Overview

URL ww25.mail1.sparechange.io/
IP81.171.22.7
ASNLeaseWeb Netherlands B.V.
Location Belgium
Report completed2022-09-09 23:54:23 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-09 2 ww25.mail1.sparechange.io/ Malware
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-09 2 arkdcz.com Sinkholed


Files

No files detected



Passive DNS (29)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2022-09-09 13:54:46 UTC 34.120.237.76
mnemonic passive DNS ka-p.fontawesome.com (3) 4489 2019-12-16 20:35:53 UTC 2022-09-09 05:36:37 UTC 104.18.23.52
mnemonic passive DNS js-agent.newrelic.com (1) 378 2017-01-30 05:00:15 UTC 2022-09-09 04:40:57 UTC 151.101.86.137
mnemonic passive DNS geoip.enlistsecureup.com (1) 269993 2021-12-22 01:39:03 UTC 2022-09-09 11:39:24 UTC 163.171.128.172
mnemonic passive DNS country.gameops.tech (1) 775443 2020-11-21 16:18:30 UTC 2022-09-09 10:57:29 UTC 172.67.136.190
mnemonic passive DNS www.fst-ent-lnk.com (1) 0 2020-07-30 13:54:41 UTC 2022-09-09 10:57:29 UTC 54.200.116.57 Unknown ranking
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-09 04:40:05 UTC 23.36.77.32
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-09 04:43:53 UTC 35.83.91.138
mnemonic passive DNS ajax.googleapis.com (1) 12905 2019-10-15 17:52:08 UTC 2022-09-09 17:34:12 UTC 142.250.74.138
mnemonic passive DNS flirtyhoookup.com (1) 0 2020-03-26 11:26:33 UTC 2022-09-09 19:18:43 UTC 172.67.201.85 Unknown ranking
mnemonic passive DNS ocsp.pki.goog (5) 175 2017-06-14 07:23:31 UTC 2022-09-09 04:41:59 UTC 142.250.74.3
mnemonic passive DNS bam.nr-data.net (2) 630 2015-02-10 00:06:27 UTC 2022-09-09 04:40:58 UTC 162.247.241.14
mnemonic passive DNS fonts.googleapis.com (2) 8877 2014-07-21 13:19:55 UTC 2022-09-09 20:20:10 UTC 142.250.74.10
mnemonic passive DNS ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-09-09 18:03:58 UTC 93.184.220.29
mnemonic passive DNS balor-ghn.com (3) 0 2022-08-26 15:31:19 UTC 2022-09-09 15:07:16 UTC 34.194.66.161 Unknown ranking
mnemonic passive DNS cartining-specute.com (1) 0 2021-01-31 23:37:43 UTC 2022-09-09 12:30:15 UTC 18.197.36.77 Unknown ranking
mnemonic passive DNS www.arkdcz.com (1) 767397 2021-10-26 21:03:57 UTC 2022-09-09 10:57:28 UTC 34.149.6.227
mnemonic passive DNS landers.of-bo.com (1) 416367 2022-01-13 21:26:53 UTC 2022-09-09 10:57:29 UTC 172.67.155.108
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-09 18:07:06 UTC 143.204.55.36
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-09 04:47:11 UTC 143.204.55.35
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-09 04:48:21 UTC 34.117.237.239
mnemonic passive DNS ocsp.starfieldtech.com (2) 6616 2012-06-22 18:08:50 UTC 2022-09-09 05:54:12 UTC 192.124.249.41
mnemonic passive DNS ocsp2.globalsign.com (2) 1544 2012-05-21 07:12:19 UTC 2022-09-09 04:40:29 UTC 104.18.21.226
mnemonic passive DNS ajax.aspnetcdn.com (1) 693 2012-05-24 13:35:31 UTC 2022-09-09 04:54:15 UTC 152.199.19.160
mnemonic passive DNS dngsnl.com (7) 0 2022-02-10 12:26:02 UTC 2022-09-09 10:57:37 UTC 207.120.33.44 Unknown ranking
mnemonic passive DNS kit.fontawesome.com (1) 1868 2019-03-29 02:12:52 UTC 2022-09-09 04:46:08 UTC 104.18.23.52
mnemonic passive DNS ww25.mail1.sparechange.io (1) 0 2021-03-08 19:39:18 UTC 2021-06-01 11:15:00 UTC 162.210.196.168 Unknown ranking
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.156
mnemonic passive DNS go.cyberslut2069.com (16) 0 2021-04-25 00:45:34 UTC 2022-09-09 17:23:17 UTC 54.230.111.7 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 81.171.22.7

Date UQ / IDS / BL URL IP
2022-11-27 14:03:02 +0000
0 - 0 - 1 lepeffee.wy5532.com/ 81.171.22.7
2022-11-27 01:36:45 +0000
0 - 0 - 1 gstreamer.org/docusign/doc-new/doc-new/index.php 81.171.22.7
2022-11-25 09:01:32 +0000
0 - 0 - 4 lkjkui.616b9.ik.wy5532.com/ 81.171.22.7
2022-11-21 13:09:24 +0000
0 - 0 - 0 area.wthelpdesk.com 81.171.22.7
2022-11-21 08:23:36 +0000
0 - 0 - 1 potenza.cc/ 81.171.22.7

Last 5 reports on ASN: LeaseWeb Netherlands B.V.

Date UQ / IDS / BL URL IP
2022-11-28 22:54:36 +0000
0 - 0 - 1 chikaveronika.com/6262a601a83e820001a8cd07 85.17.54.17
2022-11-28 22:24:36 +0000
0 - 0 - 9 waffarha.com/ar/%D8%AE%D8%B5%D9%85-41-%D8%B9% (...) 213.227.150.21
2022-11-28 21:33:41 +0000
0 - 0 - 5 knjghuig.biz/aywv 5.79.71.225
2022-11-28 21:27:01 +0000
0 - 0 - 2 www.hostingcloud.racing/sOuqvNyU.wasm 81.171.8.143
2022-11-28 18:07:13 +0000
0 - 0 - 1 moneymattersforeveryone.com/ 82.192.82.225

Last 3 reports on domain: sparechange.io

Date UQ / IDS / BL URL IP
2022-11-11 20:47:53 +0000
0 - 0 - 3 sparechange.io/static 37.48.65.152
2022-09-25 18:46:45 +0000
0 - 0 - 1 ww25.sparechange.io/ 199.115.115.119
2022-09-09 23:54:23 +0000
0 - 0 - 2 ww25.mail1.sparechange.io/ 81.171.22.7

