urlquery - report: libgen.lc/ads.php?md5=0A0D442ED4345F99B030A09421D82888

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
tissuecameallowing.com (2)	0	2022-11-20 12:36:11 UTC	2022-11-25 01:49:15 UTC	192.243.61.225	Unknown ranking
ocsp.sca1b.amazontrust.com (2)	1015	2017-03-03 15:20:51 UTC	2019-03-27 04:05:54 UTC	54.230.245.39
veilsuccessfully.com (2)	0	2022-11-04 03:52:04 UTC	2022-11-24 16:45:42 UTC	173.233.137.44	Unknown ranking
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
simplewebanalysis.com (2)	0	2022-02-25 04:06:25 UTC	2022-11-24 10:12:21 UTC	18.185.190.54	Unknown ranking
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-24 05:36:55 UTC	34.102.187.140
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
tallysaturatesnare.com (1)	0	2022-11-16 06:01:46 UTC	2022-11-24 07:33:48 UTC	173.233.137.52	Unknown ranking
cdn.cloudimagesb.com (1)	23099	2022-10-07 08:01:31 UTC	2022-10-08 10:27:40 UTC	45.133.44.10
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	44.237.93.5
code.jquery.com (1)	634	2012-05-21 17:28:02 UTC	2020-04-21 12:46:20 UTC	69.16.175.10
cdn.jsdelivr.net (2)	439	2012-09-30 00:15:09 UTC	2020-08-10 12:12:39 UTC	151.101.85.229
ocsp.globalsign.com (1)	2075	2012-07-20 17:46:16 UTC	2020-05-02 20:58:10 UTC	104.18.21.226
libgen.lc (2)	649669	2019-08-23 13:38:49 UTC	2022-11-24 20:31:25 UTC	89.248.170.56
r3.o.lencr.org (10)	344	No data	No data	23.36.77.32
ocsp.digicert.com (4)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-24 05:30:55 UTC	34.117.237.239
banquetunarmedgrater.com (1)	0	2022-08-04 15:12:50 UTC	2022-11-24 09:24:59 UTC	192.243.61.227	Unknown ranking
libgen.rocks (1)	49221	2021-08-21 07:52:58 UTC	2022-11-24 02:09:38 UTC	172.67.197.62

Scan Date	Severity	Indicator	Comment
2022-11-25	2	tallysaturatesnare.com	Sinkholed
2022-11-24	2	veilsuccessfully.com	Sinkholed
2022-11-25	2	banquetunarmedgrater.com	Sinkholed
2022-11-24	2	veilsuccessfully.com	Sinkholed

Date	UQ / IDS / BL	URL	IP
2023-01-22 16:12:06 +0000	0 - 0 - 10	libgen.lc/ads.php?md5=ED872427AD37F70D428B9AD (...)	89.248.170.56
2023-01-19 16:11:44 +0000	0 - 0 - 9	libgen.lc/ads.php?md5=BFF855238D78E1E46504A80 (...)	89.248.170.56
2023-01-19 03:52:24 +0000	0 - 0 - 10	libgen.lc/ads.php?md5=043380726004D792D56D0CF (...)	89.248.170.56
2023-01-19 03:52:07 +0000	0 - 0 - 5	libgen.lc/ads.php?md5=043380726004D792D56D0CF (...)	89.248.170.56
2023-01-18 23:33:29 +0000	0 - 0 - 6	libgen.lc/ads.php?md5=34350ECE0EEF14182AF2A2E (...)	89.248.170.56

Date	UQ / IDS / BL	URL	IP
2023-02-05 16:29:56 +0000	0 - 0 - 1	gamefabrique.com/download/genesis/jungle_book.exe	89.248.171.137
2023-02-05 16:29:51 +0000	0 - 0 - 3	gamefabrique.com/download/genesis/sonic_the_h (...)	89.248.171.137
2023-02-05 16:29:51 +0000	0 - 0 - 1	gamefabrique.com/download/nes/bomberman.exe	89.248.171.137
2023-02-05 16:29:49 +0000	0 - 0 - 1	gamefabrique.com/download/genesis/double_drag (...)	89.248.171.137
2023-02-05 16:29:48 +0000	0 - 0 - 3	gamefabrique.com/download/genesis/fun_n_games.exe	89.248.171.137

Date	UQ / IDS / BL	URL	IP
2023-01-22 16:12:06 +0000	0 - 0 - 10	libgen.lc/ads.php?md5=ED872427AD37F70D428B9AD (...)	89.248.170.56
2023-01-19 16:11:44 +0000	0 - 0 - 9	libgen.lc/ads.php?md5=BFF855238D78E1E46504A80 (...)	89.248.170.56
2023-01-19 03:52:24 +0000	0 - 0 - 10	libgen.lc/ads.php?md5=043380726004D792D56D0CF (...)	89.248.170.56
2023-01-19 03:52:07 +0000	0 - 0 - 5	libgen.lc/ads.php?md5=043380726004D792D56D0CF (...)	89.248.170.56
2023-01-18 23:33:29 +0000	0 - 0 - 6	libgen.lc/ads.php?md5=34350ECE0EEF14182AF2A2E (...)	89.248.170.56

Request	Response
GET /ads.php?md5=0A0D442ED4345F99B030A09421D82888 HTTP/1.1 Host: libgen.lc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: libgen.lc/ads.php?md5=0A0D442ED4345F99B030A09421D82888 FQDN: libgen.lc IP: 89.248.170.56 HASH: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3 89.248.170.56 HTTP/1.1 307 Temporary Redirect Content-Type: text/html Server: nginx Date: Fri, 25 Nov 2022 03:47:18 GMT Content-Length: 164 Connection: keep-alive Location: https://libgen.lc/ads.php?md5=0A0D442ED4345F99B030A09421D82888 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 164 Md5: 813f9846b49c0ada805648edf1b2fdbd Sha1: caa24890460f73e6a72bb49426351e67e83b053d Sha256: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA" Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4637 Expires: Fri, 25 Nov 2022 05:04:35 GMT Date: Fri, 25 Nov 2022 03:47:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7c60904d097cde276e4e5632cef1b9f1 Sha1: 4f805026462589345d85e8df2d18eafba6237504 Sha256: 12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1757 Cache-Control: max-age=112390 Date: Fri, 25 Nov 2022 03:47:18 GMT Etag: "637f47ef-1d7" Expires: Sat, 26 Nov 2022 11:00:28 GMT Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT Server: ECS (ska/F70B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: af40a2fcf8debb90c3608002da6c907a Sha1: 3c75d6c0b557a3bd8d5db50155b8d896e852c145 Sha256: 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2" Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=16575 Expires: Fri, 25 Nov 2022 08:23:33 GMT Date: Fri, 25 Nov 2022 03:47:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 260e9998c20d831b66f1029c8f47aac9 Sha1: 716d630f647c54dc69a7f9c63a6cac294b3df7f7 Sha256: c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 25 Nov 2022 03:17:24 GMT cache-control: public,max-age=3600 age: 1794 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: d130218d0e2841f39c99610fe1a2ab90 Sha1: 29fbe1e177ee55c7a61ae0a206afff271cf5f945 Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: GbQSV0jg1DdcuFgOfmC50V/x5GvCIRtoTy6NR0TmpldViYl8JX0clyggLEukiX/Qm892lo3v1rE= x-amz-request-id: FG4W2XGC2BP8WVF1 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 25 Nov 2022 03:40:39 GMT age: 399 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 3c23e93fd6d0adc9fe23cf317ade4baf9efd3fd4d7648e605d78131d4c216c13 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "3C23E93FD6D0ADC9FE23CF317ADE4BAF9EFD3FD4D7648E605D78131D4C216C13" Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=512 Expires: Fri, 25 Nov 2022 03:55:50 GMT Date: Fri, 25 Nov 2022 03:47:18 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e51de3afd8ff8fb4ccce0167b58f7ac5 Sha1: e1c2c569027c5b8aceefd536ec8a6a5514914c96 Sha256: 3c23e93fd6d0adc9fe23cf317ade4baf9efd3fd4d7648e605d78131d4c216c13
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 25 Nov 2022 03:47:18 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /ads.php?md5=0A0D442ED4345F99B030A09421D82888 HTTP/1.1 Host: libgen.lc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: libgen.lc/ads.php?md5=0A0D442ED4345F99B030A09421D82888 FQDN: libgen.lc IP: 89.248.170.56 HASH: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3 89.248.170.56 HTTP/1.1 307 Temporary Redirect Content-Type: text/html Server: nginx Date: Fri, 25 Nov 2022 03:47:18 GMT Content-Length: 164 Connection: keep-alive Location: https://libgen.rocks/ads.php?md5=0A0D442ED4345F99B030A09421D82888 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 164 Md5: 813f9846b49c0ada805648edf1b2fdbd Sha1: caa24890460f73e6a72bb49426351e67e83b053d Sha256: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 25 Nov 2022 03:08:53 GMT cache-control: public,max-age=3600 age: 2306 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: f7fdbd809d5d776f1c915168fefe08d9500968f2c63a2a74bcda7e393f51ce55 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Cache-Control: max-age=166065 Date: Fri, 25 Nov 2022 03:47:19 GMT Etag: "63802078-117" Expires: Sun, 27 Nov 2022 01:55:04 GMT Last-Modified: Fri, 25 Nov 2022 01:55:04 GMT Server: nginx Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: babb2a8979a86ca322728828c4ae9ba4 Sha1: be5ea3f1ff01705fb47de8db8dda8ac6dcd9e9e1 Sha256: f7fdbd809d5d776f1c915168fefe08d9500968f2c63a2a74bcda7e393f51ce55
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 3427 Cache-Control: max-age=108997 Date: Fri, 25 Nov 2022 03:47:19 GMT Etag: "637f3429-1d7" Expires: Sat, 26 Nov 2022 10:03:56 GMT Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT Server: ECS (ska/F70B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: fb6949e7abaa473393f7c604691de14f Sha1: 599681bba3947709baa603bbae2dd7afd04059a4 Sha256: 36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: f7fdbd809d5d776f1c915168fefe08d9500968f2c63a2a74bcda7e393f51ce55 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 0 Cache-Control: max-age=166065 Date: Fri, 25 Nov 2022 03:47:19 GMT Etag: "63802078-117" Expires: Sun, 27 Nov 2022 01:55:04 GMT Last-Modified: Fri, 25 Nov 2022 01:55:04 GMT Server: ECS (ska/F70B) X-Cache: HIT Content-Length: 279 --- Additional Info --- Magic: data Size: 279 Md5: babb2a8979a86ca322728828c4ae9ba4 Sha1: be5ea3f1ff01705fb47de8db8dda8ac6dcd9e9e1 Sha256: f7fdbd809d5d776f1c915168fefe08d9500968f2c63a2a74bcda7e393f51ce55
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 9HwwLQeu5QcfvbRIn54GLQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 44.237.93.5 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 44.237.93.5 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: Uyp9ack5DVu8Q2VxBEPhzAQc8j4= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: code.jquery.com/jquery-3.6.0.min.js FQDN: code.jquery.com IP: 69.16.175.10 HASH: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f 69.16.175.10 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 date: Fri, 25 Nov 2022 03:47:19 GMT content-encoding: gzip content-length: 30875 last-modified: Fri, 20 Aug 2021 17:47:53 GMT accept-ranges: bytes server: nginx etag: W/"611feac9-15d9d" cache-control: max-age=315360000, public access-control-allow-origin: * vary: Accept-Encoding x-hw: 1669348039.dop020.sk1.t,1669348039.cds229.sk1.hn,1669348039.cds210.sk1.c X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65447) Size: 30875 Md5: 899f0189aaf034bbba5340f724d91dfa Sha1: 210ea9de03968edb9d839ba4a0ce2d48666a8ab8 Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f
GET /npm/bootstrap@4.5.3/dist/js/bootstrap.min.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap. (...) FQDN: cdn.jsdelivr.net IP: 151.101.85.229 HASH: aeceffe4918ebf706c006751bc123618a5ebbeabbad4e8c70fd6e9217d60f613 151.101.85.229 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 4.5.3 x-jsd-version-type: version etag: W/"f708-DE6ERfbwyWEdwcE9xvCF60vKygs" content-encoding: gzip accept-ranges: bytes date: Fri, 25 Nov 2022 03:47:19 GMT age: 7360721 x-served-by: cache-fra19126-FRA, cache-bma1651-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 14911 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (62961) Size: 14911 Md5: 77e609884bec4ce70818ff2f431da120 Sha1: b4f502d2e81b51d2e7b2eb1895b14df999f65385 Sha256: aeceffe4918ebf706c006751bc123618a5ebbeabbad4e8c70fd6e9217d60f613
GET /npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: script Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/bootstrap@4.5.3/dist/js/bootstrap. (...) FQDN: cdn.jsdelivr.net IP: 151.101.85.229 HASH: 53c395dd774b12c572c9f1b453f7903c08de32f6958d974bc5db38634a6509d6 151.101.85.229 HTTP/2 200 OK content-type: application/javascript; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 4.5.3 x-jsd-version-type: version etag: W/"148b8-qycDEVlyTiQh9v9ccPSOZXq+nTk" content-encoding: gzip accept-ranges: bytes date: Fri, 25 Nov 2022 03:47:19 GMT age: 19009504 x-served-by: cache-fra19179-FRA, cache-bma1651-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 21785 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (65299) Size: 21785 Md5: 151629f36761d6fb6d0e0330239884a6 Sha1: ebb9c30e5565793e2767735f0647bdf26fed4ab5 Sha256: 53c395dd774b12c572c9f1b453f7903c08de32f6958d974bc5db38634a6509d6
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 FQDN: ocsp.globalsign.com IP: 104.18.21.226 HASH: 03f4b3673eacd949e475162d46f707dad660368d2a08368a78870171b4d6c831 104.18.21.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 25 Nov 2022 03:47:19 GMT Transfer-Encoding: chunked Connection: keep-alive Etag: "FCF5E91366C819C63302B0C95B2D7B002277A11D" Expires: Fri, 25 Nov 2022 14:00:00 GMT Last-Modified: Fri, 25 Nov 2022 02:00:00 UTC Cache-Control: s-maxage=3600, public, no-transform, must-revalidate CF-Cache-Status: HIT Age: 2764 Vary: Accept-Encoding Server: cloudflare CF-RAY: 76f767005ab3b51e-OSL --- Additional Info --- Magic: gzip compressed data, from Unix\012- data Size: 2117 Md5: 2cce5b504002a252210ccdb8884854e7 Sha1: 4a2787ed84887608ea663dabd13ef868c702b79b Sha256: 03f4b3673eacd949e475162d46f707dad660368d2a08368a78870171b4d6c831
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 4404c2c26bd16149f3e764ce3a3cf9bd0f698cf65afed8f2d99c24cbc8bcd460 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4404C2C26BD16149F3E764CE3A3CF9BD0F698CF65AFED8F2D99C24CBC8BCD460" Last-Modified: Thu, 24 Nov 2022 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=19337 Expires: Fri, 25 Nov 2022 09:09:37 GMT Date: Fri, 25 Nov 2022 03:47:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6bd732c18dd813a692b4a4935bd661be Sha1: 368cbe20657151b49b932c7b5fb2a874a6b0562a Sha256: 4404c2c26bd16149f3e764ce3a3cf9bd0f698cf65afed8f2d99c24cbc8bcd460
GET /d5/3e/27/d53e2728a6de1b6d59e60f5833fa9c3f.js HTTP/1.1 Host: tissuecameallowing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tissuecameallowing.com/d5/3e/27/d53e2728a6de1b6d59e60f5 (...) FQDN: tissuecameallowing.com IP: 192.243.61.225 HASH: 10415aae7c5e2440b5014167d4908bda72d57c84852ec8d3b35f8f3f730a6c6f 192.243.61.225 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Fri, 25 Nov 2022 03:47:20 GMT Transfer-Encoding: chunked Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: e97a156d2d60b8e72b1d2a4e79582936 Strict-Transport-Security: max-age=0; includeSubdomains Content-Encoding: gzip --- Additional Info --- Magic: HTML document, ASCII text, with very long lines (60151), with no line terminators Size: 20700 Md5: 1c89e8c82d96765cd3a81219e5179244 Sha1: 86ae194d49213802f523343f9813b60341751c84 Sha256: 10415aae7c5e2440b5014167d4908bda72d57c84852ec8d3b35f8f3f730a6c6f
GET /e445fc5fceeb52489a652f9894c20087/invoke.js HTTP/1.1 Host: tissuecameallowing.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tissuecameallowing.com/e445fc5fceeb52489a652f9894c20087 (...) FQDN: tissuecameallowing.com IP: 192.243.61.225 HASH: fcd0fd5a81e0b120870ee29b8e12af8cf6ee4b5bc5eb6954ed9b7a4e5cc3e0c2 192.243.61.225 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Fri, 25 Nov 2022 03:47:20 GMT Transfer-Encoding: chunked Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: a92d4223b847a25a1daf51f28c0be6ad Strict-Transport-Security: max-age=0; includeSubdomains Content-Encoding: gzip --- Additional Info --- Magic: exported SGML document, ASCII text, with very long lines (26981), with no line terminators Size: 9809 Md5: f5ba18d63c722fd3fa6a11ec1cef4097 Sha1: 479bb05fba1db13a2f85d6071a51acc0c49598eb Sha256: fcd0fd5a81e0b120870ee29b8e12af8cf6ee4b5bc5eb6954ed9b7a4e5cc3e0c2
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 54.230.245.39 HASH: d2c786795613bca9a9bee9143dc278307b828a07b40880cfa20e087895aa359a 54.230.245.39 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=124947 Date: Fri, 25 Nov 2022 03:47:20 GMT Etag: "637f7219-1d7" Expires: Sat, 26 Nov 2022 14:29:47 GMT Last-Modified: Thu, 24 Nov 2022 13:31:05 GMT Server: ECS (bsa/EB1E) X-Cache: Miss from cloudfront Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: skc1sm3w69jPbo3-KwjIX7PnnBGZGfXQs9IaKYKDQQxo7HTARJiJxg== Age: 3522 --- Additional Info --- Magic: data Size: 471 Md5: 5348b4ee74a9c894db836c2b61cc7086 Sha1: 9a65195ea94f2f7326007ad86ca1675010f4c00e Sha256: d2c786795613bca9a9bee9143dc278307b828a07b40880cfa20e087895aa359a
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9" Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4405 Expires: Fri, 25 Nov 2022 05:00:45 GMT Date: Fri, 25 Nov 2022 03:47:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6827d82f488045e02e40d6a2fdbae4b3 Sha1: 4944139a4b08769511ffc6aa913857d88a0db7bc Sha256: 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9" Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4405 Expires: Fri, 25 Nov 2022 05:00:45 GMT Date: Fri, 25 Nov 2022 03:47:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 6827d82f488045e02e40d6a2fdbae4b3 Sha1: 4944139a4b08769511ffc6aa913857d88a0db7bc Sha256: 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 11743 x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cICD-F7joAMFqmA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw== via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 21:54:45 GMT age: 21155 etag: "b0ddc1555d2506177adcdcea77864d75f1245d07" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 11743 Md5: 8784bb7a8b88736a6016f712e3183bf3 Sha1: b0ddc1555d2506177adcdcea77864d75f1245d07 Sha256: 8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2302d358-ba65-4bf0-9d74-b5fb532a1d52.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 767fd66cf0751dd80b2453588f9363fac7d9637da3dc9098d25fb65699ca8c5e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6590 x-amzn-requestid: 5d8b02c4-673a-4c77-8f24-498d9b8a28ff x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cIB8zGeAIAMF4HA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637fe384-661ce3991caf87e8558158c3;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: 4iFMdgZvXpHdbGKY-3exNXsKVn2FuWGQg70mCqzGLSHk_bSTiXSCxA== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 22:01:38 GMT age: 20742 etag: "236199a790f16dcf96dba80b9945836b37e3c2eb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6590 Md5: 1adbf0cd373a4c06caa71eac14e1286c Sha1: 236199a790f16dcf96dba80b9945836b37e3c2eb Sha256: 767fd66cf0751dd80b2453588f9363fac7d9637da3dc9098d25fb65699ca8c5e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 624847cfdfcd770d2dee8a2b85f3c7c480cda58ba2aef1135184f3dffc30d1f1 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8277 x-amzn-requestid: e84a5668-cd91-42af-b6de-5eb694ea56e6 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cIB-KFtmIAMF00Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637fe38d-64513fb257d83b9847c82929;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:09 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: O4PtH20kVWgH-Jf_TivPqMqjnwrZB_8XvZAkDDzLLFPXVjqzkz1YJw== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 21:59:22 GMT age: 20878 etag: "6a8504212141af411a18ce58960c8bb52e8116ac" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8277 Md5: f59a591b222397ff0f01c22a0786e660 Sha1: 6a8504212141af411a18ce58960c8bb52e8116ac Sha256: 624847cfdfcd770d2dee8a2b85f3c7c480cda58ba2aef1135184f3dffc30d1f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72e29c5-d9d3-43d5-8c71-f66a22a3f112.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: b0e1d9af095632e6d75bc7606bccfb0c1903f5173696cefb7e36c3d34a98358e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6560 x-amzn-requestid: e8956a92-d016-41a2-99b4-631a6db3b8db x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: byQzsFY3IAMF9iA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63772e7d-2337148b0a824d134aaab9d7;Sampled=0 x-amzn-remapped-date: Fri, 18 Nov 2022 07:04:29 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: nqv3cZb0_TFYs1XuLw1pCg4B1HmA87mj4S1Sjh3cgXyWd3GnweAY7w== via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 04:26:03 GMT age: 84077 etag: "75d9a14e98ffba5a71a6f710be721b593338ffdc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6560 Md5: 9bc7c4877bfa24d0c1bbb774cd906af1 Sha1: 75d9a14e98ffba5a71a6f710be721b593338ffdc Sha256: b0e1d9af095632e6d75bc7606bccfb0c1903f5173696cefb7e36c3d34a98358e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4309 x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b1U8xGxgIAMF-qQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0 x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT x-amz-cf-pop: SEA19-C3 x-cache: Hit from cloudfront x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 05:04:28 GMT age: 81772 etag: "126771b86638108050cf57c0d12faa27f80f0edb" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4309 Md5: 841a4b110022a99ddea6f7bf66df0fa1 Sha1: 126771b86638108050cf57c0d12faa27f80f0edb Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F68dc3a7e-f975-440d-a07f-305243b24788.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: cb36e84116edbaa02347bc53611a8318ac8284ac71346006cb95688a6a08f662 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10531 x-amzn-requestid: aa926e70-4b20-40ba-849d-50e96cab8bea x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cICPAHoqoAMFXHA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637fe3f9-28cdb407069866236c99a0c7;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 21:36:57 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: G4LR5DxkDi5dC9OLvwdK6-e2bbGjJMWLInRD1r_CKYKxFMqOoG1Z0w== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google date: Thu, 24 Nov 2022 21:55:47 GMT age: 21093 etag: "050da47a42e16a83c1d59419055961fe9f1f4cc0" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10531 Md5: c71b83b77af9bb19b3845048a3008b43 Sha1: 050da47a42e16a83c1d59419055961fe9f1f4cc0 Sha256: cb36e84116edbaa02347bc53611a8318ac8284ac71346006cb95688a6a08f662
GET /stats HTTP/1.1 Host: simplewebanalysis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: simplewebanalysis.com/stats FQDN: simplewebanalysis.com IP: 18.185.190.54 HASH: 71d0024b620b74c0ea84d5596e084128f6bf407ddcb3d7a18d9283075d32e044 18.185.190.54 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Fri, 25 Nov 2022 03:47:20 GMT content-length: 40 server: fasthttp access-control-allow-origin: https://libgen.rocks access-control-allow-credentials: true set-cookie: uid_id2=4082b695-4e9c-4c0a-ba54-c8480fc8ba1d:3:1; expires=Mon, 22 Nov 2032 03:47:20 GMT; secure; SameSite=None X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 40 Md5: 2d8af385fce4c3f2a26e44bf5091c0a8 Sha1: dc56d11a12f23abf80c66fadbd7bff73f31a05d1 Sha256: 71d0024b620b74c0ea84d5596e084128f6bf407ddcb3d7a18d9283075d32e044
POST / HTTP/1.1 Host: ocsp.sca1b.amazontrust.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.sca1b.amazontrust.com/ FQDN: ocsp.sca1b.amazontrust.com IP: 54.230.245.39 HASH: d2c786795613bca9a9bee9143dc278307b828a07b40880cfa20e087895aa359a 54.230.245.39 HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=125801 Date: Fri, 25 Nov 2022 03:47:20 GMT Etag: "637f7219-1d7" Expires: Sat, 26 Nov 2022 14:44:01 GMT Last-Modified: Thu, 24 Nov 2022 13:31:05 GMT Server: ECS (dcb/7ECA) X-Cache: Miss from cloudfront Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: DMcGHgCyMqTVUrYmJJ_JytuAlduZpNiddcCU3Cc50tljB6rN2QACTQ== Age: 4376 --- Additional Info --- Magic: data Size: 471 Md5: 5348b4ee74a9c894db836c2b61cc7086 Sha1: 9a65195ea94f2f7326007ad86ca1675010f4c00e Sha256: d2c786795613bca9a9bee9143dc278307b828a07b40880cfa20e087895aa359a
GET /stats HTTP/1.1 Host: simplewebanalysis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: simplewebanalysis.com/stats FQDN: simplewebanalysis.com IP: 18.185.190.54 HASH: c10fc6291cc61380d24901d8ac180627f8e95fcbbd7986ca214d50f6d375eb20 18.185.190.54 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Fri, 25 Nov 2022 03:47:20 GMT content-length: 40 server: fasthttp access-control-allow-origin: https://libgen.rocks access-control-allow-credentials: true set-cookie: uid_id2=ac160923-221f-4e2a-8c12-6430037cf3e2:3:1; expires=Mon, 22 Nov 2032 03:47:20 GMT; secure; SameSite=None X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 40 Md5: 6a01e2bc7e40a41c8b1ae24b4a58ea5c Sha1: 124f141e7a3b922faa7eddaa0629254b804c73a2 Sha256: c10fc6291cc61380d24901d8ac180627f8e95fcbbd7986ca214d50f6d375eb20
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6b518ee89587078376f3c5b6ff4f1bd6a615ed9d0b0c94037b9235d25152ff0d 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6B518EE89587078376F3C5B6FF4F1BD6A615ED9D0B0C94037B9235D25152FF0D" Last-Modified: Wed, 23 Nov 2022 19:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6064 Expires: Fri, 25 Nov 2022 05:28:24 GMT Date: Fri, 25 Nov 2022 03:47:20 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 46851561ddffd8c312b6a7e87ce9be40 Sha1: 4dac90d5dfaeefac573c8a414e0d2732a8f707a7 Sha256: 6b518ee89587078376f3c5b6ff4f1bd6a615ed9d0b0c94037b9235d25152ff0d
GET /pixel/purst?dl=0&th=0&sc=0&rs=2349&rd=2349&fd=962&bv=22.10.v.9&tmpl=70 HTTP/1.1 Host: tallysaturatesnare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: tallysaturatesnare.com/pixel/purst?dl=0&th=0&sc=0&rs=23 (...) FQDN: tallysaturatesnare.com IP: 173.233.137.52 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 173.233.137.52 HTTP/1.1 200 OK Server: nginx/1.19.5 Date: Fri, 25 Nov 2022 03:47:21 GMT Content-Length: 0 Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests Access-Control-Expose-Headers: Content-Length,Content-Range --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - quad9: Sinkholed
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 0b1ea386af7b05606d50261bafbd4fa52f4ae4401b2186a08e744644cbafeb76 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "83ED1556662E5A30F0317897E002A2C5105D8E9864CED9D01EC6954CEA6F4603" Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6186 Expires: Fri, 25 Nov 2022 05:30:27 GMT Date: Fri, 25 Nov 2022 03:47:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 1113 Md5: 59d83b1c5666503e0b595f48a06165e5 Sha1: 47b41e3c9163fd7a4baf12481dc3fe9b0a629c56 Sha256: 0b1ea386af7b05606d50261bafbd4fa52f4ae4401b2186a08e744644cbafeb76
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: f08f6d4462a469f4089a112dc35953447c09125b9f56cfad7ea6a95a80e49565 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F08F6D4462A469F4089A112DC35953447C09125B9F56CFAD7EA6A95A80E49565" Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=12249 Expires: Fri, 25 Nov 2022 07:11:30 GMT Date: Fri, 25 Nov 2022 03:47:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: d734a7a2d2656fcb2c7964591a0fe9c8 Sha1: 3190ed3610ec19f25864a2b0ff3e1798d142be37 Sha256: f08f6d4462a469f4089a112dc35953447c09125b9f56cfad7ea6a95a80e49565
GET /watch.187284393679.js?key=e445fc5fceeb52489a652f9894c20087&kw=%5B%22library%22%2C%22genesis%22%5D&refer=https%3A%2F%2Flibgen.rocks%2Fads.php%3Fmd5%3D0A0D442ED4345F99B030A09421D82888&tz=0&dev=e&res=12.1055&uuid=ac160923-221f-4e2a-8c12-6430037cf3e2%3A3%3A1 HTTP/1.1 Host: veilsuccessfully.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: veilsuccessfully.com/watch.187284393679.js?key=e445fc5f (...) FQDN: veilsuccessfully.com IP: 173.233.137.44 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 173.233.137.44 HTTP/1.1 307 Temporary Redirect Content-Type: text/html Server: nginx/1.19.5 Date: Fri, 25 Nov 2022 03:47:21 GMT Content-Length: 0 Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Custom-Referer: https://libgen.rocks Access-Control-Allow-Origin: https://libgen.rocks Access-Control-Allow-Credentials: true Location: https://veilsuccessfully.com/watch.187284393679.js?key=e445fc5fceeb52489a652f9894c20087&kw=%5B%22library%22%2C%22genesis%22%5D&refer=https%3A%2F%2Flibgen.rocks%2Fads.php%3Fmd5%3D0A0D442ED4345F99B030A09421D82888&tz=0&dev=e&res=12.1055&uuid=ac160923-221f-4e2a-8c12-6430037cf3e2%3A3%3A1&shu=f4f4436d03341d3a2ee512cc7ab8432bf2121ea7d5a46fda0d10b1e7dca19a28a596f06fcc8f87de5e3b68110286d0eadbc51fc2c3edf77cf6a4a7597a34582f7b926731be2684d1b52382567cff35d462ab72827371f926eed2bde70d5b&pst=1669348101&rmtc=t Set-Cookie: u_pl=17566676; expires=Sat, 26 Nov 2022 03:47:21 GMT; secure; SameSite=None ain=eyJhbGciOiJIUzI1NiJ9.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.MPXPBvzTHpoO_9e4-dZ4_8K21lJljGT2KhY7FgtSBas; expires=Fri, 25 Nov 2022 03:48:21 GMT; secure; SameSite=None Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: ec829f26a8259ab0c071ff609122165f Strict-Transport-Security: max-age=0; includeSubdomains --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - quad9: Sinkholed
GET /advertisers.js HTTP/1.1 Host: banquetunarmedgrater.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://libgen.rocks/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: banquetunarmedgrater.com/advertisers.js FQDN: banquetunarmedgrater.com IP: 192.243.61.227 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 192.243.61.227 HTTP/1.1 200 OK Content-Type: application/javascript Server: nginx/1.22.0 Date: Fri, 25 Nov 2022 03:47:21 GMT Content-Length: 0 Connection: keep-alive Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 5a12c107c0d2661fede4c8a0efab770f Strict-Transport-Security: max-age=0; includeSubdomains --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - quad9: Sinkholed
GET /watch.187284393679.js?key=e445fc5fceeb52489a652f9894c20087&kw=%5B%22library%22%2C%22genesis%22%5D&refer=https%3A%2F%2Flibgen.rocks%2Fads.php%3Fmd5%3D0A0D442ED4345F99B030A09421D82888&tz=0&dev=e&res=12.1055&uuid=ac160923-221f-4e2a-8c12-6430037cf3e2%3A3%3A1&shu=f4f4436d03341d3a2ee512cc7ab8432bf2121ea7d5a46fda0d10b1e7dca19a28a596f06fcc8f87de5e3b68110286d0eadbc51fc2c3edf77cf6a4a7597a34582f7b926731be2684d1b52382567cff35d462ab72827371f926eed2bde70d5b&pst=1669348101&rmtc=t HTTP/1.1 Host: veilsuccessfully.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://libgen.rocks Referer: https://libgen.rocks/ Connection: keep-alive Cookie: u_pl=17566676; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU2NjY3NiwiayI6ImU0NDVmYzVmY2VlYjUyNDg5YTY1MmY5ODk0YzIwMDg3Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTQ5NTI1LCJwaWQiOjUyMDQ2NSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyNywiYWlkIjoyMywicHQiOjQsInBrIjoiZGdxeTIzczMiLCJjcGtzIjp7ICIyOCI6IjBlMjMxNDNmZTUwNTNhYTBhNzc5YmEyOTkzYzJhOGUxIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo5MDc1MzQ1NywiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEyMDYyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMDUuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwidXAiOnRydWUsInIiOiJodHRwczovL2xpYmdlbi5yb2Nrcy9hZHMucGhwP21kNT0wQTBENDQyRUQ0MzQ1Rjk5QjAzMEEwOTQyMUQ4Mjg4OCJ9fQ.MPXPBvzTHpoO_9e4-dZ4_8K21lJljGT2KhY7FgtSBas Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: veilsuccessfully.com/watch.187284393679.js?key=e445fc5f (...) FQDN: veilsuccessfully.com IP: 173.233.137.44 HASH: bd7cadb6ded286e19f4efce101cf6907fe2f3853816c1da025424a51dfab9a72 173.233.137.44 HTTP/1.1 200 OK Content-Type: text/html Server: nginx/1.19.5 Date: Fri, 25 Nov 2022 03:47:21 GMT Transfer-Encoding: chunked Connection: keep-alive P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA Custom-Referer: https://libgen.rocks Access-Control-Allow-Origin: https://libgen.rocks Access-Control-Allow-Credentials: true Set-Cookie: uid_id2=ac160923-221f-4e2a-8c12-6430037cf3e2:3:1; expires=Fri, 02 Dec 2022 03:47:21 GMT; secure; SameSite=None iprce595aecb31ee4d8e7826f4b5279c42bd=3569808; expires=Fri, 25 Nov 2022 07:47:21 GMT; secure; SameSite=None pdhtkv=true; expires=Sat, 26 Nov 2022 03:47:21 GMT; secure; SameSite=None uncs=1; expires=Sat, 26 Nov 2022 03:47:21 GMT; secure; SameSite=None pdhtkv23=true; expires=Sat, 26 Nov 2022 03:47:21 GMT; secure; SameSite=None uncs23=1; expires=Sat, 26 Nov 2022 03:47:21 GMT; secure; SameSite=None Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 985227417445acbe78b7851dcf14663d Strict-Transport-Security: max-age=0; includeSubdomains Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document, ASCII text, with very long lines (2640) Size: 2088 Md5: 040bc81aac627ed5a8e44a230a398d2b Sha1: e10a163216d18ac8cc405fbc773594ac94cb94a2 Sha256: bd7cadb6ded286e19f4efce101cf6907fe2f3853816c1da025424a51dfab9a72 Alerts: Blocklists: - quad9: Sinkholed
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 5a7ebb4a3bfc1046cd3c07cef6bd550f3452c3cf4d48d48e6428473f2de44c51 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5A7EBB4A3BFC1046CD3C07CEF6BD550F3452C3CF4D48D48E6428473F2DE44C51" Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8724 Expires: Fri, 25 Nov 2022 06:12:45 GMT Date: Fri, 25 Nov 2022 03:47:21 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4f6c1497d491ebdec0b24caf356dad1f Sha1: 6efe847d68565760b80862295cb809e7efee7de8 Sha256: 5a7ebb4a3bfc1046cd3c07cef6bd550f3452c3cf4d48d48e6428473f2de44c51
GET /cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png HTTP/1.1 Host: cdn.cloudimagesb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61b (...) FQDN: cdn.cloudimagesb.com IP: 45.133.44.10 HASH: 9de12cf85ad80cae34d8bdaeb59169d75e3bd4f8b931ec90ea2c3be166647c0e 45.133.44.10 HTTP/2 200 OK content-type: image/png date: Fri, 25 Nov 2022 03:47:21 GMT content-length: 105910 server: nginx/1.17.6 last-modified: Wed, 27 Jul 2022 11:08:06 GMT etag: "62e11c96-19db6" expires: Sun, 27 Nov 2022 03:47:21 GMT cache-control: max-age=172800 x-proxy-cache: HIT accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data Size: 105910 Md5: a36b92bb68d9b579458560ba9b94862a Sha1: 782d2932ccd3a56e5aad1cca7e6e7fb4a3cf23d6 Sha256: 9de12cf85ad80cae34d8bdaeb59169d75e3bd4f8b931ec90ea2c3be166647c0e
GET /ads.php?md5=0A0D442ED4345F99B030A09421D82888 HTTP/1.1 Host: libgen.rocks User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: libgen.rocks/ads.php?md5=0A0D442ED4345F99B030A09421D82888 FQDN: libgen.rocks IP: 172.67.197.62 172.67.197.62 HTTP/2 200 OK content-type: text/html; charset=UTF-8 date: Fri, 25 Nov 2022 03:47:19 GMT set-cookie: adsenselg=show; expires=Fri, 25-Nov-2022 04:46:41 GMT; Max-Age=3600 vary: Accept-Encoding cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yt%2F26S62ipEMUVK47cuKIyj6bdY8YNGnRZGiwMK8D9KKP6fMjNku8kkcmc0%2BwzMfBChSoB4g1awtJNqhAIaxL2Fhh%2FraXwGdDFP5QYpmLDf7t5wMLiaGkupnlBAmRcw%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 76f766fdcfcf1c12-OSL content-encoding: br alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            GET /ads.php?md5=0A0D442ED4345F99B030A09421D82888 HTTP/1.1 

