Report - oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844

Report Overview

URL

oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
IP

172.64.196.21

ASN

#13335 CLOUDFLARENET
Submitted

2023-02-01T18:07:57Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

5

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
e1.o.lencr.org (5)	6159	2021-08-20T09:36:30Z	2023-03-13T05:21:46Z	1690	3644	23.36.77.32
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5843	34.160.144.191
ocsp.pki.goog (12)	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	4172	8442	216.58.211.3
d1a3jb5hjny5s4.cloudfront.net (2)	unknown	2021-05-29T18:33:12Z	2023-03-13T08:13:50Z	837	37305	54.230.245.125
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	35.165.116.156
www.google-analytics.com (3)	40	2012-10-03T03:04:21Z	2023-03-13T07:36:03Z	2148	18937	142.250.74.110
pogothere.xyz (3)	unknown	2022-09-04T21:11:25Z	2023-03-13T05:42:24Z	1216	110019	172.64.107.19
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
eitfromthe.com (3)	unknown	2023-01-31T03:56:15Z	2023-02-07T10:09:28Z	1664	3124	13.33.52.114
ocsp.digicert.com (6)	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	2046	3948	93.184.220.29
www.googletagmanager.com (1)	75	2013-05-22T04:07:37Z	2023-03-13T08:28:24Z	377	41453	142.250.74.168
accounts.google.com (3)	81	2016-03-20T13:44:49Z	2023-03-13T07:05:07Z	1623	5211	142.250.74.109
dc5k8fg5ioc8s.cloudfront.net (1)	unknown	2021-01-11T12:54:35Z	2023-03-13T05:42:25Z	286	51972	54.230.245.26
ajax.googleapis.com (1)	12905	2013-08-16T11:51:31Z	2023-03-13T08:37:09Z	306	34242	216.58.207.202
ocsp.r2m02.amazontrust.com (1)	unknown	2022-10-12T16:01:39Z	2023-03-13T08:10:58Z	350	966	54.230.80.227
region1.google-analytics.com (1)	unknown	2022-03-17T12:26:33Z	2023-03-13T05:09:18Z	768	442	216.239.34.36
img-getpocket.cdn.mozilla.net (5)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	2705	56066	34.120.237.76
oaxyteek.net (4)	unknown	2022-07-20T11:12:31Z	2023-03-13T09:06:15Z	2531	15606	172.64.196.21
lyemiatteffulrf.xyz (3)	unknown	2023-01-26T13:57:17Z	2023-02-07T10:08:06Z	1222	1971	104.21.37.38
othersfohi.com (3)	unknown	2023-01-31T03:56:16Z	2023-02-07T10:49:53Z	2077	4705	54.230.111.71
dlmewheniyv.xyz (2)	unknown	2023-01-23T13:36:16Z	2023-02-07T10:10:59Z	816	1242	104.21.40.10
stats.g.doubleclick.net (1)	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	484	563	173.194.73.156
cdn.adf.ly (3)	214923	2012-07-03T16:35:38Z	2023-03-13T05:42:25Z	1168	12332	104.20.67.244
cdn.oaxyteek.net (13)	unknown	2023-01-23T17:54:50Z	2023-03-13T05:42:24Z	6499	155053	172.64.196.21
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2374	35.241.9.150
adf.ly (1)	49660	2012-05-22T02:13:31Z	2023-03-13T05:20:32Z	360	2841	104.20.67.244
d3imksvhtbujlm.cloudfront.net (1)	unknown	2023-02-01T14:56:25Z	2023-03-01T23:07:20Z	546	901	54.230.245.161
www.facebook.com (2)	99	2012-05-21T02:23:41Z	2021-02-04T00:31:35Z	1015	32993	31.13.72.36
r3.o.lencr.org (7)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2366	6204	95.101.11.115

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-02-01	medium	dlmewheniyv.xyz	Sinkholed
2023-02-01	medium	pogothere.xyz	Sinkholed
2023-02-01	medium	pogothere.xyz	Sinkholed
2023-02-01	medium	dlmewheniyv.xyz	Sinkholed
2023-02-01	medium	pogothere.xyz	Sinkholed

ThreatFox

No alerts detected

HTTP Transactions (92)

URL IP Response Size

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

7e05c8461bd2dc5a149f71e2c465ea29

705983959c887e243cb55a8a1796757b579ee977

4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6117
Expires: Wed, 01 Feb 2023 19:49:43 GMT
Date: Wed, 01 Feb 2023 18:07:46 GMT
Connection: keep-alive

oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844

172.64.196.21

200 OK

5575

URL HTTP/1.1

oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (552), with CRLF, LF line terminators

Size

5575
Hash

61d798ebe214928a279c7b28b9da611b

ba19f0b2c4b987da4b6a18a2dcf04862bf349a81

0cfc6cd49573acdd660ca2124dac2fce04684797c0c5377a48f35f66fe01683b

HTTP Headers

                                        GET /rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844 HTTP/1.1
Host: oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: FLYSESSID=r222dn8e28bh5leesnfs5lji5d; path=/; HttpOnly; SameSite=Lax
yp1=d6d3afbab59b819343f48548849260a7; expires=Thu, 02-Feb-2023 18:07:46 GMT; Max-Age=86400; path=/; domain=.oaxyteek.net
yp2=530aaadfbd2c81e5bb513d9e6446395b; expires=Thu, 02-Feb-2023 18:07:46 GMT; Max-Age=86400; path=/; domain=.oaxyteek.net
yp3=1532635802; expires=Thu, 02-Feb-2023 18:07:46 GMT; Max-Age=86400; path=/; domain=.oaxyteek.net
x-powered-by: adfly
strict-transport-security: max-age=0
p3p: policyref="http://adf.ly/w3c/p3p.xml", CP="ALL DSP COR CURa ADMa DEVa TAIa IVAi IVDi CONi HISi TELi OUR IND PHY ONL FIN COM NAV INT DEM GOV"
expires: Sat, 26 Jul 1997 05:00:00 GMT
last-modified: Wed, 01 Feb 2023 18:07:46 GMT
x-frame-options: DENY
referrer-policy: no-referrer-when-downgrade
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UYirFca9O3OLEMLOusxiJIlOcXFOZlp7vjKcSFxzYPcaRVH5bEwfdEDvkEuOaZmtMSvtGTfAqicluPuf4CdY1umix1fVVCRf9SZmpJZk933MAkGmZSWoFbUfUqJIZog%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0eade6488ad-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

0c35c3ec659d3a26ea97e68d787bb043

d97e3672244efec5b7814f2d8a734cd1a9387854

4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2242
Expires: Wed, 01 Feb 2023 18:45:08 GMT
Date: Wed, 01 Feb 2023 18:07:46 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

30db107dcf4380cef05efea409c2e6a3

96e6a306fbc07299aba64e5c14e2bfca35872fa9

b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 17:43:25 GMT
content-type: application/json
age: 1461
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

09ee4b0fe6cf4ca5ed31b24452338d00

7e62b6e20f0d4737f4a8d94f9818a0883027839e

56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14960
Expires: Wed, 01 Feb 2023 22:17:06 GMT
Date: Wed, 01 Feb 2023 18:07:46 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

7b922915ebf1fa3639b333f994c74f24

144a3f80b98fd0652d4614f24cf6cbbee40f8938

adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: JTFFNCNSAuOgC5eeO/mMaxlgwbPNtcqWNjsgTF3XG5WQQrWMNfSjsrmQ7cl4kHxdML3SDweEwzU=
x-amz-request-id: 90YAS715SMQDT4J6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 17:51:39 GMT
age: 967
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 18:07:46 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js

216.58.207.202

200 OK

33333

URL HTTP/1.1

ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP

216.58.207.202:0
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)

Size

33333
Hash

18351732b1849ba758e98884e186b3c8

d735af8661eda41ff4ffbf76e6a284a0e2deb81c

bfac625d304d52e04f2caeb19266354749929c888ca09d3d1e3edcbb8770d0f0

HTTP Headers

                                        GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oaxyteek.net/

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33333
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 26 Jan 2023 08:57:11 GMT
Expires: Fri, 26 Jan 2024 08:57:11 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 551435

cdn.oaxyteek.net/static/css/adfly_7.css

172.64.196.21

200 OK

875

URL HTTP/1.1

cdn.oaxyteek.net/static/css/adfly_7.css
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (2735), with no line terminators

Size

875
Hash

f8c8a9d49e010a2cf10a44dacf35e661

5a069859544758f32b5d09e89c3631c8257c64e1

2cdcaf6a39f9cd39a37dfacfeec2461813fb5557e071d96756c129d17e84cb7a

HTTP Headers

                                        GET /static/css/adfly_7.css HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=3778
cache-control: public, max-age=604800
etag: W/"ec2-60467027-6a5aa4acec833b9;gz"
expires: Wed, 08 Feb 2023 18:02:29 GMT
last-modified: Mon, 08 Mar 2021 18:42:47 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 317
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5BuqCLvFgkO%2F2o1IEK2cNVynJt3pfueLHNv6R7futQwULwLkhVkaM5rjqfPqCib2oSGVa172hD2dNaoH4v5kG1xnaC%2FDMo6B2f%2F4%2FqU%2Bc4QOQqtky2YCNgwuX4o1FF4pryno"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0ed9b0872c0-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/js/view118_bidshow.js

172.64.196.21

200 OK

4024

URL HTTP/1.1

cdn.oaxyteek.net/static/js/view118_bidshow.js
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (10991), with no line terminators

Size

4024
Hash

966f84aff8b7893cbf2b87da5a27f8a9

695e0fcb64fc820db2ca76e808136a3762ea3673

25c6680edff77f84bc5606fdd9f06116ec800f29173528135cb74d564f2732f9

HTTP Headers

                                        GET /static/js/view118_bidshow.js HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:46 GMT
Content-Type: application/x-javascript
Content-Length: 4024
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:28 GMT
last-modified: Wed, 24 Aug 2022 10:51:38 GMT
etag: "2aef-630602ba-3bacd69da000f03;gz"
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 318
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ICr4aGmYtmY5qMzNfluAXtBe2uI1v70gPniS%2FyZLhPNxmtVt0pEoFRxy8aFbjtAZyn9ZiCQQnuAkTg6yoPw6yV9hZN8nCE4VL%2B34O5dl%2Bgea69LjHrLqrRJFt8yPOoR%2FR3O"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0edaf7123b7-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/js/amvn.js

172.64.196.21

200 OK

84301

URL HTTP/1.1

cdn.oaxyteek.net/static/js/amvn.js
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

Unicode text, UTF-8 text, with very long lines (15948)

Size

84301
Hash

4f3981898a41f81bfbcbaca38578612a

396faa2b79fb336d9baf1d939f6bb3a714c7dde0

5464e78bcc173fde63ae4f4dca463612fe326cfaa12882b8569f13be4d1d94ff

HTTP Headers

                                        GET /static/js/amvn.js HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:46 GMT
Content-Type: application/x-javascript
Content-Length: 84301
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:40 GMT
last-modified: Wed, 01 Feb 2023 12:20:02 GMT
etag: "3f2a7-63da58f2-7f3dbfff7fea7a09;gz"
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 306
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LatNGrj00DsTyhW0SlYCzYr6%2FnBAiUAQVcHkkCoD2ivH0Zu62kvb2S47EJKXbHZHPjTnLebNTVJkS%2FNzGZc3kDo8SfuH419Tzph9wwXdB3koZ5rO2mPOnWDIzHqKswcmtVij"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0edbec57427-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/js/main.js?v=2022052901

172.64.196.21

200 OK

705

URL HTTP/1.1

cdn.oaxyteek.net/static/js/main.js?v=2022052901
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text

