r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150792cfc458af013998f4ef6bdf5f74
d5179b2dcb11d06f82606bf6eb6648319998d63e
72937c756d3feeae6d04a6f445398b0436bdf559f8c7437e3a3233263943900e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3737
Expires: Sun, 27 Nov 2022 21:56:47 GMT
Date: Sun, 27 Nov 2022 20:54:30 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1876
Cache-Control: max-age=137279
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:30 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:02:29 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2745
Expires: Sun, 27 Nov 2022 21:40:15 GMT
Date: Sun, 27 Nov 2022 20:54:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 20:17:41 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2209
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Whdch/U9kS6ZpjsgMOOZ1j3DcxpMnXO9FFZYG5+jl8Hdfd0tDMwXF9JcK5kwr4r0EqOmKOlzttY=
x-amz-request-id: PDJ2530FH1N8ZGJA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 20:41:47 GMT
age: 763
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
www.extra-news.net/
301 Moved Permanently 175 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5c45d21834564b713c821a6ce2178b57
24c1ac9125f2fdf45cddbddf66b1f2d44e34130d
f660c2648c77745cee8ff5288083f3f21c2eab585d1b9d3b8b9e87d3d4cad9c7
GET / HTTP/1.1
Host: www.extra-news.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.extra-news.net/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sun, 27 Nov 2022 20:54:30 GMT
Expires: Sun, 27 Nov 2022 20:54:30 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 175
Server: GSE
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 20:54:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/YOIl3RkgVAc
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/YOIl3RkgVAc
IP
Hash 02865ee4aaed01c6362ddb5a2d1142c0
4a038457378c4fad00568723a0683a80b5581110
e5aba186f7c9b000272857a2ac41c94e9e979691700e06dd05edc60ff30d3e9b
POST /s/gts1d4/YOIl3RkgVAc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 20:08:54 GMT
cache-control: public,max-age=3600
age: 2736
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.extra-news.net/
200 OK 57 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1852)
Hash bca73609a8899b70abd7286e770a08d9
b171cff4020073f32ef7ceb1d8730f59d296eb0f
1208bf65cb283926cacd23a76aea10b5a6a595723f8d185a9bcae1462a865102
GET / HTTP/1.1
Host: www.extra-news.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
x-robots-tag: all,noodp
content-type: text/html; charset=UTF-8
expires: Sun, 27 Nov 2022 20:54:30 GMT
date: Sun, 27 Nov 2022 20:54:30 GMT
cache-control: private, max-age=0
last-modified: Thu, 24 Nov 2022 09:30:48 GMT
etag: W/"f9594d3165e4ea6b67dd6ca60ab71dd3670ac5a3c3e8e83a7bb52fb2bfc4c319"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 56660
server: GSE
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ebed87c2caeb00f3daca76b91f1d5856
0b524def376f7bf90143e8c002fbbdc776d4b457
9d50a898f0edaf6c38ef9827dcfc72de00b8afd71fde693644c3e7424f6efaa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5743
Cache-Control: max-age=90379
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Etag: "63827623-118"
Expires: Mon, 28 Nov 2022 22:00:50 GMT
Last-Modified: Sat, 26 Nov 2022 20:25:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:31 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 959957
expires: Fri, 17 Nov 2023 20:54:31 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T9bysjsXlbo9PsToPXkPdWxmdJgLCO5GkxXKBtpeOJSR646JwA8boaVo1XUJPz1Ob%2BLrGujyyhcUpBHchQTo35Fl11seczW85UnSS5JhGOiGPBEdipXVODb92FgH9DRj1EVMFqIy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 770dc26cdf94b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash a6fee11dfe1b88cd768a0ca3e2bd0c89
59cec9a44a4a92467678afe65f347f68641a2174
50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6334
Cache-Control: max-age=136675
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:52:26 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 27 Nov 2022 20:41:08 GMT
expires: Sun, 27 Nov 2022 22:41:08 GMT
cache-control: public, max-age=7200
age: 803
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v6/SLXGc1nY6HkvalIkTpu0xg.woff2
200 OK 18 kB URL HTTP/2 fonts.gstatic.com/s/cairo/v6/SLXGc1nY6HkvalIkTpu0xg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 18044, version 1.0\012- data
Hash 2bc71088819b2156b8b135db52f95065
2435d2383790b0c6c63c22d79a607c7a89c7840f
cf23098d0dceb8591e215a9ad2fa5a9c515b7c8e6877c1d0d3ec49b3d81231ae
GET /s/cairo/v6/SLXGc1nY6HkvalIkTpu0xg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18044
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 16:54:20 GMT
expires: Wed, 22 Nov 2023 16:54:20 GMT
cache-control: public, max-age=31536000
age: 446411
last-modified: Wed, 17 Jul 2019 00:04:15 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
200 OK 6.8 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js
IP
File type ASCII text, with very long lines (20693), with no line terminators
Hash 58a872ad8da4bad737e618cf78b55feb
1917e7662a1c0d1034c3056c6ebd0e9ae2d542f1
5ddc446ff4623ed98a827c66171c9d5d2809d7f679b0681eb088765e272849bb
GET /npm/cookieconsent@3/build/cookieconsent.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"50d5-nLraS9YXyGxjjPLr3exyStWWkHs"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 27 Nov 2022 20:54:31 GMT
age: 8955
x-served-by: cache-fra-eddf8230087-FRA, cache-bma1652-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6756
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ebed87c2caeb00f3daca76b91f1d5856
0b524def376f7bf90143e8c002fbbdc776d4b457
9d50a898f0edaf6c38ef9827dcfc72de00b8afd71fde693644c3e7424f6efaa4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5743
Cache-Control: max-age=90379
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Etag: "63827623-118"
Expires: Mon, 28 Nov 2022 22:00:50 GMT
Last-Modified: Sat, 26 Nov 2022 20:25:07 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-PKZXW6LSBG
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-PKZXW6LSBG
IP
File type ASCII text, with very long lines (21484)
Hash 03cf23fd34ab133dd336f4685ec21105
57a3bd0007f9d7deda119ce75590316c051ff50b
10ca86b8722a98e40343b9ec14ed3ff8ddb3a1d5d9621c31446325abbd29fcee
GET /gtag/js?id=G-PKZXW6LSBG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 20:54:31 GMT
expires: Sun, 27 Nov 2022 20:54:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76628
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css
200 OK 1.3 kB URL HTTP/2 cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css
IP
File type ASCII text, with very long lines (1460)
Hash 8786cd8041431d860694eed4e4df5493
ad176b25138137c05527a1a93f9b1d2bd9819bb6
2f1ab64452cbd8b4a75b5f778aaadd7f8a9c194ef48c5e2e9132393b68d21a85
GET /npm/cookieconsent@3/build/cookieconsent.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 3.1.1
x-jsd-version-type: version
etag: W/"135e-3nthfC1sCV/yhiNebPZMMo2hpL8"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 27 Nov 2022 20:54:31 GMT
age: 8983
x-served-by: cache-fra-eddf8230021-FRA, cache-bma1652-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 1299
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v6/SLXGc1nY6HkvalIhTps.woff2
200 OK 21 kB URL HTTP/2 fonts.gstatic.com/s/cairo/v6/SLXGc1nY6HkvalIhTps.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20772, version 1.0\012- data
Hash 0f76f616dfdcbec3148d8e934486ba97
e1b13e3a0b9d2b538fa5c80908ceeaa939fb2e3b
5cb3d6eb9c192f0339126dc9290c8cdc286512f79318d9a6e5033b2ebb93e8cd
GET /s/cairo/v6/SLXGc1nY6HkvalIhTps.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20772
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 20:14:23 GMT
expires: Tue, 21 Nov 2023 20:14:23 GMT
cache-control: public, max-age=31536000
age: 520808
