Overview

URLrezuke.gooredirect.xyz/go/296f1d56-e7de-4d22-bd17-c8bf100fabc1
IP 3.70.16.242 (Germany)
ASN#16509 AMAZON-02
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-08 22:14:17 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6207 95.101.11.115
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.36.24.174
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3260 62394 34.120.237.76
bigrourg.net (1) 219228 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 416 22580 139.45.197.251
pu3hj.bemobpath.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 623 491 3.70.16.242
rezuke.gooredirect.xyz (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 393 1430 3.70.16.242
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 35.241.9.150
ocsp.digicert.com (3) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1023 1968 93.184.220.29
trackaj.xyz (17) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 9071 414175 188.114.96.1
my.rtmark.net (2) 9054 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1079 1906 139.45.195.8

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-08 medium rezuke.gooredirect.xyz/go/296f1d56-e7de-4d22-bd17-c8bf100fabc1 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 3.70.16.242
Date UQ / IDS / BL URL IP
2023-06-02 02:52:58 UTC 0 - 0 - 2 click.stukhffjsurvey.live/ 3.70.16.242
2023-06-01 22:27:15 UTC 0 - 1 - 0 win.canyouwin.online/go/547f6e26-7e42-4c9e-9c (...) 3.70.16.242
2023-06-01 04:58:43 UTC 0 - 0 - 2 go.rdrm1.click/go/3217fab2-ddfa-48c3-b6aa-fc8 (...) 3.70.16.242
2023-05-31 23:58:40 UTC 0 - 0 - 2 reminderset.com/go/f4e5a55d-d7da-4409-9280-96 (...) 3.70.16.242
2023-05-31 15:50:25 UTC 0 - 1 - 0 track.camf.quest/go/1ac40d60-edde-401d-8262-1 (...) 3.70.16.242


Last 5 reports on ASN: AMAZON-02
Date UQ / IDS / BL URL IP
2023-06-02 02:58:03 UTC 0 - 2 - 0 cs1.biniq.com/%E5%A6%96%E9%82%AA%E9%A2%86%E5% (...) 3.64.163.50
2023-06-02 02:52:58 UTC 0 - 0 - 2 click.stukhffjsurvey.live/ 3.70.16.242
2023-06-02 02:51:17 UTC 0 - 0 - 40 instagramwebui.netlify.app/ 35.156.224.161
2023-06-02 02:49:47 UTC 0 - 0 - 1 oxhqsjtc.2imagnig.com/ 3.64.163.50
2023-06-02 02:49:27 UTC 0 - 34 - 0 rdroot.com/?a=3319&oc=34077&c=66196&m=7&s1=pr (...) 34.251.29.167


Last 5 reports on domain: gooredirect.xyz
Date UQ / IDS / BL URL IP
2023-05-27 21:37:38 UTC 0 - 0 - 1 rezuke.gooredirect.xyz/go/cf03740c-6d29-43c4- (...) 3.70.16.242
2023-05-27 21:30:26 UTC 0 - 0 - 1 rezuke.gooredirect.xyz/go/6769de51-1821-4d4d- (...) 3.70.16.242
2023-05-25 19:19:10 UTC 0 - 0 - 1 rezuke.gooredirect.xyz/go/5a44cdbb-85b0-43a7- (...) 3.70.16.242
2023-05-25 11:14:10 UTC 0 - 0 - 1 rezuke.gooredirect.xyz/go/a7c43545-6a77-405e- (...) 3.70.16.242
2023-05-21 21:11:30 UTC 0 - 0 - 1 rezuke.gooredirect.xyz/go/3fd2c679-1c79-46b9- (...) 3.70.16.242


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-01 11:17:15 UTC 0 - 1 - 1 rezuke.gooredirect.xyz/go/9abe48ed-7a3f-43b9- (...) 3.70.16.242
2023-03-31 21:00:25 UTC 0 - 0 - 2 rezuke.gooredirect.xyz/go/439b0a43-d740-4b13- (...) 3.70.16.242
2023-03-30 03:58:50 UTC 0 - 0 - 2 spinwee1.online/root/spinwhel-iq-update/?bemo (...) 172.67.218.184
2023-03-29 22:16:11 UTC 0 - 0 - 2 rezuke.gooredirect.xyz/go/9ea46bad-ff57-451d- (...) 3.70.16.242
2023-03-29 21:03:43 UTC 0 - 0 - 2 spinwee1.online/root/spinwhel-iq-update/?bemo (...) 104.21.45.199