Size

705
Hash

5d2f026c4af9cf86a2ecb368dc1533d6

376ce5a73144b00dd162aa8524ac856b8db7a33e

0fd907185fe7d7610498d8d487449707fe4949c5c89a1028da380d2e5e862c3d

HTTP Headers

                                        GET /static/js/main.js?v=2022052901 HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: application/x-javascript
Content-Length: 705
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:07:46 GMT
last-modified: Sun, 29 May 2022 07:10:19 GMT
etag: "7a0-62931c5b-5a0b6a8c1f70ff01;gz"
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q9jNI1RDsFOJ%2Fq1sIZTpS%2FkUlWUvW2TdKFgu8t%2Byuz6tyV5VNJJPktFqO64R%2FzHSYVstr0hps%2F1Juksf1X4Apg2U%2FKOwIaKb5aW1MLg9slFiMhwXbZgSBiZUJ89NabyS%2BAdz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0ed9eed23fb-LHR
alt-svc: h2=":443"; ma=60

d1a3jb5hjny5s4.cloudfront.net/?hbjad=709056

54.230.245.125

200 OK

36016

URL HTTP/1.1

d1a3jb5hjny5s4.cloudfront.net/?hbjad=709056
IP

54.230.245.125:0
ASN

#16509 AMAZON-02

Magic

Unicode text, UTF-8 text, with very long lines (15481)

Size

36016
Hash

bafc4ae173291b22feb817bf436506b3

915f94e9fdbe3297825e0cc607c0bd708f38c333

f9d3204f44e7b6c1603a32f9e6b2863acaed140bbb9268e84879d46fb30b9d34

HTTP Headers

                                        GET /?hbjad=709056 HTTP/1.1
Host: d1a3jb5hjny5s4.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oaxyteek.net/

                                        HTTP/1.1 200 OK
Content-Length: 36016
Connection: keep-alive
Date: Wed, 01 Feb 2023 18:07:46 GMT
access-control-allow-origin: *
Cache-Control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
Content-Encoding: gzip
Pragma: no-cache
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5r-YD6GafkYNaY-DXdKh4MQjYHarEDPeJsROb4vCKfmvnTga-L_lig==

cdn.oaxyteek.net/static/image/ahl6532.gif

172.64.196.21

200 OK

3229

URL HTTP/1.1

cdn.oaxyteek.net/static/image/ahl6532.gif
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

GIF image data, version 89a, 166 x 58\012- data

Size

3229
Hash

48d26bd889d62fc9c72d33138f409c15

3bd2657ee1ba4843f266cda7217a8d0a2b725ea3

13cad7fb56a878cd12d9456a8754cf13433ac6741338371f87776b4373411b15

HTTP Headers

                                        GET /static/image/ahl6532.gif HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/gif
Content-Length: 3229
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:28 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "c9d-5faa60e6-ae87f5cbe4d6cff3;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 319
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uptAYus2dnBtjhFGZlmpVf4T54Kr9D60HmpYhVbZH2xGy6Rpxazx2S1Ha6W4kcl7kbq6oou3fTYjR%2Fn3HOKgaDWkZk4S1I3Th7RegluOmJuEQqascsYKCQhejvG46DWeYnUb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0ef6a7023fb-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/image/skip_ad/en_tran.png

172.64.196.21

200 OK

5076

URL HTTP/1.1

cdn.oaxyteek.net/static/image/skip_ad/en_tran.png
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 155 x 41, 8-bit/color RGBA, non-interlaced\012- data

Size

5076
Hash

a58f5ea6f1f6bb35658c351f876f1ba9

47fa621b845faf7df13e4021dcffd6f4c73c1018

ef8721967f0cca2539ee60f9cad0e8c1ef89f18a53964a4e6101033d23a4ba29

HTTP Headers

                                        GET /static/image/skip_ad/en_tran.png HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/png
Content-Length: 5076
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:28 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "13d4-5faa60e6-eb24f435e560d3dd;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 319
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6x%2B1vXvHG%2BCLoSCxMPzBvZlS6HCQfZS%2BCMXgmB5Hql2Fp6E%2BYtYy12fsLLlf3e3I6DwyFX96wL8ZD%2FgQOQeh0rl968luX%2BulOXyWaeNP5x8Xgb4%2FgPykYuNGVJ5WlclCQKot"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0ef7ac023b7-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/image/logo_fb2.png

172.64.196.21

200 OK

6283

URL HTTP/1.1

cdn.oaxyteek.net/static/image/logo_fb2.png
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 193 x 98, 8-bit colormap, non-interlaced\012- data

Size

6283
Hash

84a673a878949a7a8410199f5f8ea220

49cbc367cd9e0943df6d6e2180bb9a5771dbb208

042313bf805bd8d9a1c6b2a88c90e15407004fcc6e9c5d5974c87c85c20796f3

HTTP Headers

                                        GET /static/image/logo_fb2.png HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/png
Content-Length: 6283
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:30 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "188b-5faa60e6-50f7a0a7015a0140;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 317
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rukBllKdHxLnXC44w%2BH4qG%2BLfl6SlOTG2ZSXFI2JfAXlgiFw4reVRhTTtTxuu%2BQcsce4hZO1%2Ba2T2lJBN4gb1wvD6fbbH%2B3bek%2BtBSyOMi9RmB8wvmHsAkvTgyPuVwHaj6kf"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0ef6d7072c0-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/image/delete2.png

172.64.196.21

200 OK

577

URL HTTP/1.1

cdn.oaxyteek.net/static/image/delete2.png
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data

Size

577
Hash

3a612b41ba5d1cad10ae4c6660d8fda4

4006ab2bfe338d2d1f060c0486bad8e1b589ba44

2fa2ba143aaedc6b6169e9b024d4f12df4acfc5995950dce175fd97644dd0c43

HTTP Headers

                                        GET /static/image/delete2.png HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/png
Content-Length: 577
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:33 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "241-5faa60e6-a0c39838649de106;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 314
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6D0%2F%2Bj4OJrpEGpZ5yqytkxXO5gyqrs1VafzZnoBGJpjrJ3fR6KmFM7NExnoH8vyeU3RI6ey91tJvRVNkI8S07bFUpTpOI55WMLkvw%2FR2ZUPZN4B%2BpeOsnM6rXba7IhwZeqoO"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0ef7b737785-LHR
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

2751084b42dd111d0a7f28241a77201b

680a9ac2f4cf451c9a8449c4df3587595ed9cc4c

1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 18:07:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

2751084b42dd111d0a7f28241a77201b

680a9ac2f4cf451c9a8449c4df3587595ed9cc4c

1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 18:07:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.oaxyteek.net/static/image/spinner.gif

172.64.196.21

200 OK

35453

URL HTTP/1.1

cdn.oaxyteek.net/static/image/spinner.gif
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

GIF image data, version 89a, 39 x 39\012- data

Size

35453
Hash

2055f195780b3e4c71b97c95fa97eab0

36c1138bdcccf116f1b9ee9effa3e5d13f1e6161

0a607f27600e85addcfd1415ee611a370a30dce3f53ac200d3e0e25d2bdc5157

HTTP Headers

                                        GET /static/image/spinner.gif HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/gif
Content-Length: 35453
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:28 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "8a7d-5faa60e6-3361a662be6e6961;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 319
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0CD8thnfc%2FuToSHHaiPESAcImIvnWp%2FwrF2kWBPLpDIXoajXNsUnlYIfxg7AFS%2FDLJeetZtLTHBhbemVhtu7sUQiYzflCLHzVQ0yQvkGYlSzAWL82yL7RqbUOO4akOpoe078"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0efaacf23fb-LHR
alt-svc: h2=":443"; ma=60

lyemiatteffulrf.xyz/popunder.gif

104.21.37.38

301 Moved Permanently

URL HTTP/1.1

lyemiatteffulrf.xyz/popunder.gif
IP

104.21.37.38:0
ASN

#13335 CLOUDFLARENET

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /popunder.gif HTTP/1.1
Host: lyemiatteffulrf.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oaxyteek.net/

                                        HTTP/1.1 301 Moved Permanently
Date: Wed, 01 Feb 2023 18:07:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 01 Feb 2023 19:07:47 GMT
Location: https://lyemiatteffulrf.xyz/popunder.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nzg8D9VRodrPE7xjVuMoMbDGTuSucjQqmEfT8anq0FbX%2B0keUr1qgJgncUzPItrJKzi08MJGgfCIKGo6JcV9QERGiQZhNMdKGVVT1qQQX9qTZMJ%2FF3gGxQ8z0hpoba%2FjsDgle0Ok"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0f01c29b515-OSL
alt-svc: h2=":443"; ma=60

www.googletagmanager.com/gtm.js?id=GTM-5NL9VFJ

142.250.74.168

200 OK

40852

URL HTTP/2

www.googletagmanager.com/gtm.js?id=GTM-5NL9VFJ
IP

142.250.74.168:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1759)

Size

40852
Hash

1ddd87dfd6ce1c10f91c0f89db109ac9

9b9b801cccadbfd6ba1dfd90247f086ccaaacbf8

ac4a57ad899f6a734a16f5a39e67c7f4fea8dede634089bb5298dc19310be48a

HTTP Headers

                                        GET /gtm.js?id=GTM-5NL9VFJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://oaxyteek.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Feb 2023 18:07:47 GMT
expires: Wed, 01 Feb 2023 18:07:47 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 40852
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

oaxyteek.net/js/display.js

172.64.196.21

200 OK

5775

URL HTTP/1.1

oaxyteek.net/js/display.js
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

ASCII text, with very long lines (15999)

Size

5775
Hash

e149217d65efcf53cc382af7c60f461c

6de97c3f773cf9b21e4373097f5f5cddf37d872e

4d30ac5f2c0ab10e25b4c39eb646e9cb86d66394775d77ba7b88a34720f85b27

HTTP Headers

                                        GET /js/display.js HTTP/1.1
Host: oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: FLYSESSID=r222dn8e28bh5leesnfs5lji5d; yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: application/x-javascript
Content-Length: 5775
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:42 GMT
last-modified: Thu, 29 Jul 2021 14:08:58 GMT
etag: "3e81-6102b67a-1a029ed62bba2563;gz"
content-encoding: gzip
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 305
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ASAahwD73onZSUO7rXXp53i9dlAyZ4CIV5dB4yEZkdzY3N7PS02tGM%2FLikqbZwJhZm6nucz9psCumsNhop%2BhvGjhE%2BIV3zp14jzTNyVxQnD6RPI6yJXYKZKa8yOh1f4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0f01faf88ad-LHR
alt-svc: h2=":443"; ma=60

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 17:49:05 GMT
age: 1122
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/s/gts1p5/_y2-pIkMRGE

216.58.211.3

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/s/gts1p5/_y2-pIkMRGE
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

71b1c42ca8f80f04a7ef9bade970e06d

8e051ff5bf9400978478f2cc5c245ffad5c794a6

b17af2bbb749166985691aa9d3330c69a5ce9225569137701bd6de574f84d767

HTTP Headers

                                        POST /s/gts1p5/_y2-pIkMRGE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 18:07:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

2751084b42dd111d0a7f28241a77201b

680a9ac2f4cf451c9a8449c4df3587595ed9cc4c

1c68a770afbcdb5405fe330f2eabefa576ea1d08740719956083d7f6b490ccf8

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 18:07:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.oaxyteek.net/static/image/ad_top_bg2.png?&ad_box_=1

172.64.196.21

200 OK

156

URL HTTP/1.1

cdn.oaxyteek.net/static/image/ad_top_bg2.png?&ad_box_=1
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 1 x 59, 8-bit/color RGB, non-interlaced\012- data

Size

156
Hash

106113dd42dd001363d6e2c920dba647

ebb71cf1a44a45852fff4d4fc0971f299b8b8c4c

938632fb472382061e62d8f1d033da03cbc84f150236e4251c8ece12241405ae

HTTP Headers

                                        GET /static/image/ad_top_bg2.png?&ad_box_=1 HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/png
Content-Length: 156
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:07:47 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "9c-5faa60e6-95f251b8bd8ef212;;;"
accept-ranges: bytes
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AhuBiC8ZTO1ZKQxmnFtPiVzMsgNZYFeAuTnIpFIwaWo%2FSf24vXejDizKXJnrX26tctYfeWUPIEDCvtNj88BAbcKiR4JWNImPfBQdV%2BvhHMnibocizV67G3tFIuMkQ%2FEWCL19"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0ef78d17427-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/image/d_top_bg.png

172.64.196.21

200 OK

156

URL HTTP/1.1

cdn.oaxyteek.net/static/image/d_top_bg.png
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 1 x 59, 8-bit/color RGB, non-interlaced\012- data

Size

156
Hash

106113dd42dd001363d6e2c920dba647

ebb71cf1a44a45852fff4d4fc0971f299b8b8c4c

938632fb472382061e62d8f1d033da03cbc84f150236e4251c8ece12241405ae

HTTP Headers

                                        GET /static/image/d_top_bg.png HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.oaxyteek.net/static/css/adfly_7.css
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/png
Content-Length: 156
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:43 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "9c-5faa60e6-6bfb178d8ae4aca5;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 304
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kNGP5RvbUvQD%2F%2BZG5DxIIbx2u3Le%2FV5%2FRfY%2BDLA8opKbm%2F4lew9MrW54vfvIJlLMqMhW2QI8vGpw1DdhlbdkcT9IJVJCQVdGae4ArRrvAM7tSrLQvcZXPouhZEXm2Kc2e%2BiD"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0f0eab37427-LHR
alt-svc: h2=":443"; ma=60

cdn.oaxyteek.net/static/image/d_bottom_bg2.png

172.64.196.21

200 OK

2829

URL HTTP/1.1

cdn.oaxyteek.net/static/image/d_bottom_bg2.png
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 1 x 28, 8-bit/color RGB, non-interlaced\012- data

Size

2829
Hash

765bb01e93fec22bee832ea0219871d0

2059131c55ef4c9b171fff20fc692839686761b7

27ab7efdb31ee6b311557cb2296d9bdb4c5038a230bcb4f9bc1a2409bb73863a

HTTP Headers

                                        GET /static/image/d_bottom_bg2.png HTTP/1.1
Host: cdn.oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.oaxyteek.net/static/css/adfly_7.css
Cookie: yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: image/png
Content-Length: 2829
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 08 Feb 2023 18:02:28 GMT
last-modified: Tue, 10 Nov 2020 09:44:06 GMT
etag: "b0d-5faa60e6-e40381177193f2ef;;;"
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 319
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=92o%2F7uiGL4QTRSbraocueS52%2FrxW7oRCHc%2F%2F1VFrXLKEKvgQIvteRMUfukUulIB1SKqZbFlJ38wiuc0hDX2hm28ldbKn%2BJeFsxoCYGGrWVV2uY1fN77g22ey65KdTAEN8cil"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 792ca0f0dd2c23fb-LHR
alt-svc: h2=":443"; ma=60

lyemiatteffulrf.xyz/MnVJRTEdSio2DGRGBzFlAkAlF3cLTS93e3otER8DazAbI1cBLG8xWFZIfnUIAkB/Y0FbEXR3CBQGPSRFRwZ0dBdbGy8qDBQDdHQfAlt/dR8DUzx4ABQBOSRWD0RvNUVGGXR0BwVAe3IFCk1wcwUF

104.21.37.38

204 No Content

URL HTTP/2

lyemiatteffulrf.xyz/MnVJRTEdSio2DGRGBzFlAkAlF3cLTS93e3otER8DazAbI1cBLG8xWFZIfnUIAkB/Y0FbEXR3CBQGPSRFRwZ0dBdbGy8qDBQDdHQfAlt/dR8DUzx4ABQBOSRWD0RvNUVGGXR0BwVAe3IFCk1wcwUF
IP

104.21.37.38:0
ASN

#13335 CLOUDFLARENET

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /MnVJRTEdSio2DGRGBzFlAkAlF3cLTS93e3otER8DazAbI1cBLG8xWFZIfnUIAkB/Y0FbEXR3CBQGPSRFRwZ0dBdbGy8qDBQDdHQfAlt/dR8DUzx4ABQBOSRWD0RvNUVGGXR0BwVAe3IFCk1wcwUF HTTP/1.1
Host: lyemiatteffulrf.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://oaxyteek.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 204 No Content
date: Wed, 01 Feb 2023 18:07:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WPJpfXWW26j%2FJowCnc68juClOPVoX7xXN2N4lxQBUNzav1bux9kAsV4DXAb0vbq7Ny8Gg0qkKPsemjc6DzZv7B%2FrJk01gCXHMI6J%2F4Vnz3bH%2BtJyy90PWYi65hpNFcdu3PMbc0rh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792ca0f078951c02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.36.77.32

200 OK

346

URL HTTP/1.1

e1.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

346
Hash

ddb627a217b4d9767430e2835c272208

0d57f3a4facd86864cd3cfa5674d4d3c2d907473

bc0915ec07b0c3f00c70a1f5c0c493ccac9ba2d7b8427e8449d855aec1705e08

HTTP Headers

                                        POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "BC0915EC07B0C3F00C70A1F5C0C493CCAC9BA2D7B8427E8449D855AEC1705E08"
Last-Modified: Wed, 01 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15625
Expires: Wed, 01 Feb 2023 22:28:12 GMT
Date: Wed, 01 Feb 2023 18:07:47 GMT
Connection: keep-alive

e1.o.lencr.org/

23.36.77.32

200 OK

345

URL HTTP/1.1

e1.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

345
Hash

dfac8e75ce3a7274894c1f4215714ec1

3af98f892a055dc1e76d603cd0be26791cec7a5a

d71a3ab89665ed999c87ef950fa828e0621fc0c80e20e2596a30ec5e26f53733

HTTP Headers

                                        POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D71A3AB89665ED999C87EF950FA828E0621FC0C80E20E2596A30EC5E26F53733"
Last-Modified: Tue, 31 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2321
Expires: Wed, 01 Feb 2023 18:46:28 GMT
Date: Wed, 01 Feb 2023 18:07:47 GMT
Connection: keep-alive

e1.o.lencr.org/

23.36.77.32

200 OK

345

URL HTTP/1.1

e1.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

345
Hash

dfac8e75ce3a7274894c1f4215714ec1

3af98f892a055dc1e76d603cd0be26791cec7a5a

d71a3ab89665ed999c87ef950fa828e0621fc0c80e20e2596a30ec5e26f53733

HTTP Headers

                                        POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D71A3AB89665ED999C87EF950FA828E0621FC0C80E20E2596A30EC5E26F53733"
Last-Modified: Tue, 31 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2321
Expires: Wed, 01 Feb 2023 18:46:28 GMT
Date: Wed, 01 Feb 2023 18:07:47 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

95.101.11.115:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

8913af0be619500295008bb91f506660

a7b8068ba9aa506205a295b24458c2616997a0d1

6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17212
Expires: Wed, 01 Feb 2023 22:54:39 GMT
Date: Wed, 01 Feb 2023 18:07:47 GMT
Connection: keep-alive

ocsp.pki.goog/s/gts1p5/_y2-pIkMRGE

216.58.211.3

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/s/gts1p5/_y2-pIkMRGE
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

71b1c42ca8f80f04a7ef9bade970e06d

8e051ff5bf9400978478f2cc5c245ffad5c794a6

b17af2bbb749166985691aa9d3330c69a5ce9225569137701bd6de574f84d767

HTTP Headers

                                        POST /s/gts1p5/_y2-pIkMRGE HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 18:07:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

oaxyteek.net/2market_bidshow.php?user_id=11374213&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&ref_url=eyJ1cmwiOm51bGwsImRvbWFpbiI6bnVsbH0%3D&url=https%3A%2F%2Fmaven.aristois.net%2Fmanifest%2F1.12.zip&url_id=0&t=98f4e014b1404964ff174d1004be6299&w=bf3cc81ed9f27b05eded7ac43dd50594

172.64.196.21

200 OK

URL HTTP/1.1

oaxyteek.net/2market_bidshow.php?user_id=11374213&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&ref_url=eyJ1cmwiOm51bGwsImRvbWFpbiI6bnVsbH0%3D&url=https%3A%2F%2Fmaven.aristois.net%2Fmanifest%2F1.12.zip&url_id=0&t=98f4e014b1404964ff174d1004be6299&w=bf3cc81ed9f27b05eded7ac43dd50594
IP

172.64.196.21:0
ASN

#13335 CLOUDFLARENET

Magic

JSON data\012- , ASCII text, with no line terminators

Size

82
Hash

d597c22e79c772d1f89ed2602adb80ab

50c7c63c9269278ff7aba9b8c5b4810c3570df80

798215a625e276fde8e69c0a79401e406f59e1a30ad0e9113d880b9d566ae61c

HTTP Headers

                                        GET /2market_bidshow.php?user_id=11374213&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&ref_url=eyJ1cmwiOm51bGwsImRvbWFpbiI6bnVsbH0%3D&url=https%3A%2F%2Fmaven.aristois.net%2Fmanifest%2F1.12.zip&url_id=0&t=98f4e014b1404964ff174d1004be6299&w=bf3cc81ed9f27b05eded7ac43dd50594 HTTP/1.1
Host: oaxyteek.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://oaxyteek.net/rweasy/-1FJCE/11374213/https:/maven.aristois.net/manifest/1.12.zip?rndad=1155815606-1675274844
Connection: keep-alive
Cookie: FLYSESSID=r222dn8e28bh5leesnfs5lji5d; yp1=d6d3afbab59b819343f48548849260a7; yp2=530aaadfbd2c81e5bb513d9e6446395b; yp3=1532635802

                                        HTTP/1.1 200 OK
Date: Wed, 01 Feb 2023 18:07:47 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.3.27
set-cookie: adfly_ad_report=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0
p3p: policyref="http://adf.ly/w3c/p3p.xml", CP="ALL DSP COR CURa ADMa DEVa TAIa IVAi IVDi CONi HISi TELi OUR IND PHY ONL FIN COM NAV INT DEM GOV"
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WO6gW%2BQDWYaOayUKDSCJRyUby57mX3ZmYdOS7fO%2B%2FUoYqPG68D%2FbZ%2FR1h1lbl0GksM20%2FFXg4wYWGTybgf4fb313iWplN9W%2B%2BZpip1n747CtjE6HJWcdSiDFdtDocwg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 792ca0f0d92388ad-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

othersfohi.com/SHZ0Q28pFBcuUClLFmUaOhpJZl0OU0YFC3kXRykNfR4eLRZ9BUBtDCQZAScJOhkaN0EmEwBmXQ4lEHMXehUxCjoBDhMUCRk7GAYEeUcmcDkPJCwRPQIRISUjCRIMCTs/ADY0JgknNxY8ASA1BiAKOAwRAxEDMiomGiIjEjwBHiINDHkzAAYHAlNGBT56GTcCLHgVFxEqETsDGhkAHiUoKgxDJQE8Bj09EQQDPQwwCA5HIjQiEBotEigsMBIFWwA9DCgADycXOzomQzMLBRIlEig1ChUYL1cdRjkCOiZDMwEWOywRKCUeFSAVHxozNXU+EB4gEhgKJRIoQhE1OgUlbUQyDV8ODyUuJQ8hIycpLjQxFSYaAR4WXwEzJhsXACc8CSguMxAVDA0VBQsYARgxECIHICwCFy4jLgUNDRIFAl95DFIpHCcYBH48BBsEDRl4EREu