last-modified: Wed, 17 Jul 2019 00:04:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/cairo/v6/SLXGc1nY6HkvalIvTpu0xg.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/cairo/v6/SLXGc1nY6HkvalIvTpu0xg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14700, version 1.0\012- data
Hash 46620fa816c5ff1dae0f43cd4bd41d07
9ea97a3d5a42a81b9bac690c856f6e2332891625
59cee4541eab5a14611dc50c65e9d83c5eb5e7017db95182fac21a46dec06125
GET /s/cairo/v6/SLXGc1nY6HkvalIvTpu0xg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14700
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 20 Nov 2022 23:57:06 GMT
expires: Mon, 20 Nov 2023 23:57:06 GMT
cache-control: public, max-age=31536000
age: 593845
last-modified: Wed, 17 Jul 2019 00:04:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
Hash 4ba82f51b4cb4117825bfaac63aac53b
b3e2988090d5d1c8b8fa1bd485f85ab24f4b06d7
cda57204d04dc34d2544932d0795dedb70e7a6daabe187929e2e3db29ba9725a
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 20:54:31 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "BCA5D011F60FEE9D38B19C70DDD84C46057CE836"
Expires: Mon, 28 Nov 2022 07:00:00 GMT
Last-Modified: Sun, 27 Nov 2022 19:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2848
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 770dc26dbf850afa-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zwSJGRViR3K9GVpWe+LAMA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: p8XZ5oyJyA8PuuF4DGrZMvcKKZg=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 359b3c840e45aca7bc335661d3e4774c
fcb4f114ed595a783f7a011caeba6511b9fde8fa
c139fb6925b39d9cededc8ace77d1e74f67b09021bd1ab9071eb3e304090520b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C139FB6925B39D9CEDEDC8ACE77D1E74F67B09021BD1AB9071EB3E304090520B"
Last-Modified: Sun, 27 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5476
Expires: Sun, 27 Nov 2022 22:25:47 GMT
Date: Sun, 27 Nov 2022 20:54:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7fa6fd5f56ab3ba3a10895cf183b9d6a
15916aeaba473a20d08f45f96400ae5a5706573e
5e6ffefb0ee2484c0b8c92750c0ab709aef37afe8a3a9b0bb4a6df8ac3854414
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E6FFEFB0EE2484C0B8C92750C0AB709AEF37AFE8A3A9B0BB4A6DF8AC3854414"
Last-Modified: Sun, 27 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9393
Expires: Sun, 27 Nov 2022 23:31:04 GMT
Date: Sun, 27 Nov 2022 20:54:31 GMT
Connection: keep-alive
pl17776891.profitablegatetocontent.com/ce7c4ea8fc2d434fa0e4c045d5937903/invoke.js
200 OK 9.3 kB URL HTTP/1.1 pl17776891.profitablegatetocontent.com/ce7c4ea8fc2d434fa0e4c045d5937903/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type Unicode text, UTF-8 text, with very long lines (25082), with no line terminators
Hash 71f849e8be4eadf644669642bc75a209
753b4e3e18a851ea3862acfab0d0c8ba639a19c3
5e27e315b55c843abebc150f6a88e4c9ab8da20bf035cfd106f7bd47487e08ce
Analyzer Verdict Alert quad9 Sinkholed
GET /ce7c4ea8fc2d434fa0e4c045d5937903/invoke.js HTTP/1.1
Host: pl17776891.profitablegatetocontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1710d868682b6c24669f2e97932561f3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.highperformancedisplayformat.com/9ba6f3f2f71c2bee2ff4c3b8a34da0ec/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/9ba6f3f2f71c2bee2ff4c3b8a34da0ec/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26965), with no line terminators
Hash 079ca219dd055ddc46ececa703e65e3c
1e78388e5603da011cc702b84b7699b9ee448772
ce2ac4b2aaa9c192efe391459ab37bf635df2a09fcb293162260ceb0a3083247
Analyzer Verdict Alert quad9 Sinkholed
GET /9ba6f3f2f71c2bee2ff4c3b8a34da0ec/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 943c1cae977b38fd835ac1a105f1f179
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
region1.google-analytics.com/g/collect?v=2&tid=G-PKZXW6LSBG>m=2oeb90&_p=1191322063&cid=1061285599.1669582471&ul=en-us&sr=1280x1024&_s=1&sid=1669582471&sct=1&seg=0&dl=https%3A%2F%2Fwww.extra-news.net%2F&dt=%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%20%D9%86%D9%8A%D9%88%D8%B2&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-PKZXW6LSBG>m=2oeb90&_p=1191322063&cid=1061285599.1669582471&ul=en-us&sr=1280x1024&_s=1&sid=1669582471&sct=1&seg=0&dl=https%3A%2F%2Fwww.extra-news.net%2F&dt=%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%20%D9%86%D9%8A%D9%88%D8%B2&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-PKZXW6LSBG>m=2oeb90&_p=1191322063&cid=1061285599.1669582471&ul=en-us&sr=1280x1024&_s=1&sid=1669582471&sct=1&seg=0&dl=https%3A%2F%2Fwww.extra-news.net%2F&dt=%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%20%D9%86%D9%8A%D9%88%D8%B2&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.extra-news.net
date: Sun, 27 Nov 2022 20:54:32 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8781ef7b81ea378c87b9b75e52115397
df3106ed152971215d454459c4e7ad93559aa4ca
e44e3b4621bc2e63c4b7a69aee8cf240a496c5d1cdef6b26f5a6036c0e3007a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149379
Date: Sun, 27 Nov 2022 20:54:32 GMT
Etag: "63836697-1d7"
Expires: Tue, 29 Nov 2022 14:24:11 GMT
Last-Modified: Sun, 27 Nov 2022 13:31:03 GMT
Server: ECS (bsa/EB23)
X-Cache: Miss from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UzZ5vyg6urEqbCg7bLdpICQTl0lsSiQkJTFmxsIPXlboYY4-P2JrZg==
Age: 3188
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 8781ef7b81ea378c87b9b75e52115397
df3106ed152971215d454459c4e7ad93559aa4ca
e44e3b4621bc2e63c4b7a69aee8cf240a496c5d1cdef6b26f5a6036c0e3007a1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=152253
Date: Sun, 27 Nov 2022 20:54:32 GMT
Etag: "63836697-1d7"
Expires: Tue, 29 Nov 2022 15:12:05 GMT
Last-Modified: Sun, 27 Nov 2022 13:31:03 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TA323jePyJPDxnzSZwcqAJWlGo1oH-rkmfa92erjyyljnSDfvF4wQg==
Age: 6062
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d3943f4fdd3554568c252c6cd9b80db0
f7c66b87521cc7cbce416233902edafc8f96e6ff
a111d83af5e6d145ddecd833092942713eda05bfe5b2e66eaaa7a52a7f15fd6a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:32 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.extra-news.net
access-control-allow-credentials: true
set-cookie: uid_id2=5eb02de2-2485-4bca-906d-49c618f80081:2:1; expires=Wed, 24 Nov 2032 20:54:32 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 0a821d9da9e28036469b2b314ee57b84
53b0807d870ae99d6292d3c2a77a5e5c1004504a
f94ccb3a5e0a50727736690ba9c3e2a32b9a59ea444d0d85dda9d2b6978956c8
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:32 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.extra-news.net
access-control-allow-credentials: true
set-cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Wed, 24 Nov 2032 20:54:32 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2f81220cf2a76b396f31ed47a3f22e37
8ab12e6d44851ea581187442f8803615cb2628e5
08451cf1d8f9fee8a2f47f7fe5e3aa3ffb4d155fb44a3d5e9f0b6e888e644cc5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "08451CF1D8F9FEE8A2F47F7FE5E3AA3FFB4D155FB44A3D5E9F0B6E888E644CC5"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3485
Expires: Sun, 27 Nov 2022 21:52:37 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e831b0bc8579bb6b123ded74a6a8f7af
7c5023d1dc1acc9903f390ad0c9f2b12a89d7eaa
97dff3e309d43a678db1ed60c290f3571fdbfa1fcf0881f73ef3eb7ac8fb1855
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "97DFF3E309D43A678DB1ED60C290F3571FDBFA1FCF0881F73EF3EB7AC8FB1855"
Last-Modified: Sat, 26 Nov 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1623
Expires: Sun, 27 Nov 2022 21:21:35 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Sun, 27 Nov 2022 22:01:57 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Sun, 27 Nov 2022 22:01:57 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Sun, 27 Nov 2022 22:01:57 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Sun, 27 Nov 2022 22:01:57 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4045
