firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 23 Sep 2022 03:14:07 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 98RKhZuKySiF7k5sFJ2DIYuBjOX-7aTIN6-_1yR92GL6agzxUvB2KA==
Age: 2009
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2309
Expires: Fri, 23 Sep 2022 04:26:05 GMT
Date: Fri, 23 Sep 2022 03:47:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 22 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RhsRBWSuC8VO2Qva7i44P0LYrlWk5bkAsEWM9cu_1EvUj1Lnl9xgRg==
age: 83542
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 23 Sep 2022 03:47:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ww16.yaoo.co/?sub1=20220923-0326-5034-b4db-ceea1f464f59
91.195.240.15200 OK 1.2 kB URL HTTP/1.1 ww16.yaoo.co/?sub1=20220923-0326-5034-b4db-ceea1f464f59
IP 91.195.240.15:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (597)
Hash 4d6d8cf2e94b0649a52822d05827abf6
7e1ed96ee2f68ee838b7252a1005dd46c6ec9e65
51eff659836cda490fbf11ebee798814ae2b0c50527aac5cec4880c72fd851b7
Analyzer Verdict Alert fortinet Malware
GET /?sub1=20220923-0326-5034-b4db-ceea1f464f59 HTTP/1.1
Host: ww16.yaoo.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Fri, 23 Sep 2022 03:47:36 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_1mQUe5Dl20tB16xjpTj+flp5PLCP3xqudlp35mnkKTiEeZk6NwSz6AHQc0VOtpqhYxzW69JWophj0dtmAvDtIw==
last-modified: Fri, 23 Sep 2022 03:47:36 GMT
x-cache-miss-from: parking-75468f7c47-2bxdj
server: NginX
content-encoding: gzip
img.sedoparking.com/images/js_preloader.gif
205.234.175.175200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP 205.234.175.175:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.yaoo.co/
HTTP/1.1 200 OK
Date: Fri, 23 Sep 2022 03:47:36 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Fri, 30 Sep 2022 03:47:36 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 6638df7d1742a0d11d7dc22bc096fc63
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww16.yaoo.co/search/tsc.php?200=MzkxOTY0NTkw&21=OTEuOTAuNDIuMTU0&681=MTY2MzkwNDg1NmMxOTg2NWEwODEyMDFlNjc5ZDJlZTM2OWM5ZmI3MDY2&crc=de04419d5ca0d91982a43cdd3ccf37da97dd2d63&cv=1
91.195.240.15200 OK 0 B URL HTTP/1.1 ww16.yaoo.co/search/tsc.php?200=MzkxOTY0NTkw&21=OTEuOTAuNDIuMTU0&681=MTY2MzkwNDg1NmMxOTg2NWEwODEyMDFlNjc5ZDJlZTM2OWM5ZmI3MDY2&crc=de04419d5ca0d91982a43cdd3ccf37da97dd2d63&cv=1
IP 91.195.240.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/tsc.php?200=MzkxOTY0NTkw&21=OTEuOTAuNDIuMTU0&681=MTY2MzkwNDg1NmMxOTg2NWEwODEyMDFlNjc5ZDJlZTM2OWM5ZmI3MDY2&crc=de04419d5ca0d91982a43cdd3ccf37da97dd2d63&cv=1 HTTP/1.1
Host: ww16.yaoo.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.yaoo.co/?sub1=20220923-0326-5034-b4db-ceea1f464f59
HTTP/1.1 200 OK
date: Fri, 23 Sep 2022 03:47:36 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-cache-miss-from: parking-75468f7c47-pc9rg
server: NginX
ww16.yaoo.co/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D
91.195.240.15302 Found 0 B URL HTTP/1.1 ww16.yaoo.co/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D
IP 91.195.240.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D HTTP/1.1
Host: ww16.yaoo.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww16.yaoo.co/?sub1=20220923-0326-5034-b4db-ceea1f464f59
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Fri, 23 Sep 2022 03:47:36 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Fri, 23 Sep 2022 03:47:36 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D
x-cache-miss-from: parking-75468f7c47-v9czt
server: NginX
ww16.yaoo.co/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D
91.195.240.15302 Found 311 B URL HTTP/1.1 ww16.yaoo.co/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D
IP 91.195.240.15:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 001f0e6ddfe0a1b4b17aed8e8aecf8f6
4cd37e09f5759b275b49589b6039ff12b230201a
75c4949e7b45b876bbb5ecff3b805aacd6b546196fd77de9d5e72cb8d02ea3fd
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3D1ueGeU-YooI_0&v=ZTBkNzgyMjU1NzMxZGE1Y2RmMzQzZWI2NDcyZmY1NWMJMQl3dzE2Lnlhb28uY282MzJkMmM1ODEzZjkxMS4xMzE4NTQ2Nwl3dzE2Lnlhb28uY282MzJkMmM1ODEzZmJjMy40NzQ4NzU1NwkxNjYzOTA0ODU2CWFkXzYzXzA=&l=OAlhNjQ1OTFlOGFkMzVhY2IxMDcyMWQ3ZTYxNjBhYmM1YQkwCTM1CTAJYzhhMjdmZTBlNTRjNzJhZDlkNmEwZjNmOTJhNTgyNzkJMzkxOTY0NTkwCXlhb28JMAk2Mwk2CTIJMTY2MzkwNDg1NgkwLjAwMDM2NwlOCTAJMAkwCTEyMDUJOTM3NTc5NDQJOTEuOTAuNDIuMTU0CTA%3D HTTP/1.1
Host: ww16.yaoo.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww16.yaoo.co/?sub1=20220923-0326-5034-b4db-ceea1f464f59