JavaScript

Executed Scripts (20)

Executed Evals (1)
#1 JavaScript::Eval (size: 80) - SHA256: a280a7cbaef96f4ff83ac12cae46fe2db1026d04bdbc2032c74f5e23f7fa8dff
(() => {
    const a = async
    function name() {};
    window['dgx1ysyygic'] = true;
})()

Executed Writes (4)
#1 JavaScript::Write (size: 11) - SHA256: 99ff117175ab52a8dd6932d1ef7f9df25c48138f02c030cebb4ea4b0c8921ddd
December 08
#2 JavaScript::Write (size: 11) - SHA256: 0b265143ff27fe5f80579d6461389d3a171c34472f2e1fd802a973272a60ce0a
December 06
#3 JavaScript::Write (size: 11) - SHA256: 5da8043765e9d8cafc9f77db85394da6cdfd9e8781adc1ecddb00c8300ce0ba1
December 05
#4 JavaScript::Write (size: 11) - SHA256: ea4c79f700fe292ecf47e4003e8b594880ff13bd2602651b4946692819d4ce8c
December 04


HTTP Transactions (43)


Request Response
                                        
                                            GET /go/296f1d56-e7de-4d22-bd17-c8bf100fabc1 HTTP/1.1 
Host: rezuke.gooredirect.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             3.70.16.242
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Server: openresty
Date: Thu, 08 Dec 2022 22:14:06 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
Access-Control-Allow-Origin: *
ETag: W/"159-49tAUteY0H2tLWqEwa8kwPA+vsk"
Set-Cookie: bemob-uniq-visit:296f1d56-e7de-4d22-bd17-c8bf100fabc1=1; Domain=rezuke.gooredirect.xyz; Path=/; Expires=Fri, 09 Dec 2022 22:14:06 GMT; HttpOnly bemob-rotation:296f1d56-e7de-4d22-bd17-c8bf100fabc1:random:ba33fd43ddab833328f64db63341c92c=0-0-0; Domain=rezuke.gooredirect.xyz; Path=/; Expires=Fri, 09 Dec 2022 22:14:06 GMT; HttpOnly bemob-track-url=https%3A%2F%2Ftrackaj.xyz%2Froot%2Fspinwhel-iq-update%2F%3Fbemobdata%3Dc%253D296f1d56-e7de-4d22-bd17-c8bf100fabc1..l%253Dcac46cd2-6424-4f4e-827d-bdc33047e385..a%253D0..b%253D0; Domain=rezuke.gooredirect.xyz; Path=/; Expires=Fri, 09 Dec 2022 22:14:06 GMT; HttpOnly
X-Response-Time: 19.386ms
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (345), with no line terminators
Size:   281
Md5:    af3a769a4fc9c34d7ebf99f268510b3a
Sha1:   f4a957fc26b03bd81f45f3cbc59a51ce543d50fb
Sha256: 2281e3f0771df6a380e1034720056fef47caeaf0f429bdb34cf65f35c0b76eb3

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16005
Expires: Fri, 09 Dec 2022 02:40:51 GMT
Date: Thu, 08 Dec 2022 22:14:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14895
Expires: Fri, 09 Dec 2022 02:22:21 GMT
Date: Thu, 08 Dec 2022 22:14:06 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5945
Expires: Thu, 08 Dec 2022 23:53:11 GMT
Date: Thu, 08 Dec 2022 22:14:06 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 22:08:14 GMT
age: 352
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bf0c602d32b3c14606f22a86183b5e3c
Sha1:   6eabd8d83475eba731968abe1a05a8bfd272f160
Sha256: 6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: LspuYVlAIsfv3/06hoKXoIuxGXksEqpn92zKu7sXCi6qBz1LPq/f8nVlzjZsQqz+HOGeOi5ffcc=
x-amz-request-id: CD9VWRA3V6YCXFS9
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 21:49:58 GMT
age: 1448
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 08 Dec 2022 22:14:06 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "B5B9800548093DA6D20C1D801827987BDFE769C825A1D5F1D7646F7092A9B15A"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10766
Expires: Fri, 09 Dec 2022 01:13:32 GMT
Date: Thu, 08 Dec 2022 22:14:06 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 22:07:55 GMT
age: 372
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=99645
Date: Thu, 08 Dec 2022 22:14:07 GMT
Etag: "639143ec-117"
Expires: Sat, 10 Dec 2022 01:54:52 GMT
Last-Modified: Thu, 08 Dec 2022 01:54:52 GMT
Server: nginx
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=99645
Date: Thu, 08 Dec 2022 22:14:07 GMT
Etag: "639143ec-117"
Expires: Sat, 10 Dec 2022 01:54:52 GMT
Last-Modified: Thu, 08 Dec 2022 01:54:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3108
Cache-Control: max-age=128673
Date: Thu, 08 Dec 2022 22:14:07 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 09:58:40 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /root/spinwhel-iq-update/img/4.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 21109
cache-control: public, max-age=14400, must-revalidate
etag: "143c69aaf1e8ba0aabf3dd9ec1d9e445-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GKSN3X3K6QQS2XV5DCZTMHWY
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rs4hB25qV0Zck147SIdzaBzsenG46ZEng4dONSm1MfNOMxQOWB4LobGLsXEtSPZMd6rHp1NXduMbLzFDtnIGMpJgtkZIqXFMxTdCHA%2BZ62qvu%2FMbN%2FKZVRBNV7ZrtQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef65b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 400x400, components 3\012- data
Size:   21109
Md5:    5c6bd23de24730e4b4b37730dd74aef8
Sha1:   6ad9ac3a16e2cd8521eeb8d918f0ceb383fb1f90
Sha256: 2fa0af8cb1cffe84b9fadb389a4750f9fe8a5a1ff0a3bce12ec329d4c5e9bcd8
                                        
                                            GET /root/spinwhel-iq-update/img/8.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 4831
cache-control: public, max-age=14400, must-revalidate
etag: "b9ce8499900b91e7201edecbf1f2962e-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GKSN3X3DB264FYMJ3VH8PY8W
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=izszSCxErG2mgtv54qbF2qg2Q%2FhV8%2BRv%2BMoRwmHUF42YLovOouDNPwBR%2FmORmC8BqgA3HgPp8Ni%2FcdHJfTxmpwWRiJePplw02anUgH2MRZIGkWd7cZ0IvG9WVstg6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef5bb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 240x240, components 3\012- data
Size:   4831
Md5:    f1b90b01b26661e37ecdb01a4753a1bf
Sha1:   b6c3960258ba473581daf27df9db972540ec29ed
Sha256: a8079bac57434af72b399fb198d79cbd9c46a5363096afa97398e4da4228218d
                                        
                                            GET /root/spinwhel-iq-update/img/spin_vi.png HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 157854
cache-control: public, max-age=14400, must-revalidate
etag: "40bacaeb3e6e728d4b4c50d96676485f-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GKSN3X3BKYVVY0MHRXRJYXFF
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6KKB5jXzv777JogjaNvCUX6UuznNksIjbm9C7IIdzxmro57x%2BZh5H2lNc1ssR4uEWmlXEYEU%2BpOnq9pzormRATYV1bB5frXH5GEMm6c8zVAxNZ9M2%2FBG7KF%2Bfx8B0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef58b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 501 x 501, 8-bit/color RGBA, non-interlaced\012- data
Size:   157854
Md5:    8dd0fc8c5d2c4cd476f006616d0e3e96
Sha1:   1770ff33d40f683b78f3a3b47a02700b299952c5
Sha256: 95a3f2aae7a9926ea17b19c260c498d28acb57d4e064f6d902388fd6e5f525a0
                                        
                                            GET /root/spinwhel-iq-update/img/1.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 18232
cache-control: public, max-age=14400, must-revalidate
etag: "0fdf1d98ca06e6a3b06349fd9985af77-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GJ7FZARXJFYJK1NDHJMPMGJF
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=loUCUYPWyh5csgX3%2Bgp5mfYLPu4MsiisCtPfldl34rlzS5niE4B1ym5IlUoVpMm4IpVr%2BrMvFwphKlooic1%2Bt7aHWm9v%2FXjop92QpvW%2FxJq%2BUIuwkfehDynhlh%2BqDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef5db4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=Smiling hispanic or middle eastern young man looking at the camera\377\333], baseline, precision 8, 360x360, components 3\012- data
Size:   18232
Md5:    8d4757a7ca89741ae1ef279ac277739b
Sha1:   e3134530778bbf711de60829f9ee270ae3309d4b
Sha256: e0b4b9068a7fe672f712bb1a39080e06604c506465394214cfde2382ba52f047
                                        