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-28 22:19:05 +0000
0 - 0 - 5 myperfectdesire.com/mw/index.php/campaigns/xy (...) 149.102.158.57
2022-11-28 03:52:17 +0000
0 - 0 - 3 aardsolutions.com/wp-admin/network/abramdocop (...) 67.227.226.240
2022-11-27 20:29:46 +0000
0 - 0 - 5 2.39b62.xi.wy5532.com/ 199.115.116.216
2022-11-27 18:31:34 +0000
0 - 0 - 3 go.cyberslut2069.com/vrfttcyber 54.230.111.80
2022-11-26 15:59:18 +0000
0 - 0 - 4 file-90181.bilgecoin.net/post/rainbow%20path% (...) 67.227.226.240


JavaScript

Executed Scripts (26)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (77)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89"
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13535
Expires: Sat, 10 Sep 2022 03:39:47 GMT
Date: Fri, 09 Sep 2022 23:54:12 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 09 Sep 2022 23:06:04 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b15DxcbraQVwZ6KFv0m-d6nRmBkes9DXzIcsGo8yFL5b5YSt6qQzNQ==
Age: 2888


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    b593eb39329cfe060d55be5e4a5405e2
Sha1:   78e46c1028e9f94f8569303ad2d90d7df13a059a
Sha256: 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 09 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: _BZxttVWhgirkxRVrGWbQfCPHvQo7MasqMG5bHgfbtEoM-MXPrNw7w==
age: 72458
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 09 Sep 2022 23:54:12 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 09 Sep 2022 22:56:07 GMT
Cache-Control: max-age=3600
Expires: Fri, 09 Sep 2022 23:54:51 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SfhOuWCwL092G45Br0BDRSVztim7pYB9Mbk23VB4up96p2T2hniP8A==
Age: 3485


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: ww25.mail1.sparechange.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         162.210.196.168
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Fri, 09 Sep 2022 23:54:12 GMT
location: http://balor-ghn.com/zcvisitor/b44b8b63-309a-11ed-817a-0a3ab46a6a45/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=3333e050-2de2-11ed-8859-0a918cbcbb97
server: nginx
set-cookie: sid=b431dba2-309a-11ed-98e2-5c227c9ba40d; path=/; domain=.sparechange.io; expires=Thu, 28 Sep 2090 03:08:19 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4673
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 23:54:13 GMT
Last-Modified: Fri, 09 Sep 2022 22:36:20 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /zcvisitor/b44b8b63-309a-11ed-817a-0a3ab46a6a45/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=3333e050-2de2-11ed-8859-0a918cbcbb97 HTTP/1.1 
Host: balor-ghn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         34.194.66.161
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Fri, 09 Sep 2022 23:54:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: sWjmcOOy


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   996
Md5:    716b91f1e63a8507ef38dc9e398d029b
Sha1:   dd947ba4dc593005a1fab6876b4212cf1fca4210
Sha256: 8e16ec0425e41b0abd134c07e2d6288c88ff1738309bc44e05abafbf5b8da9c9
                                        
                                            GET /zcredirect?visitid=b44b8b63-309a-11ed-817a-0a3ab46a6a45&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1 
Host: balor-ghn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcvisitor/b44b8b63-309a-11ed-817a-0a3ab46a6a45/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=3333e050-2de2-11ed-8859-0a918cbcbb97
Upgrade-Insecure-Requests: 1

                                         
                                         34.194.66.161
HTTP/1.1 200
Content-Type: text/html;charset=UTF-8
                                        
Date: Fri, 09 Sep 2022 23:54:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: ufdJErus


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (354)
Size:   794
Md5:    f5774b702aba59b092303af4e5363840
Sha1:   34cfebb80ecca20328295282c477b58c5997d7cd
Sha256: e70ea31477703f5097200ab4fdf9bbe7a7959040bbd8dae1ceacc8963f4e3808
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IckQ/qEaePBuwJiTTeeW0w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         35.83.91.138
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: I3OqBqimxQMbSnw9VdCYlXTpoIo=

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: balor-ghn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcredirect?visitid=b44b8b63-309a-11ed-817a-0a3ab46a6a45&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false

                                         
                                         34.194.66.161
HTTP/1.1 404
Content-Type: text/html;charset=utf-8
                                        
Date: Fri, 09 Sep 2022 23:54:13 GMT
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: ufdJErus


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Size:   653
Md5:    ba2732b1b2fa2626ffaa15f62f9e7d66
Sha1:   203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
Sha256: 879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
                                        
                                            GET /zp-redirect?target=https%3A%2F%2Fflirtyhoookup.com%2F%3Futm_source%3Dn19ck4pSWjZsA%26s1%3D719fbd40-273d-47b8-882f-683d1074b172%26s2%3Dweddmjijqhtda7ui2m95q2eo&caid=2deaef68-c870-4247-a076-22d7e7f8e3ba&zpid=b44b8b63-309a-11ed-817a-0a3ab46a6a45&cid=weddmjijqhtda7ui2m95q2eo&rt=R HTTP/1.1 
Host: cartining-specute.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balor-ghn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         18.197.36.77
HTTP/2 302 Found
                                        
server: nginx
date: Fri, 09 Sep 2022 23:54:13 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://flirtyhoookup.com/?utm_source=n19ck4pSWjZsA&s1=719fbd40-273d-47b8-882f-683d1074b172&s2=weddmjijqhtda7ui2m95q2eo
pragma: no-cache
set-cookie: cc-v4=RKl8daV8G9MbC8z2%2B7o0bOBsdEXAjrSIw1Uprf0FbGebbR4ItljrGE%2BzsiFnfnhrusAeI%2BI%2BoZFRFJDLZa3rxyQ1clnI99zAl3KeqX%2B5TsQwh4ecsaf4hsrIu%2FqC4PCy7sy5rT1xblD%2B5KRk%2FWLLWw%3D%3D; Max-Age=31536000; Expires=Sat, 09-Sep-2023 23:54:13 GMT; Domain=cartining-specute.com; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 23:54:13 GMT
Server: ECS (amb/6BA0)
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 23:54:14 GMT
Last-Modified: Fri, 09 Sep 2022 23:54:13 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Fri, 09 Sep 2022 23:54:14 GMT
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 09 Sep 2022 15:25:00 GMT
Expires: Sat, 10 Sep 2022 15:25:00 GMT
ETag: "80d0cab4f4052aeeb2ebd8d058c4e2371202509b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1845
Md5:    6716b37b7f3d6e3f94fb5acd92bb5e55
Sha1:   80d0cab4f4052aeeb2ebd8d058c4e2371202509b
Sha256: 3a36aca9d4a5bcca1de07c1d76e486b37c55461ed81657dae935ff05c70452b1
                                        
                                            GET /MSJ7L4/HX6G2NF/?sub1=418543&sub2=OPUksWgATLrbtWTxxVkwyZBrqjrTbERUp HTTP/1.1 
Host: www.arkdcz.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         34.149.6.227
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
server: nginx
date: Fri, 09 Sep 2022 23:54:14 GMT
content-length: 169
location: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
set-cookie: uniqueClick_HX6G2NF=1d22f2b1-df95-4db2-81bd-9993655818c1:1662767654; Path=/; Expires=Sat, 10 Sep 2022 23:54:14 GMT; Secure; SameSite=None transaction_id=f2020e7d8ff94a548f8fd107136a1348; Path=/; Expires=Thu, 08 Dec 2022 23:54:14 GMT; Secure; SameSite=None
vary: Origin
x-eflow-request-id: 82b18a4b-c20b-451b-990d-bab719506b98
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   169
Md5:    6ec2e6a6db3ba396e1d36099725a8e1b
Sha1:   5b75c9df2a159b75e5e691491afa7f278210928d
Sha256: 20faaf1b3cd0d8b8f14fddc40d6a61c08133c0ee80fd588d87d98782421a6a27

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         192.124.249.41
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Fri, 09 Sep 2022 23:54:14 GMT
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 09 Sep 2022 15:25:00 GMT
Expires: Sat, 10 Sep 2022 15:25:00 GMT
ETag: "80d0cab4f4052aeeb2ebd8d058c4e2371202509b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1845
Md5:    6716b37b7f3d6e3f94fb5acd92bb5e55
Sha1:   80d0cab4f4052aeeb2ebd8d058c4e2371202509b
Sha256: 3a36aca9d4a5bcca1de07c1d76e486b37c55461ed81657dae935ff05c70452b1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 23:54:14 GMT
Server: ECS (dcb/7F17)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Yex4jUsVjpaD3S2D3bXvLUKfAhqhOAyl0llGheXgyREvLipdp-0bIg==

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10021
Expires: Sat, 10 Sep 2022 02:41:15 GMT
Date: Fri, 09 Sep 2022 23:54:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10021
Expires: Sat, 10 Sep 2022 02:41:15 GMT
Date: Fri, 09 Sep 2022 23:54:14 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10021
Expires: Sat, 10 Sep 2022 02:41:15 GMT
Date: Fri, 09 Sep 2022 23:54:14 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9610
x-amzn-requestid: 34102145-abda-4987-a68d-9069496366ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNj0oF7loAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb350-52aee64214c814812c03262e;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 91AsC8-zVFCOPHFb2qnlTev2aXzdCEDYtc68JtYYsQSKS7OFF4QzgQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:59:50 GMT
age: 6864
etag: "afbc7666fa0b2093ef0c5d9a955d54d139c09b30"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9610
Md5:    1abac18a85802f38f08561ac64020b55
Sha1:   afbc7666fa0b2093ef0c5d9a955d54d139c09b30
Sha256: eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2402aa1c-c5d5-475b-abd9-db6b8ca99270.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9981
x-amzn-requestid: 1a34423c-b2d9-4ae3-a437-eb5717334372
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkiSGjloAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb474-00c79a927f7f7d5d70791b68;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:47:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: jwkD86lz1SUQE__IGBv9RINc-LON017wkTpW7g0ePcMtssqd_POtpQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:13:41 GMT
age: 6033
etag: "3b25ffe66a762ea032c05b149a29fe0d6faa3687"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9981
Md5:    572d8ed935df86fde22138e8bfddfd9f
Sha1:   3b25ffe66a762ea032c05b149a29fe0d6faa3687
Sha256: 866c2b16919ab311f906c4e8a074fd93b46f74408c9e2c9a4c30310afa08f047
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8626
x-amzn-requestid: af5e61ab-4f7b-4b03-8413-5d750b17e0df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLj9TH7vIAMFVMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ae6bb-309144fb6e02564c4fcdb966;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 07:09:47 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 431HLVqbn8oTvANn1RGg7EBQfwx-1JveoQtIF5erA6__TvdNdEgO2A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 07:26:49 GMT
age: 59245
etag: "27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8626
Md5:    2b83fa95ed30533299bc754adaced672
Sha1:   27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af
Sha256: bc59e5ba6abafd8e7b10d6f8ae2269cbf739a4b28f9cbbf3adfc29a9195e6985
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8924b46b-4731-4526-b3b6-de366eb0e889.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5284
x-amzn-requestid: c7255083-dd50-40ae-82c8-fef8617930b7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkC0EF4IAMFe8g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb3ab-28a11c9e09716207223f3eef;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:44:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: U8NVEHwdcLA1TleMXu-RrayfBJIxMLStiR1fs-mU088_Pt-tlv9AhA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:00:06 GMT
age: 6848
etag: "daf3fe4b0f004bc1bbd3b1acbc4f61d70ffcf2ff"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5284
Md5:    aebe3c28455bc6c3da231ec6d873fb37
Sha1:   daf3fe4b0f004bc1bbd3b1acbc4f61d70ffcf2ff
Sha256: efc51c27b859193ad35b279946c482784fff7429539c4b8bc35f09170fc0a904
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084d9cc4-53b3-451a-b338-2150cda2f06c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9633
x-amzn-requestid: 85fa9747-6edf-45ae-b15e-85482c1dbf6c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNkC-GrIoAMFueg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb3ac-7ea5f2ef3d9478e530f0f888;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:44:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: ZF2SCGjcry_Jfob-sVB_n4JRLo3ghex0M-pzkVLZnE7WNLyiWTV84g==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:14:02 GMT
age: 6012
etag: "bb613c04bdeab6ea13249d1cd48bb3268a830018"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9633
Md5:    bfadcca0fbc9780f8975c53481914c0d
Sha1:   bb613c04bdeab6ea13249d1cd48bb3268a830018
Sha256: 72f1c42b60eb8fa3893db6c226fe5a2dff41b45d8786d5c8095bdf31abff35ed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9009587-828b-4a7a-8b84-f28d4b93cdef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7515
x-amzn-requestid: bb6a7928-9bdc-44e7-8478-b415bc504343
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YJu0bGYdoAMF5jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a2b4f-208339fd72e62dff4a2ba339;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 17:50:07 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: UaU9GK4lcCuAN2WghBDa7f-21dRTA4Fh1tlAmGFMKh4wQOGZlKdmOw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 13:14:31 GMT
age: 38383
etag: "09dcbdc6043f01dd56920cca3ce3920d0d07b795"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7515
Md5:    60fa03262bb3728f24a4c7a8177ec788
Sha1:   09dcbdc6043f01dd56920cca3ce3920d0d07b795
Sha256: e7448f186933f9848f1d55f0e8dba593918846d02fb9cc3a7cd86d69b96a7fde
                                        