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Fri, 23 Sep 2022 03:47:36 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Fri, 23 Sep 2022 03:47:36 GMT
location: http://xml.sedodna.com/click?i=1ueGeU-YooI_0
x-cache-miss-from: parking-75468f7c47-x4lm8
server: NginX
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 23 Sep 2022 03:03:23 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 23 Sep 2022 03:22:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ItCcWqBL7W1eTh92m1mF2bV7iqT_3spsUH9xN34Zmk8o0vh-pxzLhw==
Age: 2654
xml.sedodna.com/click?i=1ueGeU-YooI_0
173.239.53.32302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=1ueGeU-YooI_0
IP 173.239.53.32:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=1ueGeU-YooI_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww16.yaoo.co/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://go.findservice.xyz/15Gu5p?zoneid=13154428&pubfeed=95356/95356.240934_13154428&campaign=671642&cost=0.00055
Pragma: no-cache
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 86624f45fb3b7126dbe002f69c94dd86
30bcf274db5037122f989fb25dbf1e72c9ec417b
2cc9600578cf057dc499835773fb495caa60ac154c4945f0fc1f2b31d43f5502
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3446
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 03:47:37 GMT
Last-Modified: Fri, 23 Sep 2022 02:50:11 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 925d6d3e11b3914660743c7698a5e82d
cbb52f61e90e08ede663157f31bfbc9e7765ccd3
8f208022116ed9600a0f12ac97b0107ba4b00dbad837b60b49ebf92effa53032
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F208022116ED9600A0F12AC97B0107BA4B00DBAD837B60B49EBF92EFFA53032"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14316
Expires: Fri, 23 Sep 2022 07:46:13 GMT
Date: Fri, 23 Sep 2022 03:47:37 GMT
Connection: keep-alive
push.services.mozilla.com/
44.228.207.167101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.228.207.167:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ss0BzoHIosrilTSc45rLJw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rlVKu1akb+kB0S0PFIwOey6CcjM=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18834
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:47:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18834
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:47:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18834
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:47:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18834
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:47:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18834
Expires: Fri, 23 Sep 2022 09:01:32 GMT
Date: Fri, 23 Sep 2022 03:47:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg
34.120.237.76200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3b318ea5c36d2b22b925f7dfe382df5f
0264e73c4cfff0bb255757c7e1c760a5ad3ece80
0c2f58ea4f5f32bb327f292e1b8fb5a4a60230bffc3abc440a624df27ec0d6bc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98db69a9-8416-4b0b-b1b4-1ed196b985e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5340
x-amzn-requestid: b13bc974-e15d-43a4-a918-fbc35b09a36f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y19HljIAMFY8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4f2-2cb226ba4bd7c7e74d9ab2db;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8DCVWC4Ihr4R21i3ySyiWdUK0aGymTE22B842ZKolG-ZThiKSMX-uQ==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:04:45 GMT
age: 20573
etag: "0264e73c4cfff0bb255757c7e1c760a5ad3ece80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc638445c-ca62-4366-ae6c-013d448cb1b2.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc638445c-ca62-4366-ae6c-013d448cb1b2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98ac8db095e393fc3c6c19d331f75848
70d8758a0eb4bcad5c1973a2cce14e5dbd194f9c
bd56f4a74b8b4c538edb665ab3066c3e8c0445f9d37f2eed8022e8be2034d67a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc638445c-ca62-4366-ae6c-013d448cb1b2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9082
x-amzn-requestid: a65fdf4b-7cff-4e93-bdd6-5d5b8cee92ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfWGrF_BIAMFxXw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322d090-141af6ee47817f451ba481b1;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: tf1nRx-_7X7yt5g61AHzoFFbru5BJj3POepcsMYhO4HzkjSPDd6vew==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:08:23 GMT
age: 20355
etag: "70d8758a0eb4bcad5c1973a2cce14e5dbd194f9c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3056431736af42cc145a77dbc77c45a7
977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e
d299e38c678f4c4548cd2e7cf7ff1b07910b316bfc8b13c492b4fbee0a66b079
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F62dd28d6-72d9-4f9c-8eb7-cc97b6279d6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9892
x-amzn-requestid: c492a572-0b9e-4176-91e9-a11fedf8c06e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yyj8OE7nIAMFwQA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a804e-0d6e804d4368880535f6c115;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 03:09:02 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Te1oX4iUxYNB19Uuk39k9DrhHiCVSwnNSpdYQDK_N5AYtXqJIe-ggg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 04:26:52 GMT
age: 84046
etag: "977068c1cfdf8dfb64cbe8fb8d917ebc8e3e970e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 61059307f07edc4e2ba9d07a258bca43
370d166426ad83fc04ccb6e300238d8cb6ab644a
55ec802097ab49f275686e99844ff4a3b554c8998213bb9c3f0380709297c55b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56968ed0-3207-4af0-8229-5f3698c6c55f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5936
x-amzn-requestid: 39e79389-c158-4427-aae0-b1d0dc1d0377
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VowElZoAMF2Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfd1-2da28eb66f876af76158b090;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -DSp0__jaBzizsfagTtIpwhkPqkvjS1L6T17J0OS5W0QhZww03ywpw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:42:39 GMT
age: 18299
etag: "370d166426ad83fc04ccb6e300238d8cb6ab644a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e125802119a2737820b343c4e9ecfb6
30ccc2dd2597b5b720d66c960ee8bd63c7115630
90cce372b2b8c89569fffc55de468bfc7cd4b7454ae7c55c48b7a846506b576e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0908c18b-cd0b-41cc-beb5-0347df28884c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11059
x-amzn-requestid: 65fe1c05-a158-4ac2-8368-f26da119ef68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcDTgGV4oAMF0iw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217f49-74fc5c511bee36fd11d6d2eb;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:14:17 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8k-1BHGHnBYSNqKWsRvVt8MpglKJ4eodtFakTTnr7ZzqSpP8iJWqVA==
via: 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:57:54 GMT
age: 17384
etag: "30ccc2dd2597b5b720d66c960ee8bd63c7115630"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02a682b4703bb9d6381c762726c05531
1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54
fb672de67420a239fe5d7e2588f640150ed29883fe2a46ded160385e3265004c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccf6ade-04f7-4d15-943c-bde343725d94.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8029
x-amzn-requestid: 2fc5c63d-5cef-42f4-a6d2-b55f51c57af6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4Y0tHjGoAMFcFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd4ea-73f2f78a2d1ca8fc666d2571;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:34:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5ur411n5hU7eWb68iExZCUrhpCybRyTBHCi72ra8dS2kd3UhW8sb1A==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 21:59:00 GMT
age: 20918
etag: "1d7f7b4cfdd7425213a21afdd1d5a5d8d11d0e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
go.findservice.xyz/15Gu5p?zoneid=13154428&pubfeed=95356/95356.240934_13154428&campaign=671642&cost=0.00055
20.113.188.243302 Found 298 B URL HTTP/1.1 go.findservice.xyz/15Gu5p?zoneid=13154428&pubfeed=95356/95356.240934_13154428&campaign=671642&cost=0.00055
IP 20.113.188.243:0
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type HTML document, ASCII text, with no line terminators
Hash 3f7c89c7c00cb0178dd86a0a6b975fd6
70e4d54743ad9e6e25a6bad236b820876455377d
32be36a97a9e6acb74f59dd86e0464f414179a3c06f95bbc60230630d6a296cf
GET /15Gu5p?zoneid=13154428&pubfeed=95356/95356.240934_13154428&campaign=671642&cost=0.00055 HTTP/1.1
Host: go.findservice.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww16.yaoo.co/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.23.0
Date: Fri, 23 Sep 2022 03:47:38 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 298
Connection: keep-alive
X-Powered-By: Express