                                            GET /root/spinwhel-iq-update/img/cash.png HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 64073
cache-control: public, max-age=14400, must-revalidate
etag: "b0f06bd9dc6e086e00185f96daa3c2a6-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GJ7FZARZRKBR758DV6M1GVYZ
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rwGQwP3gAC2p0XCNZ7btzLfeE%2B02FUopb8bcIvTUANhmtrrZrU6ErXeiS%2FhieU1mHe%2F950ea6ijRtSiIyzPmuGlg0V55k5IgQsag8CMnQcuWJa5JT6i9sGPgUsbStQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef59b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 372 x 368, 8-bit colormap, non-interlaced\012- data
Size:   64073
Md5:    1139894d02e3017837dab31330877007
Sha1:   760500f5a5f8b5ead948094e13d7646079a56aea
Sha256: 4b085445a906c42d4fb009ff252f8f7e8040235b3a7848f0fc9af501316fad9e
                                        
                                            GET /root/spinwhel-iq-update/img/6.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 20826
cache-control: public, max-age=14400, must-revalidate
etag: "d9f71630def6a1050f1f740068adb403-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GK822N2H02E08V6PNFCWTH86
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mdkq%2BRovFacOsgyKnNdXryYxKIcVZoi47JZF0CKk1DtJ76CzpDFDzwcZLD1acYdVuyeUfwxJ4KaKWYOu2sXw%2FWMzUjKX3LiAw9h7N%2FQZU4B6nruN15ZSsi%2Fmz%2FlJ0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ff6db4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=happy refuuge at camp\377\333], baseline, precision 8, 408x408, components 3\012- data
Size:   20826
Md5:    ccddf6a16d3fcc1c7ba4acef48fdef50
Sha1:   de01377d44746d8e92c46e1a64788b5df04340d4
Sha256: a6fc77c7cb826f01f0aa8c3182b8b0006125f0d5fbec3ceff93b004d14e17d01
                                        
                                            GET /root/spinwhel-iq-update/js/en_date.js HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
cache-control: public, max-age=14400, must-revalidate
etag: W/"3ffc4d8daf8a0279c657879a371a6eff-ssl-df"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GKSN3X3B941TNV4BXM4SV7MX
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qj2iVZ3S9BTAcgBTIvt%2BtRZur3dRUGs7S8d0hf8XAutLpQbf%2FBa77Kq9gf7FNjfRVc67PkyjwfZ%2BxSUE0OxeFe11%2BsWFqKqcl3YYJh2h21%2FHsU6Lj%2FB1wk2KQ9S2iQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7768da28df4ab4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2042
Md5:    96f0a0548c79536c62b376846a4fd27d
Sha1:   1213e2ceb0cb5d4aabe3c30d65e798784eeffe30
Sha256: a0de5d5b36c9bd7ca089a642f7fb6e63bc387017b18e3318285725ba257174d8
                                        
                                            GET /root/spinwhel-iq-update/img/5.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 48500
cache-control: public, max-age=14400, must-revalidate
etag: "b7af897904fb4d58f4a27936259bb793-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GJ7FZARZJX0XP2ZVPG1PBPJF
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Nlti7wCgqwcdr4toJKRH%2F8ZKfecWRd1MM%2BMkiAwqRUfWflgZ8xsWqxot84gyUQGEMYmiZAcPCpSIc6XDdw2KJH67AE5EGUtxNYQAAR0E2ETd59enT0rOdMHOmH%2Fzg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef6ab4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, copyright=Shannon Selim], baseline, precision 8, 640x640, components 3\012- data
Size:   48500
Md5:    6b4d6ee00c74e83d9951c81d58ce9295
Sha1:   9594243fe36fb66f7f0cf659cd279be1cf1cc864
Sha256: 49950c2963d8d425b48440d5663c436b5cd6a4ee550f57912120d530c96032d2
                                        
                                            GET /root/spinwhel-iq-update/img/7.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 26430
cache-control: public, max-age=14400, must-revalidate
etag: "5f713f6c2173d1bb8ea9cf3786e18e19-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GKSN3X3NPSNP8PC592CZDFX2
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WgF7TWKH6D55ssqF26OpluWl91HSH6%2Fz5sCMz6V4j3LnW5Qkabj%2FWENtRVh75mNb5cCXMr5h44cQPnGsUuaVPG9g4d%2FTUTo6XhHpIIgE52XQArTQNzKrkacdi6pHQA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ff6fb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 480x400, components 3\012- data
Size:   26430
Md5:    22cb80edd617362c5465bc2e8f8871d0
Sha1:   aa39c3c8c4dfb74089b63abef0e33e74e8fe5210
Sha256: eaa4bd9a29ee64b0d8e79df7304706004eb6be85fc417f7ffaa0cc7eb6541635
                                        
                                            GET /root/spinwhel-iq-update/img/smiley.png HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 4992
cache-control: public, max-age=14400, must-revalidate
etag: "a770a97f2ef0e3b3edd238062c9e3313-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GK822N2K0NPBMX638A9KM7EE
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ArKfbbCJPyLr7nA7qoPdmVf8ikjcn8o%2FvY4F5pzNESyrOAWgZMMWZcDpIxlHpwc2yM2aZ61Gq11ZoMpLjniAtLvsnyTDdo7AiguYUjFu7AH0nVhcM7Gy2b%2FJ5tcmXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ff71b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size:   4992
Md5:    6a1b1fb2c9a70e8bb232985a5e7c76f2
Sha1:   a371f8e561576cb893e897f1e156597d3abbd0be
Sha256: 68c86e51e47a972e3191621e48685c0d9d1e166235cd816dc74370bc439567fc
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A1E57B6E4016D7D5DDDC431B4A204A6268296CCB0D5F45D2ECD13A02214CE47E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7754
Expires: Fri, 09 Dec 2022 00:23:21 GMT
Date: Thu, 08 Dec 2022 22:14:07 GMT
Connection: keep-alive

                                        
                                            GET /root/spinwhel-iq-update/img/2.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 8149
cache-control: public, max-age=14400, must-revalidate
etag: "192591960bd52039aaec63c9d453a3a2-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GKSN3X3CZTEB7Q2SN1TBWCKC
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sbSW8nje3l3mWUQ7gVHia6YKW74eZnYC53xTuVbmRUhulQA15mOfdkQI0cvaWS4486aHEH3NFYSGsF8oEBNJ8zNBri2cbcargHiP7KlT0mHWwjQN%2BLl7w5ac%2Bcq7cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef63b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Size:   8149
Md5:    d3a748efcc12b64924280109f7b42c99
Sha1:   733dca7bef4f1f344b9bd0176ed9f8e6b38111e9
Sha256: 0f6c00936fa720c5c4b4bd5b410badd270114ba65d06ad148b550617a296ab17
                                        
                                            GET /root/spinwhel-iq-update/img/3.jpg HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 14686
cache-control: public, max-age=14400, must-revalidate
etag: "a84fd5388db24f436ebb6879d0e97503-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GKSN3X3TJ1CJESYWPWFT3JGZ
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xdxZoyMTL7l1tSLC%2BVdQlCEFOHt%2BdBh8WEGH7VwBYe0mz4SQ8McL%2FDAGQVoyIc5i2w105VVHziQW5FmegE3ektean3qP051Z1Z1%2BDVv5ziuIrquTEhkHnaHr60QkCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ef68b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=Smiling young man looking at the camera with his arms crossed\377\333], baseline, precision 8, 360x360, components 3\012- data
Size:   14686
Md5:    56612da382cd894c3d9a7066200c8987
Sha1:   b50307ef6d081ab84e04f3077551ef52bc677bf8
Sha256: 235ac72915d61b0433f01ae12e6a2a0dd5a676b0e85fdeeb67f6a5b2ea9bb63d
                                        
                                            GET /root/spinwhel-iq-update/img/refresh.png HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: image/png
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 1798
cache-control: public, max-age=14400, must-revalidate
etag: "a8f2cf0e5f0e85d12faa27e61c1d49a3-ssl"
strict-transport-security: max-age=31536000
x-nf-request-id: 01GJ7FZAS2KA5HQ7JWFB0HB1G5
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cJDzzc4A6eE93saeGELrfxKKjHowad9hIvx3CU5VJg76kQ6bl9hVNr7symd6r5gGDuu5g6%2FuSKIjdstwNlM57IjlE%2B%2FbN3FwFIwUgtdfouV0w4qILQyRBvlNoA48mQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7768da28ff73b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 70 x 70, 8-bit colormap, non-interlaced\012- data
Size:   1798
Md5:    2d0f4539e28850747bcdf03e8c9a9f10
Sha1:   c400935fad4c29d04714cf5b9e74fb4d4d8f1e1d
Sha256: c04fa254d43e1b6db555962ac2dbc6cd67d47aff3c1d7895a229cdaca87a688e
                                        
                                            GET /p.js?f=sync&lr=1&partner=887609b5f4b8dbcf2e35aa2836a9fd8d8a017fb66ae8ee6345d1cd654b6f1994 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.195.8
HTTP/2 200 OK
content-type: text/javascript
                                            
server: nginx
date: Thu, 08 Dec 2022 22:14:07 GMT
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   697
Md5:    4685fe11a9955835384195c9aaa587bd
Sha1:   cfc503c5dac47e834118894ad406b5d6b2efe684
Sha256: fce110f120c5f5b605bbbc25445630b0c846ad71cf192eb230bfc96fbadaf004
                                        
                                            GET /root/spinwhel-iq-update/css/style__base.css HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
cache-control: public, max-age=14400, must-revalidate
etag: W/"48cda9d2e1e4882f881c36734d6c0dbf-ssl-df"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GKSN3X35XDKKKEJYKYD8SN82
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XTfEDHcu%2BoFZI5zLsy8Q3BU4bNJ%2FZzssORGrU%2B%2F0kYquyKjZpiHFH5ZaFALa%2FI8v70dCwPqXw9OVogSC2srzdZZdTVjQFHZBDk6KwUxzSwjNJJa2cvctf9LJdhNEXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7768da28df4bb4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   6769
Md5:    188182d8a7bc0606adfebd1ec8862968
Sha1:   2001f7f62dce6559b583e93e2d047375784ab2b4
Sha256: b8a22b0d679cd0fb2fb5d68f1f0e80996ae70611c0aebcd9e05f10790abf5943
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OYn2inYbBwZWmtPR5Qcvrg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.36.24.174
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3uhS4/UggVC3wNdKoYHlkXT6NIQ=

                                        
                                            GET /img.gif?f=sync&partner=887609b5f4b8dbcf2e35aa2836a9fd8d8a017fb66ae8ee6345d1cd654b6f1994&ttl=&rurl=https%3A%2F%2Ftrackaj.xyz%2Froot%2Fspinwhel-iq-update%2F%3Fbemobdata%3Dc%3D296f1d56-e7de-4d22-bd17-c8bf100fabc1..l%3Dcac46cd2-6424-4f4e-827d-bdc33047e385..a%3D0..b%3D0 HTTP/1.1 
Host: my.rtmark.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             139.45.195.8
HTTP/2 200 OK
content-type: image/gif
                                            
server: nginx
date: Thu, 08 Dec 2022 22:14:08 GMT
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2005b95ff45b408a97946aadf5ac124f; expires=Fri, 08 Dec 2023 22:14:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15394
Expires: Fri, 09 Dec 2022 02:30:42 GMT
Date: Thu, 08 Dec 2022 22:14:08 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15394
Expires: Fri, 09 Dec 2022 02:30:42 GMT
Date: Thu, 08 Dec 2022 22:14:08 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 81649
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8659
Md5:    b87d6543345f73653ed4a49b37d7c959
Sha1:   c4f26846b8b72293368ff16915d49297cf12bbb9
Sha256: aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:21:22 GMT
age: 85966
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9596
Md5:    c408efaa98ac2ce63bb1618368d10c15
Sha1:   a51bbb49ebd862d04eaee465d0a35b22dcd21391
Sha256: 077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 83410
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12534
Md5:    57be99ac898a37d73f2ba4a24f56248f
Sha1:   04e32eb45581201a6a1863200e4d139df48285e6
Sha256: a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 82653
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7801
Md5:    8c94003641bb5a7595e7004f80f95d22
Sha1:   3446450df60d732f9021d5bfd5f5f7c6c870d9ec
Sha256: 4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv756DvAzOQnKae5wVg75wrQS6oDGPkfIZka86FNQ2vizBnZ7sIDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:12:45 GMT
age: 82883
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7268
Md5:    24d89b69ba37bf23c5d576aff4063caf
Sha1:   3d46a21b4da571d7e4962e335c18a28ca5f81ecf
Sha256: 09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
                                        
                                            GET /pfe/current/micro.tag.min.js?z=5111789&sw=/sw-check-permissions-aae63.js HTTP/1.1 
Host: bigrourg.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             139.45.197.251
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Thu, 08 Dec 2022 22:14:07 GMT
last-modified: Thu, 01 Dec 2022 15:42:47 GMT
etag: W/"6388cb77-9a87"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   22277
Md5:    9d5acb798c05409a79de052ac43e5e7e
Sha1:   10a0be01d86b870087d20fcebbb8e43059b3230c
Sha256: b652536674123cdf5fc155f7f68a92f569b9cfc574b7fd91aabb3f73a9e990ab
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:05:37 GMT
age: 43718
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10164
Md5:    3d44d17585c9a536c8da0e75ed90d175
Sha1:   9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
Sha256: 6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
                                        
                                            GET /root/spinwhel-iq-update/css/style_a.css HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
cache-control: public, max-age=14400, must-revalidate
etag: W/"1473adf58d9bbec22e785727559b8c51-ssl-df"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GKSN3X3GW66FWNY33CGA1V4F
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HAqq6pERxmbeix%2FPPm06ey4TUSANBZ1o9D5aZNc7TU3swZsDyf%2BU%2B3DNrzyuqQ03SbPHYJTp%2FAM6XhyZOIqN8I0deSie24fWdEkFLjiYIfsiC7O9x9omlhmnyqJMOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7768da28ef53b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /root/spinwhel-iq-update/js/jquery.min.js HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
cache-control: public, max-age=14400, must-revalidate
etag: W/"ddbc6702bc953f6dedfe3543150cf865-ssl-df"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GKSN3X3ZQKGRW5GN97BJ2HB4
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ir5tVQyHP%2FJlOnAVhDbnmSDKR3EZ%2Bb8y8jOQuL6O%2BfjUCKU7XAcnhlQATcnCdj0p6IDQBQeu9DhgJ3UyxDZ%2FjkghGdPo1SE29cgy%2FfY%2B48m%2F7PdAklE0rnIpeHn6pQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7768da28ff74b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /?redirectUrl=https%3A%2F%2Ftrackaj.xyz%2Froot%2Fspinwhel-iq-update%2F%3Fbemobdata%3Dc%253D296f1d56-e7de-4d22-bd17-c8bf100fabc1..l%253Dcac46cd2-6424-4f4e-827d-bdc33047e385..a%253D0..b%253D0 HTTP/1.1 
Host: pu3hj.bemobpath.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             3.70.16.242
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
server: openresty
date: Thu, 08 Dec 2022 22:14:06 GMT
vary: Accept-Encoding
accept-ch: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
etag: W/"10f-xUqOdaziuA78xLMxYhu4u4AmTos"
x-response-time: 2.213ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /root/spinwhel-iq-update/js/bioep.min.js HTTP/1.1 
Host: trackaj.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://trackaj.xyz/root/spinwhel-iq-update/?bemobdata=c=296f1d56-e7de-4d22-bd17-c8bf100fabc1..l=cac46cd2-6424-4f4e-827d-bdc33047e385..a=0..b=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             188.114.96.1
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 22:14:07 GMT
cache-control: public, max-age=14400, must-revalidate
etag: W/"16322b53a3ea039d744dc303d398d1dd-ssl-df"
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GJAWX8DRPG1C8X3W3CGXF321
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ejwMT7O5Y23fH9Efk6nHfCwqM5R4%2FM5aty5Uugq4gDZv3YKY8a4Ty16QR6m0T3XiGFbx2%2Fpat25QB%2BYXkadxHLT5bkQCcKADG1jTObPCQaT2ezlS4q4kkxhiF2vN9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7768da28ef56b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: