Report - danggoodwings.com/jp.php?step=2&token=96bi4zpd1m

Report Overview

Submitted URL
danggoodwings.com/jp.php?step=2&token=96bi4zpd1m
IP
69.49.234.179
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2022-11-19 16:45:56
Access
Website Title
Final URL
Tags
None
urlquery detections
Phishing - Chase

Detections

urlquery
1
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-10T05:10:02Z	606 B	127 B	52.38.227.80
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-10T05:10:04Z	3.8 kB	50 kB	34.120.237.76
danggoodwings.com	unknown	2022-10-08T18:31:10Z	2023-03-05T02:33:48Z	878 B	29 kB	69.49.234.179
antidote.fit	unknown	2022-06-17T15:59:54Z	2022-12-28T11:47:17Z	3.2 kB	129 kB	156.67.64.231
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-10T05:10:00Z	782 B	2.4 kB	34.102.187.140
ocsp.digicert.com	86	2012-05-21T09:02:23Z	2023-03-10T13:49:44Z	682 B	1.6 kB	93.184.220.29
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-10T05:12:35Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-10T05:10:00Z	333 B	229 B	34.117.237.239
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-10T05:09:10Z	1.7 kB	4.4 kB	23.36.76.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	danggoodwings.com/jp.php?step=2&token=96bi4zpd1m	80 B	2023-03-11	2023-03-11
Pretty URL danggoodwings.com/jp.php?step=2&token=96bi4zpd1m IP 69.49.234.179 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 14:31:55 Last Seen2023-03-11 14:31:55 Times Seen1 Hash 9d95579633d66a0fe16ead9a1990966d 8582cd3ef3c13fcc487a6aecca1c3fee8e5a69bd d233711469fa0cbc61c8ff643d8dfc05e4b208e2eb74d52ac651fb2f319552c2 Loading...

	antidote.fit/HEROIN/Morphines/Files/assets/jquery.min.js	160 kB	2023-03-07	2024-04-15
Pretty URL antidote.fit/HEROIN/Morphines/Files/assets/jquery.min.js IP 156.67.64.231 ASN #47583 Hostinger International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-04-15 09:41:25 Times Seen198 Hash 50f1aacb05fc40763064d74404c5bcb2 b3c28cab2fc387c630cf23704dde2f1b5013747c 6e1297448cf350be58ab05a6c413fa4d4b97440a0a3ab97fb03c09ff49af5ad4 Loading...

	antidote.fit/HEROIN/Morphines/Files/assets/jquery.mask.js	20 kB	2023-03-07	2024-04-18
Pretty URL antidote.fit/HEROIN/Morphines/Files/assets/jquery.mask.js IP 156.67.64.231 ASN #47583 Hostinger International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:35 Last Seen2024-04-18 08:21:41 Times Seen3553 Hash 053305c2b293c27c02523cda42962c09 556b0af7346b9e21a8eea1be8b195b563169ecd5 be483938eb34538b970684f72e312f62652e84b42b7ad86953962d1ce2217c44 Loading...

	antidote.fit/HEROIN/Morphines/Files/assets/functions.js	4.6 kB	2023-03-11	2023-03-11
Pretty URL antidote.fit/HEROIN/Morphines/Files/assets/functions.js IP 156.67.64.231 ASN #47583 Hostinger International Limited Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 14:21:34 Last Seen2023-03-11 14:31:55 Times Seen1 Hash 969ae4030332732b9a0adb792717d3f5 4dfc25b752089a888ae4c357cb7a799ab03a25ec 81008707d5cf8c874e27f0a1a915a97ffd493c3978cb516535158d906db7522f Loading...