Expires: Sun, 27 Nov 2022 22:01:57 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 82971
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 741ddfb19764ac9a77509e7e87cfbfb2
308c08784ce4a0757cbd112807555b83e17a1d56
e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: I6egDH0h7D08HhaoQHQ0vgghBhPfje2lGIbnWD-t7p4txzHsFxmZfg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 16:15:23 GMT
age: 16749
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 20:58:18 GMT
age: 86174
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 433875a1b1fef34e45f2d8ac344c07e3
f2129466436cbbdd58abe42a47fb7af19eba58e6
ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5099
x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4jFBvoAMFl1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:51:41 GMT
age: 82971
etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: a22b4d7e-e208-4bda-81c2-d13e6463380e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: blE0hGNioAMF_Tg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6371e81c-1b13846866f56a0e47675e56;Sampled=0
x-amzn-remapped-date: Mon, 14 Nov 2022 07:02:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 0sYKpJWi2Tv9Atz3PYXm5j7kmncAOxjcLcK4hgAkJ5b4pNMDmjdB6g==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 02:31:24 GMT
age: 66188
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 76c00eceed956377d7469ef58b0815cb
97a135335f5b1b042adeb385718f8808cb78528b
81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7380
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iEegIAMFeuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:50:08 GMT
age: 83064
etag: "97a135335f5b1b042adeb385718f8808cb78528b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
churchalexis.com/9ba6f3f2f71c2bee2ff4c3b8a34da0ec/invoke.js
200 OK 9.8 kB URL HTTP/1.1 churchalexis.com/9ba6f3f2f71c2bee2ff4c3b8a34da0ec/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Hash 38eb5b959bcc6fc18e56194ed80d7a2c
566212f2531beb724997b4b5bd23d28ab10c1274
afde3ed14fc8d6cc79082d48b74196411d35cbe4300a46679cc6633e59b1ec3d
Analyzer Verdict Alert quad9 Sinkholed
GET /9ba6f3f2f71c2bee2ff4c3b8a34da0ec/invoke.js HTTP/1.1
Host: churchalexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d762c13e2eb30054a59d7c6e8c36b3f3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
hopefullyapricot.com/ntv.json?key=ce7c4ea8fc2d434fa0e4c045d5937903&vstc=4
200 OK 0 B URL HTTP/1.1 hopefullyapricot.com/ntv.json?key=ce7c4ea8fc2d434fa0e4c045d5937903&vstc=4
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ntv.json?key=ce7c4ea8fc2d434fa0e4c045d5937903&vstc=4 HTTP/1.1
Host: hopefullyapricot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:32 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17676392; expires=Mon, 28 Nov 2022 20:54:32 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5f7b36881eadc00975bd18b01ec80d6e
Strict-Transport-Security: max-age=0; includeSubdomains
churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
200 OK 9.8 kB URL HTTP/1.1 churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26969), with no line terminators
Hash 20349d98ca22a84f5aff723756d3a7b1
985d9b07fbc2bed7d0527c6a92886507bb733b12
41fe769c74bed7d4dad0e071cfaad2fd6fd93108c0dabba96d8c45c8fa16d2b0
Analyzer Verdict Alert quad9 Sinkholed
GET /f4127ad8e862396592d23510c1724590/invoke.js HTTP/1.1
Host: churchalexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7985ae9327b88fae5c0c987eaaabb1b4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d5d8ec7e20a8b7644119bde430cc7c88
b2bd02b98bbdb1c27a104c4421de6bc1cff71250
58534e7f6c8cd723f279356955fdb8adb83b666bad178e9eb366568a7b506fce
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58534E7F6C8CD723F279356955FDB8ADB83B666BAD178E9EB366568A7B506FCE"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3534
Expires: Sun, 27 Nov 2022 21:53:26 GMT
Date: Sun, 27 Nov 2022 20:54:32 GMT
Connection: keep-alive
www.highperformancedisplayformat.com/f4127ad8e862396592d23510c1724590/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/f4127ad8e862396592d23510c1724590/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash 6973821f2ae6d400843eb152a21951df
16b59408d1b2803dbd5922eb91a129054d67e57d
322ea4095c48fb13a4aa48b0e32294e8bc4bce49c7288f2771d6bd2631747ba1
Analyzer Verdict Alert quad9 Sinkholed
GET /f4127ad8e862396592d23510c1724590/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7792ee2be5875f5897e86bfe278407ff
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
tractorfoolproofstandard.com/watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 tractorfoolproofstandard.com/watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Location: https://tractorfoolproofstandard.com/watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=3c3e2f0c9dc1e855a49f7e67175f6a89f655277331475433ad75728dc669004325f9b40c7cb2798c05053cdc27708bfae9d1c701cacded54c41e8f05333913cdea721ecc89a94b1c595eeb764563510ccbe52546&pst=1669582533&rmtc=t
Set-Cookie: u_pl=17676348; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.1k1dMXcvoSwq5oCZ-ZRvBAOGaVp6XHe_tn55Z49Y2iI; expires=Sun, 27 Nov 2022 20:55:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f0f00c1a37c355e3dfec2bdd4fe97a96
Strict-Transport-Security: max-age=0; includeSubdomains
www.highperformancedisplayformat.com/f4127ad8e862396592d23510c1724590/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.highperformancedisplayformat.com/f4127ad8e862396592d23510c1724590/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash 064ecd0f8b09812054fb6e6468ae81d1
bef0947280a0f2fb278903e4a67da4aada434d63
e849984280e71fa15f25ef210551cdf0eae1a528aab4c0eb21429bbb90e61d7e
Analyzer Verdict Alert quad9 Sinkholed
GET /f4127ad8e862396592d23510c1724590/invoke.js HTTP/1.1
Host: www.highperformancedisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 24f286bde2f7448d6fcc099675cf0766
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5c0748d6b73f44e551a70bbd351fa44b
938677b2f0d2152ebb028c00d095492d4946d2ee
4e3fa15077f57b5966d4b60f2a856c9defe22ad657f6374387c83d8afe466861
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4E3FA15077F57B5966D4B60F2A856C9DEFE22AD657F6374387C83D8AFE466861"
Last-Modified: Sat, 26 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7576
Expires: Sun, 27 Nov 2022 23:00:49 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d7194132f3926cf4c0cc0cba0d1a1d5f
94e321281174b32394e34e4a9ece6a0c0aa9e011
dcf5885214fc0bfabfdf53807303bd0715be72ddbb9088ec40f3fc2fbb5923ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DCF5885214FC0BFABFDF53807303BD0715BE72DDBB9088EC40F3FC2FBB5923EE"
Last-Modified: Sat, 26 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5836
Expires: Sun, 27 Nov 2022 22:31:49 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
200 OK 9.8 kB URL HTTP/1.1 churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Hash 38eb5b959bcc6fc18e56194ed80d7a2c
566212f2531beb724997b4b5bd23d28ab10c1274
afde3ed14fc8d6cc79082d48b74196411d35cbe4300a46679cc6633e59b1ec3d
Analyzer Verdict Alert quad9 Sinkholed
GET /f4127ad8e862396592d23510c1724590/invoke.js HTTP/1.1
Host: churchalexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 381c61b67ea054ea7017882f68000277
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
tractorfoolproofstandard.com/watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=3c3e2f0c9dc1e855a49f7e67175f6a89f655277331475433ad75728dc669004325f9b40c7cb2798c05053cdc27708bfae9d1c701cacded54c41e8f05333913cdea721ecc89a94b1c595eeb764563510ccbe52546&pst=1669582533&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 tractorfoolproofstandard.com/watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=3c3e2f0c9dc1e855a49f7e67175f6a89f655277331475433ad75728dc669004325f9b40c7cb2798c05053cdc27708bfae9d1c701cacded54c41e8f05333913cdea721ecc89a94b1c595eeb764563510ccbe52546&pst=1669582533&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2634)