54.230.111.71

200 OK

1189

URL HTTP/1.1

othersfohi.com/SHZ0Q28pFBcuUClLFmUaOhpJZl0OU0YFC3kXRykNfR4eLRZ9BUBtDCQZAScJOhkaN0EmEwBmXQ4lEHMXehUxCjoBDhMUCRk7GAYEeUcmcDkPJCwRPQIRISUjCRIMCTs/ADY0JgknNxY8ASA1BiAKOAwRAxEDMiomGiIjEjwBHiINDHkzAAYHAlNGBT56GTcCLHgVFxEqETsDGhkAHiUoKgxDJQE8Bj09EQQDPQwwCA5HIjQiEBotEigsMBIFWwA9DCgADycXOzomQzMLBRIlEig1ChUYL1cdRjkCOiZDMwEWOywRKCUeFSAVHxozNXU+EB4gEhgKJRIoQhE1OgUlbUQyDV8ODyUuJQ8hIycpLjQxFSYaAR4WXwEzJhsXACc8CSguMxAVDA0VBQsYARgxECIHICwCFy4jLgUNDRIFAl95DFIpHCcYBH48BBsEDRl4EREu
IP

54.230.111.71:0
ASN

#16509 AMAZON-02

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3037), with no line terminators

Size

1189
Hash

f8e519acd5abc733791b558dc77f410e

f76adee6a391c83a0ba181e21dfd16d97cb0739f

7cd1d440a17c482914c3933d5c1f8a0162353020fdc0a629e73e791c84c34dcb

HTTP Headers

                                        GET /SHZ0Q28pFBcuUClLFmUaOhpJZl0OU0YFC3kXRykNfR4eLRZ9BUBtDCQZAScJOhkaN0EmEwBmXQ4lEHMXehUxCjoBDhMUCRk7GAYEeUcmcDkPJCwRPQIRISUjCRIMCTs/ADY0JgknNxY8ASA1BiAKOAwRAxEDMiomGiIjEjwBHiINDHkzAAYHAlNGBT56GTcCLHgVFxEqETsDGhkAHiUoKgxDJQE8Bj09EQQDPQwwCA5HIjQiEBotEigsMBIFWwA9DCgADycXOzomQzMLBRIlEig1ChUYL1cdRjkCOiZDMwEWOywRKCUeFSAVHxozNXU+EB4gEhgKJRIoQhE1OgUlbUQyDV8ODyUuJQ8hIycpLjQxFSYaAR4WXwEzJhsXACc8CSguMxAVDA0VBQsYARgxECIHICwCFy4jLgUNDRIFAl95DFIpHCcYBH48BBsEDRl4EREu HTTP/1.1
Host: othersfohi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oaxyteek.net/
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1189
Connection: keep-alive
Date: Wed, 01 Feb 2023 18:07:47 GMT
Server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
Pragma: no-cache
P3P: CP="NID DSP ALL COR"
content-encoding: gzip
Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
X-Cache: Miss from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LQd8XN9IX_KEsT2jP1BE2qEYInZ5X6lc2fnqW3MSx-odq4lZkRVtPw==

eitfromthe.com/bWtaSFAMCTklbwxWOG4lHwdnbWIrTmgONF4CNyMjGwMuKiUHBzdmMwEELyw2HwQ0PH4DDi5tYitcPxwCByUxGTE6HGsZNRpaPgonGRIJGRI8KhIKNjUDGBIbCgAQDRUaCA4mZTUOEgEINzk1GR0sJQsQNzcCHB4FIz4CJDY4OmseNTgMCQk8JAYICRIrOjAZBzVabwAZLxsYChYGBBIdZDguHg0JLjpvEgAFKQMMYQkDCXsaOiwSGjMvBxctHRUpOwphBhEZIBY/KTMnHig9Hw80OAA7HSgjWBUwFj8pMAUBOgcPCwk4G2gaNz9bGxkaNS5pK2coPXcNFyMMYhoFJQ9rGwErJRglYQ4pNgYCJDkqLhQvJWgYJzc/GHsCJykMBRg0PikNEjtTaAAWJCYOJRYhCDYBFw49OQ0COCVvGxFLASknPh1WKTIIWiFuBmYDOiM

13.33.52.114

200 OK

1192

URL HTTP/1.1

eitfromthe.com/bWtaSFAMCTklbwxWOG4lHwdnbWIrTmgONF4CNyMjGwMuKiUHBzdmMwEELyw2HwQ0PH4DDi5tYitcPxwCByUxGTE6HGsZNRpaPgonGRIJGRI8KhIKNjUDGBIbCgAQDRUaCA4mZTUOEgEINzk1GR0sJQsQNzcCHB4FIz4CJDY4OmseNTgMCQk8JAYICRIrOjAZBzVabwAZLxsYChYGBBIdZDguHg0JLjpvEgAFKQMMYQkDCXsaOiwSGjMvBxctHRUpOwphBhEZIBY/KTMnHig9Hw80OAA7HSgjWBUwFj8pMAUBOgcPCwk4G2gaNz9bGxkaNS5pK2coPXcNFyMMYhoFJQ9rGwErJRglYQ4pNgYCJDkqLhQvJWgYJzc/GHsCJykMBRg0PikNEjtTaAAWJCYOJRYhCDYBFw49OQ0COCVvGxFLASknPh1WKTIIWiFuBmYDOiM
IP

13.33.52.114:0
ASN

#16509 AMAZON-02

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3040), with no line terminators

Size

1192
Hash

7211a45fd7fea9415c9b089c5ba73e2e

d767aa28b77990c7a6112c387504035100790547

47a0a24432d92d4fe1ddf6a83127c3c66027a529cf39cf7d4fe5ac04d735e3a2

HTTP Headers

                                        GET /bWtaSFAMCTklbwxWOG4lHwdnbWIrTmgONF4CNyMjGwMuKiUHBzdmMwEELyw2HwQ0PH4DDi5tYitcPxwCByUxGTE6HGsZNRpaPgonGRIJGRI8KhIKNjUDGBIbCgAQDRUaCA4mZTUOEgEINzk1GR0sJQsQNzcCHB4FIz4CJDY4OmseNTgMCQk8JAYICRIrOjAZBzVabwAZLxsYChYGBBIdZDguHg0JLjpvEgAFKQMMYQkDCXsaOiwSGjMvBxctHRUpOwphBhEZIBY/KTMnHig9Hw80OAA7HSgjWBUwFj8pMAUBOgcPCwk4G2gaNz9bGxkaNS5pK2coPXcNFyMMYhoFJQ9rGwErJRglYQ4pNgYCJDkqLhQvJWgYJzc/GHsCJykMBRg0PikNEjtTaAAWJCYOJRYhCDYBFw49OQ0COCVvGxFLASknPh1WKTIIWiFuBmYDOiM HTTP/1.1
Host: eitfromthe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oaxyteek.net/
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1192
Connection: keep-alive
Date: Wed, 01 Feb 2023 18:07:47 GMT
Server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
Pragma: no-cache
P3P: CP="NID DSP ALL COR"
content-encoding: gzip
Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
X-Cache: Miss from cloudfront
Via: 1.1 d3a8d8f8c5ee2eb27e3c0f7d18c36b6a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MAN50-C1
X-Amz-Cf-Id: -91t3eUxqitY-_CXw6KrOgtskxnyh26A-DoSglxMSh-agErlqU00Rw==

ocsp.pki.goog/s/gts1p5/ATf3cfjxVCA

216.58.211.3

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/s/gts1p5/ATf3cfjxVCA
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

8bcf585d96642daefee156ce3a1499d1

b9d9e259f08588b807e69ea18c02aead4badc92f

1c03a66c6a8b69b2393a1ac58181459ee96a7886f7f5d0f9b3d90a215fcba719

HTTP Headers

                                        POST /s/gts1p5/ATf3cfjxVCA HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Feb 2023 18:07:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

e1.o.lencr.org/

23.36.77.32

200 OK

345

URL HTTP/1.1

e1.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

345
Hash

dfac8e75ce3a7274894c1f4215714ec1

3af98f892a055dc1e76d603cd0be26791cec7a5a

d71a3ab89665ed999c87ef950fa828e0621fc0c80e20e2596a30ec5e26f53733

HTTP Headers

                                        POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D71A3AB89665ED999C87EF950FA828E0621FC0C80E20E2596A30EC5E26F53733"
Last-Modified: Tue, 31 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2321
Expires: Wed, 01 Feb 2023 18:46:28 GMT
Date: Wed, 01 Feb 2023 18:07:47 GMT
Connection: keep-alive

dlmewheniyv.xyz/MTZ5ZEQeCRoXeVVhP1QlZXQ3MwFJZzoxFmlnLyUHY2AdIhxwf18QLVULT1RwAgBNQjRYUkRVYkJCGBAxQgtIQi1fUBZZYkcLSEp3BRhKVWoDEAxZdRdCCQUjDAdfFDBFWkRVcgYDS1NwCQ5AXHQB

104.21.40.10

204 No Content

URL HTTP/2

dlmewheniyv.xyz/MTZ5ZEQeCRoXeVVhP1QlZXQ3MwFJZzoxFmlnLyUHY2AdIhxwf18QLVULT1RwAgBNQjRYUkRVYkJCGBAxQgtIQi1fUBZZYkcLSEp3BRhKVWoDEAxZdRdCCQUjDAdfFDBFWkRVcgYDS1NwCQ5AXHQB
IP

104.21.40.10:0
ASN

#13335 CLOUDFLARENET

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET /MTZ5ZEQeCRoXeVVhP1QlZXQ3MwFJZzoxFmlnLyUHY2AdIhxwf18QLVULT1RwAgBNQjRYUkRVYkJCGBAxQgtIQi1fUBZZYkcLSEp3BRhKVWoDEAxZdRdCCQUjDAdfFDBFWkRVcgYDS1NwCQ5AXHQB HTTP/1.1
Host: dlmewheniyv.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://oaxyteek.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 204 No Content
date: Wed, 01 Feb 2023 18:07:47 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZI5Y51vUs95X9GrWi8O88Rcf5Vr2%2BKwgUaK%2Bbln7rsp7K2QVVaeWurlWBAjJtdEC47g88e9oND66%2BeOxi8NOm2LGM2BBcKgUIyhCLYYTEZ3CfO0b180rkCv%2FKZBUdmc5fco%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 792ca0f16996b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.r2m02.amazontrust.com/

54.230.80.227

200 OK

471

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (24)

#1 JS:Script (size: 551)

#2 JS:Script (size: 258727)

#3 JS:Script (size: 1732)

#4 JS:Script (size: 703)

#5 JS:Script (size: 93868)

#6 JS:Script (size: 10991)

#7 JS:Script (size: 1952)

#8 JS:Script (size: 143)

#9 JS:Script (size: 46274)

#10 JS:Script (size: 184524)

#11 JS:Script (size: 341)

#12 JS:Script (size: 473)

#13 JS:Script (size: 16001)

#14 JS:Script (size: 2969)

#15 JS:Script (size: 594)

#16 JS:Script (size: 109379)

#17 JS:Script (size: 107676)

#18 JS:Script (size: 519)

#19 JS:Script (size: 105060)

#20 JS:Script (size: 665)

#21 JS:Script (size: 231248)

#22 JS:Script (size: 2966)

#1 JS:Write (size: 82)

#2 JS:Write (size: 4363)

HTTP Transactions (92)

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN