Q5MjFjOWU4YmIifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vbGVhcm5pbmdzbWFnLnNpdGUvd2F0Y2gtdmlyaWFrby1sZWFrZWQtdmlyYWwtdmlkZW8tdHJlbmRzLW9uLXR3aXR0ZXItcmVkZGl0LyJ9fQ.sMWmGZjSPlpsc74U-XM54NEji-JmcHZKkU6dFg093yU; expires=Sun, 15 Jan 2023 06:10:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1575b005cf4ade28246a26c5b27d53af
Strict-Transport-Security: max-age=0; includeSubdomains
learningsmag.site/wp-includes/js/mediaelement/mejs-controls.svg
200 OK 1.3 kB URL HTTP/2 learningsmag.site/wp-includes/js/mediaelement/mejs-controls.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4597)
Hash 523e89523bf2e33352e22272b85ec630
fe6fa07a6ffb32f9d9baaa7b857eea6fbdbf754d
acf1ec2ee28483e5d75b0d24180d30b20b8e85f2dcd9151ef7db5b72fa276056
GET /wp-includes/js/mediaelement/mejs-controls.svg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:42 GMT
content-type: image/svg+xml
last-modified: Tue, 01 Aug 2017 14:13:52 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1316
date: Sun, 15 Jan 2023 06:09:42 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
planesknob.com/watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 planesknob.com/watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1 HTTP/1.1
Host: planesknob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Location: https://planesknob.com/watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=90478d7469d75aca9774b3d554d4d5d2db94f68d05a377f16d910697a33a8a088c85328a2b790b88bf4f9d4b03c6867cbee9ed6b6b832b8f6be10de30a64ec78289692e7d6cafbadabba3b8295133214b0e220e8d6494cbbba86b204d2eb98b0&pst=1673763042&rmtc=t
Set-Cookie: u_pl=16752532; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.ZB7aTNVf6NQyA-Eqdxy-0OhA_Tl9NDU0YJyOYg7k7LU; expires=Sun, 15 Jan 2023 06:10:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d12fafe2b331051f70ff536e5daa8009
Strict-Transport-Security: max-age=0; includeSubdomains
toxicrookie.com/watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=2f30b82bbc952f86e3b40a9ead6f3ff7b18722df41008f5cafa93ee99b0efc601e936cc2ca40347fb12f042bfb76fb5c62fb760e6507ed93303a7f07ec6a81429412f5eea9087687ba3e0738b5a4d94e93e90fc5eea555530f4e413ad34b060857&pst=1673763042&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 toxicrookie.com/watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=2f30b82bbc952f86e3b40a9ead6f3ff7b18722df41008f5cafa93ee99b0efc601e936cc2ca40347fb12f042bfb76fb5c62fb760e6507ed93303a7f07ec6a81429412f5eea9087687ba3e0738b5a4d94e93e90fc5eea555530f4e413ad34b060857&pst=1673763042&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2665)
Hash a27264b5e9eab062974bb39b7026e3db
2b63008119e1e669c880af51bf4e8c67c61b65bc
0b94792cb8de2fde9acdfe283d2efdbe133db16819e9ca90fcf66881dbb2318f
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.817801707721.js?key=4b5fd53eceb9e6829aeca05a8c78645e&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=2f30b82bbc952f86e3b40a9ead6f3ff7b18722df41008f5cafa93ee99b0efc601e936cc2ca40347fb12f042bfb76fb5c62fb760e6507ed93303a7f07ec6a81429412f5eea9087687ba3e0738b5a4d94e93e90fc5eea555530f4e413ad34b060857&pst=1673763042&rmtc=t HTTP/1.1
Host: toxicrookie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Referer: https://learningsmag.site/
Connection: keep-alive
Cookie: u_pl=16752556; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjc1MjU1NiwiayI6IjFkYjNhYWZkOWRkNjZjZGJlZThiMzgxMWQzMTgxNWUwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNzEwMDgyLCJwaWQiOjM5Mjk4MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjI3LCJwdCI6NCwicGsiOiJleTB2dWdzMSIsImNwa3MiOnsgIjI4IjoiMmY5MGIyZjRjNmIwMGMxNWJjNTdiN2Q5MjFjOWU4YmIifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vbGVhcm5pbmdzbWFnLnNpdGUvd2F0Y2gtdmlyaWFrby1sZWFrZWQtdmlyYWwtdmlkZW8tdHJlbmRzLW9uLXR3aXR0ZXItcmVkZGl0LyJ9fQ.sMWmGZjSPlpsc74U-XM54NEji-JmcHZKkU6dFg093yU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16752556,16752581; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; expires=Sun, 22 Jan 2023 06:09:42 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
uncs=1; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3928bdb288c89acbd656e4dfbc0f98da
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
toxicrookie.com/watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=c8a0cefb727e9f537e9ec4f69cefeef0d5a35736c0c6b178b6f959e43ae173e703e66f823e36c4a27c24e88b0d4016b860def039ddb1ad56a983474abe29be71265e6d21e29840bfef5da35f1a95dc69011e928d03957fc0603f69dc1425c1b6&pst=1673763042&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 toxicrookie.com/watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=c8a0cefb727e9f537e9ec4f69cefeef0d5a35736c0c6b178b6f959e43ae173e703e66f823e36c4a27c24e88b0d4016b860def039ddb1ad56a983474abe29be71265e6d21e29840bfef5da35f1a95dc69011e928d03957fc0603f69dc1425c1b6&pst=1673763042&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2527)
Hash 52728eab29ad3a43da15eb639850716a
a40466ed2d4c412094dffe2259840f7cad652d3c
40d3dd4ae0e05da3a845b263bf184600b56af8ff547a2aa36d4b55fe8d117c9f
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.924919618710.js?key=1db3aafd9dd66cdbee8b3811d31815e0&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=c8a0cefb727e9f537e9ec4f69cefeef0d5a35736c0c6b178b6f959e43ae173e703e66f823e36c4a27c24e88b0d4016b860def039ddb1ad56a983474abe29be71265e6d21e29840bfef5da35f1a95dc69011e928d03957fc0603f69dc1425c1b6&pst=1673763042&rmtc=t HTTP/1.1
Host: toxicrookie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Referer: https://learningsmag.site/
Connection: keep-alive
Cookie: u_pl=16752556; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjc1MjU1NiwiayI6IjFkYjNhYWZkOWRkNjZjZGJlZThiMzgxMWQzMTgxNWUwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNzEwMDgyLCJwaWQiOjM5Mjk4MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjI3LCJwdCI6NCwicGsiOiJleTB2dWdzMSIsImNwa3MiOnsgIjI4IjoiMmY5MGIyZjRjNmIwMGMxNWJjNTdiN2Q5MjFjOWU4YmIifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vbGVhcm5pbmdzbWFnLnNpdGUvd2F0Y2gtdmlyaWFrby1sZWFrZWQtdmlyYWwtdmlkZW8tdHJlbmRzLW9uLXR3aXR0ZXItcmVkZGl0LyJ9fQ.sMWmGZjSPlpsc74U-XM54NEji-JmcHZKkU6dFg093yU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:42 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; expires=Sun, 22 Jan 2023 06:09:42 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
uncs=1; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
pdhtkv27=true; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
uncs27=1; expires=Mon, 16 Jan 2023 06:09:42 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b4c45e1745f66a8bcd16ffec10858cde
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
planesknob.com/watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=90478d7469d75aca9774b3d554d4d5d2db94f68d05a377f16d910697a33a8a088c85328a2b790b88bf4f9d4b03c6867cbee9ed6b6b832b8f6be10de30a64ec78289692e7d6cafbadabba3b8295133214b0e220e8d6494cbbba86b204d2eb98b0&pst=1673763042&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 planesknob.com/watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=90478d7469d75aca9774b3d554d4d5d2db94f68d05a377f16d910697a33a8a088c85328a2b790b88bf4f9d4b03c6867cbee9ed6b6b832b8f6be10de30a64ec78289692e7d6cafbadabba3b8295133214b0e220e8d6494cbbba86b204d2eb98b0&pst=1673763042&rmtc=t