HTTP Transactions (29)

	URL	IP	Response	Size
	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 6ed951622549ed76959631f8a1bf497b 682b2dd2a72190510e3fa7bdb0c0c6f25a322dfb 86f5e5ae2da408a899d16c83b7ca441033ac0c30062cd29f2db1b1b5be666746 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "86F5E5AE2DA408A899D16C83B7CA441033AC0C30062CD29F2DB1B1B5BE666746" Last-Modified: Sat, 19 Nov 2022 06:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2795 Expires: Sat, 19 Nov 2022 17:32:19 GMT Date: Sat, 19 Nov 2022 16:45:44 GMT Connection: keep-alive`

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash f732c50f6a2482aeea20552e0370c2d0 6f33119d5c38e92a0a62f3a46766ff86014e4d68 a47e38c199c5fecd5594544a3889e1cfca5547d85f19056f06eaeeadf17f4fe9 HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1628 Cache-Control: max-age=151957 Content-Type: application/ocsp-response Date: Sat, 19 Nov 2022 16:45:44 GMT Etag: "6378b071-1d7" Expires: Mon, 21 Nov 2022 10:58:21 GMT Last-Modified: Sat, 19 Nov 2022 10:31:13 GMT Server: ECS (ska/F6FD) X-Cache: HIT Content-Length: 471`

	firefox.settings.services.mozilla.com/v1/	34.102.187.140	200 OK	939 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 34.102.187.140:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 B (939 bytes) Hash d130218d0e2841f39c99610fe1a2ab90 29fbe1e177ee55c7a61ae0a206afff271cf5f945 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152 HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sat, 19 Nov 2022 16:45:10 GMT cache-control: public,max-age=3600 content-type: application/json age: 34 alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash e7724a1f27dc1b5b2fb63c7e486f74db ef0ea648ce8bc189d31382baec4b181c724af93b 2a46916079563d95fa6a695104ebf41829ee95a156d6e4d45b9aef7231a8a80e HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "2A46916079563D95FA6A695104EBF41829EE95A156D6E4D45B9AEF7231A8A80E" Last-Modified: Fri, 18 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5697 Expires: Sat, 19 Nov 2022 18:20:41 GMT Date: Sat, 19 Nov 2022 16:45:44 GMT Connection: keep-alive`

	content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain	34.160.144.191	200 OK	5.3 kB
URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain IP 34.160.144.191:0 ASN #15169 GOOGLE File type PEM certificate\012- , ASCII text Size 5.3 kB (5348 bytes) Hash 67d5a988edcda47bc3b3b3f65d32b4b6 d4f0e0da8b3690cc7da925026d3414b68c7d954f 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 HTTP Headers `GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK x-amz-id-2: +fxrZFMkvxMGxZFXo1EWSoIAG3pZzmj3F5gZdEJrb+1MqxLw/li4Q/fkqG44kffN8v13q+SHfnM= x-amz-request-id: NP3534EEKCE6ZSRJ content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sat, 19 Nov 2022 16:16:06 GMT age: 1778 last-modified: Fri, 30 Sep 2022 18:50:55 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" content-type: binary/octet-stream cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2`

	contile.services.mozilla.com/v1/tiles	34.117.237.239	200 OK	12 B
URL HTTP/2 contile.services.mozilla.com/v1/tiles IP 34.117.237.239:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with no line terminators Size 12 B (12 bytes) Hash 23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 HTTP Headers `GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK server: nginx date: Sat, 19 Nov 2022 16:45:44 GMT content-type: application/json content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2`

	firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US	34.102.187.140	200 OK	329 B
URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP 34.102.187.140:0 ASN #15169 GOOGLE File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size 329 B (329 bytes) Hash 0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 HTTP Headers `GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sat, 19 Nov 2022 16:25:01 GMT cache-control: public,max-age=3600 age: 1243 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" content-type: application/json alt-svc: clear X-Firefox-Spdy: h2

	ocsp.digicert.com/	93.184.220.29	200 OK	471 B
URL HTTP/1.1 ocsp.digicert.com/ IP 93.184.220.29:0 ASN #15133 EDGECAST File type data Size 471 B (471 bytes) Hash 060d538b33e370fcd033339830d33a42 4a37d427988358eb318e18e2678c3484ef4a5ebd efa33f92547243814b5bd3bca4f94d26055d590a4431611b3ba251a8d774bfbb HTTP Headers `POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1277 Cache-Control: max-age=146545 Content-Type: application/ocsp-response Date: Sat, 19 Nov 2022 16:45:44 GMT Etag: "63789cac-1d7" Expires: Mon, 21 Nov 2022 09:28:09 GMT Last-Modified: Sat, 19 Nov 2022 09:06:52 GMT Server: ECS (ska/F6FD) X-Cache: HIT Content-Length: 471`

	push.services.mozilla.com/	52.38.227.80	101 Switching Protocols	0 B
URL HTTP/1.1 push.services.mozilla.com/ IP 52.38.227.80:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: Gn+McmcqTq1buNzuOad7JQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket `HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: bLvw4NhzGxxGcpfBRxyr9xcyRuY=`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 798ef0955be535268547903e74dacfcd 782823486f9ded693609cade264d1950e816f7d0 75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95" Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6702 Expires: Sat, 19 Nov 2022 18:37:27 GMT Date: Sat, 19 Nov 2022 16:45:45 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 798ef0955be535268547903e74dacfcd 782823486f9ded693609cade264d1950e816f7d0 75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95" Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6702 Expires: Sat, 19 Nov 2022 18:37:27 GMT Date: Sat, 19 Nov 2022 16:45:45 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.76.226	200 OK	503 B
URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 503 B (503 bytes) Hash 798ef0955be535268547903e74dacfcd 782823486f9ded693609cade264d1950e816f7d0 75df3810e787be95774282d4851ce350bba5c326843f1bd02348746355866e95 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "75DF3810E787BE95774282D4851CE350BBA5C326843F1BD02348746355866E95" Last-Modified: Sat, 19 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6702 Expires: Sat, 19 Nov 2022 18:37:27 GMT Date: Sat, 19 Nov 2022 16:45:45 GMT Connection: keep-alive`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg	34.120.237.76	200 OK	8.1 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.1 kB (8089 bytes) Hash c8f6118fc03f31862ff68fef8a2b9a7f 318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73 cdd4d44f05cc524d7f2b1d6d792ecd8a9a933e52ecb7685a7d7ea786a510ef39 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a474c96-6cd7-4e42-a54a-02217768182e.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8089 x-amzn-requestid: f3c55266-9b03-4b7f-b076-fdf56704318e x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b0QQyECioAMFzdQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6377fa6b-3e10cef6117a10a4115cfce7;Sampled=0 x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:35 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: 9FO1gkdftjvJFDvAlxwLD63BP-liwnS2MImVhVdjg83wi4xJdM73Kg== via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google date: Fri, 18 Nov 2022 21:36:25 GMT age: 68960 etag: "318c5d7acd0d36c816b09fcf1b7dc4bfb5ec7e73" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d03484-7ccd-4a2d-81a2-0205f032f99d.jpeg	34.120.237.76	200 OK	6.4 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d03484-7ccd-4a2d-81a2-0205f032f99d.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 6.4 kB (6365 bytes) Hash f5af431deee2fb28fcc08b25f5162944 6dac89954db5946b9ac1fdca3196d8b6bb3f54c3 b22d9111361ebce06d55d14d05f4a5206ca7097b059bbe6bc02b10391b61f458 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F57d03484-7ccd-4a2d-81a2-0205f032f99d.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 6365 x-amzn-requestid: 60bd00c0-6808-4bc5-a0cb-e4390d353d65 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: befxSFJOIAMF6Lw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-636f466e-514b3be121f077d559acdb86;Sampled=0 x-amzn-remapped-date: Sat, 12 Nov 2022 07:08:30 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: E-bkNv53D_wWbPQkwNATrkuxsci_F32QIg7NCRL8yL8BoF_3lV-q3A== via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google date: Sat, 19 Nov 2022 11:33:44 GMT age: 18721 etag: "6dac89954db5946b9ac1fdca3196d8b6bb3f54c3" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg	34.120.237.76	200 OK	3.0 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 3.0 kB (3035 bytes) Hash d6b026c34985bbf2ebf89a62d0724c66 72369ebeccf447fa91ef77711d6297063c99777e e5598ada634274ab9995dedda8c1fd18344abcfdd49b3a1aaede0a86fafc0f40 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0d2467c-b158-442b-92be-e4cb236d17fa.