                                            GET /vrfttcyber/assets/images/themes/cyber/logo/logo.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 16420
last-modified: Thu, 02 Dec 2021 15:26:11 GMT
server: AmazonS3
date: Fri, 09 Sep 2022 02:21:25 GMT
etag: "4673cfc8d2708f4ebe2f821483548ccc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EbhWaG5fw0wpF0XWXQrlm7mLB4cAkwvlYs5IUA-Uobz4PVaEbHniGQ==
age: 77570
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 637 x 156, 8-bit/color RGBA, non-interlaced\012- data
Size:   16420
Md5:    4673cfc8d2708f4ebe2f821483548ccc
Sha1:   815322d33fb4298771be6a43e14b821d365766d7
Sha256: f2cd404c754d24e0721a08f4b203d5b9853c4bd229c62f339edf1f46195b2154
                                        
                                            GET /vrfttcyber/assets/images/flags/us.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2375
last-modified: Thu, 02 Dec 2021 15:25:52 GMT
server: AmazonS3
date: Fri, 09 Sep 2022 02:57:12 GMT
etag: "a2080b2d193dbbd3cb34b32ad919da62"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 115PKUhqLWdxAOkgPhajZ8VsWX-Uxkv7hV8Pb8Aqlj_8MVIvNGEkcA==
age: 75423
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 250 x 132, 8-bit colormap, non-interlaced\012- data
Size:   2375
Md5:    a2080b2d193dbbd3cb34b32ad919da62
Sha1:   f822886642e0388d79c8f5917b41f27efbdec94b
Sha256: 5b38ab13f52bc95184012a4b6afafa3eca7a6ac03c762515b4550b4337548ca7
                                        
                                            GET /vrfttcyber/assets/images/beyblade.gif HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/gif
                                        
content-length: 36298
date: Fri, 09 Sep 2022 04:43:41 GMT
last-modified: Thu, 02 Dec 2021 15:25:35 GMT
etag: "93a41ee339dd621452c6aa4054e8eca8"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PC5zfEFkctFQdO3QYM5C88LSPJzTaoUoxvHKBEQmw5FhZXL6Cx2Sqw==
age: 69034
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 200 x 200\012- data
Size:   36298
Md5:    93a41ee339dd621452c6aa4054e8eca8
Sha1:   a1f75cc251cbe7291cefd06fd91b4c35b6c93612
Sha256: 0ea3f03b9e168629659c281ec66fd5a82d36d7b6fd644381c18ecad41e62a5a3
                                        
                                            GET /vrfttcyber/assets/images/girls/hair01_tits01_tattoo01.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 330574
date: Fri, 09 Sep 2022 01:31:57 GMT
last-modified: Thu, 02 Dec 2021 15:25:53 GMT
etag: "8d7069ee14a82c9f9139a5d08882497a"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JCKp83gtFNtjYnnS4hB0MU6vRijdxwa0mRIb1J9QDdQCKM4VnjXEXg==
age: 80538
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 790 x 1600, 8-bit colormap, non-interlaced\012- data
Size:   330574
Md5:    8d7069ee14a82c9f9139a5d08882497a
Sha1:   0310dd9990c5888f8d51b4defa3ca78ce820b3e2
Sha256: 933adcdf66e29312523119f0f868488a25e92a5b05e0443c961ca80aaeb42a9f
                                        
                                            GET /vrfttcyber/assets/locale/style/en.css HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: text/css
                                        
content-length: 192
date: Fri, 09 Sep 2022 04:43:41 GMT
last-modified: Thu, 02 Dec 2021 15:25:59 GMT
etag: "9749fa77c9872329d27a73ea48c2d4c0"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BW2w0xsXkY02vd0b356kPfke1iiEBs9MO-ec1B0dggimNIKIyzCvWg==
age: 69034
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   192
Md5:    9749fa77c9872329d27a73ea48c2d4c0
Sha1:   4cb73328ffbb21a8f4588d512c9cdffa11232f8d
Sha256: e75fb29290acb854de53014f67a449f915d8ea8ab263cd6ba8a0bc72023a5c8b
                                        
                                            GET /vrfttcyber/assets/images/themes/cyber/background/bkg.jpg HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 13989
date: Fri, 09 Sep 2022 04:43:41 GMT
last-modified: Thu, 02 Dec 2021 15:26:08 GMT
etag: "d5dabdf9d18c947ea72fe90f8c39e31e"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CNmm-TtKyfMJ8fGg2VkBZf0IF2n040i-d0xHD0g3H0xKX6Z2chT6ag==
age: 69034
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1920x1081, components 3\012- data
Size:   13989
Md5:    d5dabdf9d18c947ea72fe90f8c39e31e
Sha1:   33a5e90f4a59072ab4b3d73204fff01d6a08a0f8
Sha256: d940cab6f0a1fe6a425596757ac2a10b89fb4311acfd34aba2f075c0e2338f09
                                        
                                            GET /vrfttcyber/assets/images/box.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 13243
date: Fri, 09 Sep 2022 04:02:22 GMT
last-modified: Thu, 02 Dec 2021 15:25:35 GMT
etag: "0fcc2772acc897c48dae5c6f52093388"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UEVR2_Dt_1ZL7WHSK4nakMSBg_ULorcug6KqFyCTsGQ1Ugd5DzwB0Q==
age: 71513
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 747 x 644, 8-bit/color RGBA, non-interlaced\012- data
Size:   13243
Md5:    0fcc2772acc897c48dae5c6f52093388
Sha1:   c8a80e850168e1fd7b761327dd460054e7451d8e
Sha256: e73f3a488ee9e68ff4484df002b38a200aee2170617bb0746e05c7f992135805
                                        
                                            GET /vrfttcyber/assets/images/btn.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1968
date: Fri, 09 Sep 2022 04:07:06 GMT
last-modified: Thu, 02 Dec 2021 15:25:35 GMT
etag: "08913323d52eadb319526e6fbe2e677b"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fBMs6EwXQ4OdyxMpS0qshlotPlgUNCHgjBXMPLuPbWnJ9DZi5ZPEzQ==
age: 71229
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 343 x 79, 8-bit/color RGBA, non-interlaced\012- data
Size:   1968
Md5:    08913323d52eadb319526e6fbe2e677b
Sha1:   eff7964b7f5ed2ef285593fab5ed7b89e358b401
Sha256: f0a7b6d7c1ed46c5056a52e6ab470959a0671cf03b5ae22e97a37591ba14aa03
                                        
                                            GET /vrfttcyber/assets/images/themes/cyber/favicon/favicon.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1421
date: Fri, 09 Sep 2022 04:43:45 GMT
last-modified: Thu, 02 Dec 2021 15:26:08 GMT
etag: "93a7efbb00d5e8f3bd556d7b9efb658e"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: YAo-i6Tb1nxt2PHfE8icZ9DLixQISOrmTSlBlqiUdSnLc_XeKnhTZQ==
age: 69030
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 48 x 48, 8-bit colormap, non-interlaced\012- data
Size:   1421
Md5:    93a7efbb00d5e8f3bd556d7b9efb658e
Sha1:   fd6578509d9557cebe3e37fee5ae16dc25b09711
Sha256: 3274036fdc55ac82651c2146f211e508703e5ae97875c722e8b3694df636cd9d
                                        
                                            GET /vrfttcyber/assets/images/browsers/firefox.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 127454
date: Fri, 09 Sep 2022 05:19:26 GMT
last-modified: Thu, 02 Dec 2021 15:25:36 GMT
etag: "ff5982c71adc3b6a987a2192b6008949"
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: T__tLQsKeyLDaFozFtKZFHBSw1vEp8g8zXyvh9zMx7lDd_DbB3DjPg==
age: 66889
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   127454
Md5:    ff5982c71adc3b6a987a2192b6008949
Sha1:   c2819962300bfa4db9dd7ee6f22e35ea910a3808
Sha256: 612ec2b0a5a9d4b3841189d8c4af98509df5ac48eeea5ab1945dfd0e1eab78b3
                                        
                                            GET /vrfttcyber/assets/sounds/general/click1.mp3 HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 206 Partial Content
content-type: application/octet-stream
                                        
content-length: 16635
date: Fri, 09 Sep 2022 01:41:47 GMT
last-modified: Thu, 02 Dec 2021 15:26:03 GMT
etag: "4838176bcd52d9b69d6d48c1870ca579"
server: AmazonS3
content-range: bytes 0-16634/16635
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 04JOiLe9YGsA7g26ioL4z3v4a7x_k8ogknbnLYcwCenSB6k_JiVTFQ==
age: 79948
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 44.1 kHz, JntStereo\012- data
Size:   16635
Md5:    4838176bcd52d9b69d6d48c1870ca579
Sha1:   5a0892ccae91806a9695c5be1f2752e122608d8e
Sha256: 781bb8d577f6448612e8fa861dfa39d64a2e5961c17a58c79ef4bcdf4131847b
                                        
                                            GET /vrfttcyber/assets/sounds/general/click2.mp3 HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 206 Partial Content
content-type: application/octet-stream
                                        
content-length: 15590
last-modified: Thu, 02 Dec 2021 15:26:03 GMT
server: AmazonS3
date: Fri, 09 Sep 2022 04:58:51 GMT
etag: "2694fd6fc680f77dcf1ae58d9b8ba926"
vary: Accept-Encoding
content-range: bytes 0-15589/15590
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f8i1XCWFwhlsDVRh88CgM6iZKKyjmCTirIs1TVpoILxjk4T8iaCz1w==
age: 68124
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 44.1 kHz, JntStereo\012- data
Size:   15590
Md5:    2694fd6fc680f77dcf1ae58d9b8ba926
Sha1:   6016e8fb7136ec769fbe6d120c7c97d390922564
Sha256: 4266071bbd14949a438e1d9a958cac2f0b128963b6f6e9fa96b005ed8e718f9e
                                        
                                            GET /vrfttcyber/assets/sounds/general/music.mp3 HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 206 Partial Content
content-type: application/octet-stream
                                        
content-length: 3165435
date: Fri, 09 Sep 2022 03:46:53 GMT
last-modified: Thu, 02 Dec 2021 15:26:05 GMT
etag: "8482f7c1977139c5f5bbb2af66e88e01"
server: AmazonS3
content-range: bytes 0-3165434/3165435
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: toMHaoUZYVwXuOtZH-bUOUAH5Ex1qUP4RF4d56dokVIPMTOTXFemZw==
age: 72442
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 44.1 kHz, JntStereo\012- data
Size:   3165435
Md5:    8482f7c1977139c5f5bbb2af66e88e01
Sha1:   0a7325177e7b98d2809f05beb496a301fb8a1d3b
Sha256: 6cb796e9dc70bd32aca90e420a8e7b3cc548569f42d876e384e0d073d3b4c7a1
                                        
                                            GET /vrfttcyber/assets/images/flags/no.png HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 414
last-modified: Thu, 02 Dec 2021 15:25:47 GMT
server: AmazonS3
date: Fri, 09 Sep 2022 21:15:28 GMT
etag: "55946900ad615ec4b62748677444f5b7"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zmoUo-RJ5Obak2ya6jfMik-cIZMn6KgI-JaXYvJqjr4HYG0xvrvzIw==
age: 9527
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 250 x 182, 8-bit colormap, non-interlaced\012- data
Size:   414
Md5:    55946900ad615ec4b62748677444f5b7
Sha1:   8a0f25e081a3266ef7f8ab939417d5c7d48a09d7
Sha256: c82386961fded0d9947ad3320b7ff4c066eea989d082b6409a0815ce0f9a6eb5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.42.156
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 23:54:15 GMT
Last-Modified: Fri, 09 Sep 2022 22:22:39 GMT
Server: ECS (dcb/7FA5)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sQgDzDpkSNp0B55oHI0KNwgJvLZjQKmsTYMh6wX9ZlJPncizKa6p1A==
Age: 5497

                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:15 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 13 Sep 2022 23:17:32 GMT
ETag: "b6890cc1ec4765602e2978f06d087ec17c521669"
Last-Modified: Fri, 09 Sep 2022 23:17:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 277
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7483d917ff940b55-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    f1c2833e6156e5ac86ec194b2866522e
Sha1:   b6890cc1ec4765602e2978f06d087ec17c521669
Sha256: 844c397b95eb2871a846dd698b41a944deb4b96792710b8ddc06f347abcd6dbf
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DBCAA85ADB00F9FF49FC99CCBF78815579774619AFC597E9F021CABA21EAAECC"
Last-Modified: Thu, 08 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3355
Expires: Sat, 10 Sep 2022 00:50:11 GMT
Date: Fri, 09 Sep 2022 23:54:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3402
Cache-Control: 'max-age=158059'
Date: Fri, 09 Sep 2022 23:54:16 GMT
Last-Modified: Fri, 09 Sep 2022 22:57:34 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /ajax/bootstrap/3.3.7/bootstrap.min.js HTTP/1.1 
Host: ajax.aspnetcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dngsnl.com
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         152.199.19.160
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 4400201
cache-control: public,max-age=31536000
date: Fri, 09 Sep 2022 23:54:16 GMT
etag: "80bdc1e6cb33d21:0"
last-modified: Mon, 31 Oct 2016 23:09:59 GMT
server: ECAcc (ska/F6C5)
timing-allow-origin: *
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 9839
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32033)
Size:   9839
Md5:    432ca07a1a844dbb27f9e0ab0d468be5
Sha1:   7fdaf858d702f84536a515c675b4028ce2eb0cfa
Sha256: 12732099d21835fabf83a93eec52f7cf1847cd64a0572d18917b2e13b06d5cf0
                                        
                                            GET /vrfttcyber/assets/font/tomorrow.ttf HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: application/x-font-ttf
                                        
date: Fri, 09 Sep 2022 01:37:09 GMT
last-modified: Thu, 02 Dec 2021 15:25:35 GMT
etag: W/"0a9ac70c15e2fc709830d2eccb2b8cff"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j1SPrmUosgzciXx7Y-SLGHgBWSLtv9Gknh8pTI8ijQvCNGmpRJcxXg==
age: 80226
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 15 tables, 1st "GDEF", 15 names, Microsoft, language 0x409, Copyright 2019 The Tomorrow Project Authors (https://github.com/MonicaRizzolli/Tomorrow)Tomorrow\012- data
Size:   42922
Md5:    038ed67554cc36cfe6262d32e77c5eb1
Sha1:   d3b4f619e6fd4b845ba06b946966c3214056f4a1
Sha256: ce5b4bdd2f4a47e9afa7957347f40f90d4d11e71f7a36c064a297df4abcc144d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dngsnl.com
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.138
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 13:42:27 GMT
expires: Sat, 09 Sep 2023 13:42:27 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Mon, 13 May 2019 14:37:17 GMT
age: 36709
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65451)
Size:   30774
Md5:    81182f4b684635f6bdcbdd907ee66f25
Sha1:   a1f2f151df72ede41397c8131bd47a3ce85575b3
Sha256: be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
                                        
                                            GET /common_tpls/compactML/css/epcjfgacs2.css HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
content-length: 8861
last-modified: Thu, 15 Jul 2021 14:49:08 GMT
etag: W/"60f04ae4-bac6"
content-encoding: gzip
section-io-cache-id: 304273d3688475ca34f83cf833a93ab8
vary: Accept-Encoding
x-varnish: 7129206 7898078
age: 4058
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: e87a644d27a5fb137875e6e2ad3e8ced
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   8861
Md5:    8baefa9235356383901af17857ab60c7
Sha1:   6281517070ee798472613658703156ac35c07ae4
Sha256: 3f25245183ea47e8d4b9846dd1a0412b463ae4290f4dc9650723ba9219bd82e3
                                        
                                            GET /common_tpls/images/icons/email.png HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
content-length: 1254
last-modified: Tue, 16 Jun 2020 16:45:10 GMT
etag: "5ee8f716-4e6"
section-io-cache-id: b382c965e5f7b701a31939dc79c9cb75
x-varnish: 7871948 4929200
age: 4506
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: 7716902c7600f24670aea0e9b15887e7
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Size:   1254
Md5:    a86d99b9176d82a211cfa29b2f0b353f
Sha1:   62947ddfd87e3a21869818885e4bfa4e55ad0c11
Sha256: f8e82194c97e2a11a8c77fcd55d1ded51a1943b78eefac8475890f665dc620f1
                                        
                                            GET /common_tpls/images/icons/password.png HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
content-length: 1452
last-modified: Tue, 22 Aug 2017 16:35:03 GMT
etag: "599c5d37-5ac"
section-io-cache-id: 947e69611d5c0b12718cb1ca9922e0f3
x-varnish: 7129208 7172167
age: 4420
via: 1.1 varnish (Varnish/7.0)
accept-ranges: bytes
section-io-cache: Hit
section-io-id: b61856d42716ef973772ae1e9b8d13a5
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 26 x 26, 8-bit/color RGB, non-interlaced\012- data
Size:   1452
Md5:    6f100f1cdbdce928118ffa4c9293ca5b
Sha1:   6b1a3593e792d4c00187d60560dd03fb42df1156
Sha256: 8c1a6b9e0c63edc7fa86898148dc6493cd56113fabbf85d901f7af4c180fce74
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /releases/v5.15.4/css/pro-v4-shims.min.css?token=b314bdf1b3 HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dngsnl.com/
Origin: https://dngsnl.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.23.52
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
content-length: 4194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-1062"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 711155
accept-ranges: bytes
server: cloudflare
cf-ray: 7483d91fbe65b523-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26366)
Size:   4194
Md5:    7fd743485fa194e25e2a207bff6c258a
Sha1:   97c999d752b95ee1ed6271a29aa58109dc17281e
Sha256: dd939d69a23f003d49287291f0bcb59df58119d60bc5f14a81cbfd957894f6dc
                                        
                                            GET /releases/v5.15.4/css/pro.min.css?token=b314bdf1b3 HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dngsnl.com/
Origin: https://dngsnl.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.23.52
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
content-length: 54194
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-d3b2"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 711155
accept-ranges: bytes
server: cloudflare
cf-ray: 7483d91fbe64b523-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65397)
Size:   54194
Md5:    dc9270247a97f75913a5d8934c24de03
Sha1:   ed9b0fa01b552571f99d529ed355b2ba91cfc48d
Sha256: 847cc3ab1ea736cbbaac34833596335471fc7a888089b501b3c83a323566f0b8
                                        
                                            GET /releases/v5.15.4/css/pro-v4-font-face.min.css?token=b314bdf1b3 HTTP/1.1 
Host: ka-p.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dngsnl.com/
Origin: https://dngsnl.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.18.23.52
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
content-length: 2603
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
etag: "610ae215-a2b"
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
vary: Origin, Accept-Encoding, Access-Control-Request-Headers, Access-Control-Request-Method
cf-cache-status: HIT
age: 711155
accept-ranges: bytes
server: cloudflare
cf-ray: 7483d91fbe66b523-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (27832)
Size:   2603
Md5:    eaaabd3f60063923cd5333eb1d7a20a1
Sha1:   0da69706105e28896a1f6eeaa91d5bec1b82f7f1
Sha256: f863309ec0ac675409167610ff9776fa9c7620d6ee3592cc0c19d0b883ff2f70
                                        
                                            POST /gsalphasha2g2 HTTP/1.1 
Host: ocsp2.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 09 Sep 2022 23:54:16 GMT
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 13 Sep 2022 22:29:20 GMT
ETag: "aeb4fec2d4f872b19f5bf3509c0ddd0129de2de8"
Last-Modified: Fri, 09 Sep 2022 22:29:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 275
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7483d91ffba70b55-OSL


--- Additional Info ---
Magic:  data
Size:   1423
Md5:    e6261456992d1870830742d7c08dd038
Sha1:   aeb4fec2d4f872b19f5bf3509c0ddd0129de2de8
Sha256: 85291b19dccf7ca9b39e4ba9e88f183a3eed998d2949a1a85c67b0c8ae84a0ab
                                        
                                            GET /nr-spa-1216.min.js HTTP/1.1 
Host: js-agent.newrelic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.137
HTTP/2 200 OK
content-type: application/javascript
                                        
x-amz-id-2: TAwVDFAylU9PwNPPW/eXC4UyIMC8EQ1d6JNW9Q+uXGnPmL1fuimq9M3lAe733gCMeKNDiCQX1YM=
x-amz-request-id: SYTECJR5CMD8NJ8E
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "63e2df852d15ab21d7ff8fc4363222e8"
x-amz-version-id: UU.F5jvoumAjQChriwTQHbisCFw_OInU
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Fri, 09 Sep 2022 23:54:17 GMT
via: 1.1 varnish
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 134
x-timer: S1662767657.271770,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 18216
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32010)
Size:   18216
Md5:    6561a2403142205f966207d61576f1a6
Sha1:   1310e72f494e12ab63a4280fc1600a2c89dc9bb8
Sha256: 0e496fcab0b9120938373e271fa6631b7da17adf33f8a490637467c170a3e37a
                                        
                                            GET /1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1216.487a282&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2522&ck=1&ref=https://dngsnl.com/acct/epc68088/add/&ap=90&be=1992&fe=2447&dc=2444&af=err,xhr,stn,ins,spa&perf=%7B%22timing%22:%7B%22of%22:1662767645578,%22n%22:0,%22f%22:1159,%22dn%22:1161,%22dne%22:1165,%22c%22:1165,%22s%22:1278,%22ce%22:1508,%22rq%22:1508,%22rp%22:1874,%22rpe%22:1874,%22dl%22:1880,%22di%22:2433,%22ds%22:2444,%22de%22:2446,%22dc%22:2446,%22l%22:2446,%22le%22:2448%7D,%22navigation%22:%7B%7D%7D&at=HxVQQAsaG0Q%3D&jsonp=NREUM.setToken HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         162.247.241.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 09 Sep 2022 23:54:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 7483d922ccc81c16-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=ee7551503d8dfcd5; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    f1442f5831dbbe0210da2d7a4180d6b8
Sha1:   2ade23c6c7a001c66f0c0a9a101ec152747b434e
Sha256: c6acf9fb2ecc1b144c51bd0337bbf1c26db3df2f649ac2da5c56db20d93eb3ef
                                        
                                            POST /events/1/NRJS-53a3e8e5a523894a2ee?a=936088839&v=1216.487a282&to=M1JTNkMACEoAVRcNDAoYZBBYTg9XBVMbShMMRw%3D%3D&rst=2792&ck=1&ref=https://dngsnl.com/acct/epc68088/add/ HTTP/1.1 
Host: bam.nr-data.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: text/plain
Content-Length: 669
Origin: https://dngsnl.com
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         162.247.241.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 09 Sep 2022 23:54:17 GMT
Content-Length: 24
Connection: keep-alive
CF-Ray: 7483d923cd301c16-OSL
Access-Control-Allow-Origin: https://dngsnl.com
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Vary: Accept-Encoding
Server: cloudflare


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   24
Md5:    bc32ed98d624acb4008f986349a20d26
Sha1:   2d3df8c11d2168ce2c27e0937421d11d85016361
Sha256: 0c9cf152a0ad00d4f102c93c613c104914be5517ac8f8e0831727f8bfbe8b300
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe535d149-d5c6-4543-8a5b-a5a98be48b9e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6676
x-amzn-requestid: 97140273-f327-4ec8-b076-cea440ce1d29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNi34HNxoAMF9Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb1cb-6356b02944a048db1be05d1c;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:36:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2s35YFxVMMVFBVoSTyoCp0w0ivNRYerua-rmRWXdbvtP2UHafYwUmw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:10:25 GMT
age: 6236
etag: "cc0f8bf63d11aeb3ea780af092523833f3b1abd3"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6676
Md5:    362d0931425ffa11f3287246f0480cc8
Sha1:   cc0f8bf63d11aeb3ea780af092523833f3b1abd3
Sha256: 75619cdf413b35451f109180e084a3630d0665a24b29e45510fed938d381db75
                                        
                                            GET /?utm_source=n19ck4pSWjZsA&s1=719fbd40-273d-47b8-882f-683d1074b172&s2=weddmjijqhtda7ui2m95q2eo HTTP/1.1 
Host: flirtyhoookup.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         172.67.201.85
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                        
date: Fri, 09 Sep 2022 23:54:13 GMT
location: https://www.arkdcz.com/MSJ7L4/HX6G2NF/?sub1=418543&sub2=OPUksWgATLrbtWTxxVkwyZBrqjrTbERUp
cache-control: max-age=0, private, must-revalidate
cross-origin-window-policy: deny
set-cookie: k=SFMyNTY.g3QAAAAEbQAAAARhdW5xdAAAAAFtAAAABTMxNTQ4bQAAAApwV0VCYVFERE93bQAAAANoaWRtAAAAIU9QVWtzV2dBVExyYnRXVHh4Vmt3eVpCcnFqclRiRVJVcG0AAAACaGxkAANuaWxtAAAAA3VucW0AAAAMZ3ZoWXFqelpaT2lh.0V7xdvukqSrTGJi0KhQgZcjihlQ1ozURuUs_RzTa_vY; path=/; expires=Sat, 09 Sep 2023 23:54:13 GMT; max-age=31536000
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sktKTbObUVSACPQDXtfi3CUYcsxUCDwFCFokTAwPIVDt6LR%2FVnxdtjFKT2ikAbaAIdghG%2B3YTETViYOaQbHafPgu7b1nCx4%2Fjn8xkW9V%2B1wm8PKXhGESU8tGX0dcUxD1aoriWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7483d90cbfc9b505-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /vrfttcyber/?bi=pw&sd=1&fk=cyber&ai=68088&ca=415&ci=f2020e7d8ff94a548f8fd107136a1348&tk=MSJ7L4 HTTP/1.1 
Host: go.cyberslut2069.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/2 200 OK
content-type: text/html
                                        
last-modified: Thu, 23 Dec 2021 16:52:18 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 09 Sep 2022 23:54:14 GMT
etag: W/"0d1c30819e500f4f596aa3421773d64f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p4FOPyQd08AcWWTctA3vJKh_xE53DW4DNLFPS4N487ksRdQvt0ypaw==
age: 13325
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /icon?family=Material+Icons HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 23:54:16 GMT
date: Fri, 09 Sep 2022 23:54:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /css2?family=Poppins:wght@300;400;600&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Sep 2022 23:54:16 GMT
date: Fri, 09 Sep 2022 23:54:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /common_tpls/js/form_support.js?v=1516308712 HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
vary: Accept-Encoding
last-modified: Tue, 19 Jan 2021 00:12:19 GMT
etag: W/"600623e3-3d1"
section-io-cache-id: 4b62c1f30209d55c28e6271be37b111d
x-varnish: 7871947 2736048
age: 4536
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 0ac5c8d382857b6d487becd0aaf3a534
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bundle.js HTTP/1.1 
Host: landers.of-bo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.155.108
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Sep 2022 23:54:14 GMT
x-amz-id-2: E1iZQsAhGg3SjYuTzzcBGkhQtszxLD0aCyYnpV0H/N6wLcUlGLBdyO4Sc6M4P/KQrNMAcRotfEA=
x-amz-request-id: YGXAS2QERW7Z6X0K
last-modified: Tue, 09 Aug 2022 22:05:52 GMT
etag: W/"2f68fb7cd74453a748e232155e853e64"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5145
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KCIukz51tQTq3FO4el7tVOMgkl%2Bpc1V0vmhCReGiPa%2Bgx8uxxxo%2BAEBAMKCqcL8%2FhDbl6cwR0MNSjIJN6Ykl4pAtqFlJNcX3HAO6Zd7%2BECTit%2FRpgRKN0htoeLob2kf8IA2Dvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7483d911fcabb4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /geoip/country?callback=window.gapwn.get_country HTTP/1.1 
Host: country.gameops.tech
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.136.190
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
date: Fri, 09 Sep 2022 23:54:14 GMT
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-headers: X-Requested-With
x-content-type-options: nosniff
etag: W/"20d-sKpKw8KGhimKVxiVkhkJPWK187k"
via: 1.1 varnish
age: 3028
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662767655.949671,VS0,VE1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rx4wAQ2BArZsJiz3NsqbtjFNQFpH3lhIlGphjqfviohZE%2F5ghYEVh9PsdD6YUyynSWfDv5XuAJmMHbcQtz8Br77yr2SJP34s5WxNX64UGByU0bRDCxKZKcNZgaCWZlj%2Fo8C3a3sjMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7483d9134c74b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /b314bdf1b3.js HTTP/1.1 
Host: kit.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dngsnl.com
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         104.18.23.52
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: FxDOkOaSbBI2tu8RsiEC
cf-cache-status: HIT
server: cloudflare
cf-ray: 7483d91f0df2b523-OSL
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /common_tpls/js/validate_form_v2.js?jsv=25 HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
vary: Accept-Encoding
last-modified: Wed, 27 Jul 2022 20:38:46 GMT
etag: W/"62e1a256-5a7b"
section-io-cache-id: 6eb3bf9c36939c2f81bf2559b0a8e794
x-varnish: 7129207 2736061
age: 4529
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: 2c677323d8d9d79a396a8500883b080d
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /common_tpls/js/iframeResizer.contentWindow.min.js HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Sep 2022 23:54:16 GMT
vary: Accept-Encoding
last-modified: Tue, 16 Jun 2020 16:45:10 GMT
etag: W/"5ee8f716-3445"
section-io-cache-id: cbb994c21029dd099e3f3f0b9221e8d7
x-varnish: 7871949 6709821
age: 4538
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Hit
content-encoding: gzip
section-io-id: d86a1a833fe283c71a408823737291bd
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /acct/trk/?rtid=4797286285 HTTP/1.1 
Host: dngsnl.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VwUCVFRWCBAJV1dSDwkPVV0=
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMzNTUyNTAiLCJhcCI6IjExMDMwNzg4NDIiLCJpZCI6Ijc4N2FmOGMxNjE5MDQ1MmMiLCJ0ciI6IjY2YTNiZmU0Yjc3NzM2NmRkZjFkNmU0YTJmYWMzMWE3IiwidGkiOjE2NjI3Njc2NDgwMzd9fQ==
traceparent: 00-66a3bfe4b777366ddf1d6e4a2fac31a7-787af8c16190452c-01
tracestate: 3355250@nr=0-1-3355250-1103078842-787af8c16190452c----1662767648037
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://dngsnl.com/acct/epc68088/add/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348&epcCID=96S9ycXbUejf5ad1p8d0X4X8LcleZ8ff9&rtid=4797286285
Cookie: PHPSESSID=ee5ed01a5f1832137a35d47d3a5f43f0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         207.120.33.44
HTTP/2 200 OK
content-type: text/json;charset=UTF-8
                                        
date: Fri, 09 Sep 2022 23:54:17 GMT
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
expires: 0
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
x-varnish: 7933955
age: 0
via: 1.1 varnish (Varnish/7.0)
section-io-cache: Miss
content-encoding: gzip
section-io-id: e0e545be2f823d6067b5fd8e244b2c3e
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /ep.php/prmagms:71475/68088:415.f2020e7d8ff94a548f8fd107136a1348 HTTP/1.1 
Host: www.fst-ent-lnk.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.cyberslut2069.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         54.200.116.57
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Fri, 09 Sep 2022 23:54:15 GMT
location: https://fstlgin.com/signup/?epcVIP=48.1066.g90&lang=en&email=&password=&ci_qcksub=1&act=epc68088.47267-707855.415.f2020e7d8ff94a548f8fd107136a1348
set-cookie: AWSALB=stK2bjJRpdVwDrDJ8i2WUG3OVilCjjlHfUDyrjmCgAhEJUnF2uZ36vrdjfDJC7rTv3HhSdmrREioLzFYKGCPWiMnkJpKyUWGeypWM9b02oAjLGgkgjBZzcT2iY9k; Expires=Fri, 16 Sep 2022 23:54:15 GMT; Path=/ AWSALBCORS=stK2bjJRpdVwDrDJ8i2WUG3OVilCjjlHfUDyrjmCgAhEJUnF2uZ36vrdjfDJC7rTv3HhSdmrREioLzFYKGCPWiMnkJpKyUWGeypWM9b02oAjLGgkgjBZzcT2iY9k; Expires=Fri, 16 Sep 2022 23:54:15 GMT; Path=/; SameSite=None; Secure vip_id=68088.47267-707855; expires=Mon, 12-Sep-2022 23:54:15 GMT; Max-Age=259200; path=/
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /?v=1 HTTP/1.1 
Host: geoip.enlistsecureup.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dngsnl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         163.171.128.172
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 09 Sep 2022 23:54:17 GMT
server: waf/4.31.15-0.el6
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
x-via: 1.1 PS-SJC-011UH181:4 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1bc200:14 (Cdn Cache Server V2.0), 1.1 PSdgflkfFRA1je97:15 (Cdn Cache Server V2.0)
x-ws-request-id: 631bd228_PSdgflkfFRA1vg90_47696-15382
set-cookie: HMF_CI=e08a5822d6016f1cd69025ff0a98e0ae29c8509ee7969623f44c618a5d539b307b92ddec7a93f27a8cde3158ac75118c1c068c60cdd184bd76ed36523cc208796c; Expires=Sun, 09-Oct-22 23:54:17 GMT; Path=/
X-Firefox-Spdy: h2


--- Additional Info ---