IP
File type HTML document, ASCII text, with very long lines (2523)
Hash d444de3e7be42d470503d0a466f72e47
d67dfb120b065dfaedfefe0e68d28b49861253e5
bdb2714c41b9f31ddf711fbd6be4bdb34ffae1a828bd6faece876198d78def75
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.695365810835.js?key=36d2b2a4e576eed1699178758740043a&kw=%5B%22watch%22%2C%22viriako%22%2C%22leaked%22%2C%22viral%22%2C%22video%22%2C%22trends%22%2C%22on%22%2C%22twitter%22%2C%22reddit%22%2C%22-%22%2C%22learning%22%2C%22mags%22%5D&refer=https%3A%2F%2Flearningsmag.site%2Fwatch-viriako-leaked-viral-video-trends-on-twitter-reddit%2F&tz=0&dev=e&res=12.1055&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1&shu=90478d7469d75aca9774b3d554d4d5d2db94f68d05a377f16d910697a33a8a088c85328a2b790b88bf4f9d4b03c6867cbee9ed6b6b832b8f6be10de30a64ec78289692e7d6cafbadabba3b8295133214b0e220e8d6494cbbba86b204d2eb98b0&pst=1673763042&rmtc=t HTTP/1.1
Host: planesknob.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Referer: https://learningsmag.site/
Connection: keep-alive
Cookie: u_pl=16752532; ain=eyJhbGciOiJIUzI1NiJ9.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.ZB7aTNVf6NQyA-Eqdxy-0OhA_Tl9NDU0YJyOYg7k7LU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; expires=Sun, 22 Jan 2023 06:09:42 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uncs=1; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
pdhtkv25=true; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uncs25=1; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 12aa62f41315dbbcb64eea42873ee07d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b885586b0ac42d5fbceaf518a2f17262
fdea290c2e6d1284cdee71548ba3dc32e80be35c
f9a854b088e9b674f8d24c5f24db28f83751532506cfa464b81b01ff75f9a23b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F9A854B088E9B674F8D24C5F24DB28F83751532506CFA464B81B01FF75F9A23B"
Last-Modified: Sat, 14 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9124
Expires: Sun, 15 Jan 2023 08:41:47 GMT
Date: Sun, 15 Jan 2023 06:09:43 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/36/90/13/369013892c357d415d1ad7748ed75879/1627917230.png
200 OK 62 kB URL HTTP/2 cdn.cloudimagesb.com/cti/36/90/13/369013892c357d415d1ad7748ed75879/1627917230.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash aab722bc84ce26456c71f76bf135d39d
931d9bda71c71ca06e3774c1d67d9842b2c2dc7e
47f5ef20379af39109b365fa5700137a998dd749ca0ea5faf3e82b94be508c59
GET /cti/36/90/13/369013892c357d415d1ad7748ed75879/1627917230.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:43 GMT
content-type: image/png
content-length: 61633
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 15:13:57 GMT
etag: "61080bb5-f0c1"
expires: Tue, 17 Jan 2023 06:09:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/65/6d/7c/656d7cbe6cf9f9422f64de0947593264/1631633409.jpg
200 OK 122 kB URL HTTP/2 cdn.cloudimagesb.com/bi/65/6d/7c/656d7cbe6cf9f9422f64de0947593264/1631633409.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:07:26 15:07:46], progressive, precision 8, 300x250, components 3\012- data
Size 122 kB (121969 bytes)
Hash e5cd4df8a39bd3ad0238e83c98d6282a
db2f72227e183710fdbcd24865830373c24a82c3
a7d0dd1af746a0ae468ac96213c6ba8e61a6cbc132b6b24cf9ad12454e3a544c
GET /bi/65/6d/7c/656d7cbe6cf9f9422f64de0947593264/1631633409.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:43 GMT
content-type: image/jpeg
content-length: 121969
server: nginx/1.17.6
last-modified: Tue, 14 Sep 2021 15:30:27 GMT
etag: "6140c013-1dc71"
expires: Tue, 17 Jan 2023 06:09:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/79/03/b3/7903b3cfa4c8ade65821ccd6ac4c2c18/1643388007.gif
200 OK 27 kB URL HTTP/2 cdn.cloudimagesb.com/bi/79/03/b3/7903b3cfa4c8ade65821ccd6ac4c2c18/1643388007.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 468 x 60\012- data
Hash 5203c9ee6e869ebef2dd62e23f9114e5
8d8ed4a3f146a5b17bff4e76f8b42db5e2ae174a
d11922e82b5359db44fefd0e655c3739097eb58d336a0c5515cf8cadbc6da68e
GET /bi/79/03/b3/7903b3cfa4c8ade65821ccd6ac4c2c18/1643388007.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:43 GMT
content-type: image/gif
content-length: 27308
server: nginx/1.17.6
last-modified: Fri, 28 Jan 2022 16:40:14 GMT
etag: "61f41c6e-6aac"
expires: Tue, 17 Jan 2023 06:09:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/4b/ed/37/4bed37349ac1dbb5fbd01f0dfa44418b/1644588514.gif
200 OK 115 kB URL HTTP/2 cdn.cloudimagesb.com/bi/4b/ed/37/4bed37349ac1dbb5fbd01f0dfa44418b/1644588514.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 160 x 600\012- data
Size 115 kB (114598 bytes)
Hash 5d2bfbea0f2773ded4e84f846e391279
1ea3029b13c5d640a7e641856ad5928e3c14218c
5ca95106cc59d2c93b1076f372248595dd9bd88aebe39faedef49b54c4c5aac4
GET /bi/4b/ed/37/4bed37349ac1dbb5fbd01f0dfa44418b/1644588514.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:43 GMT
content-type: image/gif
content-length: 114598
server: nginx/1.17.6
last-modified: Fri, 11 Feb 2022 14:08:49 GMT
etag: "62066df1-1bfa6"
expires: Tue, 17 Jan 2023 06:09:43 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6c3ee7bafa021ce07e7e1ea0f1f1a90f
5628f78c35190c5b5b089748d67835e04be14c6c
d757023129dd1d54bf47a534c334cc6df68a3586724dc621f5c8828cce7444f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D757023129DD1D54BF47A534C334CC6DF68A3586724DC621F5C8828CCE7444F4"
Last-Modified: Sat, 14 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19511
Expires: Sun, 15 Jan 2023 11:34:54 GMT
Date: Sun, 15 Jan 2023 06:09:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfed4563677f7f0733bf53f305a77b22
eed22174539297bfd685331b20efa0ef955ed31b
891e2580e5c2b1720d9b02e0afef525a3550c8f0554af0073f00960c4df75e36
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "891E2580E5C2B1720D9B02E0AFEF525A3550C8F0554AF0073F00960C4DF75E36"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6191
Expires: Sun, 15 Jan 2023 07:52:54 GMT
Date: Sun, 15 Jan 2023 06:09:43 GMT
Connection: keep-alive
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:43 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 005be37ac82dda9d714b07627f796510
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5096e7b4acfb3c25ad6e032c3e07f7db
527d44aec0f0941d879210f0e1f250becef81ca1
b395970116bc7161845b61ed5f225abbfb3eb89d887fd3b32381e4674d7be632
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B395970116BC7161845B61ED5F225ABBFB3EB89D887FD3B32381E4674D7BE632"
Last-Modified: Thu, 12 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3237
Expires: Sun, 15 Jan 2023 07:03:40 GMT
Date: Sun, 15 Jan 2023 06:09:43 GMT
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 15 Jan 2023 04:21:54 GMT
expires: Sun, 15 Jan 2023 06:21:54 GMT
cache-control: public, max-age=7200
age: 6469
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
suffertreasureapproval.com/sbar.json?key=f1151aaba3cde9272e9384a22cb1d66a&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
200 OK 4.5 kB URL HTTP/1.1 suffertreasureapproval.com/sbar.json?key=f1151aaba3cde9272e9384a22cb1d66a&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6187), with no line terminators
Hash 0abdcaca12f178b2536c6fa66d53aa2d
867b430228191ef9cbe127caa40e9bb8297037dd
8d3c5190094721650a3e457f0b5563258ca5fa39f9727d78766f5178fa416400
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=f1151aaba3cde9272e9384a22cb1d66a&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1 HTTP/1.1
Host: suffertreasureapproval.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:43 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18150765; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; expires=Sun, 22 Jan 2023 06:09:43 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uncs=1; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5c13f730ecf2de82dd573b1c5f853856
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
learningsmag.site/wp-content/uploads/2021/12/cropped-icon-512-fav-192x192.png
200 OK 4.3 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2021/12/cropped-icon-512-fav-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 5a9a737b5f8cd1a5e1580268197509f6
5090d32126c82aed667d6d9eb19c72b8ebcef18a
5f5ab013c283d936d1032255eeb5603f7f3fac1ad22f3771b61226ac30a2e5d0
GET /wp-content/uploads/2021/12/cropped-icon-512-fav-192x192.png HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:43 GMT
content-type: image/png
last-modified: Mon, 03 Jan 2022 10:19:38 GMT
accept-ranges: bytes
content-length: 4279
date: Sun, 15 Jan 2023 06:09:43 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2021/12/cropped-icon-512-fav-32x32.png
200 OK 563 B URL HTTP/2 learningsmag.site/wp-content/uploads/2021/12/cropped-icon-512-fav-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash cca8a386011bcbcc15bdb33f27efe702
2c3ac6bce45237f68cf4c4128ab62a80ec9d86ea
c180ffd38b8fb064c151ce31bd85a1f51d9bfb599dcc64fc9ecd851a9b48b897
GET /wp-content/uploads/2021/12/cropped-icon-512-fav-32x32.png HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:43 GMT
content-type: image/png
last-modified: Mon, 03 Jan 2022 10:19:39 GMT
accept-ranges: bytes
content-length: 563
date: Sun, 15 Jan 2023 06:09:43 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-35-min-218x150.jpg
200 OK 9.2 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-35-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 71c8a23a23f6dbc354ae2775ad7c39a5
2d23fb4d7043ec0429f602cc50db1fc251873355
cb011a687c4fd4c950047d25721bf0664eb203a082fbc80389fdf7762c45479f
GET /wp-content/uploads/2023/01/learningsamg.site-35-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:43 GMT
content-type: image/jpeg
last-modified: Sat, 14 Jan 2023 15:13:20 GMT
accept-ranges: bytes
content-length: 9219
date: Sun, 15 Jan 2023 06:09:43 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d21c11d27d426a1a36bd21372633a93
27ef15e0c5d22b1cb82676f8f59269e421fb670b
11cca01c4774096fd0daa67e7ad634a41d0566eba6c4c00fa955684c2823706a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11CCA01C4774096FD0DAA67E7AD634A41D0566EBA6C4C00FA955684C2823706A"
Last-Modified: Sat, 14 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5007
Expires: Sun, 15 Jan 2023 07:33:10 GMT
Date: Sun, 15 Jan 2023 06:09:43 GMT
Connection: keep-alive
blacknesskeepplan.com/sbar.json?key=1fb3e43dbf8c4f6cfd40d58522d41de7&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
200 OK 4.5 kB URL HTTP/1.1 blacknesskeepplan.com/sbar.json?key=1fb3e43dbf8c4f6cfd40d58522d41de7&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (6182), with no line terminators
Hash dc9073ac0381554e2b7a272847cb9ed6
c2f5e19ff77334305251120032540e51489f1871
976912ce52cfb764ac37c410dfb021e47f88f5d3491c5057c958db520b1a5fa7
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=1fb3e43dbf8c4f6cfd40d58522d41de7&uuid=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1 HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:43 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://learningsmag.site
Access-Control-Allow-Origin: https://learningsmag.site
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16875589; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; expires=Sun, 22 Jan 2023 06:09:43 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uncs=1; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 16 Jan 2023 06:09:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bee39a5396696812ce1fc016bde8094f
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
suffertreasureapproval.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYscVRR9NZlsdCFKEBXERlxEcDpV1dVfCRKMMRKMSUwi2bh5X9XznFf1yvequjqzGgxIFmLaXZY1p2cyqEGcHyBIjRuZVdqFzML5ExK3Svc0tN5F3XvqXHjnnnu%2F2i6OiY%2BCHt382Gwqrem5dtNvnL2rUmFK17h%2BpxH4Tf9C465KO9GFxmj2scPzgd9u%2Bm83PpR8w5wL%2FcD3Az9oXFFWxmZ0bs5CZU%2F6QbPvN6OwGbQjjOz%2FsSs8OOpBDI%2FJS1Bienr9t30oXiNNfros3UZusnc%2BSApNc2MxFHufphupKVMkyzK2HuJ0b9EN46aEPFqBSfcWE8AMd2YTgKkp8f4IwNK9hUyw4e6JUqYhUzDxPMphDalrKFqDm%2FtQ4ikBuMD1G0iTx9eNLem9E5bO2ClZ%2FfsvqHJKVv88gzT58ZJWo8Zto4tcmdRhFFdQoxpqUCMrDpBvelDlAXj%2BJZQgSJMKShy95Ud%2BO2yJ3lrHj%2BRa5Id8jdGgvyZY2OHtbkQ7fTG3RqkaKq6h5RjUnULhPBTKQxF7KDIPiThq0HY%2F9v1uzOJWqxdxzlstztu9jmiLVtSLfRR8pn2MPBuD6zG43UJmt7ChxrDFL3DrFZxYhcunxPtkC0NRoZQEpSMoKUGpCMqcoBxWu0K70FWPhXYFCxY5XORWNTH5YJvumnwgU7KdHZMXZ6Z5Z54l2JBHjTgI2gGljLa4kP2wG8p%2BqxfRMOQsEJ0OhVMVlFsBdR421ZS89soKMjUlp%2F95GYwewOkDcLUCWrwOWk66oQ%2B6Pol6PjbTfS2pTVU6cAkdNJ3KJYSpkOWryO952%2FqYvDrf4Pl3X4DkhxenDz87%2B6x%2BCG4rZLbC5%2BpXgoF%2BMLllSrJzy5SO7N%2FIcpWoTTrb7u2c5vLU9x%2FJe6Wx4uplN%2F7uPT4jZuWTO9Ll12gqZu%2BTHy4pIaS9YiyX5Oer7q5kNwu3fqmwaZFdu%2Fn%2BlatJZqVzyqQ1qHrqvgZXU%2FLcg2%2Fmd%2FvGm19A2Rq2qJAUh2QRUKYGz7bgsqV6ZwisXvawzENZVBMbsuVPrQi0XGLKKrj%2FYLast90DDKwHmt%2BfX%2BvQVhjqClSP4YpTkzyzhxd%2Fb80DTHsTpq23w7TV355Y69RRQ7ZjP5Z%2BKFncZ3GX%2BqIfR31G%2B4HssjYNkLspP3i09y8AAAD%2F%2FwEAAP%2F%2FhUUTZI8EAAA%3D
200 OK 7 B URL HTTP/1.1 suffertreasureapproval.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYscVRR9NZlsdCFKEBXERlxEcDpV1dVfCRKMMRKMSUwi2bh5X9XznFf1yvequjqzGgxIFmLaXZY1p2cyqEGcHyBIjRuZVdqFzML5ExK3Svc0tN5F3XvqXHjnnnu%2F2i6OiY%2BCHt382Gwqrem5dtNvnL2rUmFK17h%2BpxH4Tf9C465KO9GFxmj2scPzgd9u%2Bm83PpR8w5wL%2FcD3Az9oXFFWxmZ0bs5CZU%2F6QbPvN6OwGbQjjOz%2FsSs8OOpBDI%2FJS1Bienr9t30oXiNNfros3UZusnc%2BSApNc2MxFHufphupKVMkyzK2HuJ0b9EN46aEPFqBSfcWE8AMd2YTgKkp8f4IwNK9hUyw4e6JUqYhUzDxPMphDalrKFqDm%2FtQ4ikBuMD1G0iTx9eNLem9E5bO2ClZ%2FfsvqHJKVv88gzT58ZJWo8Zto4tcmdRhFFdQoxpqUCMrDpBvelDlAXj%2BJZQgSJMKShy95Ud%2BO2yJ3lrHj%2BRa5Id8jdGgvyZY2OHtbkQ7fTG3RqkaKq6h5RjUnULhPBTKQxF7KDIPiThq0HY%2F9v1uzOJWqxdxzlstztu9jmiLVtSLfRR8pn2MPBuD6zG43UJmt7ChxrDFL3DrFZxYhcunxPtkC0NRoZQEpSMoKUGpCMqcoBxWu0K70FWPhXYFCxY5XORWNTH5YJvumnwgU7KdHZMXZ6Z5Z54l2JBHjTgI2gGljLa4kP2wG8p%2BqxfRMOQsEJ0OhVMVlFsBdR421ZS89soKMjUlp%2F95GYwewOkDcLUCWrwOWk66oQ%2B6Pol6PjbTfS2pTVU6cAkdNJ3KJYSpkOWryO952%2FqYvDrf4Pl3X4DkhxenDz87%2B6x%2BCG4rZLbC5%2BpXgoF%2BMLllSrJzy5SO7N%2FIcpWoTTrb7u2c5vLU9x%2FJe6Wx4uplN%2F7uPT4jZuWTO9Ll12gqZu%2BTHy4pIaS9YiyX5Oer7q5kNwu3fqmwaZFdu%2Fn%2BlatJZqVzyqQ1qHrqvgZXU%2FLcg2%2Fmd%2FvGm19A2Rq2qJAUh2QRUKYGz7bgsqV6ZwisXvawzENZVBMbsuVPrQi0XGLKKrj%2FYLast90DDKwHmt%2BfX%2BvQVhjqClSP4YpTkzyzhxd%2Fb80DTHsTpq23w7TV355Y69RRQ7ZjP5Z%2BKFncZ3GX%2BqIfR31G%2B4HssjYNkLspP3i09y8AAAD%2F%2FwEAAP%2F%2FhUUTZI8EAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYscVRR9NZlsdCFKEBXERlxEcDpV1dVfCRKMMRKMSUwi2bh5X9XznFf1yvequjqzGgxIFmLaXZY1p2cyqEGcHyBIjRuZVdqFzML5ExK3Svc0tN5F3XvqXHjnnnu%2F2i6OiY%2BCHt382Gwqrem5dtNvnL2rUmFK17h%2BpxH4Tf9C465KO9GFxmj2scPzgd9u%2Bm83PpR8w5wL%2FcD3Az9oXFFWxmZ0bs5CZU%2F6QbPvN6OwGbQjjOz%2FsSs8OOpBDI%2FJS1Bienr9t30oXiNNfros3UZusnc%2BSApNc2MxFHufphupKVMkyzK2HuJ0b9EN46aEPFqBSfcWE8AMd2YTgKkp8f4IwNK9hUyw4e6JUqYhUzDxPMphDalrKFqDm%2FtQ4ikBuMD1G0iTx9eNLem9E5bO2ClZ%2FfsvqHJKVv88gzT58ZJWo8Zto4tcmdRhFFdQoxpqUCMrDpBvelDlAXj%2BJZQgSJMKShy95Ud%2BO2yJ3lrHj%2BRa5Id8jdGgvyZY2OHtbkQ7fTG3RqkaKq6h5RjUnULhPBTKQxF7KDIPiThq0HY%2F9v1uzOJWqxdxzlstztu9jmiLVtSLfRR8pn2MPBuD6zG43UJmt7ChxrDFL3DrFZxYhcunxPtkC0NRoZQEpSMoKUGpCMqcoBxWu0K70FWPhXYFCxY5XORWNTH5YJvumnwgU7KdHZMXZ6Z5Z54l2JBHjTgI2gGljLa4kP2wG8p%2BqxfRMOQsEJ0OhVMVlFsBdR421ZS89soKMjUlp%2F95GYwewOkDcLUCWrwOWk66oQ%2B6Pol6PjbTfS2pTVU6cAkdNJ3KJYSpkOWryO952%2FqYvDrf4Pl3X4DkhxenDz87%2B6x%2BCG4rZLbC5%2BpXgoF%2BMLllSrJzy5SO7N%2FIcpWoTTrb7u2c5vLU9x%2FJe6Wx4uplN%2F7uPT4jZuWTO9Ll12gqZu%2BTHy4pIaS9YiyX5Oer7q5kNwu3fqmwaZFdu%2Fn%2BlatJZqVzyqQ1qHrqvgZXU%2FLcg2%2Fmd%2FvGm19A2Rq2qJAUh2QRUKYGz7bgsqV6ZwisXvawzENZVBMbsuVPrQi0XGLKKrj%2FYLast90DDKwHmt%2BfX%2BvQVhjqClSP4YpTkzyzhxd%2Fb80DTHsTpq23w7TV355Y69RRQ7ZjP5Z%2BKFncZ3GX%2BqIfR31G%2B4HssjYNkLspP3i09y8AAAD%2F%2FwEAAP%2F%2FhUUTZI8EAAA%3D HTTP/1.1
Host: suffertreasureapproval.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=18150765; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:43 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b8ef968379c02fb3bef4b1a041d903ae
Strict-Transport-Security: max-age=0; includeSubdomains
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-23-min-218x150.jpg
200 OK 7.0 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-23-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 8d2a04060f91d459ef4a152f26d8ff41
d86884c31e44517325a3eef7c253963c2712d612
8bf233a1d2049f6f817d24eda8b560f24b65300e5baf360dada253ac738733d3
GET /wp-content/uploads/2023/01/learningsamg.site-23-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:43 GMT
content-type: image/jpeg
last-modified: Fri, 06 Jan 2023 17:38:06 GMT
accept-ranges: bytes
content-length: 6987
date: Sun, 15 Jan 2023 06:09:43 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-22-min-218x150.jpg
200 OK 8.4 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-22-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 0769e914be721b24f0cc286e0d3f7d85
07fc6ebe63cad50c97eda88ff0819583be47b34b
5f9bfeb7ca3e599690cf4ce1cc29e0de825b83921d08cfc601fab7c589596b7d
GET /wp-content/uploads/2023/01/learningsamg.site-22-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=suffertreasureapproval.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:43 GMT
content-type: image/jpeg
last-modified: Fri, 06 Jan 2023 17:11:45 GMT
accept-ranges: bytes
content-length: 8398
date: Sun, 15 Jan 2023 06:09:43 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-21-min-218x150.jpg
200 OK 9.6 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-21-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 766e965edabe88b684cf812b7f47c752
6fb7b0fbe174b343cc2b1bac8be2a9eeef3126a2
b47b66107866c2c2e466973a42f00202174b72a888800febf7deb7da4b3fe2ff
GET /wp-content/uploads/2023/01/learningsamg.site-21-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=suffertreasureapproval.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:43 GMT
content-type: image/jpeg
last-modified: Fri, 06 Jan 2023 16:34:49 GMT
accept-ranges: bytes
content-length: 9572
date: Sun, 15 Jan 2023 06:09:43 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash d98b661f46911acb1b5f2eeca93b4e9d
98ca11f653615616bdaf32d9132b73be349fa077
895c7b52cc877d0ab3a48b8ecd92e83181a27ca0779ea3af8aea5b72e5f95838
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "895C7B52CC877D0AB3A48B8ECD92E83181A27CA0779EA3AF8AEA5B72E5F95838"
Last-Modified: Sat, 14 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15861
Expires: Sun, 15 Jan 2023 10:34:05 GMT
Date: Sun, 15 Jan 2023 06:09:44 GMT
Connection: keep-alive
blacknesskeepplan.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9lUw2v99KEVFR6YULBafzqrqqP8wiGpNIMCYxiQbcva%2FqefbresV7VV2dwcVgQLIR2pVZ1pxOMqhBzB8gSI8bmVXahczCcSfuBbdK9zS03kXde%2BpceOeeez%2FbLY8IRckOr71nt7Ux7HTSpI1Xb%2BlM2so3rtxshLRJzzRu6awdn2mMFx83eiOkSZO%2B1nhHiYE9HdGQ0pCGjYvaqdSOTy9Z6PxRL2z2aDOOmmESY%2Bz%2Bi30ZwLMAcnREnoaW81NbPz2GFjNkw%2B%2FOKz8obP76hWFpWGEdRnLvg2yQ2SrDcF2mLkCa7a26Yf2ckHsnYLO91QSwo%2FuLCcD1nAS%2FhODZ3kom%2BOjBsVJuoDJw%2BX9UoxmUmUGzGYS9Ay2fEEBIXLmKbPjwinUVu33MsgU7Jxt%2F%2FQldzcnGr88gG357zuhx44Y1ZaFt5jFOa%2BjxDLo%2FQ17uo9gOoKt9iOJTaEmQDWtoefgKjWkStWR3s01jtRnTSGxyFvY2JY%2FaIunErN2TS2u0nkGnMxg1AfMnUfoApQ5QpgHKPMBQHjZY0ksp7aQ8bbW6sRCi1RIi6bZlIltxN6UoxUL7BEU%2BgTATCLeD3O1goCdw5Q%2FwWzW83IAv5iR4fwcjWaNSBJUnqBhBpQmqgqAa1Q%2Bk8ZGvH0rjSx6ucrTKrXpqi%2F4ue2CLvsrIbn5EnlqYFgQ7FzBQh40w5S0VtyRPuyJO2yKVMZVJN4kiGYdSdeB1De1PgPkA23pOXnjuBHI9J6f%2Bfhac7cObfQj9Ilj5Elg17UQUbGsadym2s8dGMZfprO%2BHrN%2F0ulCQtkZebKC4HeyaI%2FL8coO93wmUODj75edXfzsjP4JwNXJX42P9I0Hf3J1etxW5f91Wnjy%2Bmhd6qLfZYrs3Claok1%2B%2Fq25X1slL5%2F3kq7fEgliUj24qX1xmmVy8T745p6VU7qJ1QpHvL%2Flbil8r%2Fda50mVlfvna2xcvDXOnvNc2m4HpJx9%2BAqHn5H9usLzbl%2F94E9rN4Moaw%2FKArALaziDyHfh8rd5bAmfWPTwPUJX11EV8%2FdNoAqPWmPEa%2Fl%2BYr%2Btdfxd9F4AVd5bXOnI1RqYGMxP48uS0yN3B2Z9bywA3wZQbF9znxpkvjq31%2BrChkpSmikaKpz2edhiVvTTucdYLVYcnLETh52L%2F3t4%2FAAAA%2F%2F8BAAD%2F%2F4sA3PuPBAAA
200 OK 7 B URL HTTP/1.1 blacknesskeepplan.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9lUw2v99KEVFR6YULBafzqrqqP8wiGpNIMCYxiQbcva%2FqefbresV7VV2dwcVgQLIR2pVZ1pxOMqhBzB8gSI8bmVXahczCcSfuBbdK9zS03kXde%2BpceOeeez%2FbLY8IRckOr71nt7Ux7HTSpI1Xb%2BlM2so3rtxshLRJzzRu6awdn2mMFx83eiOkSZO%2B1nhHiYE9HdGQ0pCGjYvaqdSOTy9Z6PxRL2z2aDOOmmESY%2Bz%2Bi30ZwLMAcnREnoaW81NbPz2GFjNkw%2B%2FOKz8obP76hWFpWGEdRnLvg2yQ2SrDcF2mLkCa7a26Yf2ckHsnYLO91QSwo%2FuLCcD1nAS%2FhODZ3kom%2BOjBsVJuoDJw%2BX9UoxmUmUGzGYS9Ay2fEEBIXLmKbPjwinUVu33MsgU7Jxt%2F%2FQldzcnGr88gG357zuhx44Y1ZaFt5jFOa%2BjxDLo%2FQ17uo9gOoKt9iOJTaEmQDWtoefgKjWkStWR3s01jtRnTSGxyFvY2JY%2FaIunErN2TS2u0nkGnMxg1AfMnUfoApQ5QpgHKPMBQHjZY0ksp7aQ8bbW6sRCi1RIi6bZlIltxN6UoxUL7BEU%2BgTATCLeD3O1goCdw5Q%2FwWzW83IAv5iR4fwcjWaNSBJUnqBhBpQmqgqAa1Q%2Bk8ZGvH0rjSx6ucrTKrXpqi%2F4ue2CLvsrIbn5EnlqYFgQ7FzBQh40w5S0VtyRPuyJO2yKVMZVJN4kiGYdSdeB1De1PgPkA23pOXnjuBHI9J6f%2Bfhac7cObfQj9Ilj5Elg17UQUbGsadym2s8dGMZfprO%2BHrN%2F0ulCQtkZebKC4HeyaI%2FL8coO93wmUODj75edXfzsjP4JwNXJX42P9I0Hf3J1etxW5f91Wnjy%2Bmhd6qLfZYrs3Claok1%2B%2Fq25X1slL5%2F3kq7fEgliUj24qX1xmmVy8T745p6VU7qJ1QpHvL%2Flbil8r%2Fda50mVlfvna2xcvDXOnvNc2m4HpJx9%2BAqHn5H9usLzbl%2F94E9rN4Moaw%2FKArALaziDyHfh8rd5bAmfWPTwPUJX11EV8%2FdNoAqPWmPEa%2Fl%2BYr%2Btdfxd9F4AVd5bXOnI1RqYGMxP48uS0yN3B2Z9bywA3wZQbF9znxpkvjq31%2BrChkpSmikaKpz2edhiVvTTucdYLVYcnLETh52L%2F3t4%2FAAAA%2F%2F8BAAD%2F%2F4sA3PuPBAAA
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSzYsc1Rd9lUw2v99KEVFR6YULBafzqrqqP8wiGpNIMCYxiQbcva%2FqefbresV7VV2dwcVgQLIR2pVZ1pxOMqhBzB8gSI8bmVXahczCcSfuBbdK9zS03kXde%2BpceOeeez%2FbLY8IRckOr71nt7Ux7HTSpI1Xb%2BlM2so3rtxshLRJzzRu6awdn2mMFx83eiOkSZO%2B1nhHiYE9HdGQ0pCGjYvaqdSOTy9Z6PxRL2z2aDOOmmESY%2Bz%2Bi30ZwLMAcnREnoaW81NbPz2GFjNkw%2B%2FOKz8obP76hWFpWGEdRnLvg2yQ2SrDcF2mLkCa7a26Yf2ckHsnYLO91QSwo%2FuLCcD1nAS%2FhODZ3kom%2BOjBsVJuoDJw%2BX9UoxmUmUGzGYS9Ay2fEEBIXLmKbPjwinUVu33MsgU7Jxt%2F%2FQldzcnGr88gG357zuhx44Y1ZaFt5jFOa%2BjxDLo%2FQ17uo9gOoKt9iOJTaEmQDWtoefgKjWkStWR3s01jtRnTSGxyFvY2JY%2FaIunErN2TS2u0nkGnMxg1AfMnUfoApQ5QpgHKPMBQHjZY0ksp7aQ8bbW6sRCi1RIi6bZlIltxN6UoxUL7BEU%2BgTATCLeD3O1goCdw5Q%2FwWzW83IAv5iR4fwcjWaNSBJUnqBhBpQmqgqAa1Q%2Bk8ZGvH0rjSx6ucrTKrXpqi%2F4ue2CLvsrIbn5EnlqYFgQ7FzBQh40w5S0VtyRPuyJO2yKVMZVJN4kiGYdSdeB1De1PgPkA23pOXnjuBHI9J6f%2Bfhac7cObfQj9Ilj5Elg17UQUbGsadym2s8dGMZfprO%2BHrN%2F0ulCQtkZebKC4HeyaI%2FL8coO93wmUODj75edXfzsjP4JwNXJX42P9I0Hf3J1etxW5f91Wnjy%2Bmhd6qLfZYrs3Claok1%2B%2Fq25X1slL5%2F3kq7fEgliUj24qX1xmmVy8T745p6VU7qJ1QpHvL%2Flbil8r%2Fda50mVlfvna2xcvDXOnvNc2m4HpJx9%2BAqHn5H9usLzbl%2F94E9rN4Moaw%2FKArALaziDyHfh8rd5bAmfWPTwPUJX11EV8%2FdNoAqPWmPEa%2Fl%2BYr%2Btdfxd9F4AVd5bXOnI1RqYGMxP48uS0yN3B2Z9bywA3wZQbF9znxpkvjq31%2BrChkpSmikaKpz2edhiVvTTucdYLVYcnLETh52L%2F3t4%2FAAAA%2F%2F8BAAD%2F%2F4sA3PuPBAAA HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=16875589; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 52fe9ed368ac7c27b4194df695222ad8
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash d98b661f46911acb1b5f2eeca93b4e9d
98ca11f653615616bdaf32d9132b73be349fa077
895c7b52cc877d0ab3a48b8ecd92e83181a27ca0779ea3af8aea5b72e5f95838
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "895C7B52CC877D0AB3A48B8ECD92E83181A27CA0779EA3AF8AEA5B72E5F95838"
Last-Modified: Sat, 14 Jan 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15861
Expires: Sun, 15 Jan 2023 10:34:05 GMT
Date: Sun, 15 Jan 2023 06:09:44 GMT
Connection: keep-alive
learningsmag.site/wp-content/uploads/2022/10/learningsmag.site-44-min-1-218x150.jpg
200 OK 6.4 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2022/10/learningsmag.site-44-min-1-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 553d89bed0590c0bc6fb44623cf85f73
39bb49dbab05bd51f28c68a334eac3b16d0261c0
7fd7f2a58e2cd790b6d4b12a5a67aca5aa3fef30909396ff9d22216b0b8773d3
GET /wp-content/uploads/2022/10/learningsmag.site-44-min-1-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=suffertreasureapproval.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:44 GMT
content-type: image/jpeg
last-modified: Sat, 08 Oct 2022 06:40:25 GMT
accept-ranges: bytes
content-length: 6403
date: Sun, 15 Jan 2023 06:09:44 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/50/77/d2/5077d2a4de96d9464e3c0d2ecf8bb3de/1601543282.html
200 OK 461 B URL HTTP/2 cdn.barscreative1.com/sb/au/50/77/d2/5077d2a4de96d9464e3c0d2ecf8bb3de/1601543282.html
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text
Hash 186ef88be072a4247214744fa3779b0b
9cb0e80fe5dca29d3d2526b3100248eaa664973b
f670b62c086feb7cea5b545ec6539292d23d04e49e3aea64b14874a076d8d8b4
GET /sb/au/50/77/d2/5077d2a4de96d9464e3c0d2ecf8bb3de/1601543282.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Sat, 07 May 2022 03:21:28 GMT
etag: W/"6275e5b8-4b9"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 15 Jan 2023 07:09:44 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-34-min-218x150.jpg
200 OK 8.3 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-34-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 37073a4c3383fdb0b37f915c78747a02
e168600c7e2797d01396cc734ef3e4909d042388
b841e58d787c76210aa88e1d37c31736f3b725d4a2803559e9670a1b6c663fd6
GET /wp-content/uploads/2023/01/learningsamg.site-34-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=blacknesskeepplan.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:44 GMT
content-type: image/jpeg
last-modified: Thu, 12 Jan 2023 04:58:43 GMT
accept-ranges: bytes
content-length: 8345
date: Sun, 15 Jan 2023 06:09:44 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/img/close.png
200 OK 4.0 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/img/close.png
IP
File type PNG image data, 500 x 500, 8-bit gray+alpha, non-interlaced\012- data
Hash 23e9690b0e7ac26868363a6248f44467
d7ad0eae64e0c1e65b12eda0aa9d2b91996dd64f
f362c67320d739ccf3bea21f857b9620075bd20ceacda8c51261b9612fe28395
GET /sb/notifications/software/us/windows/flash-all/ssp/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: image/png
content-length: 4022
last-modified: Wed, 17 Feb 2021 11:46:53 GMT
etag: "602d022d-fb6"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 5242678
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xYhMqy12387WjK%2FepIrfoqHFwdQw2TyG8IGkCvAP9rJywsb1FKc5i7muCP7U23DSyEyd5Q1wfTcCQpP3XZx5Ll8CtlbKYx0LeP6iBL3ciMeAy7KktGNM8Mm0eDiM3Ve7iY%2B6BAxZbnCN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bb3e1b71f8-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/9f/03/9f/9f039f12c3a901981b39e44a7e2deb89/1667590110.png
200 OK 33 kB URL HTTP/2 cdn.cloudimagesb.com/si/9f/03/9f/9f039f12c3a901981b39e44a7e2deb89/1667590110.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cb2500acb00f247ef19403c3a0f89e1
7c57e8b84b2bb0003810ffae7a14e24869155464
7efcd5082673b787603d2a0b8d768fb26807cf2ab79771a69886a916d0cda3ce
GET /si/9f/03/9f/9f039f12c3a901981b39e44a7e2deb89/1667590110.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: image/png
content-length: 32763
server: nginx/1.17.6
last-modified: Fri, 04 Nov 2022 19:28:39 GMT
etag: "636567e7-7ffb"
expires: Tue, 17 Jan 2023 06:09:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/cN6upBUkIsrve70Q.mp4?_=1
206 Partial Content 38 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/cN6upBUkIsrve70Q.mp4?_=1
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash 1792dd6b3fa1d8fccdfd535fc42a2c23
1aedf66a139054dfcafad10584cdadd5b51c1cfe
8ccd03f0dcdc52605725cd5fe36c198b74a133f6a20ec439fc5b1e99069b0a3a
GET /wp-content/uploads/2023/01/cN6upBUkIsrve70Q.mp4?_=1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Thu, 12 Jan 2023 13:32:28 GMT
content-range: bytes 0-477905/477906
content-length: 477906
date: Sun, 15 Jan 2023 06:09:42 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-33-min-218x150.jpg
200 OK 9.4 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-33-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash c616ea3e5701aa30f5355a591c5aef61
9f12e7c424037234ae86369a18a69cfc4fe26d25
11f09100bdafb55be8ec0f2cfdccd4e62ca497327a10abc6450878fda948d07e
GET /wp-content/uploads/2023/01/learningsamg.site-33-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=blacknesskeepplan.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:44 GMT
content-type: image/jpeg
last-modified: Wed, 11 Jan 2023 20:11:06 GMT
accept-ranges: bytes
content-length: 9409
date: Sun, 15 Jan 2023 06:09:44 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-29-min-218x150.jpg
200 OK 7.3 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-29-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 70562b38377e58f64fa2d3aa6f3ec22e
b53f9dce274118628c838685587abee0c488770c
3e2139d6fcfd439fff0d194875eb93aeb6f523031180c38555420e103acab547
GET /wp-content/uploads/2023/01/learningsamg.site-29-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=blacknesskeepplan.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:44 GMT
content-type: image/jpeg
last-modified: Tue, 10 Jan 2023 13:48:56 GMT
accept-ranges: bytes
content-length: 7313
date: Sun, 15 Jan 2023 06:09:44 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-28-min-218x150.jpg
200 OK 7.6 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-28-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash 7a1af01b998e5755ef8d32f6a3c50128
257e52e1e77e31c014deea24ddf22040e9fd768d
d98f0a026300b7c53f3f264a8954f2bb1f78c3d1e60566b74509d0f381ff75ff
GET /wp-content/uploads/2023/01/learningsamg.site-28-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=blacknesskeepplan.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:44 GMT
content-type: image/jpeg
last-modified: Mon, 09 Jan 2023 17:37:31 GMT
accept-ranges: bytes
content-length: 7590
date: Sun, 15 Jan 2023 06:09:44 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-27-min-218x150.jpg
200 OK 5.8 kB URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/learningsamg.site-27-min-218x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 218x150, components 3\012- data
Hash b2f631bdd1b4df5a2cfba0b1c4922a87
44a099e5dabf8f667a4a3c30c12b47b13d475144
354c77f692a7f1f66f5d7b3f05d4226b3cf8c355f32290e851b82b7f80c5ba71
GET /wp-content/uploads/2023/01/learningsamg.site-27-min-218x150.jpg HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=040523d8-604e-402c-ba19-db26c574a69d%3A3%3A1; ppu_main_b3a3e2c344364669890d83d80a4f24d7=1; sb_main_f1151aaba3cde9272e9384a22cb1d66a=1; sb_count_f1151aaba3cde9272e9384a22cb1d66a=1; sb_main_1fb3e43dbf8c4f6cfd40d58522d41de7=1; sb_count_1fb3e43dbf8c4f6cfd40d58522d41de7=1; _ga=GA1.2.526377655.1673762984; _gid=GA1.2.584424058.1673762984; _gat_gtag_UA_215755349_1=1; pbpr0tpuw4isk85t8yg3jb2lj5vqf=blacknesskeepplan.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Sun, 22 Jan 2023 06:09:44 GMT
content-type: image/jpeg
last-modified: Sun, 08 Jan 2023 19:04:05 GMT
accept-ranges: bytes
content-length: 5751
date: Sun, 15 Jan 2023 06:09:44 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
blacknesskeepplan.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=79245&fd=351
200 OK 0 B URL HTTP/1.1 blacknesskeepplan.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=79245&fd=351
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fanimate.css&l=79245&fd=351 HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=16875589; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5af6ce798e809281853e1ff953524bc2
e294a7ea02967fc2486d8f028479bc0ec8dcc3b0
ad9749ffa451026d871118eaeb937a0a79b866551510fa0bd0635b683e57146b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD9749FFA451026D871118EAEB937A0A79B866551510FA0BD0635B683E57146B"
Last-Modified: Sat, 14 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Sun, 15 Jan 2023 08:00:04 GMT
Date: Sun, 15 Jan 2023 06:09:44 GMT
Connection: keep-alive
cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/style.css
200 OK 2.0 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/style.css
IP
Hash 68add6a6d5e34b24b539782c3a3b419e
2bab8221d9931a5b7bbf87609c7ea568a6a5e24b
5659957d82262923544aeba6f5290feffd566a89846648297e8b50464146b71a
GET /sb/notifications/software/us/windows/flash-all/ssp/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: text/css
last-modified: Thu, 23 Sep 2021 11:41:22 GMT
etag: W/"614c67e2-160c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FS8hhBFeuHEOloMUUNb7MXIw21jEks9hgTNwF7j2y5Q1iZsgF8qrZoBxpo%2FAwlgaHggArzXmdZWm4kgu1fF6XOecZk5zM9a6sJNNyHLuIA6mtTgxNftSafAXwE9I0r4OiwCv05OQ3EMl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bacdd371f8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/style.css
200 OK 1.5 kB URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/style.css
IP
Hash 908dce303e802b45f99455bfa3c26ef2
2f064693d34a6eac3903455fc3de8477c4554e40
60eed66130c70fbeb214c6ab5a7f747cfaaad001a5f10d33d3da7d57f70d6f98
GET /sb/ssp/utility/social-media/facebook/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: text/css
last-modified: Fri, 27 Aug 2021 12:19:14 GMT
etag: W/"6128d842-18be"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=42OiwyXSl1M%2B%2FjzWmsfpMCL%2B0p4WYpWLjWZC2gI01qBrDN0f6y8sWu9cZHCLOFlMwiVagwAuMzYyUIX6A9Z999bYAD4ysITZqhem4zFYjy3L0lJR6SAHgWaJYFy6T6LJAZadlZ%2B%2FMD5Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bacdd771f8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5af6ce798e809281853e1ff953524bc2
e294a7ea02967fc2486d8f028479bc0ec8dcc3b0
ad9749ffa451026d871118eaeb937a0a79b866551510fa0bd0635b683e57146b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD9749FFA451026D871118EAEB937A0A79B866551510FA0BD0635B683E57146B"
Last-Modified: Sat, 14 Jan 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Sun, 15 Jan 2023 08:00:04 GMT
Date: Sun, 15 Jan 2023 06:09:44 GMT
Connection: keep-alive
blacknesskeepplan.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6334&fd=351
200 OK 0 B URL HTTP/1.1 blacknesskeepplan.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6334&fd=351
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fcss%2Fstyle.css&l=6334&fd=351 HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=16875589; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/animate.css
200 OK 4.8 kB URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/css/animate.css
IP
Hash 21eb7a65c17a2c22ba104a7ecbf1dc0f
ea8c53be54889c7489aed04e30e3eb83af64dec9
090bd9ceb9a58da038e5ed4a39dfbb63ece49ed4f4f0656ce35f7faa41a3b237
GET /sb/ssp/utility/social-media/facebook/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: text/css
last-modified: Sat, 20 Feb 2021 08:44:40 GMT
etag: W/"6030cbf8-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F0UVd1Ex8qJ2XdgOqDA%2BCKqwOUosTIEzvkOkk%2F%2BKeWrVEaIGdZJesrqda%2FBjWFRhk3lBv1pH3UJLBkFvkPAf5ocOJSLXKgmmoEEzy3tbgoLXMbpI%2F%2Bi9f1vi%2F5vrJW3hyIm0dlOY5tRa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bacdce71f8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
suffertreasureapproval.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTW8cRRDtcZwLHBAoQoCEWCEOQcKb%2BdqvRCjCBCOL4JgkyBcuPd2968Y900P3zM7aJ4tIyAdElluO47d2LCBC%2BAcgoTEX5FOWA%2FIB%2FwkUrqBdr7RQh6l680rqV6%2Fqq%2F38nLjI6dn6x3pHKkWvNepu7eqGTLgubG3tfs1z6%2B6N2oZMmuGN2mDyMf3rntuou2%2FXPhRsS1%2FzXc91PderrUgjunpwbcpCpk86Xr3j1kO%2F7jVCDMz%2Fsc0dWOqA98%2FJS5B8fHnzt2NIViGJf7ol7Fam03c%2BiHNFM23Q50efJluJLhLE87JrHHSTo1k3tB0T8mgBOjmaTQDdP5hMgEiOifOHhyg5mslE1D%2B8UBopiAQRfx5Fv4JQFSStwPQDSP6UAIxj7Q6S%2BPGaNgXdvmDphB2Txb%2F%2FgizGZPHPK0jiH5eVHNTuaZVnUicWg24JOaggexXS%2FATZjgNZnIBlX0JygiQuIfnZW27oNvyAt5eabiiWQtdnSxH1Oks88pus0Qpps8On1khZQXYrKDEEtZeQWwe5dJB3HeSpg5if1Wij03XdVjfqBkE7ZIwFAWONdpM3eBC2uy5yNtE%2BRJYOwdQQzOwiNbvYkkOY%2FBfYzRKWL8JmY%2BJ8sos%2BL1EIgsISFJSgkARFRlD0y0OurG%2FLx1zZPPJm2Z%2FloBzprLdPD3XWEwnZT8%2FJixPTnCvPYmyJs1rX8xoepRENGBcdv%2BWLTtAOqe%2BzyOPNJoWVJaRdALUOduSYvPbKAlI5Jpf%2FeRkRPYFVJ2ByATR%2FHbQYtXwXdHMUtl3sJMdKUJPIpGdj2qtbmQlwXSLNFpFtO%2FvqnLw63eD1d1%2BAYKc3xw8%2Fu%2FqseghmSqSmxOfyV4Ke2hvd1QU5uKsLS47vpJmM5Q6dbPdeRjNx6fuPxHahDV%2B9ZYffvccmxKR8cl%2FY7DZN%2BOR98sOy5FyYFW2YID%2Bv2g0Rred2czk3SZ7eXn9%2FZTVOjbBW6qQClU%2Ft12ByTJ7b%2B2Z6t2%2B8%2BQWkqWDyEnF%2BSmYBqSuwdBc2nau3msCoeU%2BUOijycmT8aP5TSQIl5phGJex%2FcDSv9%2B0eesYBzR5Mr7VvSvRVCaqGsPmlUZaa05u%2FB9NApJxRpIxzECmjvr2w1sqzWsMLRTtqtxjnkWDca%2FlBO3Bdn%2FOw1RFeB5kds5NHR%2F8CAAD%2F%2FwEAAP%2F%2FkU2dgo8EAAA%3D
200 OK 7 B URL HTTP/1.1 suffertreasureapproval.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTW8cRRDtcZwLHBAoQoCEWCEOQcKb%2BdqvRCjCBCOL4JgkyBcuPd2968Y900P3zM7aJ4tIyAdElluO47d2LCBC%2BAcgoTEX5FOWA%2FIB%2FwkUrqBdr7RQh6l680rqV6%2Fqq%2F38nLjI6dn6x3pHKkWvNepu7eqGTLgubG3tfs1z6%2B6N2oZMmuGN2mDyMf3rntuou2%2FXPhRsS1%2FzXc91PderrUgjunpwbcpCpk86Xr3j1kO%2F7jVCDMz%2Fsc0dWOqA98%2FJS5B8fHnzt2NIViGJf7ol7Fam03c%2BiHNFM23Q50efJluJLhLE87JrHHSTo1k3tB0T8mgBOjmaTQDdP5hMgEiOifOHhyg5mslE1D%2B8UBopiAQRfx5Fv4JQFSStwPQDSP6UAIxj7Q6S%2BPGaNgXdvmDphB2Txb%2F%2FgizGZPHPK0jiH5eVHNTuaZVnUicWg24JOaggexXS%2FATZjgNZnIBlX0JygiQuIfnZW27oNvyAt5eabiiWQtdnSxH1Oks88pus0Qpps8On1khZQXYrKDEEtZeQWwe5dJB3HeSpg5if1Wij03XdVjfqBkE7ZIwFAWONdpM3eBC2uy5yNtE%2BRJYOwdQQzOwiNbvYkkOY%2FBfYzRKWL8JmY%2BJ8sos%2BL1EIgsISFJSgkARFRlD0y0OurG%2FLx1zZPPJm2Z%2FloBzprLdPD3XWEwnZT8%2FJixPTnCvPYmyJs1rX8xoepRENGBcdv%2BWLTtAOqe%2BzyOPNJoWVJaRdALUOduSYvPbKAlI5Jpf%2FeRkRPYFVJ2ByATR%2FHbQYtXwXdHMUtl3sJMdKUJPIpGdj2qtbmQlwXSLNFpFtO%2FvqnLw63eD1d1%2BAYKc3xw8%2Fu%2FqseghmSqSmxOfyV4Ke2hvd1QU5uKsLS47vpJmM5Q6dbPdeRjNx6fuPxHahDV%2B9ZYffvccmxKR8cl%2FY7DZN%2BOR98sOy5FyYFW2YID%2Bv2g0Rred2czk3SZ7eXn9%2FZTVOjbBW6qQClU%2Ft12ByTJ7b%2B2Z6t2%2B8%2BQWkqWDyEnF%2BSmYBqSuwdBc2nau3msCoeU%2BUOijycmT8aP5TSQIl5phGJex%2FcDSv9%2B0eesYBzR5Mr7VvSvRVCaqGsPmlUZaa05u%2FB9NApJxRpIxzECmjvr2w1sqzWsMLRTtqtxjnkWDca%2FlBO3Bdn%2FOw1RFeB5kds5NHR%2F8CAAD%2F%2FwEAAP%2F%2FkU2dgo8EAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTW8cRRDtcZwLHBAoQoCEWCEOQcKb%2BdqvRCjCBCOL4JgkyBcuPd2968Y900P3zM7aJ4tIyAdElluO47d2LCBC%2BAcgoTEX5FOWA%2FIB%2FwkUrqBdr7RQh6l680rqV6%2Fqq%2F38nLjI6dn6x3pHKkWvNepu7eqGTLgubG3tfs1z6%2B6N2oZMmuGN2mDyMf3rntuou2%2FXPhRsS1%2FzXc91PderrUgjunpwbcpCpk86Xr3j1kO%2F7jVCDMz%2Fsc0dWOqA98%2FJS5B8fHnzt2NIViGJf7ol7Fam03c%2BiHNFM23Q50efJluJLhLE87JrHHSTo1k3tB0T8mgBOjmaTQDdP5hMgEiOifOHhyg5mslE1D%2B8UBopiAQRfx5Fv4JQFSStwPQDSP6UAIxj7Q6S%2BPGaNgXdvmDphB2Txb%2F%2FgizGZPHPK0jiH5eVHNTuaZVnUicWg24JOaggexXS%2FATZjgNZnIBlX0JygiQuIfnZW27oNvyAt5eabiiWQtdnSxH1Oks88pus0Qpps8On1khZQXYrKDEEtZeQWwe5dJB3HeSpg5if1Wij03XdVjfqBkE7ZIwFAWONdpM3eBC2uy5yNtE%2BRJYOwdQQzOwiNbvYkkOY%2FBfYzRKWL8JmY%2BJ8sos%2BL1EIgsISFJSgkARFRlD0y0OurG%2FLx1zZPPJm2Z%2FloBzprLdPD3XWEwnZT8%2FJixPTnCvPYmyJs1rX8xoepRENGBcdv%2BWLTtAOqe%2BzyOPNJoWVJaRdALUOduSYvPbKAlI5Jpf%2FeRkRPYFVJ2ByATR%2FHbQYtXwXdHMUtl3sJMdKUJPIpGdj2qtbmQlwXSLNFpFtO%2FvqnLw63eD1d1%2BAYKc3xw8%2Fu%2FqseghmSqSmxOfyV4Ke2hvd1QU5uKsLS47vpJmM5Q6dbPdeRjNx6fuPxHahDV%2B9ZYffvccmxKR8cl%2FY7DZN%2BOR98sOy5FyYFW2YID%2Bv2g0Rred2czk3SZ7eXn9%2FZTVOjbBW6qQClU%2Ft12ByTJ7b%2B2Z6t2%2B8%2BQWkqWDyEnF%2BSmYBqSuwdBc2nau3msCoeU%2BUOijycmT8aP5TSQIl5phGJex%2FcDSv9%2B0eesYBzR5Mr7VvSvRVCaqGsPmlUZaa05u%2FB9NApJxRpIxzECmjvr2w1sqzWsMLRTtqtxjnkWDca%2FlBO3Bdn%2FOw1RFeB5kds5NHR%2F8CAAD%2F%2FwEAAP%2F%2FkU2dgo8EAAA%3D HTTP/1.1
Host: suffertreasureapproval.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=18150765; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 14459ad215f4a06c3f82004271d32e24
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=1fb3e43dbf8c4f6cfd40d58522d41de7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=1fb3e43dbf8c4f6cfd40d58522d41de7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=1fb3e43dbf8c4f6cfd40d58522d41de7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6ff4a8aee60cbc8d6420567bfd4f5332
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=b3a3e2c344364669890d83d80a4f24d7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=b3a3e2c344364669890d83d80a4f24d7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=b3a3e2c344364669890d83d80a4f24d7&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0d5d96777abe32018d078b7a8ab1f602
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/js/script.js
200 OK 210 B URL HTTP/2 cdn.creative-bars1.com/sb/ssp/utility/social-media/facebook/js/script.js
IP
Hash 14c6a15c2c7729c885b33c990f37d2a5
865d9621a3a4c2b446ec535471412bf491a1e60e
bd7b0405bc197d2564e68c4366fdbfc06c0711a10231877d33c8c6cdd05fe7f0
GET /sb/ssp/utility/social-media/facebook/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: application/javascript
last-modified: Sat, 20 Feb 2021 08:47:14 GMT
etag: W/"6030cc92-1bc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C7hwmTN5Qov0UHSJ%2FD4THHtYble5L4o1r9V20wPYWa%2Fl9LCY%2B0miE0tnG9M2N5lLAf7rCBIFwDjIGhqaV3tViN2P7ai1dy6heEuqhS253XnMGxenEy4Y%2FG%2BpJW1HVM1qv24hJImlPMmz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bacdda71f8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
blacknesskeepplan.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fjs%2Fscript.js&l=444&fd=358
200 OK 0 B URL HTTP/1.1 blacknesskeepplan.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fjs%2Fscript.js&l=444&fd=358
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fssp%2Futility%2Fsocial-media%2Ffacebook%2Fjs%2Fscript.js&l=444&fd=358 HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=16875589; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
blacknesskeepplan.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 blacknesskeepplan.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=16875589; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