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 3035 x-amzn-requestid: 3e3f3a7f-9a1d-4b37-b932-22c6e3e638f1 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b0QRcFOuoAMF_fQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6377fa6f-09dc20ea5620dd167e3f7265;Sampled=0 x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:39 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: xvVfLfP2DUilu7GSJMGArO90Kdoq5cPBVtmtyVjZmX5ZKnvOjpR_UQ== via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google date: Fri, 18 Nov 2022 21:36:25 GMT age: 68960 etag: "72369ebeccf447fa91ef77711d6297063c99777e" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f739db7-4732-4b66-9c50-59fa4416df43.jpeg	34.120.237.76	200 OK	8.1 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f739db7-4732-4b66-9c50-59fa4416df43.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 8.1 kB (8059 bytes) Hash dd028e5379061f8bf0d569506979a05a 7896c55cb0bf1997f1e9ab31028b04c332bd6f10 f8a32af3451f196bd2ded7065923a3ad5392c0dd3a82c53cf03a948d183cbf9f HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f739db7-4732-4b66-9c50-59fa4416df43.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 8059 x-amzn-requestid: 2dc81ded-54e7-4d96-bef4-a32f83a90624 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: bubXdH79oAMFzdQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6375a5c9-19bc25513834006570cb7384;Sampled=0 x-amzn-remapped-date: Thu, 17 Nov 2022 03:08:57 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: F9_oRzE-4MFYG82l9pN_stoL2TwVg_kE3q30nYj0H4NFMn9Dp6xlCQ== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google date: Sat, 19 Nov 2022 03:44:11 GMT age: 46894 etag: "7896c55cb0bf1997f1e9ab31028b04c332bd6f10" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg	34.120.237.76	200 OK	4.9 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.9 kB (4851 bytes) Hash 459df915ce91b32b2dcc4850516d68a0 d7a5473d367e7965a4af55acbf4675ed7088fab2 a03e26ebee79ad9b9dda1bf680e0d2467ae6d5e582589ada9fe6ddfa437c483c HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47c537d4-e03f-4ec6-8922-6dce72c72ab9.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 4851 x-amzn-requestid: 8c868655-d0eb-428d-9fc0-a7449f770bd4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: brtDFF9HoAMFV9w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63748ee0-4f7daf8f7451dc5e0840f620;Sampled=0 x-amzn-remapped-date: Wed, 16 Nov 2022 07:18:56 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: xirMw5z5GPbmx9Sii_I4iNeh1GS5k9lGmaaJvUGAPWoVyP0Tldhf1w== via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google date: Sat, 19 Nov 2022 07:17:42 GMT age: 34083 etag: "d7a5473d367e7965a4af55acbf4675ed7088fab2" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg	34.120.237.76	200 OK	4.0 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 4.0 kB (3962 bytes) Hash 49115517a3f79b5092934e128d54c721 14582e35cacbfc2543587e546cb3b4faf2c898bf 0f9015683cacc252fb5e5053681da1b85b3dd0694e2cd04417e73e5e82ecac2f HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce07c59e-2c1b-4d3b-8c02-f1ed4bca6607.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site HTTP/2 200 OK server: nginx content-length: 3962 x-amzn-requestid: 29b553ab-9ef2-44b8-aea9-b1582b207a6b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b0QRWGKmIAMFSWQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6377fa6e-3fb68804386112d17eba689d;Sampled=0 x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:38 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: NlXk5HDtG5jJpocFatW40jmG60DcpFCl4o6MqkAPSHH13lP66E4d6w== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google date: Fri, 18 Nov 2022 21:36:25 GMT age: 68960 etag: "14582e35cacbfc2543587e546cb3b4faf2c898bf" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

	danggoodwings.com/jp.php?step=2&token=96bi4zpd1m	69.49.234.179	200 OK	97 B
URL HTTP/1.1 danggoodwings.com/jp.php?step=2&token=96bi4zpd1m IP 69.49.234.179:0 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document, ASCII text, with no line terminators Size 97 B (97 bytes) Hash b84669aea360dd45b0b01fc6311fbbb1 56096aa71297b86e1b76b3b42252c865910f4242 0d9660ac623d076fe13d0ee25cb7678531d2e171428c96ddd859f36e5771de4a HTTP Headers `GET /jp.php?step=2&token=96bi4zpd1m HTTP/1.1 Host: danggoodwings.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1` `HTTP/1.1 200 OK Date: Sat, 19 Nov 2022 16:45:43 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=e5cf0b64b7e7617ecb8bba12f52db2bb; path=/ Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8`

	danggoodwings.com/jp.php?step=2&Token=N6CSL0883G	69.49.234.179	200 OK	28 kB
URL HTTP/1.1 danggoodwings.com/jp.php?step=2&Token=N6CSL0883G IP 69.49.234.179:0 ASN #46606 UNIFIEDLAYER-AS-1 File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1625) Size 28 kB (28283 bytes) Hash 5ff46fc3c05d4bc81dbbc55c38c121e3 107b88d219470dd947aeff8da0b4743e9beeeb4f 172e18ec96dea00b06d529c9c0ed1df7faa02af693e151b46b2ad3c7a177d0c8 HTTP Headers `GET /jp.php?step=2&Token=N6CSL0883G HTTP/1.1 Host: danggoodwings.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://danggoodwings.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site` `HTTP/1.1 200 OK Date: Sat, 19 Nov 2022 16:45:45 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=84045df41918f668a9225ebab1b984b7; path=/ Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8`

	antidote.fit/HEROIN/Morphines/Files/assets/style.css	156.67.64.231	200 OK	62 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/style.css IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text, with CRLF line terminators Size 62 kB (62256 bytes) Hash ef11030b555b1ddb36dea73c0caeabec 72d2de1e131ec25d554b3e1739ead868c7045b93 2577a822c1013c92c6874a513434525e967323ed7597be7a130e5e41c09ff58c HTTP Headers `GET /HEROIN/Morphines/Files/assets/style.css HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:47 GMT content-type: text/css last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "9c635-637775f3-2ee55d83efcb8ad7;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 62256 date: Sat, 19 Nov 2022 16:45:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Firefox-Spdy: h2

	antidote.fit/HEROIN/Morphines/Files/assets/functions.js	156.67.64.231	200 OK	851 B
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/functions.js IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text, with CRLF line terminators Size 851 B (851 bytes) Hash b0175a4cc296d332f65963b190ecad1b 231732bb340c4f79f82bcd602dc4c075d6d10021 38209bb35ac48abce120e8ef0549545a6d4d552db9d888a869a80da133d9d2e8 HTTP Headers `GET /HEROIN/Morphines/Files/assets/functions.js HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:47 GMT content-type: application/x-javascript last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "11e9-637775f3-318ed0df936d6418;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 851 date: Sat, 19 Nov 2022 16:45:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	antidote.fit/HEROIN/Morphines/Files/libraries/img/social.png	156.67.64.231	200 OK	2.6 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/libraries/img/social.png IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type PNG image data, 325 x 53, 8-bit/color RGBA, non-interlaced\012- data Size 2.6 kB (2579 bytes) Hash 1c70de87f39b1ad84cbbbdbea6ab5c8b 865ae9b57cfbb5f7ed1b006722177e1e0403adbd 408c16e4a059fa7c6067832ae3f533e4e3fb9962436c53f75e15ab78a5c35220 HTTP Headers `GET /HEROIN/Morphines/Files/libraries/img/social.png HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site TE: trailers` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:47 GMT content-type: image/png last-modified: Fri, 18 Nov 2022 12:09:25 GMT etag: "a13-637775f5-d2287228bac78f1c;;;" accept-ranges: bytes content-length: 2579 date: Sat, 19 Nov 2022 16:45:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	antidote.fit/HEROIN/Morphines/Files/assets/styles.css	156.67.64.231	200 OK	14 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/styles.css IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text, with CRLF line terminators Size 14 kB (14450 bytes) Hash 7cddef282a4da53758482f09df419cf3 73c4b314bb0195a984e972b355c2ffb64b92f56c dab929828b246a7bc120f501962d8a82328fe7b4d7beba52e998288db0e28d68 HTTP Headers `GET /HEROIN/Morphines/Files/assets/styles.css HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:47 GMT content-type: text/css last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "1abd1-637775f3-56bdfa28116d7af0;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 14450 date: Sat, 19 Nov 2022 16:45:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	antidote.fit/HEROIN/Morphines/Files/assets/jquery.min.js	156.67.64.231	200 OK	38 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/jquery.min.js IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text, with very long lines (568) Size 38 kB (37959 bytes) Hash e37774e18098a3433715df45d2e87ad5 30cef85f01a53f91e1bcc1408bc04e10bc4bd1ba 9d4d58ee1367f3fcbe5d9a93c1120688ddb07ba2f2e2f784951973eb71b6990f HTTP Headers `GET /HEROIN/Morphines/Files/assets/jquery.min.js HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:48 GMT content-type: application/x-javascript last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "26f32-637775f3-9fde432e59fb670e;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 37959 date: Sat, 19 Nov 2022 16:45:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	antidote.fit/HEROIN/Morphines/Files/assets/jquery.mask.js	156.67.64.231	200 OK	5.1 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/jquery.mask.js IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text Size 5.1 kB (5080 bytes) Hash 83857def4766134fa090519911bfaa67 a27ef07c9fa9ff53899a1ef734a718d7febb67a7 ee977ed8309451b4878e4234e54109224563e6a01b57b1699a2b8b4bb587c621 HTTP Headers `GET /HEROIN/Morphines/Files/assets/jquery.mask.js HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:48 GMT content-type: application/x-javascript last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "4e98-637775f3-5bd40f43047715e3;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 5080 date: Sat, 19 Nov 2022 16:45:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	antidote.fit/HEROIN/Morphines/Files/assets/spinner.css	156.67.64.231	200 OK	1.1 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/spinner.css IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text, with CRLF line terminators Size 1.1 kB (1052 bytes) Hash 319987990d3dee5bae7a6f94481106a1 1cf4b373830992b0a525f915c7ce71c11150f11f 05531042c92067c5267c30e80efd707561222e70bafae1a11c16117f0be72429 HTTP Headers `GET /HEROIN/Morphines/Files/assets/spinner.css HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:47 GMT content-type: text/css last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "1279-637775f3-2df6eafc8045db8e;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 1052 date: Sat, 19 Nov 2022 16:45:47 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	antidote.fit/HEROIN/Morphines/Files/assets/main.css	156.67.64.231	200 OK	1.0 kB
URL HTTP/2 antidote.fit/HEROIN/Morphines/Files/assets/main.css IP 156.67.64.231:0 ASN #47583 Hostinger International Limited File type ASCII text, with CRLF line terminators Size 1.0 kB (1020 bytes) Hash 609e205362cf4d5d3b6d21a07199d756 00437ed76af2017f3a9ee11fd44613084ba6ed56 950c260f8a6aa6f8055bc7b88f94b299c6bbd51c507de01b34c8f963ae5b7008 HTTP Headers `GET /HEROIN/Morphines/Files/assets/main.css HTTP/1.1 Host: antidote.fit User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://danggoodwings.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK cache-control: public, max-age=604800 expires: Sat, 26 Nov 2022 16:45:48 GMT content-type: text/css last-modified: Fri, 18 Nov 2022 12:09:23 GMT etag: "f5e-637775f3-bdf2e0ea1710b470;br" accept-ranges: bytes content-encoding: br vary: Accept-Encoding content-length: 1020 date: Sat, 19 Nov 2022 16:45:48 GMT server: LiteSpeed platform: hostinger content-security-policy: upgrade-insecure-requests X-Firefox-Spdy: h2`

	img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg	34.120.237.76	200 OK	7.8 kB
URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg IP 34.120.237.76:0 ASN #15169 GOOGLE File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size 7.8 kB (7754 bytes) Hash 8cf981b1ea47b981c73aa1f291be4d8a d18b869e1940841e9b03f66f5608e381f1727b37 3352a04b9596b594aeb5de3dc70047196a830e3ca79babf7c1b72ff1103b2d26 HTTP Headers GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F640a732f-1fd9-47b0-8311-39061579f99b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers HTTP/2 200 OK server: nginx content-length: 7754 x-amzn-requestid: 2c21447c-03bb-4e50-9eeb-a8ae86c0d204 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: b0QRmFuiIAMFjWg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6377fa70-7a7e65fc5d443a1d70feb62b;Sampled=0 x-amzn-remapped-date: Fri, 18 Nov 2022 21:34:40 GMT x-amz-cf-pop: HIO50-C1, SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: MFN-Yhp70fPLS4R_tVxEvzt-YQ7COwXaXrmifEfXfpiC0epJHSJq7w== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google date: Fri, 18 Nov 2022 21:36:25 GMT age: 68967 etag: "d18b869e1940841e9b03f66f5608e381f1727b37" content-type: image/jpeg cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

File type

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

File type

Size