Hash 38522d3b71560702917d017e32c8420f
5bb6e78b10f36263a7f5d90c14ff8e548a1a6800
ddf07875e77aabb06e3fcf6e10d9e8dabb1faea07955ed7431789c406454c0db
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.320932050438.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=3c3e2f0c9dc1e855a49f7e67175f6a89f655277331475433ad75728dc669004325f9b40c7cb2798c05053cdc27708bfae9d1c701cacded54c41e8f05333913cdea721ecc89a94b1c595eeb764563510ccbe52546&pst=1669582533&rmtc=t HTTP/1.1
Host: tractorfoolproofstandard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Referer: https://www.extra-news.net/
Connection: keep-alive
Cookie: u_pl=17676348; ain=eyJhbGciOiJIUzI1NiJ9.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.1k1dMXcvoSwq5oCZ-ZRvBAOGaVp6XHe_tn55Z49Y2iI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:33 GMT; secure; SameSite=None
iprc18bd5f7cdc13934d978f893ba9360519=3569808; expires=Mon, 28 Nov 2022 00:54:33 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 58c9cd981f4d7716e4b9902747532c99
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
200 OK 9.8 kB URL HTTP/1.1 churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26971), with no line terminators
Hash 07c6c6ccacd4ff698d9d1f5c034110a6
366455a8ce5e91ececbb86663ec71aa6f8ba5399
8b6a1232ac7296ca5b33ea835b75c026b41e3607f1ad0e22809ede29eea3e3fd
Analyzer Verdict Alert quad9 Sinkholed
GET /f4127ad8e862396592d23510c1724590/invoke.js HTTP/1.1
Host: churchalexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ffcc743bff889aea4b4cc8af8d2a6195
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fa7807766d23b7a5d301da2eff6f85f5
f45185b68991f46feb25cfe97377661e8e63d431
a4873b1d66c85fed052cce0a2507d992990b3590fd4f263f2a2ba8108fcff317
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4873B1D66C85FED052CCE0A2507D992990B3590FD4F263F2A2BA8108FCFF317"
Last-Modified: Sat, 26 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3498
Expires: Sun, 27 Nov 2022 21:52:51 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
tallysaturatesnare.com/watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 tallysaturatesnare.com/watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Location: https://tallysaturatesnare.com/watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=d03535e93ede682ed9d8dfa4edc701faaf483b5a55701065e0d8d4835a561300973ec3b8be03def3e80b9e8d1f5faa8589ffb2d2adc58222f3e7a84f3a6ee706cace56ac4e7d211b4496bf41db099fad0c856359bf00cceacda604c42a2b278a96&pst=1669582533&rmtc=t
Set-Cookie: u_pl=17676348; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.1k1dMXcvoSwq5oCZ-ZRvBAOGaVp6XHe_tn55Z49Y2iI; expires=Sun, 27 Nov 2022 20:55:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 74676b270651b72c2a324b738d9dcdc1
Strict-Transport-Security: max-age=0; includeSubdomains
lightssyrupdecree.com/watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 lightssyrupdecree.com/watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Location: https://lightssyrupdecree.com/watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=077e223d7d47c8275a4258c51ee8bae5de412944e384aa44677ffec993186dca7a649211e66b951e558496728bb01ac65fc60211934ca699c311fa386c04d02581c2ec4aaf17e2486cd89d102775d9b544c62053815e583e501e65fd0f2e2e&pst=1669582533&rmtc=t
Set-Cookie: u_pl=17676383; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; expires=Sun, 27 Nov 2022 20:55:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: daf2b41ee19db101e7856150a4cdb315
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d02308d366e622aa26e632ea017600cc
c16673d53c20ac70efbda483ca12b4374a76105c
ad8ccb9b049120b7e44a79dcbc9caab326567933cfce70608bc812237319a0ec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD8CCB9B049120B7E44A79DCBC9CAAB326567933CFCE70608BC812237319A0EC"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12828
Expires: Mon, 28 Nov 2022 00:28:21 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
200 OK 9.8 kB URL HTTP/1.1 churchalexis.com/f4127ad8e862396592d23510c1724590/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash 4f8800eb9c3eb452408cba1a0a54f196
64cfde6d597ebb8e2759140353341eb78be85398
9b580cb995b47252cf2e610bbd155b64b9f3ad540556621c45f0a27b038831d9
Analyzer Verdict Alert quad9 Sinkholed
GET /f4127ad8e862396592d23510c1724590/invoke.js HTTP/1.1
Host: churchalexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6cfcc6573a9cbedfa05e7596ee80e9ef
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
tallysaturatesnare.com/watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=d03535e93ede682ed9d8dfa4edc701faaf483b5a55701065e0d8d4835a561300973ec3b8be03def3e80b9e8d1f5faa8589ffb2d2adc58222f3e7a84f3a6ee706cace56ac4e7d211b4496bf41db099fad0c856359bf00cceacda604c42a2b278a96&pst=1669582533&rmtc=t
200 OK 641 B URL HTTP/1.1 tallysaturatesnare.com/watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=d03535e93ede682ed9d8dfa4edc701faaf483b5a55701065e0d8d4835a561300973ec3b8be03def3e80b9e8d1f5faa8589ffb2d2adc58222f3e7a84f3a6ee706cace56ac4e7d211b4496bf41db099fad0c856359bf00cceacda604c42a2b278a96&pst=1669582533&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (601)
Hash cf038973d63fed1f3192ed449d29e8d8
60ec0fa778bdc91cc1301b08cde90d76daf9a898
b63ce20990806ac425d4f89b2a5d70e2439bcc27f37926399d7a74d082c1e2f3
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1564519868983.js?key=9ba6f3f2f71c2bee2ff4c3b8a34da0ec&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=d03535e93ede682ed9d8dfa4edc701faaf483b5a55701065e0d8d4835a561300973ec3b8be03def3e80b9e8d1f5faa8589ffb2d2adc58222f3e7a84f3a6ee706cace56ac4e7d211b4496bf41db099fad0c856359bf00cceacda604c42a2b278a96&pst=1669582533&rmtc=t HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Referer: https://www.extra-news.net/
Connection: keep-alive
Cookie: u_pl=17676348; ain=eyJhbGciOiJIUzI1NiJ9.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.1k1dMXcvoSwq5oCZ-ZRvBAOGaVp6XHe_tn55Z49Y2iI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:33 GMT; secure; SameSite=None
iprcd7144e5b4bce15cfec7fc7e8732a6065=2717343; expires=Mon, 28 Nov 2022 22:54:33 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
pdhtkv23=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs23=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6bc557f8e4f30d09f4c12427ba5ea4f2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
lightssyrupdecree.com/watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=077e223d7d47c8275a4258c51ee8bae5de412944e384aa44677ffec993186dca7a649211e66b951e558496728bb01ac65fc60211934ca699c311fa386c04d02581c2ec4aaf17e2486cd89d102775d9b544c62053815e583e501e65fd0f2e2e&pst=1669582533&rmtc=t
200 OK 643 B URL HTTP/1.1 lightssyrupdecree.com/watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=077e223d7d47c8275a4258c51ee8bae5de412944e384aa44677ffec993186dca7a649211e66b951e558496728bb01ac65fc60211934ca699c311fa386c04d02581c2ec4aaf17e2486cd89d102775d9b544c62053815e583e501e65fd0f2e2e&pst=1669582533&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (602)
Hash c8cc812327d41f045f814886331700eb
4ed733293127f8bb6982c372bbd8112ff29d5766
d6caaffa693921f0811079d3851871f0dbbefeae9b081709ff192e464d2add2e
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1403938274928.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=077e223d7d47c8275a4258c51ee8bae5de412944e384aa44677ffec993186dca7a649211e66b951e558496728bb01ac65fc60211934ca699c311fa386c04d02581c2ec4aaf17e2486cd89d102775d9b544c62053815e583e501e65fd0f2e2e&pst=1669582533&rmtc=t HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Referer: https://www.extra-news.net/
Connection: keep-alive
Cookie: u_pl=17676383; ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:33 GMT; secure; SameSite=None
iprc61c5b17884771d22ced4954e3c1d01fa=2717340; expires=Mon, 28 Nov 2022 22:54:33 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dba75988234a2fb8bd46e962d3f8812a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
soldierreproduceadmiration.com/watch.999455388514.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 soldierreproduceadmiration.com/watch.999455388514.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.999455388514.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.extra-news.net
Connection: keep-alive
Referer: https://www.extra-news.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net
Access-Control-Allow-Origin: https://www.extra-news.net
Access-Control-Allow-Credentials: true
Location: https://soldierreproduceadmiration.com/watch.999455388514.js?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&shu=def278179e8a57a28c789fb8b73a93174c212c8c88041c155937fe9d8e675b007552bfc08bf74fc0a8924890f30c85ff33fde1376159b4b856328c6b8b5b673634379216b7ba09d0e7c1a3de3d2206ffa7f6deb9b99ba419b1e46ac09ad92150&pst=1669582533&rmtc=t
Set-Cookie: u_pl=17676383; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; expires=Sun, 27 Nov 2022 20:55:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 086ea7698fa40fc45cd0aa40eeb8cac7
Strict-Transport-Security: max-age=0; includeSubdomains
tallysaturatesnare.com/watch.1271368736782?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 tallysaturatesnare.com/watch.1271368736782?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (417)
Hash 5c80217868c312b3b46e75891fc85f26
f1c6d473235d4750bc939258affafa4be12cf6e2
41a94aab75902dfc97703e84bb0b77ec4fb3214b3a7a9df373616d4a37e39635
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1271368736782?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Cookie: u_pl=17676348; ain=eyJhbGciOiJIUzI1NiJ9.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.1k1dMXcvoSwq5oCZ-ZRvBAOGaVp6XHe_tn55Z49Y2iI; uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; iprcd7144e5b4bce15cfec7fc7e8732a6065=2717343; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17676348,17676383; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.u1UF6TVwNBGEdrmGPeOvmwcJSrOtKfwQwi_yvqqnhA8; expires=Sun, 27 Nov 2022 20:55:33 GMT; secure; SameSite=None
uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0de78b2a68b01b6488f83d82188595ec
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash af7b8db21256a1e9513f134f4a83aa7f
a81fc3bc0519040bfcbd9e2875b6aaa44259bc4d
84eb422804f5bb5cb226d1e778f4e98e3bbc5b99e0a7f8ab91aeeb1a5502f117
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "84EB422804F5BB5CB226D1E778F4E98E3BBC5B99E0A7F8AB91AEEB1A5502F117"
Last-Modified: Fri, 25 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1433
Expires: Sun, 27 Nov 2022 21:18:26 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 150ea2873eff251c72d1decbf77f983b
490f1e694eac882e2939c95d7a294bfb85c45670
8c7069c27bff404a4e5cfa31f0405bc2bec2838a0be469e06effc33574290634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C7069C27BFF404A4E5CFA31F0405BC2BEC2838A0BE469E06EFFC33574290634"
Last-Modified: Sun, 27 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2894
Expires: Sun, 27 Nov 2022 21:42:47 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
tallysaturatesnare.com/watch.1271368736782?shu=84d9c6e0d0c8f10d69655a0591457d6218637d7134d524b83fd12bd794b70b7e723ea31058950828a44cedeb8149ba67ae3d6eeed4c6426bc71903c50f4955ec37a0e3397772c74887b9c0da2464c553edcb4aac0eb50b76c14162d45774&pst=1669582533&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055
200 OK 1.9 kB URL HTTP/1.1 tallysaturatesnare.com/watch.1271368736782?shu=84d9c6e0d0c8f10d69655a0591457d6218637d7134d524b83fd12bd794b70b7e723ea31058950828a44cedeb8149ba67ae3d6eeed4c6426bc71903c50f4955ec37a0e3397772c74887b9c0da2464c553edcb4aac0eb50b76c14162d45774&pst=1669582533&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2582)
Hash e247d1cc958aeaf36de02f071a6f05a8
22e0bd62d63e75cb3af5e813ed0e588e52bbf9ca
88fe7471690454f20efd78d2c121eed0372c488daff1f1144d08a99faa4f298e
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1271368736782?shu=84d9c6e0d0c8f10d69655a0591457d6218637d7134d524b83fd12bd794b70b7e723ea31058950828a44cedeb8149ba67ae3d6eeed4c6426bc71903c50f4955ec37a0e3397772c74887b9c0da2464c553edcb4aac0eb50b76c14162d45774&pst=1669582533&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tallysaturatesnare.com/watch.1271368736782?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
Cookie: u_pl=17676348,17676383; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNzY3NjM4MywiayI6ImY0MTI3YWQ4ZTg2MjM5NjU5MmQyMzUxMGMxNzI0NTkwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxOTg0NDA1LCJwaWQiOjU0NDE2MSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozLCJhaWQiOjUsInB0Ijo0LCJwayI6Imc3eno5eDEwIiwidCI6MX0sInUiOnsidSI6MiwiYXUiOjEsImQiOnsiaWQiOjkwNzUzNDU3LCJpZHMiOiIiLCJpYyI6ZmFsc2UsIm4iOiJEZXNrdG9wLEVtdWxhdG9yIiwidiI6IlVua25vd24iLCJtIjoiVW5rbm93biIsImYiOjEsImZuIjoiRGVza3RvcCIsIm9pZCI6Mzg5MTQsIm9uIjoiV2luZG93cyIsIm92IjoiMTAuMCIsImJpZCI6MTIwNjI1LCJibiI6IkZpcmVmb3giLCJidiI6IjEwNS4wIiwid3YiOmZhbHNlLCJlIjp0cnVlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vd3d3LmV4dHJhLW5ld3MubmV0LyJ9fQ.u1UF6TVwNBGEdrmGPeOvmwcJSrOtKfwQwi_yvqqnhA8; uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; iprcd7144e5b4bce15cfec7fc7e8732a6065=2717343; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net/
Access-Control-Allow-Origin: https://www.extra-news.net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:33 GMT; secure; SameSite=None
uncs=2; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 28 Nov 2022 20:54:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5f73863529f5dfb0e58056663805f36b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/bi/0a/1c/ce/0a1cced3ed0e98853e83717e2963bb34/1644706187.jpg
200 OK 107 kB URL HTTP/2 cdn.cloudimagesb.com/bi/0a/1c/ce/0a1cced3ed0e98853e83717e2963bb34/1644706187.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:02:08 18:22:33], baseline, precision 8, 300x250, components 3\012- data
Size 107 kB (107320 bytes)
Hash 8d392f102a1d4d780475a90166dcb94b
050b9b0036221313f990e17c75786bdf919d3089
7a728448c50242bffcb5b1e05903523173f7d7d33878ea9c769fdbbc11a9b24b
GET /bi/0a/1c/ce/0a1cced3ed0e98853e83717e2963bb34/1644706187.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://tallysaturatesnare.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:33 GMT
content-type: image/jpeg
content-length: 107320
server: nginx/1.17.6
last-modified: Sat, 12 Feb 2022 22:49:55 GMT
etag: "62083993-1a338"
expires: Tue, 29 Nov 2022 20:54:33 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 110fe5160840681a476d93793f7942c0
f80a103ed642d0db8c008939d7bfc2621681747b
ded9668d16fdba5a785700ae8d8427758811695525d05419914b5e0fbdf8df7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DED9668D16FDBA5A785700AE8D8427758811695525D05419914B5E0FBDF8DF7E"
Last-Modified: Sat, 26 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=423
Expires: Sun, 27 Nov 2022 21:01:36 GMT
Date: Sun, 27 Nov 2022 20:54:33 GMT
Connection: keep-alive
soldierreproduceadmiration.com/watch.999455388514?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 soldierreproduceadmiration.com/watch.999455388514?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (417)
Hash b9bb1d8d49740b863ebe9b58194e83cf
fc5d8bb1bc096989d3bd1df43d057b9fedf5ff5e
6882421f94765e86bc93c4b49050c28e2163fd3454750e8979c0776d9571405b
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.999455388514?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Cookie: u_pl=17676383; ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.5SWwi4qLHHb-wr19BLyjAamcpcffLWD4YMiAsVgZzJs; expires=Sun, 27 Nov 2022 20:55:33 GMT; secure; SameSite=None
uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:33 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 96229571c9525ea28f65cb11ce7c8647
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
parkingridiculous.com/watch.1086472462057?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 parkingridiculous.com/watch.1086472462057?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (417)
Hash d64ab57c2d184e1d139e7c421a876ebe
e6d8ad9e5fb934061889ba552291b254db7978e3
5518bc4a089a72376296e535194d56d342d68d8391635465fa03433884f8107a
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1086472462057?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: parkingridiculous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17676383; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; expires=Sun, 27 Nov 2022 20:55:34 GMT; secure; SameSite=None
uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 93986f87aa1b937fbd2703462e92877a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
integrityprinciplesthorough.com/watch.1352848139770?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 integrityprinciplesthorough.com/watch.1352848139770?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (417)
Hash 545ac9fd90e6fe9ae8f36b1c53ec6f29
6804b60e8df6d8ac919c2ec819baaba9ad1a05be
2feb5422cf23867f971140d8c8ff5db234cb7f2983848aa52ca089f5f853a7fa
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1352848139770?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: integrityprinciplesthorough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17676383; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; expires=Sun, 27 Nov 2022 20:55:34 GMT; secure; SameSite=None
uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8d17c3f07d5e1669e4f6584d5fd47967
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1f6b302933d460ab447356556838501c
00d2123ec7f0ef5bf0d648bf4d15e69cd9902f4e
8240f397607869e239c216ca93f78f84e25299c0ad4e7483b2bd53f7861142f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8240F397607869E239C216CA93F78F84E25299C0AD4E7483B2BD53F7861142F0"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7234
Expires: Sun, 27 Nov 2022 22:55:08 GMT
Date: Sun, 27 Nov 2022 20:54:34 GMT
Connection: keep-alive
wastedinvaluable.com/watch.779893905480?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
200 OK 1.2 kB URL HTTP/1.1 wastedinvaluable.com/watch.779893905480?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
IP
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (417)
Hash 83bf0970c940cc475aab92c5894661a3
88e289966f2e4511cda4b1a33fa19425331706fd
a0841b4db375d89b36754d34823c90e3098ed7d78a889b84322e49439c928fe9
GET /watch.779893905480?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=17676383; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; expires=Sun, 27 Nov 2022 20:55:34 GMT; secure; SameSite=None
uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7625f3da7c49bb395ea5457e53e8c882
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
soldierreproduceadmiration.com/watch.999455388514?shu=232c5758b0b9eada4d75d85ee0727001486b6727b2987e0011773b4a26bdfc19fa29cd63c2d0c7f474bc6ec8546e47bd66104806e890b1ef80890d3a830cda872c9d7dbd0f837d959cc4d24898425b5e887719c8fc81f4af0899716cc9f5f6&pst=1669582533&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D
200 OK 1.8 kB URL HTTP/1.1 soldierreproduceadmiration.com/watch.999455388514?shu=232c5758b0b9eada4d75d85ee0727001486b6727b2987e0011773b4a26bdfc19fa29cd63c2d0c7f474bc6ec8546e47bd66104806e890b1ef80890d3a830cda872c9d7dbd0f837d959cc4d24898425b5e887719c8fc81f4af0899716cc9f5f6&pst=1669582533&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2559)
Hash 6e5619c0a362c3ac26ebec959347088a
422a3d8800db07717502e6201d9f8210c943ed6f
25f0209adaa096a0fda5e105b5a4d56dcf549478e36ec931b90bb6e4e12b7832
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.999455388514?shu=232c5758b0b9eada4d75d85ee0727001486b6727b2987e0011773b4a26bdfc19fa29cd63c2d0c7f474bc6ec8546e47bd66104806e890b1ef80890d3a830cda872c9d7dbd0f837d959cc4d24898425b5e887719c8fc81f4af0899716cc9f5f6&pst=1669582533&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D HTTP/1.1
Host: soldierreproduceadmiration.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soldierreproduceadmiration.com/watch.999455388514?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
Cookie: u_pl=17676383; ain=eyJhbGciOiJIUzI1NiJ9.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.5SWwi4qLHHb-wr19BLyjAamcpcffLWD4YMiAsVgZzJs; uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net/
Access-Control-Allow-Origin: https://www.extra-news.net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 440c64aca70e84e6a91b4e47ff024558
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/bi/37/9e/02/379e020ebae4723959b41c13a914a506/1659524633.jpg
200 OK 22 kB URL HTTP/2 cdn.cloudimagesb.com/bi/37/9e/02/379e020ebae4723959b41c13a914a506/1659524633.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 48437a3063405aad4f0f3c53c0aa2575
ec531ad70ab8fd520edb8f96a6df666ff537957d
0c797c51a2584979dc87681b44688870f27b040c7dbe10acef419548c517f999
GET /bi/37/9e/02/379e020ebae4723959b41c13a914a506/1659524633.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soldierreproduceadmiration.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:34 GMT
content-type: image/jpeg
content-length: 21582
server: nginx/1.17.6
last-modified: Wed, 03 Aug 2022 11:04:01 GMT
etag: "62ea5621-544e"
expires: Tue, 29 Nov 2022 20:54:34 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
parkingridiculous.com/watch.1086472462057?shu=aefd1426620c8dde1f7b46d74cd0bcf3c55d4d2c828210775cdfa78347abdfd3f47801d4e9b2381e90a76b116b67d0472a649535d05a7e13e774c175d281e1f59160473cdd171127ef4d7577b7c9a15bb679bc9514e5b05500d02a528c0018&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055
200 OK 1.8 kB URL HTTP/1.1 parkingridiculous.com/watch.1086472462057?shu=aefd1426620c8dde1f7b46d74cd0bcf3c55d4d2c828210775cdfa78347abdfd3f47801d4e9b2381e90a76b116b67d0472a649535d05a7e13e774c175d281e1f59160473cdd171127ef4d7577b7c9a15bb679bc9514e5b05500d02a528c0018&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2538)
Hash f2e3a575245b9b7cd753bf57bce4318e
c7102297a14a1d0d146375d5faa802c31f6deffd
a0bdc8ac932ac439dac8da7fc0b8660de901da704a440a03753f5847a145fbe6
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1086472462057?shu=aefd1426620c8dde1f7b46d74cd0bcf3c55d4d2c828210775cdfa78347abdfd3f47801d4e9b2381e90a76b116b67d0472a649535d05a7e13e774c175d281e1f59160473cdd171127ef4d7577b7c9a15bb679bc9514e5b05500d02a528c0018&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055 HTTP/1.1
Host: parkingridiculous.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://parkingridiculous.com/watch.1086472462057?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
Cookie: u_pl=17676383; ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net/
Access-Control-Allow-Origin: https://www.extra-news.net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 64fb05c78594878d9cb08e46e6f52b31
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
wastedinvaluable.com/watch.779893905480?shu=4734ee5c855b654360d037f76c70560a2b20b12ed950d75882e6ac4dd2fca1f6dd8e89f93693b41e978a8722d63f050aa69210140488c1017332e4c033ad2738fec2ec702c060c09c8843709f9d6e6f9e304e8ace84c045e9fc8d0f7afd221c09b&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D
200 OK 1.8 kB URL HTTP/1.1 wastedinvaluable.com/watch.779893905480?shu=4734ee5c855b654360d037f76c70560a2b20b12ed950d75882e6ac4dd2fca1f6dd8e89f93693b41e978a8722d63f050aa69210140488c1017332e4c033ad2738fec2ec702c060c09c8843709f9d6e6f9e304e8ace84c045e9fc8d0f7afd221c09b&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2522)
Hash e127f9ae7f0f255350fbfd15b3616554
84009da062afd7d4c49c29d061556fd65015ec43
3636a1f3527fedde5bb7e9d995d37b7c5f5c036c80d101dd26559318c5464ae7
GET /watch.779893905480?shu=4734ee5c855b654360d037f76c70560a2b20b12ed950d75882e6ac4dd2fca1f6dd8e89f93693b41e978a8722d63f050aa69210140488c1017332e4c033ad2738fec2ec702c060c09c8843709f9d6e6f9e304e8ace84c045e9fc8d0f7afd221c09b&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wastedinvaluable.com/watch.779893905480?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
Cookie: u_pl=17676383; ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net/
Access-Control-Allow-Origin: https://www.extra-news.net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 3149b9aa5c7e487b0c45cf90551fa4ea
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
integrityprinciplesthorough.com/watch.1352848139770?shu=bc727a920f1bf3f81ae98d34f4a92318b88dae5b3509317cbc4cc39c108aa392541be933cc89ef46f3b0dcf0d47707371d10d9a999ac983f0b81a45030fb54d8177acf876c4a3e374d2eef8a66f31e8e18a895a7&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055
200 OK 1.8 kB URL HTTP/1.1 integrityprinciplesthorough.com/watch.1352848139770?shu=bc727a920f1bf3f81ae98d34f4a92318b88dae5b3509317cbc4cc39c108aa392541be933cc89ef46f3b0dcf0d47707371d10d9a999ac983f0b81a45030fb54d8177acf876c4a3e374d2eef8a66f31e8e18a895a7&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2569)
Hash bbe81b5f785bf97c1429b3e488e7e5ae
c4a8f08d5117e058c37fc16754a3201b3c691e59
8069d943cb2c6c07a2e669e999f0a83e06a537249e8e7ead2471bcf019ec421f
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1352848139770?shu=bc727a920f1bf3f81ae98d34f4a92318b88dae5b3509317cbc4cc39c108aa392541be933cc89ef46f3b0dcf0d47707371d10d9a999ac983f0b81a45030fb54d8177acf876c4a3e374d2eef8a66f31e8e18a895a7&pst=1669582534&rmtc=t&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1&pii=&in=false&key=f4127ad8e862396592d23510c1724590&refer=https%3A%2F%2Fwww.extra-news.net%2F&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&tz=0&dev=e&res=12.1055 HTTP/1.1
Host: integrityprinciplesthorough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://integrityprinciplesthorough.com/watch.1352848139770?key=f4127ad8e862396592d23510c1724590&kw=%5B%22%D8%A5%D9%83%D8%B3%D8%AA%D8%B1%D8%A7%22%2C%22%D9%86%D9%8A%D9%88%D8%B2%22%5D&refer=https%3A%2F%2Fwww.extra-news.net%2F&tz=0&dev=e&res=12.1055&uuid=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56%3A3%3A1
Cookie: u_pl=17676383; ain=eyJhbGciOiJIUzI1NiJ9.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.SyHeZVcVig5_TuvOTMUwfoDQuy7ilQ79cLKeVWSRJ_c; uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.extra-news.net/
Access-Control-Allow-Origin: https://www.extra-news.net/
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=adebaf79-e3f7-4ff7-aaca-3a5371b9fa56:3:1; expires=Sun, 04 Dec 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 28 Nov 2022 20:54:34 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 84871e1ce0476e18e7b311b4e3081f39
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/bi/18/bb/b5/18bbb50b382526df3bcfb932c15f47f6/1612449644.jpg
200 OK 111 kB URL HTTP/2 cdn.cloudimagesb.com/bi/18/bb/b5/18bbb50b382526df3bcfb932c15f47f6/1612449644.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:02:01 16:26:38], baseline, precision 8, 300x250, components 3\012- data
Size 111 kB (110638 bytes)
Hash 873834f00d1ad2e9bf26411bf4ed6706
c3b6d800f39b465a3c96d3b5d24758638ce583b4
d02a3a0073612fefa9acf55872c2056e98c0cb4fbe838595db86532a6fcc2700
GET /bi/18/bb/b5/18bbb50b382526df3bcfb932c15f47f6/1612449644.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://parkingridiculous.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:34 GMT
content-type: image/jpeg
content-length: 110638
server: nginx/1.17.6
last-modified: Thu, 04 Feb 2021 14:40:53 GMT
etag: "601c0775-1b02e"
expires: Tue, 29 Nov 2022 20:54:34 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17676383
200 OK 1.2 kB URL HTTP/1.1 www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17676383
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 078e0383f822eba30dec070deb2d10fd
d415f5458436174343fa07a011f6f2a69efe2375
8829e8b80772b002aa87009dbd226cd81970d86379c561e7d12ca32671c66c73
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17676383 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.extra-news.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122660; expires=Mon, 28 Nov 2022 20:54:34 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.V2iZZ_8_sW3rvYklDNHS53L3xXN9eCh9byA3de7nBfc; expires=Sun, 27 Nov 2022 20:55:34 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c243b45936f44dc21401e70799b1d405
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/bi/bc/a5/a1/bca5a1c01a8ce60f4d07239666f9c756/1643022440.gif
200 OK 150 kB URL HTTP/2 cdn.cloudimagesb.com/bi/bc/a5/a1/bca5a1c01a8ce60f4d07239666f9c756/1643022440.gif
IP
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 300 x 250\012- data
Size 150 kB (150431 bytes)
Hash 06e644293c684b0c43c137a636ecb42b
8f66d1ccb30b4d099fea5248dd9c5c373300b4a8
671a487c9e23f0bdc79d0d83792108eedc8fc54d3fbec2a15590457a9d4c694a
GET /bi/bc/a5/a1/bca5a1c01a8ce60f4d07239666f9c756/1643022440.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://wastedinvaluable.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:34 GMT
content-type: image/gif
content-length: 150431
server: nginx/1.17.6
last-modified: Mon, 24 Jan 2022 11:07:28 GMT
etag: "61ee8870-24b9f"
expires: Tue, 29 Nov 2022 20:54:34 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/bi/b4/d3/27/b4d3271ffacbc201d8b5ff97e56fa8e3/1668777185.jpg
200 OK 22 kB URL HTTP/2 cdn.cloudimagesb.com/bi/b4/d3/27/b4d3271ffacbc201d8b5ff97e56fa8e3/1668777185.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3\012- data
Hash 7060c5239bd72f25fa760992837817ed
b1d45e5d2e637f2a1fe14e3bf8e621c611ce3d85
d72504cef745a2023bf47a63d7fad0b308fb625352bf7fb297b60e4ee89aee37
GET /bi/b4/d3/27/b4d3271ffacbc201d8b5ff97e56fa8e3/1668777185.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://integrityprinciplesthorough.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:34 GMT
content-type: image/jpeg
content-length: 21993
server: nginx/1.17.6
last-modified: Fri, 18 Nov 2022 13:13:13 GMT
etag: "637784e9-55e9"
expires: Tue, 29 Nov 2022 20:54:34 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.spikereekvelocity.com/dyfc1k09?shu=1576d45bfea09fcdc10d2a3682091e3bdd192e49231db48b65a545811e09d7f7d7981d08d255375cd0c21ca22e2fe8816745afb847b21dd9a89167e34d492faa7ba5b2feb7f56fa858e3069f553ed11df43c1d1b&pst=1669582534&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.extra-news.net%2F&psid=17676383
302 Found 0 B URL HTTP/1.1 www.spikereekvelocity.com/dyfc1k09?shu=1576d45bfea09fcdc10d2a3682091e3bdd192e49231db48b65a545811e09d7f7d7981d08d255375cd0c21ca22e2fe8816745afb847b21dd9a89167e34d492faa7ba5b2feb7f56fa858e3069f553ed11df43c1d1b&pst=1669582534&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.extra-news.net%2F&psid=17676383
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?shu=1576d45bfea09fcdc10d2a3682091e3bdd192e49231db48b65a545811e09d7f7d7981d08d255375cd0c21ca22e2fe8816745afb847b21dd9a89167e34d492faa7ba5b2feb7f56fa858e3069f553ed11df43c1d1b&pst=1669582534&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.extra-news.net%2F&psid=17676383 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spikereekvelocity.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; ain=eyJhbGciOiJIUzI1NiJ9.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.V2iZZ_8_sW3rvYklDNHS53L3xXN9eCh9byA3de7nBfc; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.17.6
Date: Sun, 27 Nov 2022 20:54:34 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://spo76rt28r.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=18ddd2a1019fd4a06491c21a3ae0883f&COST_CPA=0.700000&PLACEMENT_ID=16122660&BANNER_ID=2033306&COUNTRY_CODE=NO&IAB_CATEGORY=IAB24&BROWSER_NAME=Firefox&USER_OS=Windows&PUBLISHER_ID=97299&ZONE_ID=146415&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Other
Set-Cookie: iprc7267b083f1c48108b740e5b4fc1686da=3806410; expires=Mon, 28 Nov 2022 20:54:34 GMT
pdhtkv=true; expires=Mon, 28 Nov 2022 20:54:34 GMT
uncs=1; expires=Mon, 28 Nov 2022 20:54:34 GMT
pdhtkv28=true; expires=Mon, 28 Nov 2022 20:54:34 GMT
uncs28=1; expires=Mon, 28 Nov 2022 20:54:34 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: be67f67cefad409ec69e6cd8d06e76f5
Strict-Transport-Security: max-age=0; includeSubdomains
spo76rt28r.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=18ddd2a1019fd4a06491c21a3ae0883f&COST_CPA=0.700000&PLACEMENT_ID=16122660&BANNER_ID=2033306&COUNTRY_CODE=NO&IAB_CATEGORY=IAB24&BROWSER_NAME=Firefox&USER_OS=Windows&PUBLISHER_ID=97299&ZONE_ID=146415&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Other
302 Found 0 B URL HTTP/1.1 spo76rt28r.com/news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=18ddd2a1019fd4a06491c21a3ae0883f&COST_CPA=0.700000&PLACEMENT_ID=16122660&BANNER_ID=2033306&COUNTRY_CODE=NO&IAB_CATEGORY=IAB24&BROWSER_NAME=Firefox&USER_OS=Windows&PUBLISHER_ID=97299&ZONE_ID=146415&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Other
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /news.php?key=ra60tm42lesurp8cpy3o&SUB_ID_SHORT(action)=18ddd2a1019fd4a06491c21a3ae0883f&COST_CPA=0.700000&PLACEMENT_ID=16122660&BANNER_ID=2033306&COUNTRY_CODE=NO&IAB_CATEGORY=IAB24&BROWSER_NAME=Firefox&USER_OS=Windows&PUBLISHER_ID=97299&ZONE_ID=146415&USER_CARRIER=Blix%20Solutions&CATEGORY_ALIAS=Other HTTP/1.1
Host: spo76rt28r.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx/1.22.0
Date: Sun, 27 Nov 2022 20:54:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=h9hevckt8n; expires=Mon, 28-Nov-2022 20:54:35 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=h9hevckt8n-h9hevckt8n-17dz-166o-ir8n-bza7-oje8-bb20c4; expires=Mon, 28-Nov-2022 20:54:35 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://bo2217ok3tro9.com/1/?lpkey=16c86997582927ae75&uclick=h9hevckt8n&uclickhash=h9hevckt8n-h9hevckt8n-17dz-166o-ir8n-bza7-oje8-bb20c4
Strict-Transport-Security: max-age=31536000
bo2217ok3tro9.com/1/?lpkey=16c86997582927ae75&uclick=h9hevckt8n&uclickhash=h9hevckt8n-h9hevckt8n-17dz-166o-ir8n-bza7-oje8-bb20c4
200 OK 1.4 kB URL HTTP/1.1 bo2217ok3tro9.com/1/?lpkey=16c86997582927ae75&uclick=h9hevckt8n&uclickhash=h9hevckt8n-h9hevckt8n-17dz-166o-ir8n-bza7-oje8-bb20c4
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 0bbb113ff85b78b6485a9783946e6948
8663005f0ad88c2a768937edb56177387103594d
70c7e9fa94eb5b8fb5b61e0ee25167ace062bea13773331f7d02814822fbf004
GET /1/?lpkey=16c86997582927ae75&uclick=h9hevckt8n&uclickhash=h9hevckt8n-h9hevckt8n-17dz-166o-ir8n-bza7-oje8-bb20c4 HTTP/1.1
Host: bo2217ok3tro9.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.spikereekvelocity.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Sun, 27 Nov 2022 20:54:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 278 B IP
Hash efb85bdb2274abf336f4748eeb5d6bdc
6810b0f697c246d93648d569172e234376f3c2fe
f8af0676272c238c5eb8e2a65d932d5f5e8eebea3069c443da5edecbd114951b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2398
Cache-Control: max-age=153623
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:35 GMT
Etag: "63837a44-116"
Expires: Tue, 29 Nov 2022 15:34:58 GMT
Last-Modified: Sun, 27 Nov 2022 14:55:00 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f6cc8d3fe9092a6d3901e873a87fd87
2e0aac117a4cc57596efb3d6f6624c269f94b031
e73982e62b92abac3d15b161f4525448cc2bc8b9bacefdcbfc6f87b74ec372e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 1309ff133720d219cc98090d66a051ed
b96fc5a893e42be16d687d7abdecdb13d348a019
358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bo2217ok3tro9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sun, 27 Nov 2022 20:54:35 GMT
date: Sun, 27 Nov 2022 20:54:35 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 88e42375d2172305f819b892225cf877
674324641f82700172e72fe259ee2241361e2ea1
6dce3754a67df878b536c368657a492a1f908d408fe7fe5ba43c5d24c44434b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-547JG5H
200 OK 39 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-547JG5H
IP
File type ASCII text, with very long lines (1921)
Hash 7da50b3d7ad0282f9fd1b4a28e6ad7f8
e1a19d659fb77b0a18621462aeefeccfc67d0315
93551feeb548667d9373d5479c63caecf48388b351c1c8195a3a27c53d01cb64
GET /gtm.js?id=GTM-547JG5H HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bo2217ok3tro9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 27 Nov 2022 20:54:35 GMT
expires: Sun, 27 Nov 2022 20:54:35 GMT
cache-control: private, max-age=900
last-modified: Sun, 27 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 38600
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
unpkg.com/axios/dist/axios.min.js
302 Found 61 kB URL HTTP/2 unpkg.com/axios/dist/axios.min.js
IP
Hash d23621f9a210c3066e4dba5faee20393
0a4bc721a4da41ef72fb55f441d8256a2ac8ea94
4314296af3fa545d9a6dce5c0e2ee8d9fc2f5075baa6719c589ff19344251a3b
GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bo2217ok3tro9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 20:54:35 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.2.0/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01GJXDMWF2JVJPJXQCDXNPNJR5-ams
cf-cache-status: HIT
age: 286
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 770dc28888b2b4ed-OSL
X-Firefox-Spdy: h2
unpkg.com/axios@1.2.0/dist/axios.min.js
200 OK 11 kB URL HTTP/2 unpkg.com/axios@1.2.0/dist/axios.min.js
IP
File type ASCII text, with very long lines (29551)
Hash 28a7cc1b8cdf8ee15395471b3bbbe3f5
62671890e0a4fe1c9138f5560e25f23596199244
ebb92df782099d2a45d199844c3193a2503aaffb44388494054a61f1d3ca8b8d
GET /axios@1.2.0/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bo2217ok3tro9.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:35 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"7396-Wc6sdIzlj1RsovoMRKQah8UZFhA"
via: 1.1 fly.io
fly-request-id: 01GJGC0D1SRCGJTEVMAF435H8Z-ams
cf-cache-status: HIT
age: 438213
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 770dc288b90bb4ed-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e9895464b828d538dc654c678c82b181
af5791cd48761cb3f3f979b481c23e1508692823
c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 20:54:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bo2217ok3tro9.com
Connection: keep-alive
Referer: https://bo2217ok3tro9.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:26:04 GMT
expires: Sun, 26 Nov 2023 21:26:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 84511
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 116558
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1db6041a0bdb2319ae85afcc30caaeec
3b0ec6a7188dadf986f72fda8110296d9abd6f35
05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 13049
x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cBsvpHDJoAMFhFQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 01:46:48 GMT
age: 68871
etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png
200 OK 0 B URL HTTP/2 cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png
IP
ASN #39572 DataWeb Global Group B.V.
GET /cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 20:54:33 GMT
content-type: image/png
content-length: 105910
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:08:06 GMT
etag: "62e11c96-19db6"
expires: Tue, 29 Nov 2022 20:54:33 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
172.217.21.179
78.46.92.254
104.17.25.14
151.101.85.229
23.36.76.226
93.184.220.29