                                        
                                            
Host: libgen.lc

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         89.248.170.56

                                        
                                            HTTP/1.1 307 Temporary Redirect 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:18 GMT 

                                        
                                            
Content-Length: 164 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Location: https://libgen.lc/ads.php?md5=0A0D442ED4345F99B030A09421D82888 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

                                                Size:   164

                                                Md5:    813f9846b49c0ada805648edf1b2fdbd

                                                Sha1:   caa24890460f73e6a72bb49426351e67e83b053d

                                                Sha256: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1757 

                                        
                                            
Cache-Control: max-age=112390 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:18 GMT 

                                        
                                            
Etag: "637f47ef-1d7" 

                                        
                                            
Expires: Sat, 26 Nov 2022 11:00:28 GMT 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT 

                                        
                                            
Server: ECS (ska/F70B) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    af40a2fcf8debb90c3608002da6c907a

                                                Sha1:   3c75d6c0b557a3bd8d5db50155b8d896e852c145

                                                Sha256: 555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 25 Nov 2022 03:17:24 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 1794 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    d130218d0e2841f39c99610fe1a2ab90

                                                Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945

                                                Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "3C23E93FD6D0ADC9FE23CF317ADE4BAF9EFD3FD4D7648E605D78131D4C216C13" 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=512 

                                        
                                            
Expires: Fri, 25 Nov 2022 03:55:50 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:18 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    e51de3afd8ff8fb4ccce0167b58f7ac5

                                                Sha1:   e1c2c569027c5b8aceefd536ec8a6a5514914c96

                                                Sha256: 3c23e93fd6d0adc9fe23cf317ade4baf9efd3fd4d7648e605d78131d4c216c13

                                        
                                            GET /ads.php?md5=0A0D442ED4345F99B030A09421D82888 HTTP/1.1 

                                        
                                            
Host: libgen.lc

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         89.248.170.56

                                        
                                            HTTP/1.1 307 Temporary Redirect 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:18 GMT 

                                        
                                            
Content-Length: 164 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Location: https://libgen.rocks/ads.php?md5=0A0D442ED4345F99B030A09421D82888 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

                                                Size:   164

                                                Md5:    813f9846b49c0ada805648edf1b2fdbd

                                                Sha1:   caa24890460f73e6a72bb49426351e67e83b053d

                                                Sha256: 8f03491247cbfa8a2e60e0f7ec62d63b5070659f60383a1c81abeb2b20221be3

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Cache-Control: max-age=166065 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:19 GMT 

                                        
                                            
Etag: "63802078-117" 

                                        
                                            
Expires: Sun, 27 Nov 2022 01:55:04 GMT 

                                        
                                            
Last-Modified: Fri, 25 Nov 2022 01:55:04 GMT 

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    babb2a8979a86ca322728828c4ae9ba4

                                                Sha1:   be5ea3f1ff01705fb47de8db8dda8ac6dcd9e9e1

                                                Sha256: f7fdbd809d5d776f1c915168fefe08d9500968f2c63a2a74bcda7e393f51ce55

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 0 

                                        
                                            
Cache-Control: max-age=166065 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:19 GMT 

                                        
                                            
Etag: "63802078-117" 

                                        
                                            
Expires: Sun, 27 Nov 2022 01:55:04 GMT 

                                        
                                            
Last-Modified: Fri, 25 Nov 2022 01:55:04 GMT 

                                        
                                            
Server: ECS (ska/F70B) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 279 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   279

                                                Md5:    babb2a8979a86ca322728828c4ae9ba4

                                                Sha1:   be5ea3f1ff01705fb47de8db8dda8ac6dcd9e9e1

                                                Sha256: f7fdbd809d5d776f1c915168fefe08d9500968f2c63a2a74bcda7e393f51ce55

                                        
                                            GET /jquery-3.6.0.min.js HTTP/1.1 

                                        
                                            
Host: code.jquery.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://libgen.rocks 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://libgen.rocks/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         69.16.175.10

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=utf-8

                                        

                                        
                                            
date: Fri, 25 Nov 2022 03:47:19 GMT 

                                        
                                            
content-encoding: gzip 

                                        
                                            
content-length: 30875 

                                        
                                            
last-modified: Fri, 20 Aug 2021 17:47:53 GMT 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: nginx 

                                        
                                            
etag: W/"611feac9-15d9d" 

                                        
                                            
cache-control: max-age=315360000, public 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-hw: 1669348039.dop020.sk1.t,1669348039.cds229.sk1.hn,1669348039.cds210.sk1.c 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65447)

                                                Size:   30875

                                                Md5:    899f0189aaf034bbba5340f724d91dfa

                                                Sha1:   210ea9de03968edb9d839ba4a0ce2d48666a8ab8

                                                Sha256: 949b6597c5ea907a7ef3c8ca6d5ffc73be2352f9df485b78704e5c4dabac5d0f

                                        
                                            GET /npm/bootstrap@4.5.3/dist/js/bootstrap.bundle.min.js HTTP/1.1 

                                        
                                            
Host: cdn.jsdelivr.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://libgen.rocks 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://libgen.rocks/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         151.101.85.229

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=utf-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: * 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cache-control: public, max-age=31536000, s-maxage=31536000, immutable 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains; preload 

                                        
                                            
x-jsd-version: 4.5.3 

                                        
                                            
x-jsd-version-type: version 

                                        
                                            
etag: W/"148b8-qycDEVlyTiQh9v9ccPSOZXq+nTk" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Fri, 25 Nov 2022 03:47:19 GMT 

                                        
                                            
age: 19009504 

                                        
                                            
x-served-by: cache-fra19179-FRA, cache-bma1651-BMA 

                                        
                                            
x-cache: HIT, HIT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 

                                        
                                            
content-length: 21785 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (65299)

                                                Size:   21785

                                                Md5:    151629f36761d6fb6d0e0330239884a6

                                                Sha1:   ebb9c30e5565793e2767735f0647bdf26fed4ab5

                                                Sha256: 53c395dd774b12c572c9f1b453f7903c08de32f6958d974bc5db38634a6509d6

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4404C2C26BD16149F3E764CE3A3CF9BD0F698CF65AFED8F2D99C24CBC8BCD460" 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 04:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=19337 

                                        
                                            
Expires: Fri, 25 Nov 2022 09:09:37 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:20 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6bd732c18dd813a692b4a4935bd661be

                                                Sha1:   368cbe20657151b49b932c7b5fb2a874a6b0562a

                                                Sha256: 4404c2c26bd16149f3e764ce3a3cf9bd0f698cf65afed8f2d99c24cbc8bcd460

                                        
                                            GET /e445fc5fceeb52489a652f9894c20087/invoke.js HTTP/1.1 

                                        
                                            
Host: tissuecameallowing.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://libgen.rocks/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         192.243.61.225

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/javascript

                                        

                                        
                                            
Server: nginx/1.22.0 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:20 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA 

                                        
                                            
Expires: Thu, 01 Jan 1970 00:00:01 GMT 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
X-Request-ID: a92d4223b847a25a1daf51f28c0be6ad 

                                        
                                            
Strict-Transport-Security: max-age=0; includeSubdomains 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  exported SGML document, ASCII text, with very long lines (26981), with no line terminators

                                                Size:   9809

                                                Md5:    f5ba18d63c722fd3fa6a11ec1cef4097

                                                Sha1:   479bb05fba1db13a2f85d6071a51acc0c49598eb

                                                Sha256: fcd0fd5a81e0b120870ee29b8e12af8cf6ee4b5bc5eb6954ed9b7a4e5cc3e0c2

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9" 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4405 

                                        
                                            
Expires: Fri, 25 Nov 2022 05:00:45 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:20 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    6827d82f488045e02e40d6a2fdbae4b3

                                                Sha1:   4944139a4b08769511ffc6aa913857d88a0db7bc

                                                Sha256: 0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80e95b58-6cf9-4974-a4ce-f8515ca995ee.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 11743 

                                        
                                            
x-amzn-requestid: 9ab0aba7-5cd1-4f6c-8984-dc221e1cbf8e 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cICD-F7joAMFqmA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637fe3b2-152ba5f1495a44447356cdab;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:46 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: oWSNdsrz59sJC2znLnFqa_Zm3T14_d6j-rjzDQe4yV22Dy2Qc4Swaw== 

                                        
                                            
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 24 Nov 2022 21:54:45 GMT 

                                        
                                            
age: 21155 

                                        
                                            
etag: "b0ddc1555d2506177adcdcea77864d75f1245d07" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   11743

                                                Md5:    8784bb7a8b88736a6016f712e3183bf3

                                                Sha1:   b0ddc1555d2506177adcdcea77864d75f1245d07

                                                Sha256: 8e331713b0ad0b5670dd33dfdadde665e076a40ddb80905d4df89876d49803d8

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d60bb22-4a30-4570-8561-eb3a2833a058.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8277 

                                        
                                            
x-amzn-requestid: e84a5668-cd91-42af-b6de-5eb694ea56e6 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cIB-KFtmIAMF00Q= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637fe38d-64513fb257d83b9847c82929;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:09 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: O4PtH20kVWgH-Jf_TivPqMqjnwrZB_8XvZAkDDzLLFPXVjqzkz1YJw== 

                                        
                                            
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 24 Nov 2022 21:59:22 GMT 

                                        
                                            
age: 20878 

                                        
                                            
etag: "6a8504212141af411a18ce58960c8bb52e8116ac" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8277

                                                Md5:    f59a591b222397ff0f01c22a0786e660

                                                Sha1:   6a8504212141af411a18ce58960c8bb52e8116ac

                                                Sha256: 624847cfdfcd770d2dee8a2b85f3c7c480cda58ba2aef1135184f3dffc30d1f1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4309 

                                        
                                            
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: b1U8xGxgIAMF-qQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C3 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg== 

                                        
                                            
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 24 Nov 2022 05:04:28 GMT 

                                        
                                            
age: 81772 

                                        
                                            
etag: "126771b86638108050cf57c0d12faa27f80f0edb" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4309

                                                Md5:    841a4b110022a99ddea6f7bf66df0fa1

                                                Sha1:   126771b86638108050cf57c0d12faa27f80f0edb

                                                Sha256: 240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db

                                        
                                            GET /stats HTTP/1.1 

                                        
                                            
Host: simplewebanalysis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://libgen.rocks 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://libgen.rocks/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         18.185.190.54

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
date: Fri, 25 Nov 2022 03:47:20 GMT 

                                        
                                            
content-length: 40 

                                        
                                            
server: fasthttp 

                                        
                                            
access-control-allow-origin: https://libgen.rocks 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
set-cookie: uid_id2=4082b695-4e9c-4c0a-ba54-c8480fc8ba1d:3:1; expires=Mon, 22 Nov 2032 03:47:20 GMT; secure; SameSite=None 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   40

                                                Md5:    2d8af385fce4c3f2a26e44bf5091c0a8

                                                Sha1:   dc56d11a12f23abf80c66fadbd7bff73f31a05d1

                                                Sha256: 71d0024b620b74c0ea84d5596e084128f6bf407ddcb3d7a18d9283075d32e044

                                        
                                            GET /stats HTTP/1.1 

                                        
                                            
Host: simplewebanalysis.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: https://libgen.rocks 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://libgen.rocks/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         18.185.190.54

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
date: Fri, 25 Nov 2022 03:47:20 GMT 

                                        
                                            
content-length: 40 

                                        
                                            
server: fasthttp 

                                        
                                            
access-control-allow-origin: https://libgen.rocks 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
set-cookie: uid_id2=ac160923-221f-4e2a-8c12-6430037cf3e2:3:1; expires=Mon, 22 Nov 2032 03:47:20 GMT; secure; SameSite=None 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with no line terminators

                                                Size:   40

                                                Md5:    6a01e2bc7e40a41c8b1ae24b4a58ea5c

                                                Sha1:   124f141e7a3b922faa7eddaa0629254b804c73a2

                                                Sha256: c10fc6291cc61380d24901d8ac180627f8e95fcbbd7986ca214d50f6d375eb20

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F08F6D4462A469F4089A112DC35953447C09125B9F56CFAD7EA6A95A80E49565" 

                                        
                                            
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=12249 

                                        
                                            
Expires: Fri, 25 Nov 2022 07:11:30 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:21 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    d734a7a2d2656fcb2c7964591a0fe9c8

                                                Sha1:   3190ed3610ec19f25864a2b0ff3e1798d142be37

                                                Sha256: f08f6d4462a469f4089a112dc35953447c09125b9f56cfad7ea6a95a80e49565

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "5A7EBB4A3BFC1046CD3C07CEF6BD550F3452C3CF4D48D48E6428473F2DE44C51" 

                                        
                                            
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=8724 

                                        
                                            
Expires: Fri, 25 Nov 2022 06:12:45 GMT 

                                        
                                            
Date: Fri, 25 Nov 2022 03:47:21 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    4f6c1497d491ebdec0b24caf356dad1f

                                                Sha1:   6efe847d68565760b80862295cb809e7efee7de8

                                                Sha256: 5a7ebb4a3bfc1046cd3c07cef6bd550f3452c3cf4d48d48e6428473f2de44c51

                                        
                                            GET /ads.php?md5=0A0D442ED4345F99B030A09421D82888 HTTP/1.1 

                                        
                                            
Host: libgen.rocks

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: document 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: none 

                                        
                                            
Sec-Fetch-User: ?1

                                         172.67.197.62

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
date: Fri, 25 Nov 2022 03:47:19 GMT 

                                        
                                            
set-cookie: adsenselg=show; expires=Fri, 25-Nov-2022 04:46:41 GMT; Max-Age=3600 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
cf-cache-status: DYNAMIC 

                                        
                                            
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yt%2F26S62ipEMUVK47cuKIyj6bdY8YNGnRZGiwMK8D9KKP6fMjNku8kkcmc0%2BwzMfBChSoB4g1awtJNqhAIaxL2Fhh%2FraXwGdDFP5QYpmLDf7t5wMLiaGkupnlBAmRcw%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
server: cloudflare 

                                        
                                            
cf-ray: 76f766fdcfcf1c12-OSL 

                                        
                                            
content-encoding: br 

                                        
                                            
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	libgen.lc/ads.php?md5=0A0D442ED4345F99B030A09421D82888
IP	89.248.170.56 (Netherlands)
ASN	#202425 IP Volume inc
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-25 03:47:29 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	4
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (19)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 89.248.170.56

Last 5 reports on ASN: IP Volume inc

Last 5 reports on domain: libgen.lc

No other reports with similar screenshot

JavaScript

Executed Scripts (18)

Executed Evals (1)

#1 JavaScript::Eval (size: 2104) - SHA256: 766c62f19afc638ed7750911ec5f4e73b95d5890c8f99c85ce54ac122e5cf692

Executed Writes (1)

#1 JavaScript::Write (size: 120) - SHA256: eec618eac4a9638dad6679dd10b46a6ba923dd0a991c3ebe5639003d488f90c5

HTTP Transactions (43)

Overview

Domain Summary (19)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 89.248.170.56

Last 5 reports on ASN: IP Volume inc

Last 5 reports on domain: libgen.lc

No other reports with similar screenshot

JavaScript

Executed Scripts (18)

Executed Evals (1)

#1 JavaScript::Eval (size: 2104) - SHA256: 766c62f19afc638ed7750911ec5f4e73b95d5890c8f99c85ce54ac122e5cf692

Executed Writes (1)

#1 JavaScript::Write (size: 120) - SHA256: eec618eac4a9638dad6679dd10b46a6ba923dd0a991c3ebe5639003d488f90c5

HTTP Transactions (43)

Network Intrusion Detection Systems