blacknesskeepplan.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuTrIXPSkiKipz8KBgJv1rfpnDatyNBNck7q4GvFVXVU%2FKqelqqrqnJ8FDcEH2Iown99j5JtmgLmL%2BAEEmXiSnHQ%2BSg%2FEm3gWvykwGxn2Hfu%2Fr70F973vvi8P8krjI6cX2B3pfKkVXalW38vqOTLgubGXzbsVzq%2B5qZUcm9XC10p98TO8tz61V3Tcq7wnW0Su%2B67mu53qVdWlErPsrUxYyfdTyqi23GvpVrxaib57ENndgqQPeuyTPQvLxtd1fTiHZCEn3hxvCdjKdvnmzmyuaaYMeP%2Fko6SS6SNCdl7FxECcns25oOybkwQJ0cjKbALp3NJkAkRwT5zcPUXIyk4mod3ylNFIQCSL%2BNIreCEKNIOkITN%2BD5I8JwDg2t5B0H25qU9C9K5ZO2DFZ%2BudvyGJMln5%2FDkn3%2BzUl%2B5U7WuWZ1IlFPy4h%2ByPI9ghpfoZs34EszsCyzyE5QdItIfnFa27o1vyAN5frbiiWQ9dnyxH1Wss88uus1ghpvcWn1kg5goxHUGIAaheRWwe5dJDHDvLUQZdfVGitFbtuI47iIGiGjLEgYKzWrPMaD8Jm7CJnE%2B0DZOkATA3AzAFSc4COHMDkP8HulrB8CTYbE%2BfDA%2FR4iUIQFJagoASFJCgygqJXHnNlfVs%2B5MrmkTfL%2FiwH5VBn7UN6rLO2SMhhekmemZjmOAc30REXFS%2BOAhEGPIqbLIzrLOahy2vNmu%2Fz0OOiAStLSLsAah3syzF56YUFpHJMrv37PCJ6BqvOwOTLoPkroMWw4bugu8Ow6WI%2FOVWCmkQmbdul7aqVmQDXJdJsCdmec6guyYvTDbb%2BJBDs%2FPrXX279sco%2FATMlUlPiU%2FkzQVvdH97WBTm6rQtLTrfSTHblPp1s905GM7H47ftir9CGb9ywg2%2FeYRNiUj66K2x2iyZ88j75bk1yLsy6NkyQHzfsjoi2c7u7lpskT29tv7u%2B0U2NsFbqZAQqH3%2F8GZgck6dMZ3q3r%2F71NqQZweQluvk5mQWkHoGlB7DpXL3VBEbNe6LUQZGXQ%2BNH859KEigxxzQqYf%2BHo3l9aO%2BjbRzQ7N70WnumRE%2BVoGoAmy8Os9ScX%2F81mAYi5QwjZZyjSBn11ZW1Vl5Ual4omlGzwTiPBONeww%2Bagev6nIeNlvBayOyYnT04%2BQ8AAP%2F%2FAQAA%2F%2F%2BfCFIdjwQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 blacknesskeepplan.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuTrIXPSkiKipz8KBgJv1rfpnDatyNBNck7q4GvFVXVU%2FKqelqqrqnJ8FDcEH2Iown99j5JtmgLmL%2BAEEmXiSnHQ%2BSg%2FEm3gWvykwGxn2Hfu%2Fr70F973vvi8P8krjI6cX2B3pfKkVXalW38vqOTLgubGXzbsVzq%2B5qZUcm9XC10p98TO8tz61V3Tcq7wnW0Su%2B67mu53qVdWlErPsrUxYyfdTyqi23GvpVrxaib57ENndgqQPeuyTPQvLxtd1fTiHZCEn3hxvCdjKdvnmzmyuaaYMeP%2Fko6SS6SNCdl7FxECcns25oOybkwQJ0cjKbALp3NJkAkRwT5zcPUXIyk4mod3ylNFIQCSL%2BNIreCEKNIOkITN%2BD5I8JwDg2t5B0H25qU9C9K5ZO2DFZ%2BudvyGJMln5%2FDkn3%2BzUl%2B5U7WuWZ1IlFPy4h%2ByPI9ghpfoZs34EszsCyzyE5QdItIfnFa27o1vyAN5frbiiWQ9dnyxH1Wss88uus1ghpvcWn1kg5goxHUGIAaheRWwe5dJDHDvLUQZdfVGitFbtuI47iIGiGjLEgYKzWrPMaD8Jm7CJnE%2B0DZOkATA3AzAFSc4COHMDkP8HulrB8CTYbE%2BfDA%2FR4iUIQFJagoASFJCgygqJXHnNlfVs%2B5MrmkTfL%2FiwH5VBn7UN6rLO2SMhhekmemZjmOAc30REXFS%2BOAhEGPIqbLIzrLOahy2vNmu%2Fz0OOiAStLSLsAah3syzF56YUFpHJMrv37PCJ6BqvOwOTLoPkroMWw4bugu8Ow6WI%2FOVWCmkQmbdul7aqVmQDXJdJsCdmec6guyYvTDbb%2BJBDs%2FPrXX279sco%2FATMlUlPiU%2FkzQVvdH97WBTm6rQtLTrfSTHblPp1s905GM7H47ftir9CGb9ywg2%2FeYRNiUj66K2x2iyZ88j75bk1yLsy6NkyQHzfsjoi2c7u7lpskT29tv7u%2B0U2NsFbqZAQqH3%2F8GZgck6dMZ3q3r%2F71NqQZweQluvk5mQWkHoGlB7DpXL3VBEbNe6LUQZGXQ%2BNH859KEigxxzQqYf%2BHo3l9aO%2BjbRzQ7N70WnumRE%2BVoGoAmy8Os9ScX%2F81mAYi5QwjZZyjSBn11ZW1Vl5Ual4omlGzwTiPBONeww%2Bagev6nIeNlvBayOyYnT04%2BQ8AAP%2F%2FAQAA%2F%2F%2BfCFIdjwQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuTrIXPSkiKipz8KBgJv1rfpnDatyNBNck7q4GvFVXVU%2FKqelqqrqnJ8FDcEH2Iown99j5JtmgLmL%2BAEEmXiSnHQ%2BSg%2FEm3gWvykwGxn2Hfu%2Fr70F973vvi8P8krjI6cX2B3pfKkVXalW38vqOTLgubGXzbsVzq%2B5qZUcm9XC10p98TO8tz61V3Tcq7wnW0Su%2B67mu53qVdWlErPsrUxYyfdTyqi23GvpVrxaib57ENndgqQPeuyTPQvLxtd1fTiHZCEn3hxvCdjKdvnmzmyuaaYMeP%2Fko6SS6SNCdl7FxECcns25oOybkwQJ0cjKbALp3NJkAkRwT5zcPUXIyk4mod3ylNFIQCSL%2BNIreCEKNIOkITN%2BD5I8JwDg2t5B0H25qU9C9K5ZO2DFZ%2BudvyGJMln5%2FDkn3%2BzUl%2B5U7WuWZ1IlFPy4h%2ByPI9ghpfoZs34EszsCyzyE5QdItIfnFa27o1vyAN5frbiiWQ9dnyxH1Wss88uus1ghpvcWn1kg5goxHUGIAaheRWwe5dJDHDvLUQZdfVGitFbtuI47iIGiGjLEgYKzWrPMaD8Jm7CJnE%2B0DZOkATA3AzAFSc4COHMDkP8HulrB8CTYbE%2BfDA%2FR4iUIQFJagoASFJCgygqJXHnNlfVs%2B5MrmkTfL%2FiwH5VBn7UN6rLO2SMhhekmemZjmOAc30REXFS%2BOAhEGPIqbLIzrLOahy2vNmu%2Fz0OOiAStLSLsAah3syzF56YUFpHJMrv37PCJ6BqvOwOTLoPkroMWw4bugu8Ow6WI%2FOVWCmkQmbdul7aqVmQDXJdJsCdmec6guyYvTDbb%2BJBDs%2FPrXX279sco%2FATMlUlPiU%2FkzQVvdH97WBTm6rQtLTrfSTHblPp1s905GM7H47ftir9CGb9ywg2%2FeYRNiUj66K2x2iyZ88j75bk1yLsy6NkyQHzfsjoi2c7u7lpskT29tv7u%2B0U2NsFbqZAQqH3%2F8GZgck6dMZ3q3r%2F71NqQZweQluvk5mQWkHoGlB7DpXL3VBEbNe6LUQZGXQ%2BNH859KEigxxzQqYf%2BHo3l9aO%2BjbRzQ7N70WnumRE%2BVoGoAmy8Os9ScX%2F81mAYi5QwjZZyjSBn11ZW1Vl5Ual4omlGzwTiPBONeww%2Bagev6nIeNlvBayOyYnT04%2BQ8AAP%2F%2FAQAA%2F%2F%2BfCFIdjwQAAA%3D%3D HTTP/1.1
Host: blacknesskeepplan.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=16875589; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4b7d4708ba0395d80b4b780a13d22a0d
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=f1151aaba3cde9272e9384a22cb1d66a&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=f1151aaba3cde9272e9384a22cb1d66a&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=040523d8-604e-402c-ba19-db26c574a69d&eb=afa55bd8bbaeee6cbf2f0b21fb513961&te=9e4947f35751465411fd1a4f5c358c78&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.1055&b_frame=0&pk=f1151aaba3cde9272e9384a22cb1d66a&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=6 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 69e6a14fd3c8045ed4e5856ccb4f6f6d
Strict-Transport-Security: max-age=0; includeSubdomains
suffertreasureapproval.com/pixel/sbs?c=1
200 OK 0 B URL HTTP/1.1 suffertreasureapproval.com/pixel/sbs?c=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: suffertreasureapproval.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://learningsmag.site/
Cookie: u_pl=18150765; uid_id2=040523d8-604e-402c-ba19-db26c574a69d:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 15 Jan 2023 06:09:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/js/script.js
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/js/script.js
IP
GET /sb/notifications/software/us/windows/flash-all/ssp/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: application/javascript
last-modified: Wed, 17 Feb 2021 11:46:52 GMT
etag: W/"602d022c-182"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l06%2B8r2aSlAU%2F%2Fb4oyjzWT6LJ6O4Ern8D%2FCB1JQxiHCAe2gctEqfro5%2B%2FdUvmWgfFmN1guOwq4Q9kKGpUrkIGPhgq%2Bei4HX65bRnotC%2BqcLNyZYtC3oJjohyRuVbLU1HA8ZkF8xl0gdk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bacdd571f8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/animate.css
200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/us/windows/flash-all/ssp/1/css/animate.css
IP
GET /sb/notifications/software/us/windows/flash-all/ssp/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:44 GMT
content-type: text/css
last-modified: Wed, 17 Feb 2021 11:46:51 GMT
etag: W/"602d022b-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rr2LiW75srfnUwiVTnZFlRBbraUZm3gIVfJmHWPrKwX%2BfKi0qBCyp3qEaB5f0u7bNlDCGh6%2BEEg93FIRDWk3HX4xE8%2BO4xNDtD8iid85IDnTaNGfE9E1HU4yyWhSuMKtO2rMVj36994A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 789c71bacdd171f8-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html
200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html
IP
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/au/b6/cf/48/b6cf48ca3e8ab4bdbcfaa2279b0fb2bc/1613726822.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://learningsmag.site
Connection: keep-alive
Referer: https://learningsmag.site/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 15 Jan 2023 06:09:43 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Fri, 19 Feb 2021 09:27:09 GMT
etag: W/"602f846d-4fa"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Sun, 15 Jan 2023 07:09:43 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2
learningsmag.site/wp-content/uploads/2023/01/cN6upBUkIsrve70Q.mp4?_=1
206 Partial Content 0 B URL HTTP/2 learningsmag.site/wp-content/uploads/2023/01/cN6upBUkIsrve70Q.mp4?_=1
IP
GET /wp-content/uploads/2023/01/cN6upBUkIsrve70Q.mp4?_=1 HTTP/1.1
Host: learningsmag.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://learningsmag.site/watch-viriako-leaked-viral-video-trends-on-twitter-reddit/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
content-type: video/mp4
last-modified: Thu, 12 Jan 2023 13:32:28 GMT
content-range: bytes 0-477905/477906
content-length: 477906
date: Sun, 15 Jan 2023 06:09:42 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
63.250.38.14
52.58.124.101
23.36.76.226
93.184.220.29
0.0.0.0