mad9ja.info/
301 Moved Permanently 289 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b6a460fc792ed201569d5b2a6866ca04
e1b13e7f46547591781c1fab6e096f7850ee8557
c5fae8896b59f00b6c247e61e9bce707a6d8370e790057eb65137ba9b7e137b9
GET / HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 18 Sep 2022 12:33:50 GMT
Server: Apache
Location: https://mad9ja.info/
Content-Length: 289
Connection: close
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 18 Sep 2022 12:12:07 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rQL1xaPAeAxegutbAyHyl36ZSGDXwGPgheTLXB3pzzVBPQds9du3DA==
Age: 1303
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash adb43321efa5cd1662993b701ff25fa4
1299dcea7e9c59d9f22f39d69025484fe71098c1
2c25a6717245be3746f1412af9dd1c351e12dbb93e8e08c3ddcdacf35e419514
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C25A6717245BE3746F1412AF9DD1C351E12DBB93E8E08C3DDCDACF35E419514"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12250
Expires: Sun, 18 Sep 2022 15:58:00 GMT
Date: Sun, 18 Sep 2022 12:33:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 18 Sep 2022 03:30:43 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: p9djZfybVGRO87c6J88UyQvJoUSJYTpHxYztWGG68WTTRQMk4hje9g==
age: 32587
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:50 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 88eb03699d0c59d429fdbec104348ac0
0067a150b8145ec62610066d9dce1d5986a7d008
48ced2e3dbf1a0c248cc1cd2aebcc247c4e18906dac27907e6365676c85ca015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48CED2E3DBF1A0C248CC1CD2AEBCC247C4E18906DAC27907E6365676C85CA015"
Last-Modified: Sat, 17 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Sun, 18 Sep 2022 18:33:03 GMT
Date: Sun, 18 Sep 2022 12:33:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 18 Sep 2022 12:03:22 GMT
Cache-Control: max-age=3600
Expires: Sun, 18 Sep 2022 12:40:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: A6EnSOTm-k8MM6DYBJwL3GF_vY3C-9nWYOnwbC0GwbpPLHkrfePEzg==
Age: 1828
mad9ja.info/
200 OK 8.9 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash 18c781a16f3c9f08ff06209835d627b1
54d12f85c9de970b1d692e74eeacc0ffe26b0560
29c7dda79db2faa16af589e9685d756dd9bc2a5607af1d36adad1a38c81172b8
GET / HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
link: <https://mad9ja.info/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
content-encoding: gzip
content-length: 8887
content-type: text/html; charset=UTF-8
date: Sun, 18 Sep 2022 12:33:50 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 5fd1174f35b25298fc44a6de1af3f3d6
d45a47995ec34c7df480b3efafb13f55d9df7eb8
f60573eff255ef3d7603ca813f410c30588931b4018ffa0e07fa0bb2653c47af
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2117
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Last-Modified: Sun, 18 Sep 2022 11:58:34 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
mad9ja.info/wp-admin/css/farbtastic.min.css?ver=1.3u1
200 OK 263 B URL HTTP/2 mad9ja.info/wp-admin/css/farbtastic.min.css?ver=1.3u1
IP
File type ASCII text, with very long lines (502)
Hash 11af8d96faf15edcbe498645c00af9b1
d3cfd1433371a4f8cc38ba416a50439e99a64517
3c265ef680ea7868c15519bd8929e1e98d07c2d0aefdfc5469bf8535c0de44e7
GET /wp-admin/css/farbtastic.min.css?ver=1.3u1 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 19 Aug 2017 20:10:47 GMT
etag: "219-55720d7581fc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 263
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 12 kB URL HTTP/2 mad9ja.info/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (43771)
Hash e5548800176e913a9084f47a3e1e04f6
eff4604acc5c26ae82a19188de2f98bf5b79d80c
a2569c768eaca09f2483b971fcebb97badd57c9a16b5ae3e16b8cdcd8c688b07
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 04 Jul 2022 12:10:37 GMT
etag: "15b64-5e2f99fa9e940-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 11681
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2
200 OK 1.2 kB URL HTTP/2 mad9ja.info/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2
IP
File type ASCII text, with very long lines (4186), with no line terminators
Hash 30d57d7aa11190e44974cce8621f22c7
59f516369877009cce06ca45b1c296944bb674a4
094ae87a3d4cee4a1ddc5cada149c2deacabd4cf2e377b97fe4ca641142258ee
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.0.2 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 07 Jun 2019 20:45:02 GMT
etag: "105a-58ac1e7924f80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 1156
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
200 OK 2.6 kB URL HTTP/2 mad9ja.info/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16
IP
File type ASCII text, with very long lines (11256), with no line terminators
Hash 583529ff412cb2b255fa606024d1133e
8db4b0a0be402cc5e38488528791b73b0c7369d0
6fdf0933a8faf229b277740f401600834c00d0b204f7ed38293cd4abcdb3ea20
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.16 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 29 Sep 2020 15:53:06 GMT
etag: "2bf8-5b075c75d5c80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2592
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/themes/mh-magazine/style.css?ver=3.8.4
200 OK 15 kB URL HTTP/2 mad9ja.info/wp-content/themes/mh-magazine/style.css?ver=3.8.4
IP
File type ASCII text, with very long lines (586)
Hash 367710c12b2998efa91c5333dd25f4f5
02a336a6d1631c239f2f0196a925a7c2a3c89c8c
6783cb0be351a48d587d2d348ddb49649db19df1f569a6c72135786edfc9deea
GET /wp-content/themes/mh-magazine/style.css?ver=3.8.4 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:13:57 GMT
etag: "15977-5e7eb566f0e4c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 15297
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b417168037cd02cb414797a2fe8a898f
504f56151849a7bfcd36d7e72b39ead79a69bfe8
39238b70192886874fc0362dbf5e2b017f71760665c5d1025d75e4a304ded1f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mad9ja.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.2 kB URL HTTP/2 mad9ja.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
etag: "2bd8-5b45debe27b80-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 4169
content-type: application/javascript
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/themes/mh-magazine/includes/font-awesome.min.css
200 OK 7.1 kB URL HTTP/2 mad9ja.info/wp-content/themes/mh-magazine/includes/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 52f1a8a2ce85fa8432308b33bc1a2e79
fd80917af5371c8ecad0198592a1e7cce4b77b0e
07bd6a9ea0213e20f362485aadc17a88c486ecfb394004b41b8b38db6e6a35f6
GET /wp-content/themes/mh-magazine/includes/font-awesome.min.css HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:13:56 GMT
etag: "7918-5e7eb566e991c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 7053
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9b19d20af774aa4c4de18c09845d54b9
cd0d41b4957edf5b2f7f66df082b7d1010acceb8
067f454a8ba17fba5f10b67b6a594edd9d9775beb5fb87cb6c98ff462a9f2fe1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
mad9ja.info/wp-content/plugins/jetpack/css/jetpack.css?ver=11.2
200 OK 16 kB URL HTTP/2 mad9ja.info/wp-content/plugins/jetpack/css/jetpack.css?ver=11.2
IP
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 9b0a7e545cd05074477804bb3c91015f
20aeea196825f5168bd16863bbce5dbbb6f9645c
0067f279bc544e2438b4aa649743208139a50811d21a2a009ab7ae44cb0f006a
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=11.2 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:15:36 GMT
etag: "14eba-5e7eb5c5df39e-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 16421
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 31 kB URL HTTP/2 mad9ja.info/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
File type ASCII text, with very long lines (65447)
Hash 9640915738503451aa21181699feab5b
c053eaf36ef0da96619706b3abda326305063bd6
f8834e669ad1f4039442c26aaa373ec39c35a233b9786d374fc3f670f16b0adc
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 10 Mar 2021 15:07:24 GMT
etag: "15db1-5bd3006388300-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 30908
content-type: application/javascript
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/themes/mh-magazine/js/scripts.js?ver=3.8.4
200 OK 12 kB URL HTTP/2 mad9ja.info/wp-content/themes/mh-magazine/js/scripts.js?ver=3.8.4
IP
File type ASCII text, with very long lines (21936)
Hash 51cddce8410ea6500c75bb4924312011
2d3ff1d4d994cb1f22ddf2fbdd2bb786a77c3ba4
332b4ec950025b28292797104643206c58e3160e12e4bbb4e285a6b783f9f9b8
GET /wp-content/themes/mh-magazine/js/scripts.js?ver=3.8.4 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:13:56 GMT
etag: "9836-5e7eb566e9d04-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 12063
content-type: application/javascript
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-166247442-10
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-166247442-10
IP
File type ASCII text, with very long lines (1720)
Hash 86f2293d5b2bee2f5a9f0fc59df5b490
dcc809e6313ec5d924bf6bbc84c22a33ffc933fe
11ade6b6f46e4c4f0f5ee2cc9e1f1077147b805b1b6c2a473a757b3b1f0a27ea
GET /gtag/js?id=UA-166247442-10 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Sep 2022 12:33:51 GMT
expires: Sun, 18 Sep 2022 12:33:51 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Sep 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42399
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/GTA-6-has-been-leaked-Official-Gameplay-and-Screenshots-for-326x245.jpeg
200 OK 17 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/GTA-6-has-been-leaked-Official-Gameplay-and-Screenshots-for-326x245.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 326x245, components 3\012- data
Hash 76a227dd13a767ce32072b52c553503f
323e394876262c620fdf17b0c815aa95b514e7ee
dfe99537be4049319ff7e77a162a7048c482115209735a5312f01e0a33ba599d
GET /wp-content/uploads/2022/09/GTA-6-has-been-leaked-Official-Gameplay-and-Screenshots-for-326x245.jpeg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 12:27:11 GMT
etag: "4240-5e8f2b6deb239"
accept-ranges: bytes
content-length: 16960
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/plugins/auto-tag-links//css/styles.css
200 OK 164 B URL HTTP/2 mad9ja.info/wp-content/plugins/auto-tag-links//css/styles.css
IP
Hash e87c199b3a1b914d66e0382abbcd2c3b
fc38bfdbcb296bf169ddf3805f2df78c0951b648
d8ccd7fadac0c53930f74b483409eb97e81c903c60d471384b175e1b8f596df2
GET /wp-content/plugins/auto-tag-links//css/styles.css HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:22:16 GMT
etag: "14a-5e7eb74373a6d-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 164
content-type: text/css
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/mad9ja.png
200 OK 91 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/mad9ja.png
IP
File type PNG image data, 601 x 210, 8-bit/color RGBA, non-interlaced\012- data
Hash 18e6967cc3cdea1d1c2045319935c425
cfc403e6bcce1ef3787fee17e08e4a71dc96a477
fb29570b2ae3f190a2759e88a19cb0fb4e12a2c60f4cb429e09ff972e76970c3
GET /wp-content/uploads/2022/09/mad9ja.png HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:57:45 GMT
etag: "162fd-5e7ebf31f4544"
accept-ranges: bytes
content-length: 90877
content-type: image/png
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 5.0 kB URL HTTP/2 mad9ja.info/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
File type ASCII text, with very long lines (15660)
Hash e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Apr 2022 05:56:23 GMT
etag: "48b9-5dc6eb878efc0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 5009
content-type: application/javascript
date: Sun, 18 Sep 2022 12:33:51 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b417168037cd02cb414797a2fe8a898f
504f56151849a7bfcd36d7e72b39ead79a69bfe8
39238b70192886874fc0362dbf5e2b017f71760665c5d1025d75e4a304ded1f9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9b19d20af774aa4c4de18c09845d54b9
cd0d41b4957edf5b2f7f66df082b7d1010acceb8
067f454a8ba17fba5f10b67b6a594edd9d9775beb5fb87cb6c98ff462a9f2fe1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: j51m4Gf/vdYSvrA5bX4piQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DsBRJ7fI6Hm32gR9LZ1PMu9tL9Y=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab87e1e4dc6abd919cf683dff901fe8
07cfbf03a72cb316844c48669a10484e63b7f887
d68b40168e5c06bd69b83e8529ea0b15996e7124d2c8b3c5b0be81c8946f04c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 08:31:01 GMT
expires: Wed, 13 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 446570
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6ab87e1e4dc6abd919cf683dff901fe8
07cfbf03a72cb316844c48669a10484e63b7f887
d68b40168e5c06bd69b83e8529ea0b15996e7124d2c8b3c5b0be81c8946f04c0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Sep 2022 12:33:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 95fb9374e2c318e2de00cf266abf1879
19b499c38b438ce6f53141a5d8d6a13d4798a768
f0af2fc5bf9651ee6ffc76de1ed31cf81350af487e63eb94197711b3a8a7fdb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0AF2FC5BF9651EE6FFC76DE1ED31CF81350AF487E63EB94197711B3A8A7FDB0"
Last-Modified: Thu, 15 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7652
Expires: Sun, 18 Sep 2022 14:41:23 GMT
Date: Sun, 18 Sep 2022 12:33:51 GMT
Connection: keep-alive
vyfrxuytzn.com/lv/esnk/1937564/code.js
200 OK 47 kB URL HTTP/2 vyfrxuytzn.com/lv/esnk/1937564/code.js
IP
Hash 44fd7fd22a72a5735b59e2ac77a29da6
c4076a73de846d80cd893cccbaf5f618bfb547f6
f209bfc9b079e599a3fd874a2a439e70e4657250df993fcac7a6c044c12d262c
Analyzer Verdict Alert quad9 Sinkholed
GET /lv/esnk/1937564/code.js HTTP/1.1
Host: vyfrxuytzn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:51 GMT
content-type: application/javascript
last-modified: Wed, 07 Sep 2022 13:38:24 GMT
vary: Accept-Encoding
etag: W/"63189ed0-1e740"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 343335f733f109f019cf56a364b1c203
b20ea2df2a41e7a5b66a2c27ea7494139232aa21
154b1d06009d17f9add2cc53cfce155e6e8e046e13e72ae33ae810d41bd307fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "154B1D06009D17F9ADD2CC53CFCE155E6E8E046E13E72AE33AE810D41BD307FE"
Last-Modified: Fri, 16 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21562
Expires: Sun, 18 Sep 2022 18:33:13 GMT
Date: Sun, 18 Sep 2022 12:33:51 GMT
Connection: keep-alive
precipitationsloganhazard.com/ed240f0986650a288b88e139093a9910/invoke.js
200 OK 9.8 kB URL HTTP/1.1 precipitationsloganhazard.com/ed240f0986650a288b88e139093a9910/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26937), with no line terminators
Hash 8b3e5bfb8c37c7933d1b1ade18460532
858b87dd635a1dc8a1ec1258230e9cb47a785bd9
8f09b22d90eb6fbde7a7cd8db5585991e8f831cd4f7f889c6ec34ee8108657b5
Analyzer Verdict Alert quad9 Sinkholed
GET /ed240f0986650a288b88e139093a9910/invoke.js HTTP/1.1
Host: precipitationsloganhazard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cf0b83b682e03213d9afa5eff911adfe
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
precipitationsloganhazard.com/7b/18/39/7b1839cd39dbbc6df24f31f19156c58d.js
200 OK 20 kB URL HTTP/1.1 precipitationsloganhazard.com/7b/18/39/7b1839cd39dbbc6df24f31f19156c58d.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59377), with no line terminators
Hash fde28bf7303dd88c6fbcabbc27905733
0779847bb32c00164bac8dce40b5c480b24498c2
ec3ad080d0aeb7fc47dee005739e93b9746607a6b4910c6166682b4cbc80154f
Analyzer Verdict Alert quad9 Sinkholed
GET /7b/18/39/7b1839cd39dbbc6df24f31f19156c58d.js HTTP/1.1
Host: precipitationsloganhazard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5740c859f9e27ceead215bc390d5a874
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 00c95eb6c121f588bce2d57f05e0d3a7
991d70116ded7f77387434472ecc3c423392338d
7a0c1c29f7bc58531435aef553adc87bd9b1c553c6cbac189e5b713971d7e00e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 18 Sep 2022 12:33:52 GMT
Last-Modified: Sun, 18 Sep 2022 11:49:57 GMT
Server: ECS (nyb/1D2A)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7YfooEwi4dJClvLygJn2ye_EB8xLn8PRUnzhWFUeM7x8A1kovaBVDA==
Age: 2635
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4f1279d861b2cb6f3c18f0ce4de4982d
044a5b0ba123756d3fe7fd880d43b7f8b308546b
803ad388b1ab775256ca84493cc1d2786f5c9c368092efbcff089d3e4bf6725f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "803AD388B1AB775256CA84493CC1D2786F5C9C368092EFBCFF089D3E4BF6725F"
Last-Modified: Fri, 16 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8597
Expires: Sun, 18 Sep 2022 14:57:09 GMT
Date: Sun, 18 Sep 2022 12:33:52 GMT
Connection: keep-alive
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 1cdc3f74c81f30a280f54392563b6335
498419e9461bd6c60aa44d4b1c87c746ebd3ef5a
a03599245d9bb2f1742fc69c7f071101d1793fc274271fc7f149ac142b1d5a96
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://mad9ja.info
access-control-allow-credentials: true
set-cookie: uid_id2=14822048-698c-487d-90f0-04f49518c17e:3:1; expires=Wed, 15 Sep 2032 12:33:52 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash f3f51181ca377e251cb54cdcceaa9b0d
898a9825819d3cc3f79cfaebcf06a99883cb4bd8
4ad31ddc01d7be22ee1ec0e433a641e5c1741538f4d18651a0ec7f382c639679
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://mad9ja.info
access-control-allow-credentials: true
set-cookie: uid_id2=ed934972-84b5-42cc-9e01-611dd6dda4da:1:1; expires=Wed, 15 Sep 2032 12:33:52 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
precipitationsloganhazard.com/3683589a8b7f56805c1b8310c3c75a6b/invoke.js
200 OK 9.8 kB URL HTTP/1.1 precipitationsloganhazard.com/3683589a8b7f56805c1b8310c3c75a6b/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26943), with no line terminators
Hash 4bfa128a950be555c8b17fb2dccc6d68
c5241891b7e25ba7bb4d83d063b34794c686001e
9ece507c63e1afe667de8c287703becdf2f02ffcf3761013aef85ce9a6426134
Analyzer Verdict Alert quad9 Sinkholed
GET /3683589a8b7f56805c1b8310c3c75a6b/invoke.js HTTP/1.1
Host: precipitationsloganhazard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8062d110a98c69f4f8138f4b608506d4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
mad9ja.info/wp-content/themes/mh-magazine/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 mad9ja.info/wp-content/themes/mh-magazine/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/mh-magazine/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://mad9ja.info/wp-content/themes/mh-magazine/includes/font-awesome.min.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 10:13:56 GMT
etag: "12d68-5e7eb566e4ee4"
accept-ranges: bytes
content-length: 77160
vary: Accept-Encoding
content-type: font/woff2
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Bristyl-dempsey-leaked-onlyf-on-twitter-and-reddit.jpeg
200 OK 8.4 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Bristyl-dempsey-leaked-onlyf-on-twitter-and-reddit.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 238x212, components 3\012- data
Hash 3c9c4e1b263aa0578ed764eee1cb5f1f
0be0ab40de77b81436c242b8e8d1420b3c590205
08ec689036715fa6fb22a404b0f557d32976c6fac67bca8d865e649eb48f4208
GET /wp-content/uploads/2022/09/Bristyl-dempsey-leaked-onlyf-on-twitter-and-reddit.jpeg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 07:32:58 GMT
etag: "20be-5e8ee9aac677b"
accept-ranges: bytes
content-length: 8382
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Leaked-video-for-Angelicatlol-becomes-popular-on-Twitter-and-YouTube-326x245.jpeg
200 OK 17 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Leaked-video-for-Angelicatlol-becomes-popular-on-Twitter-and-YouTube-326x245.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 326x245, components 3\012- data
Hash 32a519c1b8baab9c099b842d3ba33b29
19e961085eaa0b98f7aa696d223f2ea1b665c343
3b03aab2bbb290780597a5c58e032913229925e9b3c814a854821f141220851d
GET /wp-content/uploads/2022/09/Leaked-video-for-Angelicatlol-becomes-popular-on-Twitter-and-YouTube-326x245.jpeg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 12:21:10 GMT
etag: "40be-5e8f2a1568648"
accept-ranges: bytes
content-length: 16574
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Angelicatlol-Leaked-video-%E2%80%93-Angelicatlol-viral-on-twitter-youtube-326x245.jpeg
200 OK 17 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Angelicatlol-Leaked-video-%E2%80%93-Angelicatlol-viral-on-twitter-youtube-326x245.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 326x245, components 3\012- data
Hash 01a58349590d03ef5bdc23d2a5d29d8e
1b854cdf507251d82f9fd2a1976d183179194b27
954ed90d8fbb30d1d7c28c2868d778b6956cc0053fea8946e7ae3d40e3aafbfe
GET /wp-content/uploads/2022/09/Angelicatlol-Leaked-video-%E2%80%93-Angelicatlol-viral-on-twitter-youtube-326x245.jpeg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 10:51:47 GMT
etag: "4141-5e8f161b738e6"
accept-ranges: bytes
content-length: 16705
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash f3f51181ca377e251cb54cdcceaa9b0d
898a9825819d3cc3f79cfaebcf06a99883cb4bd8
4ad31ddc01d7be22ee1ec0e433a641e5c1741538f4d18651a0ec7f382c639679
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://mad9ja.info/
Cookie: uid_id2=ed934972-84b5-42cc-9e01-611dd6dda4da:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://mad9ja.info
access-control-allow-credentials: true
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Chandigarh-viral-video-Chandigarh-viral-326x245.png
200 OK 81 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Chandigarh-viral-video-Chandigarh-viral-326x245.png
IP
File type PNG image data, 326 x 245, 8-bit/color RGB, non-interlaced\012- data
Hash 816740038d3cb7aa312ab61e56852f77
7cdfcbc92af92489bc31f2cd6a2ac8d1a1abd3c8
b0096116642b40f93a208104eeb7c9b2bcc031cc05df85e821311917921f3fbd
GET /wp-content/uploads/2022/09/Chandigarh-viral-video-Chandigarh-viral-326x245.png HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 06:23:55 GMT
etag: "13c8b-5e8eda3ba9900"
accept-ranges: bytes
content-length: 81035
content-type: image/png
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Lizbeth-Rodriguez-video-Lizbeth-Rodriguez-unauthorised-release-of-footage-326x245.jpeg
200 OK 8.2 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Lizbeth-Rodriguez-video-Lizbeth-Rodriguez-unauthorised-release-of-footage-326x245.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 326x245, components 3\012- data
Hash d316ebc32bddf20d7ce74d18057764db
f074f8f88022ced51a35443c16c3ea54fc2f0994
8de598ff1ac75ef2f912d091c0e9bc6daef0bb1d778793abab18f37b08ebb098
GET /wp-content/uploads/2022/09/Lizbeth-Rodriguez-video-Lizbeth-Rodriguez-unauthorised-release-of-footage-326x245.jpeg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 06:12:09 GMT
etag: "202c-5e8ed79aeefe0"
accept-ranges: bytes
content-length: 8236
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Lizbeth-Rodriguez-video-%E2%80%93-Lizbeth-Rodriguez-leaked-video-326x245.jpg
200 OK 12 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Lizbeth-Rodriguez-video-%E2%80%93-Lizbeth-Rodriguez-leaked-video-326x245.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 326x245, components 3\012- data
Hash eb704081d67ea1f7801f0a6dba788cc3
3cedcffcbecda8ae1de1ab1f0028914917883163
092c5be3a0af9e4a8595581a4b7e10eafeb694df764d990bf48c46f2a579ccaf
GET /wp-content/uploads/2022/09/Lizbeth-Rodriguez-video-%E2%80%93-Lizbeth-Rodriguez-leaked-video-326x245.jpg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 18 Sep 2022 05:34:49 GMT
etag: "3044-5e8ecf429ffbd"
accept-ranges: bytes
content-length: 12356
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/Notti-DD-Osama-dead-video-leaked-%E2%80%93-Who-is-Notti-326x245.jpg
200 OK 16 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/Notti-DD-Osama-dead-video-leaked-%E2%80%93-Who-is-Notti-326x245.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 326x245, components 3\012- data
Hash 8a4d9ccdb5fff344df0b0c56636d2cd8
6c4e66aaa705d8388efae97c4dbdfa278515428e
22d13fd45025435d99c6de1d685c4d0d1e7c7876b05c82f00cec2b91ddfc221a
GET /wp-content/uploads/2022/09/Notti-DD-Osama-dead-video-leaked-%E2%80%93-Who-is-Notti-326x245.jpg HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 17 Sep 2022 17:18:58 GMT
etag: "3d46-5e8e2ac876496"
accept-ranges: bytes
content-length: 15686
content-type: image/jpeg
date: Sun, 18 Sep 2022 12:33:52 GMT
server: Apache
X-Firefox-Spdy: h2
precipitationsloganhazard.com/ed240f0986650a288b88e139093a9910/invoke.js
200 OK 9.8 kB URL HTTP/1.1 precipitationsloganhazard.com/ed240f0986650a288b88e139093a9910/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26937), with no line terminators
Hash 8b3e5bfb8c37c7933d1b1ade18460532
858b87dd635a1dc8a1ec1258230e9cb47a785bd9
8f09b22d90eb6fbde7a7cd8db5585991e8f831cd4f7f889c6ec34ee8108657b5
Analyzer Verdict Alert quad9 Sinkholed
GET /ed240f0986650a288b88e139093a9910/invoke.js HTTP/1.1
Host: precipitationsloganhazard.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:52 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bd8c57abc7eeaf96811dd03743741a04
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.pncloudfl.com/pn/fa3/4a6/430/fa34a643032428ed91977d4fe22b9992a7cc9124.jpg
200 OK 42 kB URL HTTP/2 cdn.pncloudfl.com/pn/fa3/4a6/430/fa34a643032428ed91977d4fe22b9992a7cc9124.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4d149580148d6dcb8ddd02aa6fb0f63b
f1d5cddc5e55c26b4d7543fbe150074ce6224e1b
6d3141038aaafce14b184957cc512e55590f20d6e491232888073d3eb577b6d9
GET /pn/fa3/4a6/430/fa34a643032428ed91977d4fe22b9992a7cc9124.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: image/webp
content-length: 42306
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=76713
content-disposition: inline; filename="fa34a643032428ed91977d4fe22b9992a7cc9124.webp"
etag: c948abd7ed719ae2a5d5509ebce9d439
expires: Sun, 18 Sep 2022 15:39:03 GMT
last-modified: Wed, 31 Aug 2022 11:54:49 GMT
vary: Accept
x-openstack-request-id: tx28ed999da09f472b811e6-006323616c
x-proxy-cache: HIT
x-timestamp: 1661946888.35816
x-trans-id: tx28ed999da09f472b811e6-006323616c
cf-cache-status: HIT
age: 161689
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 74ca1cce693fb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
200 OK 23 kB URL HTTP/2 addresseepaper.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 0b987421f6dd3addac02b7c12bf7a468
ae20c24bcf328a403866d5c2ffe2277d5c1b7b09
4393f6c845fa709df8e20ddbe008e9a436c90c37fc2eb1acbf6c89e6258f203e
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: d9acf9cf652e86c75b01f7e49ef86e7b
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Sun, 18 Sep 2022 12:33:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xXuIuDPOY0AF2Q32sgeR9n1GW44SaTn%2B5XLhGIH%2FQ6cdf2QpdhyBxwREc8CrD2ci0uepoEbn1ddbpPNCzVfeDSAHripibrbjVdoTI5mNylhi%2FkQ%2FdjkcQCf7IGuKVPDyORC4Jsk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74ca1ccd19477443-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 4f1279d861b2cb6f3c18f0ce4de4982d
044a5b0ba123756d3fe7fd880d43b7f8b308546b
803ad388b1ab775256ca84493cc1d2786f5c9c368092efbcff089d3e4bf6725f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "803AD388B1AB775256CA84493CC1D2786F5C9C368092EFBCFF089D3E4BF6725F"
Last-Modified: Fri, 16 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8597
Expires: Sun, 18 Sep 2022 14:57:09 GMT
Date: Sun, 18 Sep 2022 12:33:52 GMT
Connection: keep-alive
vyfrxuytzn.com/chicken.gif?z=1937564&pb=d20016b2f4929f90cd4c6d7ff365a4461663511632&psp=J2HoyjIUc04sDN2C_KoYYAbzqzzUBs5bmvUf60hPu6tiUVeXYCOYGnGALyghLKw_H3HBro6AeoIC4IrCwHBZVVmB4TnIuAixVu4_KdNwnduKIbPG2wNTFZryV9EoKtCKofzM9TtjPmup3xvOk1-TlQgyoF1TjK_gZiJns6O-lWgI1zQYLWoqEcBivvhxiay2-2u6ANCrgNQeOq1tWZsPXRw5mj_cSGDPuZ75O_LsQA1CVwmKLKuFyyVvZmZ_1dxMhFuTEh0pZS6xVA704KFJ23mblLgVhMINqGkjWZhbBqW8QbYSpF260morOB-d2HjkcxqUacy2dHJDBGFVJilLREIGMTA-6sbqTWajv2_Gjq-swyuTGILOmFvK6NLdaKPZ1QwXLW7u2xrbDfFIU-qIxAXRx8eZpt-wPNdCf8uPXobCHISGqVEj2jyLS6MDeLgRw18qKLT87BatIMqSTorsQq7R3VooMn57jDb0y-GMMN74SBhtlV37Oly4NLGsqkuStBme2DZwLf1-ZxsVHrH1kSXxFWh3zesP5t5_mcwkJDo4nkjZscJ6nzIQM1ahWVLUznixuIXq-gT0vWE9bjJOjBz2tk6L3x3RNsYcm19WeTgTcm3TM32Weq81iKlNVtNNRaUsAy8mD0naadIe8ajVy3hikbn0qWoTp5B7D_rGsHQYEfdTs1FZU0eMqNHMzzMNmgwVr4PEuEcdfGts6-cXLGN2KwWNpo1EO-oMgTk9Oh3LOs9hZ0_LVlOf&abvar=0&os=0
200 OK 43 B URL HTTP/2 vyfrxuytzn.com/chicken.gif?z=1937564&pb=d20016b2f4929f90cd4c6d7ff365a4461663511632&psp=J2HoyjIUc04sDN2C_KoYYAbzqzzUBs5bmvUf60hPu6tiUVeXYCOYGnGALyghLKw_H3HBro6AeoIC4IrCwHBZVVmB4TnIuAixVu4_KdNwnduKIbPG2wNTFZryV9EoKtCKofzM9TtjPmup3xvOk1-TlQgyoF1TjK_gZiJns6O-lWgI1zQYLWoqEcBivvhxiay2-2u6ANCrgNQeOq1tWZsPXRw5mj_cSGDPuZ75O_LsQA1CVwmKLKuFyyVvZmZ_1dxMhFuTEh0pZS6xVA704KFJ23mblLgVhMINqGkjWZhbBqW8QbYSpF260morOB-d2HjkcxqUacy2dHJDBGFVJilLREIGMTA-6sbqTWajv2_Gjq-swyuTGILOmFvK6NLdaKPZ1QwXLW7u2xrbDfFIU-qIxAXRx8eZpt-wPNdCf8uPXobCHISGqVEj2jyLS6MDeLgRw18qKLT87BatIMqSTorsQq7R3VooMn57jDb0y-GMMN74SBhtlV37Oly4NLGsqkuStBme2DZwLf1-ZxsVHrH1kSXxFWh3zesP5t5_mcwkJDo4nkjZscJ6nzIQM1ahWVLUznixuIXq-gT0vWE9bjJOjBz2tk6L3x3RNsYcm19WeTgTcm3TM32Weq81iKlNVtNNRaUsAy8mD0naadIe8ajVy3hikbn0qWoTp5B7D_rGsHQYEfdTs1FZU0eMqNHMzzMNmgwVr4PEuEcdfGts6-cXLGN2KwWNpo1EO-oMgTk9Oh3LOs9hZ0_LVlOf&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1937564&pb=d20016b2f4929f90cd4c6d7ff365a4461663511632&psp=J2HoyjIUc04sDN2C_KoYYAbzqzzUBs5bmvUf60hPu6tiUVeXYCOYGnGALyghLKw_H3HBro6AeoIC4IrCwHBZVVmB4TnIuAixVu4_KdNwnduKIbPG2wNTFZryV9EoKtCKofzM9TtjPmup3xvOk1-TlQgyoF1TjK_gZiJns6O-lWgI1zQYLWoqEcBivvhxiay2-2u6ANCrgNQeOq1tWZsPXRw5mj_cSGDPuZ75O_LsQA1CVwmKLKuFyyVvZmZ_1dxMhFuTEh0pZS6xVA704KFJ23mblLgVhMINqGkjWZhbBqW8QbYSpF260morOB-d2HjkcxqUacy2dHJDBGFVJilLREIGMTA-6sbqTWajv2_Gjq-swyuTGILOmFvK6NLdaKPZ1QwXLW7u2xrbDfFIU-qIxAXRx8eZpt-wPNdCf8uPXobCHISGqVEj2jyLS6MDeLgRw18qKLT87BatIMqSTorsQq7R3VooMn57jDb0y-GMMN74SBhtlV37Oly4NLGsqkuStBme2DZwLf1-ZxsVHrH1kSXxFWh3zesP5t5_mcwkJDo4nkjZscJ6nzIQM1ahWVLUznixuIXq-gT0vWE9bjJOjBz2tk6L3x3RNsYcm19WeTgTcm3TM32Weq81iKlNVtNNRaUsAy8mD0naadIe8ajVy3hikbn0qWoTp5B7D_rGsHQYEfdTs1FZU0eMqNHMzzMNmgwVr4PEuEcdfGts6-cXLGN2KwWNpo1EO-oMgTk9Oh3LOs9hZ0_LVlOf&abvar=0&os=0 HTTP/1.1
Host: vyfrxuytzn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2209180733b53ed4b8795a4a2dabb37c3f70
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACIXCAAAAAAAAAAB; Path=/; Expires=Tue, 18 Oct 2022 12:33:52 GMT; Secure; SameSite=None
OACIBLOCK=ACIXCAAAAABjJqXQ; Path=/; Expires=Tue, 18 Oct 2022 12:33:52 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Mon, 19 Sep 2022 12:33:52 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
ocsp.usertrust.com/
200 OK 471 B IP
Hash 4c1496c078111f1bdf4a7faefc1220d5
d773aab465a5ce0bd53f307262c5e044b2162481
6be86f53d2c8c546cb12f7e38dbe37b3fa6f5de1e2fcc5f9ff709d01d766a572
POST / HTTP/1.1
Host: ocsp.usertrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 18 Sep 2022 12:33:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 16 Sep 2022 02:07:03 GMT
Expires: Fri, 23 Sep 2022 02:07:02 GMT
Etag: "d773aab465a5ce0bd53f307262c5e044b2162481"
Cache-Control: max-age=603031,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1055
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74ca1ccebfe2b518-OSL
cdn18685953.ahacdn.me/skins/bannerdating4.png
200 OK 9.6 kB URL HTTP/2 cdn18685953.ahacdn.me/skins/bannerdating4.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 147 x 153, 8-bit/color RGBA, non-interlaced\012- data
Hash 56f07e0d933a1f7211667b4cc4a7db80
daf466fe3e15cc69bcf6b1d2592ba2d33357250f
5cc8d7fef92d8de943e1979813099b5f825d12443a29cf008928de90197b7118
GET /skins/bannerdating4.png HTTP/1.1
Host: cdn18685953.ahacdn.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: image/png
content-length: 9644
server: nginx/1.16.1
last-modified: Wed, 28 Jul 2021 08:50:24 GMT
etag: 56f07e0d933a1f7211667b4cc4a7db80
x-timestamp: 1627462223.18881
x-trans-id: tx9ec40df6ae564c1abf95a-0061c43775
x-openstack-request-id: tx9ec40df6ae564c1abf95a-0061c43775
cache-control: max-age=172800
access-control-allow-origin: *
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
expires: Tue, 20 Sep 2022 12:33:52 GMT
vary: Accept-Encoding
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.kinogogly.pro/bed239/4f8a112651cb.js
200 OK 27 kB URL HTTP/2 www.kinogogly.pro/bed239/4f8a112651cb.js
IP
ASN #61107 Toonbox Studio Ltd
File type ASCII text, with very long lines (65536), with no line terminators
Hash 11e43cb3a112bce5c5894854ea4b7c46
b9095e54527543a0d4a42beff3398dc50b34631f
bdfc0dfe508d3be60fa1e2505836f9d09f8ec18005bf758d9435fd0c5b0fa422
GET /bed239/4f8a112651cb.js HTTP/1.1
Host: www.kinogogly.pro
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: ucdn/1.22.0
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: application/javascript
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: Content-Type
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315357968, public
x-ureq-id: XDrrrzssYKy7XniAYHDaCxO/1BtQYlPAo1HVcwFLMsr3uaLidETSLqKazNe79F20FA3uo8svsia+dH2GDY8f+yW9G0bgBQkxYucKEX6fKtb2yoUxnJLMA+vaS5pzPbmM
x-served-from: l1
x-vhostid: 6599, 23853
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9536
Expires: Sun, 18 Sep 2022 15:12:48 GMT
Date: Sun, 18 Sep 2022 12:33:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4abe181b1d086cd7e122d7de32f63fb6
e3482d4df0d59c247109ff7fb97f20ec6f142c4d
63c277b85854c244e38f5b3e60a073eb15962a0784ba1b726353e3ec0c3e9e02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63C277B85854C244E38F5B3E60A073EB15962A0784BA1B726353E3EC0C3E9E02"
Last-Modified: Thu, 15 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9536
Expires: Sun, 18 Sep 2022 15:12:48 GMT
Date: Sun, 18 Sep 2022 12:33:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87c956a4-db39-47fc-87b0-5c576f15441b.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87c956a4-db39-47fc-87b0-5c576f15441b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 97d0fb7f2e5c544eb87b803a153d8763
a247157989727bf0d4598679f7f0cc9646299cbd
cfff9f9aaad7b3dc4949c917df6096ee65a3392d8a8dceddf94261af5480ac56
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87c956a4-db39-47fc-87b0-5c576f15441b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: cb45074f-f130-41a6-b253-6bc6654e8ebb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn6KXH3gIAMFwnA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263d75-32ffacde1e1eb46117c61fe9;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:34:45 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P60MPAXw-2lxWTjCtqk9Cd1oga6yuq6lcApDeSIWfIAehDHdXsCFIw==
via: 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:10:23 GMT
age: 51809
etag: "a247157989727bf0d4598679f7f0cc9646299cbd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2512deb9-0912-4851-b376-b8bcb67ed3ef.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2512deb9-0912-4851-b376-b8bcb67ed3ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7334a6bdb209350f41e4640960c9ce2a
0b00e1a594dc88c8fb05044a69cc0ba1eafc4946
bf946afeb52d95f27e2a271486accf87a0c169e5e78f6d57cace80564e2ed668
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2512deb9-0912-4851-b376-b8bcb67ed3ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10554
x-amzn-requestid: 07497447-33e7-4f60-a3ff-974f581c5704
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn5tlG_7IAMFaIA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263cbd-1964dc6548cb5f7c09f65b78;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:31:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BLfMTudduK95E9WeV9h987RYPa2RjQTtcl6jkjAZxgSWmCfUTnxU4A==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:43:11 GMT
age: 53441
etag: "0b00e1a594dc88c8fb05044a69cc0ba1eafc4946"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb78000d2-f83e-44e6-b5dd-092b2c37f6b8.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb78000d2-f83e-44e6-b5dd-092b2c37f6b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a533c29caf29ac5348a4443278d5c52c
915155faf27fad10373d5e282621af5c2eba0c17
eaa82b2d158d5f8c8a91a13cbce276aa8e2a9adabaa5a7d81e1155e3334ca27d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb78000d2-f83e-44e6-b5dd-092b2c37f6b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4807
x-amzn-requestid: 9fdca623-dc65-4b51-9b40-15049a21b986
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn5tlFNeIAMFblg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263cbd-285bbc7b1d5cf53a0e4aee0c;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:31:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: x3aE2dpTnJNFxSfNaD_VIpTlR_6f3kcM1axvgkXiGG_8ogT3jTAiSg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:43:11 GMT
age: 53441
etag: "915155faf27fad10373d5e282621af5c2eba0c17"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f003d8b6e12692fb16dddd6827deead8
786c333cf08456aea446a55c547520572e1c2df9
d79ea50cfc0f237b3de8f1826cbae1de0b1dbc632a5a06b08d9640abedded935
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c670b93-3941-4322-a938-e74eba949ad6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11919
x-amzn-requestid: 2f547c1f-2f5d-4707-8f6c-fe9dfff51383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YbfS4FI9oAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632145ab-3c967f2653d06c1c079f88c1;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 03:08:27 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QgOb-hraq20XpHk_0Cyz2UMxaIEjP8ilIXt2VuhiRJWJAOG5EuAb5A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 18 Sep 2022 05:49:05 GMT
age: 24287
etag: "786c333cf08456aea446a55c547520572e1c2df9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51d067e534c477ce996b3e806f6a132e
451c1f67948e45909e636828e3d2a3099de922f0
e13318949733eb7992695c61570cc8b2961d881a8343c677a77cd035e787bbaf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99a57f83-dfc8-4b82-ba40-2b21aa8c0f64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6869
x-amzn-requestid: e4e424a6-6c79-405b-8d1b-d40749ae3f0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn5yLHi8oAMFpXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263cda-22f6dae17ded045177976eaf;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:32:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eSPLuSCIr6IOor8bQh1STKcy6i_bS6nPhndKrN_g7IrXl6U43TogYw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 22:29:35 GMT
etag: "451c1f67948e45909e636828e3d2a3099de922f0"
content-type: image/jpeg
age: 50657
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0418a582-b5aa-4754-a162-d731a3e53f86.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0418a582-b5aa-4754-a162-d731a3e53f86.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9a9211e94d6aa2429e9663ef317707e
ac0d1af96508d026f9a1252d358660bd5671f9bd
36663b67119ae58b665e43d86b73045472cf23d73bf2c981754f479989690791
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0418a582-b5aa-4754-a162-d731a3e53f86.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5448
x-amzn-requestid: 3b63d209-af92-4d64-866a-d8f677aa62a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yn659H9DIAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63263ea5-30e7f8a32603ba70671addec;Sampled=0
x-amzn-remapped-date: Sat, 17 Sep 2022 21:39:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: JKenU-KwXFVEu-tZnc_yoDis5Lt-2tY0RcjH7ZT592hqp0tIUF25Lg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Sep 2022 21:49:01 GMT
etag: "ac0d1af96508d026f9a1252d358660bd5671f9bd"
content-type: image/jpeg
age: 53091
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef660fe244e725767aedff07dd86d2e3
b1620b375d3bf989d6f1f6bdc6bfcc4cd8234721
33517ce3701a61e7384168d2cd73ed46eeff65ddeeb9ee85dbd3b848546db17e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "33517CE3701A61E7384168D2CD73ED46EEFF65DDEEB9EE85DBD3B848546DB17E"
Last-Modified: Fri, 16 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14622
Expires: Sun, 18 Sep 2022 16:37:34 GMT
Date: Sun, 18 Sep 2022 12:33:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ef660fe244e725767aedff07dd86d2e3
b1620b375d3bf989d6f1f6bdc6bfcc4cd8234721
33517ce3701a61e7384168d2cd73ed46eeff65ddeeb9ee85dbd3b848546db17e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "33517CE3701A61E7384168D2CD73ED46EEFF65DDEEB9EE85DBD3B848546DB17E"
Last-Modified: Fri, 16 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14622
Expires: Sun, 18 Sep 2022 16:37:34 GMT
Date: Sun, 18 Sep 2022 12:33:52 GMT
Connection: keep-alive
forgerylimit.com/pixel/purst?dl=0&th=0&sc=0&rs=1982&rd=1982&fd=904&bv=22.8.v.1&tmpl=70
200 OK 0 B URL HTTP/1.1 forgerylimit.com/pixel/purst?dl=0&th=0&sc=0&rs=1982&rd=1982&fd=904&bv=22.8.v.1&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1982&rd=1982&fd=904&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: forgerylimit.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:52 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
reapinject.com/watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 reapinject.com/watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1 HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Sun, 18 Sep 2022 12:33:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://mad9ja.info
Access-Control-Allow-Origin: https://mad9ja.info
Access-Control-Allow-Credentials: true
Location: https://reapinject.com/watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=8e04c1209c31d5641bbd5ab72b6fad608636b22a35562b14cd4b212450bd685882319db8cf138735b90fe2b50481f67853e5515f88ccb231442be682defdf6777829420b0f2c8c52a7e7c3943692fe159b81534d&pst=1663504492&rmtc=t
Set-Cookie: u_pl=17573252; expires=Mon, 19 Sep 2022 12:33:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MzI1MiwiayI6ImVkMjQwZjA5ODY2NTBhMjg4Yjg4ZTEzOTA5M2E5OTEwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTUyNDI2LCJwaWQiOjQ0MDAwMCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJ0cGhqd3BuNDgiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vbWFkOWphLmluZm8vIn19.jWBeDZ-BLGqzvhHAvsxn-pXnuVKFj8xHjBZvCqV1pDo; expires=Sun, 18 Sep 2022 12:34:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bd3552b269f78e314f06187dc777610d
Strict-Transport-Security: max-age=0; includeSubdomains
reapinject.com/watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 reapinject.com/watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1 HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Sun, 18 Sep 2022 12:33:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://mad9ja.info
Access-Control-Allow-Origin: https://mad9ja.info
Access-Control-Allow-Credentials: true
Location: https://reapinject.com/watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1&shu=5f371991e8b1f4ececd59d4adcdd319ce80c52bc0a93fbdca9afbe716fca822f827ab2a6305872d0bcc68fde068d6b2a8790ba0f0eb90a5e4f3706673c002c0ffddccfda4255287ad2882ab359aa3edc31be265c&pst=1663504492&rmtc=t
Set-Cookie: u_pl=17573252; expires=Mon, 19 Sep 2022 12:33:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.jWBeDZ-BLGqzvhHAvsxn-pXnuVKFj8xHjBZvCqV1pDo; expires=Sun, 18 Sep 2022 12:34:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5a89cf552ecbacb0e01ea64752284d81
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d79dc028982b6d869bd2f5770173f53e
d83bf1ed97386e6e0ca45ed7962631dcb0573a7c
00e09951a443d33a769bd42c48b10530d3323eec1136688a5edc98dedaa48c05
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00E09951A443D33A769BD42C48B10530D3323EEC1136688A5EDC98DEDAA48C05"
Last-Modified: Sat, 17 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10171
Expires: Sun, 18 Sep 2022 15:23:24 GMT
Date: Sun, 18 Sep 2022 12:33:53 GMT
Connection: keep-alive
reapinject.com/watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1&shu=5f371991e8b1f4ececd59d4adcdd319ce80c52bc0a93fbdca9afbe716fca822f827ab2a6305872d0bcc68fde068d6b2a8790ba0f0eb90a5e4f3706673c002c0ffddccfda4255287ad2882ab359aa3edc31be265c&pst=1663504492&rmtc=t
200 OK 1.9 kB URL HTTP/1.1 reapinject.com/watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1&shu=5f371991e8b1f4ececd59d4adcdd319ce80c52bc0a93fbdca9afbe716fca822f827ab2a6305872d0bcc68fde068d6b2a8790ba0f0eb90a5e4f3706673c002c0ffddccfda4255287ad2882ab359aa3edc31be265c&pst=1663504492&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2371)
Hash 9dbc72e16f1de37d3c5780b76a7082ad
74955da48e2424ccc0b9caae762cb0bdb004d064
4212e011bf9b0834315adb931f651082f1457f5a569847b2139370a983969b0e
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1253473534711.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=14822048-698c-487d-90f0-04f49518c17e%3A3%3A1&shu=5f371991e8b1f4ececd59d4adcdd319ce80c52bc0a93fbdca9afbe716fca822f827ab2a6305872d0bcc68fde068d6b2a8790ba0f0eb90a5e4f3706673c002c0ffddccfda4255287ad2882ab359aa3edc31be265c&pst=1663504492&rmtc=t HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Referer: https://mad9ja.info/
Connection: keep-alive
Cookie: u_pl=17573252; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MzI1MiwiayI6ImVkMjQwZjA5ODY2NTBhMjg4Yjg4ZTEzOTA5M2E5OTEwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTUyNDI2LCJwaWQiOjQ0MDAwMCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjIzLCJwdCI6NCwicGsiOiJ0cGhqd3BuNDgiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vbWFkOWphLmluZm8vIn19.jWBeDZ-BLGqzvhHAvsxn-pXnuVKFj8xHjBZvCqV1pDo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 18 Sep 2022 12:33:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://mad9ja.info
Access-Control-Allow-Origin: https://mad9ja.info
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=14822048-698c-487d-90f0-04f49518c17e:3:1; expires=Sun, 25 Sep 2022 12:33:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
uncs=1; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 29ea10a27062b7d98165c0fb6cdb99ed
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
reapinject.com/watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=8e04c1209c31d5641bbd5ab72b6fad608636b22a35562b14cd4b212450bd685882319db8cf138735b90fe2b50481f67853e5515f88ccb231442be682defdf6777829420b0f2c8c52a7e7c3943692fe159b81534d&pst=1663504492&rmtc=t
200 OK 1.9 kB URL HTTP/1.1 reapinject.com/watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=8e04c1209c31d5641bbd5ab72b6fad608636b22a35562b14cd4b212450bd685882319db8cf138735b90fe2b50481f67853e5515f88ccb231442be682defdf6777829420b0f2c8c52a7e7c3943692fe159b81534d&pst=1663504492&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2390)
Hash b2737425320fc788842c29fd1bd1d966
af1aa58e5f58cfa2f7dfc403e1242b6331edd916
1018ac7166c82b5b3b32d27a7949af0d284796455a1aa259d930533bb6fd3558
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.497936186855.js?key=ed240f0986650a288b88e139093a9910&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=8e04c1209c31d5641bbd5ab72b6fad608636b22a35562b14cd4b212450bd685882319db8cf138735b90fe2b50481f67853e5515f88ccb231442be682defdf6777829420b0f2c8c52a7e7c3943692fe159b81534d&pst=1663504492&rmtc=t HTTP/1.1
Host: reapinject.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Referer: https://mad9ja.info/
Connection: keep-alive
Cookie: u_pl=17573252; ain=eyJhbGciOiJIUzI1NiJ9.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.jWBeDZ-BLGqzvhHAvsxn-pXnuVKFj8xHjBZvCqV1pDo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 18 Sep 2022 12:33:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://mad9ja.info
Access-Control-Allow-Origin: https://mad9ja.info
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=ed934972-84b5-42cc-9e01-611dd6dda4da:1:1; expires=Sun, 25 Sep 2022 12:33:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
uncs=1; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e78c11779f225f545c5aff81768f0053
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 38110b6dccd9b0515c0a8831ef3df3a7
3a7d7f9a31871bcf4b85795a9a2a066bfacb3ae0
e7850856f16c9fd3563ba0d7851eea4eae9021455d43b92cf21dd84236793cf7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E7850856F16C9FD3563BA0D7851EEA4EAE9021455D43B92CF21DD84236793CF7"
Last-Modified: Fri, 16 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5186
Expires: Sun, 18 Sep 2022 14:00:19 GMT
Date: Sun, 18 Sep 2022 12:33:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0eef005c73f63709e07f5cc8e75b9b35
1b997e5be07d0ad97429473aeab4804474217ae7
80aeae8b168ba62088159dcd0c41cee1fcea3598a1d0ee9f17215a5e4b82331d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80AEAE8B168BA62088159DCD0C41CEE1FCEA3598A1D0EE9F17215A5E4B82331D"
Last-Modified: Sat, 17 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15637
Expires: Sun, 18 Sep 2022 16:54:30 GMT
Date: Sun, 18 Sep 2022 12:33:53 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0eef005c73f63709e07f5cc8e75b9b35
1b997e5be07d0ad97429473aeab4804474217ae7
80aeae8b168ba62088159dcd0c41cee1fcea3598a1d0ee9f17215a5e4b82331d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80AEAE8B168BA62088159DCD0C41CEE1FCEA3598A1D0EE9F17215A5E4B82331D"
Last-Modified: Sat, 17 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15637
Expires: Sun, 18 Sep 2022 16:54:30 GMT
Date: Sun, 18 Sep 2022 12:33:53 GMT
Connection: keep-alive
varietiesplea.com/watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 varietiesplea.com/watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1 HTTP/1.1
Host: varietiesplea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://mad9ja.info
Access-Control-Allow-Origin: https://mad9ja.info
Access-Control-Allow-Credentials: true
Location: https://varietiesplea.com/watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=6f78d885f3551d0bc7557b6c697b14112ed8e76b659c0c7bd18438365cddf291d36a6690f18ac977e6c0ba3b873a4281e41cb01d23ebd0ecf38f036c162a132e36eca13a84e14095238f5040f293c11ceaacddb3&pst=1663504493&rmtc=t
Set-Cookie: u_pl=17573272; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MzI3MiwiayI6IjM2ODM1ODlhOGI3ZjU2ODA1YzFiODMxMGMzYzc1YTZiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTUyNDI2LCJwaWQiOjQ0MDAwMCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjUsInB0Ijo0LCJwayI6ImY5bWIxcmY3MSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo3OTk1NDE5NiwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjE4MTEwLCJvbiI6IkxpbnV4Iiwib3YiOiJVbmtub3duIiwiYmlkIjoxMTY2NzAsImJuIjoiRmlyZWZveCIsImJ2IjoiOTYuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9tYWQ5amEuaW5mby8ifX0.UAp9RZYYXgl8uLUkNNpAUgmZyHzu1TrC2fqV7uQ_8nI; expires=Sun, 18 Sep 2022 12:34:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2f9c64f6ada74c9aa35034d6eeb2b2e4
Strict-Transport-Security: max-age=0; includeSubdomains
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 18 Sep 2022 12:33:53 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 2a788019c10dd9adfb53647fb5ab757c
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/57/04/7b/57047b850b4959aabc005d0b5463c152/1663165273.gif
200 OK 27 kB URL HTTP/2 cdn.cloudimagesb.com/cti/57/04/7b/57047b850b4959aabc005d0b5463c152/1663165273.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 728 x 90\012- data
Hash a80889fa4d87424b0710735e5435a9c7
527ff0ecada13e341bcf56ae01183845d02f3570
50cf8c3e691692dd0faffd6f30f06fdc55954bf5d6319d77a313361d537c170c
GET /cti/57/04/7b/57047b850b4959aabc005d0b5463c152/1663165273.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:53 GMT
content-type: image/gif
content-length: 27323
server: nginx/1.17.6
last-modified: Wed, 14 Sep 2022 14:21:20 GMT
etag: "6321e360-6abb"
expires: Tue, 20 Sep 2022 12:33:53 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 18 Sep 2022 10:41:12 GMT
expires: Sun, 18 Sep 2022 12:41:12 GMT
cache-control: public, max-age=7200
age: 6761
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/cropped-mad9ja-logo-32x32.png
200 OK 2.0 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/cropped-mad9ja-logo-32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5fa7a522bb6b3fdd555a7fe4fbb6fcf3
50b2d18ece47314568477b04f51fab1daefe715a
f4b52f5b677ac91012dd915c32cc4edee317e03b18b9e5aace24fafc1d3ae95b
GET /wp-content/uploads/2022/09/cropped-mad9ja-logo-32x32.png HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1; bnState={"impressions":1,"delayStarted":0}; ppu_main_7b1839cd39dbbc6df24f31f19156c58d=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 11:01:07 GMT
etag: "7f0-5e7ebff219772"
accept-ranges: bytes
content-length: 2032
content-type: image/png
date: Sun, 18 Sep 2022 12:33:53 GMT
server: Apache
X-Firefox-Spdy: h2
mad9ja.info/wp-content/uploads/2022/09/cropped-mad9ja-logo-192x192.png
200 OK 46 kB URL HTTP/2 mad9ja.info/wp-content/uploads/2022/09/cropped-mad9ja-logo-192x192.png
IP
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash b6dc3bda94c129d12c46085eb9b2662d
8d1e7d3a6cd99f59477a65ffa5cfa3b3432e329d
fd54a87523534feffbc57b37ee9d0a24e4b4604e401892560920312f957c515c
GET /wp-content/uploads/2022/09/cropped-mad9ja-logo-192x192.png HTTP/1.1
Host: mad9ja.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1; bnState={"impressions":1,"delayStarted":0}; ppu_main_7b1839cd39dbbc6df24f31f19156c58d=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Sep 2022 11:01:07 GMT
etag: "b2c3-5e7ebff20fb32"
accept-ranges: bytes
content-length: 45763
content-type: image/png
date: Sun, 18 Sep 2022 12:33:53 GMT
server: Apache
X-Firefox-Spdy: h2
varietiesplea.com/watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=6f78d885f3551d0bc7557b6c697b14112ed8e76b659c0c7bd18438365cddf291d36a6690f18ac977e6c0ba3b873a4281e41cb01d23ebd0ecf38f036c162a132e36eca13a84e14095238f5040f293c11ceaacddb3&pst=1663504493&rmtc=t
200 OK 2.3 kB URL HTTP/1.1 varietiesplea.com/watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=6f78d885f3551d0bc7557b6c697b14112ed8e76b659c0c7bd18438365cddf291d36a6690f18ac977e6c0ba3b873a4281e41cb01d23ebd0ecf38f036c162a132e36eca13a84e14095238f5040f293c11ceaacddb3&pst=1663504493&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2833)
Hash 2e8f04dd07b2d37cdd1a3c8dec9c8d31
b5d0a12485401540a9d6eb9839331ecb1406a004
0a9428f5037674cff18de29f619cfb8283c44c7a1e331ca410366832edb915c6
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1156483083412.js?key=3683589a8b7f56805c1b8310c3c75a6b&kw=%5B%22mad%22%2C%229ja%22%2C%22-%22%2C%22the%22%2C%22art%22%2C%22of%22%2C%22entertainment%22%2C%22news%22%2C%22and%22%2C%22celebrities%22%2C%22update%22%5D&refer=https%3A%2F%2Fmad9ja.info%2F&tz=0&dev=r&res=12.31&uuid=ed934972-84b5-42cc-9e01-611dd6dda4da%3A1%3A1&shu=6f78d885f3551d0bc7557b6c697b14112ed8e76b659c0c7bd18438365cddf291d36a6690f18ac977e6c0ba3b873a4281e41cb01d23ebd0ecf38f036c162a132e36eca13a84e14095238f5040f293c11ceaacddb3&pst=1663504493&rmtc=t HTTP/1.1
Host: varietiesplea.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mad9ja.info
Referer: https://mad9ja.info/
Connection: keep-alive
Cookie: u_pl=17573272; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzU3MzI3MiwiayI6IjM2ODM1ODlhOGI3ZjU2ODA1YzFiODMxMGMzYzc1YTZiIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTUyNDI2LCJwaWQiOjQ0MDAwMCwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyLCJhaWQiOjUsInB0Ijo0LCJwayI6ImY5bWIxcmY3MSIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjo3OTk1NDE5NiwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjE4MTEwLCJvbiI6IkxpbnV4Iiwib3YiOiJVbmtub3duIiwiYmlkIjoxMTY2NzAsImJuIjoiRmlyZWZveCIsImJ2IjoiOTYuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9tYWQ5amEuaW5mby8ifX0.UAp9RZYYXgl8uLUkNNpAUgmZyHzu1TrC2fqV7uQ_8nI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 18 Sep 2022 12:33:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://mad9ja.info
Access-Control-Allow-Origin: https://mad9ja.info
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=ed934972-84b5-42cc-9e01-611dd6dda4da:1:1; expires=Sun, 25 Sep 2022 12:33:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
uncs=1; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 19 Sep 2022 12:33:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 080e2d3fbad5e6c3027d2d1c2013c2c7
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/96/64/f2/9664f226fa61ddbdd7ebea02d8e43bbf/1627979045.png
200 OK 150 kB URL HTTP/2 cdn.cloudimagesb.com/cti/96/64/f2/9664f226fa61ddbdd7ebea02d8e43bbf/1627979045.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 150 kB (149685 bytes)
Hash e7d35967d5b4bada68ebcfd8adf31493
e03ab93358befd526f05f2fa8197b98e07a50bea
6ba59bc77806df1b35b248a8f1315cf2fc0d8def3282e6d2f6246594e0608730
GET /cti/96/64/f2/9664f226fa61ddbdd7ebea02d8e43bbf/1627979045.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:53 GMT
content-type: image/png
content-length: 149685
server: nginx/1.17.6
last-modified: Tue, 03 Aug 2021 08:24:14 GMT
etag: "6108fd2e-248b5"
expires: Tue, 20 Sep 2022 12:33:53 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a4071dd6fc65797cae7ab7404de4d25a
194d9d01ee408dbe1289b5d644e257e5f7480aae
eebb25d0f994ca71687c840dcc31dd88d5dba35cdedaf567ee8a370786100f8f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEBB25D0F994CA71687C840DCC31DD88D5DBA35CDEDAF567EE8A370786100F8F"
Last-Modified: Sun, 18 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14353
Expires: Sun, 18 Sep 2022 16:33:07 GMT
Date: Sun, 18 Sep 2022 12:33:54 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/36/90/13/369013892c357d415d1ad7748ed75879/1627917230.png
200 OK 1 B URL HTTP/2 cdn.cloudimagesb.com/cti/36/90/13/369013892c357d415d1ad7748ed75879/1627917230.png
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
GET /cti/36/90/13/369013892c357d415d1ad7748ed75879/1627917230.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 18 Sep 2022 12:33:53 GMT
content-type: image/png
content-length: 61633
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 15:13:57 GMT
etag: "61080bb5-f0c1"
expires: Tue, 20 Sep 2022 12:33:53 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ad.a-ads.com/2075951?size=728x90
200 OK 0 B URL HTTP/2 ad.a-ads.com/2075951?size=728x90
IP
ASN #24940 Hetzner Online GmbH
GET /2075951?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:51 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://mad9ja.info/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
vyfrxuytzn.com/get/1937564?zoneid=1937564&jp=_cln2iaj4ntkcbd18yjxe8d&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=3768194122557528
200 OK 0 B URL HTTP/2 vyfrxuytzn.com/get/1937564?zoneid=1937564&jp=_cln2iaj4ntkcbd18yjxe8d&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=3768194122557528
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1937564?zoneid=1937564&jp=_cln2iaj4ntkcbd18yjxe8d&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=3768194122557528 HTTP/1.1
Host: vyfrxuytzn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=2209180733b53ed4b8795a4a2dabb37c3f70; Path=/; Expires=Mon, 18 Sep 2023 12:33:52 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
heglosuty.com/cHD/9/6Ub.2y5Dl/S/W/Qf9mN/DoUyyAOlD-M/zGOwCB0N0dNjT-IZ4tMGzXMU5a
200 OK 0 B URL HTTP/2 heglosuty.com/cHD/9/6Ub.2y5Dl/S/W/Qf9mN/DoUyyAOlD-M/zGOwCB0N0dNjT-IZ4tMGzXMU5a
IP
GET /cHD/9/6Ub.2y5Dl/S/W/Qf9mN/DoUyyAOlD-M/zGOwCB0N0dNjT-IZ4tMGzXMU5a HTTP/1.1
Host: heglosuty.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: application/javascript
vary: Accept-Encoding
expires: Mon, 26 Jul 2011 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Platform
access-control-allow-headers: Content-Type
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-allow-credentials: true
last-modified: Sun, 18 Sep 2022 12:33:52 GMT
set-cookie: kadSlcJ=eyJ0aW1lU3RhbXAiOjE2NjM1MDQ0MzIsInpvbmVzIjp7IjQ1MjgzMzgiOls0NTI4MzM4LDEsMTY2MzUwNDQzMl19fQ==; max-age=1695040432; path=/
x-content-type-options: nosniff
content-encoding: br
X-Firefox-Spdy: h2
ad.a-ads.com/2075951?size=728x90
200 OK 0 B URL HTTP/2 ad.a-ads.com/2075951?size=728x90
IP
ASN #24940 Hetzner Online GmbH
GET /2075951?size=728x90 HTTP/1.1
Host: ad.a-ads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:52 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding, Accept-Encoding
status: 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-powered-by: Phusion Passenger(R)
x-original-referer: https://mad9ja.info/
x-robots-tag: noindex, nofollow, nosnippet, noarchive
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:300,400,400italic,600,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,400italic,600,700
IP
GET /css?family=Open+Sans:300,400,400italic,600,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 18 Sep 2022 12:33:51 GMT
date: Sun, 18 Sep 2022 12:33:51 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.wp.com/e-202237.js
200 OK 0 B IP
GET /e-202237.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mad9ja.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Sep 2022 12:33:51 GMT
content-type: application/javascript
vary: Accept-Encoding
etag: W/"62f6b688-3508"
content-encoding: br
expires: Sun, 03 Sep 2023 22:56:03 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
164.68.116.153
192.243.61.225
104.21.235.2
23.36.77.32
93.184.220.29
62.122.171.6
185.18.187.89