Set-Cookie: 15Gu5po=20220923061663905429877; domain=.go.findservice.xyz; path=/;expires=Sat, 24 Sep 2022 03:47:37 GMT; httpOnly=true;SameSite=None; Secure;
_pc_lc_id=15Gu5p; domain=.go.findservice.xyz; path=/;expires=Sat, 24 Sep 2022 03:47:37 GMT; httpOnly=true;SameSite=None; Secure;
peerclickcid=1992b26cd8314817996397c005ea14d6-11246-0923; domain=.go.findservice.xyz; path=/;expires=Sat, 24 Sep 2022 03:47:38 GMT; httpOnly=true;SameSite=None; Secure;
_norg=1; domain=.go.findservice.xyz; path=/;expires=Sat, 24 Sep 2022 03:47:38 GMT; httpOnly=true;SameSite=None; Secure;
Location: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Vary: Accept
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash ac714daa54760a76e678db2d47238372
037d8d167ee755fad4b0131aba55a43894219cc8
2bb586695b1bb631af608718263183966e4dd7a6fe5c14ed2356c3613ab616ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2BB586695B1BB631AF608718263183966E4DD7A6FE5C14ED2356C3613AB616BA"
Last-Modified: Wed, 21 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11620
Expires: Fri, 23 Sep 2022 07:01:19 GMT
Date: Fri, 23 Sep 2022 03:47:39 GMT
Connection: keep-alive
findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
152.228.253.26200 OK 2.4 kB URL HTTP/1.1 findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
IP 152.228.253.26:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (480), with CRLF line terminators
Hash e5148869f6db37340be65b4d673b62ce
f2cef85b437437addb66d3b6b8ee69f51fda7bfa
f72017d93ac2ab8a05e0631d512a86d00c6ce17d1213e4a1be977751905952d6
Analyzer Verdict Alert quad9 Sinkholed
GET /?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923 HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww16.yaoo.co/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: text/html
Content-Length: 2428
Connection: keep-alive
content-encoding: gzip
vary: Accept-Encoding
set-cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq; path=/
cache-control: private, no-transform
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash ab9170d59e1c01422d2c55356248b569
0df99ca360de0b69a7e79d8e79b6383fec4a5453
7747cc09f59efbc03c3663c9be6bb63248a43f8f310c1bae1466255e83a72455
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 23 Sep 2022 03:47:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic
216.58.211.10200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic
IP 216.58.211.10:0
Hash 56afc93dc7a73dac18f1163860cd34a8
68d8aea401449643cfb04f7d4936e41699e0eeba
46e29c159b223622acea628d00e95688b905b65b0a179b6392774d72f14cae03
GET /css?family=Roboto:400,300,700|Raleway:400,700&subset=latin,cyrillic HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 23 Sep 2022 03:47:39 GMT
date: Fri, 23 Sep 2022 03:47:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
findingylove-easy.life/media/dating/sinderv2/js/jquery.js
152.228.253.26200 OK 32 kB URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/js/jquery.js
IP 152.228.253.26:0
File type ASCII text, with very long lines (32072)
Hash 5e1bd8f5ca76c8cd822923a6f71ee236
fa44933943b423f5f82afe56d9a2125e811fe64c
c1cad1d1ff5404e1dcf24f872026c946f95cabd3f081cf02da0cc679ee093a78
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/dating/sinderv2/js/jquery.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 29 Jul 2022 09:26:02 GMT
Vary: Accept-Encoding
ETag: W/"62e3a7aa-16b88"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/css/style.css
152.228.253.26200 OK 25 kB URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/css/style.css
IP 152.228.253.26:0
File type ASCII text, with CRLF line terminators
Hash 66edc092b6c9014a8919abf88031becf
7f654eade8e78eec437a855fce46ca35ef2da4da
36c0bf8a97f3e640e9c39c871cbff6b80eee23f9bd18973fec99e16df21b84f0
Analyzer Verdict Alert quad9 Sinkholed
GET /media/dating/sinderv2/css/style.css HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: text/css
Connection: close
Last-Modified: Tue, 24 May 2022 20:48:11 GMT
Vary: Accept-Encoding
ETag: W/"628d448b-4d71"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/css/bootstrap.min.css
152.228.253.26200 OK 31 kB URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/css/bootstrap.min.css
IP 152.228.253.26:0
File type ASCII text, with very long lines (65367), with CRLF line terminators
Hash 0127dfd5ff14b5e2eb991a7dcf12aaef
038beb47dcc7b15e609e25736069dde98c4d663a
1920b162af0b24639bfe626666910d0fba13b19c7e9d0e264a4d016f817dd610
Analyzer Verdict Alert quad9 Sinkholed
GET /media/dating/sinderv2/css/bootstrap.min.css HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: text/css
Connection: close
Last-Modified: Wed, 23 Feb 2022 13:48:13 GMT
Vary: Accept-Encoding
ETag: W/"62163b1d-1abe4"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/css/vegas.css
152.228.253.26200 OK 24 kB URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/css/vegas.css
IP 152.228.253.26:0
File type ASCII text, with CRLF line terminators
Hash ce1fd1b958d9c0605e6bcb554ae81a6c
1e301e295025e52b00ea58ba3477d254a5ff15df
7f7c2bcb62d5960ecf0e740399f781aa078eb0ba9d9ab8cc05ebbc87214885ed
Analyzer Verdict Alert quad9 Sinkholed
GET /media/dating/sinderv2/css/vegas.css HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: text/css
Connection: close
Last-Modified: Wed, 23 Feb 2022 13:48:14 GMT
Vary: Accept-Encoding
ETag: W/"62163b1e-4d6e"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/util/flag-icon/css/flag-icon.css
152.228.253.26200 OK 2.6 kB URL HTTP/1.1 findingylove-easy.life/util/flag-icon/css/flag-icon.css
IP 152.228.253.26:0
File type ASCII text, with CRLF line terminators
Hash 6ea6ab77956a2bf52fc7e91386bcb184
bbc3b7c9eead1fd1f3be344d6e3f2d41d4b3adc7
30f44fcbc6f4c092db2e778abcfcb4d032fe664793df7f0df314d2a06de9ca09
Analyzer Verdict Alert quad9 Sinkholed
GET /util/flag-icon/css/flag-icon.css HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: text/css
Connection: close
Last-Modified: Wed, 19 May 2021 12:38:50 GMT
Vary: Accept-Encoding
ETag: W/"60a506da-9eb3"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2
152.228.253.26200 OK 22 kB URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2
IP 152.228.253.26:0
File type Web Open Font Format (Version 2), TrueType, length 21908, version 3.786\012- data
Hash 2e5fca371696cab9fb5a9fe214c1319c
4bd3fe039b2f65d10d1b8c1b30c7962bdc313b7a
f8b1a05998ba7e93e5c9f41b004496a3576b8d10d9fafc2f7014894ebc3e72e9
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/dating/sinderv2/fonts/2e5fca371696cab9fb5a9fe214c1319c.woff2 HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://findingylove-easy.life/media/dating/sinderv2/css/style.css
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:40 GMT
Content-Type: font/woff2
Content-Length: 21908
Connection: keep-alive
Last-Modified: Wed, 23 Feb 2022 13:48:14 GMT
Vary: Accept-Encoding
ETag: "62163b1e-5594"
Cache-Control: no-transform
Accept-Ranges: bytes
findingylove-easy.life/util/flag-icon/flags/4x3/no.svg
152.228.253.26200 OK 331 B URL HTTP/1.1 findingylove-easy.life/util/flag-icon/flags/4x3/no.svg
IP 152.228.253.26:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with CRLF line terminators
Hash c7ecfe59439b5fd23924fd206cf2fded
056fbd2b17c7f08bfb480d21973a96bf86fbd72a
4027f3320608508754640a6de4cb1cdabdef4654b5a214e875c134802345683f
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /util/flag-icon/flags/4x3/no.svg HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/util/flag-icon/css/flag-icon.css
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:40 GMT
Content-Type: image/svg+xml
Content-Length: 331
Connection: keep-alive
Last-Modified: Wed, 19 May 2021 12:39:17 GMT
Vary: Accept-Encoding
ETag: "60a506f5-14b"
Cache-Control: no-transform
Accept-Ranges: bytes
findingylove-easy.life/favicon.ico
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/favicon.ico
IP 152.228.253.26:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:40 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
last-modified: Mon, 09 Aug 2021 05:32:32 GMT
accept-ranges: bytes
etag: "636c1f3df8cd71:0"
Cache-Control: no-transform
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F256647b7-64d8-4f7e-9d77-276811e8e1b1.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F256647b7-64d8-4f7e-9d77-276811e8e1b1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae63806537bc1795029ac9e522b4abb1
47c7e2fd6f0ea1bd6c9f494137b7ce53a91cf781
369fe0af9bba20526bb10c7240a7571e72726fa653bbb70d8e56fabb13cf9358
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F256647b7-64d8-4f7e-9d77-276811e8e1b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9484
x-amzn-requestid: ac493b06-28bc-4a84-ad7a-060617233da8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4ZDRHHiIAMFnow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd547-7944659e3cb7134b58da757f;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:36:07 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OzTpgbr1HluiZtdiVUrQjTV1KMWuynatd1A8L8excXJDJsnM45A3Hg==
via: 1.1 1949caaabae48a894fcd770a3e1384f6.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Sep 2022 22:12:35 GMT
age: 20110
etag: "47c7e2fd6f0ea1bd6c9f494137b7ce53a91cf781"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
findingylove-easy.life/media/dating/sinderv2/images/scandinavia16.jpg
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/images/scandinavia16.jpg
IP 152.228.253.26:0
Analyzer Verdict Alert quad9 Sinkholed
GET /media/dating/sinderv2/images/scandinavia16.jpg HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:45 GMT
Content-Type: image/jpeg
Connection: close
Last-Modified: Wed, 23 Feb 2022 13:52:24 GMT
Vary: Accept-Encoding
ETag: W/"62163c18-32a8a"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/css/animate.css
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/css/animate.css
IP 152.228.253.26:0
Analyzer Verdict Alert quad9 Sinkholed
GET /media/dating/sinderv2/css/animate.css HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: text/css
Connection: close
Last-Modified: Wed, 23 Feb 2022 13:48:13 GMT
Vary: Accept-Encoding
ETag: W/"62163b1d-ef04"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/images/logo-loveme_white1.svg
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/images/logo-loveme_white1.svg
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/dating/sinderv2/images/logo-loveme_white1.svg HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:40 GMT
Content-Type: image/svg+xml
Connection: close
Last-Modified: Tue, 24 May 2022 07:36:10 GMT
Vary: Accept-Encoding
ETag: W/"628c8aea-11d4"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/cookie/js.cookie.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/cookie/js.cookie.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /cookie/js.cookie.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Thu, 21 Jul 2022 10:04:53 GMT
Vary: Accept-Encoding
ETag: W/"62d924c5-10a8"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/bb.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/bb.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/bb.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:40 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Thu, 28 Jul 2022 18:00:18 GMT
Vary: Accept-Encoding
ETag: W/"62e2ceb2-27f"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/exit-new/exit1.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/exit-new/exit1.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/exit-new/exit1.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:40 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Mon, 31 May 2021 11:57:39 GMT
Vary: Accept-Encoding
ETag: W/"60b4cf33-d91"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/js/vegas.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/js/vegas.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/dating/sinderv2/js/vegas.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 29 Jul 2022 09:26:02 GMT
Vary: Accept-Encoding
ETag: W/"62e3a7aa-5520"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/util/utils.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/util/utils.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /util/utils.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 29 Jul 2022 09:09:07 GMT
Vary: Accept-Encoding
ETag: W/"62e3a3b3-1d58"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/js/timer.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/js/timer.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/dating/sinderv2/js/timer.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 29 Jul 2022 09:26:02 GMT
Vary: Accept-Encoding
ETag: W/"62e3a7aa-26d"
Content-Encoding: br
Cache-Control: no-transform
findingylove-easy.life/media/dating/sinderv2/js/trls.js
152.228.253.26200 OK 0 B URL HTTP/1.1 findingylove-easy.life/media/dating/sinderv2/js/trls.js
IP 152.228.253.26:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /media/dating/sinderv2/js/trls.js HTTP/1.1
Host: findingylove-easy.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://findingylove-easy.life/?u=7pfk605&o=e9ym176&t=13154428_laxy&cid=1992b26cd8314817996397c005ea14d6-11246-0923
Cookie: sid=t1~zn1hlyhhzlftud0nuor1dleq
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 23 Sep 2022 03:47:39 GMT
Content-Type: application/javascript
Connection: close
Last-Modified: Fri, 29 Jul 2022 09:26:02 GMT
Vary: Accept-Encoding
ETag: W/"62e3a7aa-4394"
Content-Encoding: br
Cache-Control: no-transform