| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/play.png |  172.67.179.151 | 200 OK | 1.8 kB |
URL GET HTTP/3app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/play.png IP172.67.179.151:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typePNG image data, 128 x 128, 8-bit colormap, non-interlaced Hashb34c72ae523f9f37c9c074a5e8a9b0cd 603143d888393b29fdaae472a018ed23df4a1681 677b5f582f8ca5488f3ccbf009c9144289084b3b45c730f0d15ec6241aa1c3ad
GET /preland/video_app/adult/default/app-store-downloading/1/assets/play.png HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 25 Oct 2024 00:26:48 GMT
content-type: image/png
content-length: 1801
last-modified: Fri, 23 Aug 2024 14:03:39 GMT
etag: "66c896bb-709"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 557361
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qe7G%2FyVnc7qKE5dY0w894NCEco8f97QkVeg4LRbgli3YrH9QbQ7f1O4IHtKcOQowO5aS1G7SeHueKh9kaucmWXAjRqrp7HqAR2mXsjyLoy2Z6bGiJHp42k5jxuzNwoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d7e13c2bb2156c7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=29250&sent=24&recv=9&lost=0&retrans=0&sent_bytes=16123&recv_bytes=2774&delivery_rate=21039&cwnd=12000&unsent_bytes=0&cid=990449647e7a243f&ts=301&x=1", cfExtPri, cfHdrFlush;dur=17
|
|
| loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/style.css |  185.246.188.125 | 200 OK | 1.0 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/style.css IP185.246.188.125:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerLet's Encrypt Subjectloadingscripts.com Fingerprint3B:F4:90:A2:E3:9C:3B:64:90:0B:3F:CC:AA:18:65:A1:2D:A1:E9:39 ValidityMon, 21 Oct 2024 08:50:45 GMT - Sun, 19 Jan 2025 08:50:44 GMT
File typeASCII text, with CRLF line terminators Hashe15ec06a82bc1cb4a15fb76f6047c327 643b026c541da85c101aa6be06207b7cda5dc54f 7dcbd11df78d25958d03d1d847e7c5c13c7b2a723f5d163fb23ea8970ebc8e11
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /progress_p/pwa_links/adult/dating/msngr_1/2/style.css HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Fri, 25 Oct 2024 00:26:48 GMT
Content-Type: text/css
Last-Modified: Fri, 26 Jul 2024 11:31:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=10
ETag: W/"66a38929-e81"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js | 185.246.188.125 | 200 OK | 2.8 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/default_scripts/notification.js IP185.246.188.125:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerLet's Encrypt Subjectloadingscripts.com Fingerprint3B:F4:90:A2:E3:9C:3B:64:90:0B:3F:CC:AA:18:65:A1:2D:A1:E9:39 ValidityMon, 21 Oct 2024 08:50:45 GMT - Sun, 19 Jan 2025 08:50:44 GMT
File typeJavaScript source, ASCII text, with very long lines (2801), with no line terminators Hash01a2c61eb40ce8e341a0801f78da7735 1cb39b0674bc20c3208c16c53c131e74704759ed 03d593cbf7b72d3c70caedac0c0259330ce8b1a45b708e92e3f19245b6ca9929
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /progress_p/pwa_links/default_scripts/notification.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Fri, 25 Oct 2024 00:26:48 GMT
Content-Type: application/javascript
Content-Length: 2801
Last-Modified: Fri, 24 Mar 2023 17:31:52 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "641dde88-af1"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/pwa_custom.js | 185.246.188.125 | 200 OK | 1.2 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/pwa_custom.js IP185.246.188.125:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerLet's Encrypt Subjectloadingscripts.com Fingerprint3B:F4:90:A2:E3:9C:3B:64:90:0B:3F:CC:AA:18:65:A1:2D:A1:E9:39 ValidityMon, 21 Oct 2024 08:50:45 GMT - Sun, 19 Jan 2025 08:50:44 GMT
Hash036b519744fb8fe2c2bc4becaad36cc3 fbb8a756036b6714e8fae452e04e48188f21ce5b ee085a37ce405b8e86cb31fd2e11e447a8c1bcf3c85f5e0bf18bf4107cb26957
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /progress_p/pwa_links/adult/dating/msngr_1/2/pwa_custom.js HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Fri, 25 Oct 2024 00:26:48 GMT
Content-Type: application/javascript
Content-Length: 1223
Last-Modified: Fri, 26 Jul 2024 11:15:17 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "66a38545-4c7"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/bell.jpg | 172.67.179.151 | 200 OK | 13 kB |
URL GET HTTP/3app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/bell.jpg IP172.67.179.151:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 630x630, components 3 Hash776d4438b3775fa80e841cd4f5ab1b50 fd93fff4af4da7009bb55deeb17b0b0d61430b33 d7897770384d25bb90905a1f9946ff6e6ecec54ba84ef170da4b357e8e16ca7b
GET /preland/video_app/adult/default/app-store-downloading/1/assets/bell.jpg HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 25 Oct 2024 00:26:48 GMT
content-type: image/jpeg
content-length: 12706
last-modified: Fri, 23 Aug 2024 14:03:37 GMT
etag: "66c896b9-31a2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cUHzzNlZqpN4YbRM7IhColiH1OruM24b4T0PxGwwWNMTLMPij6EZASjvuogzomwSGgNSJ6KtR0YC4KSgOqszyor3Cv4zbpr04ZKhutD9%2Ffmcr8iyuYelQIt7quYQSZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d7e13c2bb1f56c7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=31354&sent=47&recv=11&lost=0&retrans=0&sent_bytes=42379&recv_bytes=2861&delivery_rate=494680&cwnd=24000&unsent_bytes=0&cid=990449647e7a243f&ts=761&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/bg.jpeg | 172.67.179.151 | 200 OK | 82 kB |
URL GET HTTP/3app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/bg.jpeg IP172.67.179.151:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 653x1280, components 3 Hashdbce8d0a18f36fbaef12ee90afa4b02d 5986ef398576b395a3e41841b24ee4b852aec6e1 4e284d7f92548fcc96eaf54c246b37f1ee233516ccdef3a0bb4aee76ec785e44
GET /preland/video_app/adult/default/app-store-downloading/1/assets/bg.jpeg HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 25 Oct 2024 00:26:48 GMT
content-type: image/jpeg
content-length: 81950
last-modified: Fri, 23 Aug 2024 14:03:39 GMT
etag: "66c896bb-1401e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 557361
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OhuFhk1f3qGzpW4PFkEKjVy6ij%2BIa%2BLMBz4vS2amhzfwn4qaoEPneG9q%2BcMoS%2B5bf6PKHQS4rNrTyjlg7OSBS8FvkYh2lP5vSZphOJarOXph3IK8FPzW2HmjxxqmDlQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d7e13c65d9a56c7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=30956&sent=60&recv=14&lost=0&retrans=0&sent_bytes=56128&recv_bytes=3308&delivery_rate=651874&cwnd=24000&unsent_bytes=0&cid=990449647e7a243f&ts=885&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 | 142.250.74.99 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v29/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 IP142.250.74.99:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA7:6D:44:6D:0D:8C:29:A8:CF:9A:12:0B:7C:B9:A0:F9:B0:72:5E:E9 ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11048, version 1.0 Hash5faa30482946f6a7b0ea9ad17f162187 03dfd05533a89b5373ad63950356587b8dcaed9d eccc582a306d1166abf3880b2bfcdb1ed98df81cce0ede7b8b7f85dd9d4ec6b2
GET /s/roboto/v29/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app-lite.com
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11048
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Oct 2024 11:37:31 GMT
expires: Fri, 24 Oct 2025 11:37:31 GMT
cache-control: public, max-age=31536000
age: 46157
last-modified: Wed, 22 Sep 2021 16:13:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 | 142.250.74.99 | 200 OK | 11 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v29/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP142.250.74.99:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA7:6D:44:6D:0D:8C:29:A8:CF:9A:12:0B:7C:B9:A0:F9:B0:72:5E:E9 ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11032, version 1.0 Hash694af05c2fbef27a364c221536541df8 30e388d46ccf41084898bf5de7c23acb5a894d0f a986c26c40febdfac5074b57a925fe2d7b901e75b7bcad4a19a5cbe3987b51bf
GET /s/roboto/v29/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app-lite.com
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11032
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 18 Oct 2024 08:13:20 GMT
expires: Sat, 18 Oct 2025 08:13:20 GMT
cache-control: public, max-age=31536000
age: 576808
last-modified: Wed, 22 Sep 2021 16:13:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/style.css | 172.67.179.151 | 200 OK | 3.2 kB |
URL GET HTTP/3app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/style.css IP172.67.179.151:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typegzip compressed data, from Unix Hashd8f84e176da1e2b64a7b3650439639d6 32f787eb174aeb78fac010e141d2ce877abccb4a 914d5ecbf4d822562016f9e9d966683af4a9ea94f2e5f0e6f60f7bddbaae8368
GET /preland/video_app/adult/default/app-store-downloading/1/assets/style.css HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 25 Oct 2024 00:26:48 GMT
content-type: text/css
last-modified: Fri, 23 Aug 2024 14:03:39 GMT
etag: W/"66c896bb-59cb"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: EXPIRED
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nPKKlJsZBhwvimg%2Bfp2rc4PktP8%2Fbjx0nDB6X%2BJp6pu82z%2FxeWVzWDTnheNW8sLP3vpQfatfNp%2FwPM1ReiudjmZriWW7L3HQan9JrGlhv70AEe45VpOupWu3K1gEjgQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d7e13c2ab1956c7-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=31354&sent=44&recv=11&lost=0&retrans=0&sent_bytes=38851&recv_bytes=2861&delivery_rate=494680&cwnd=24000&unsent_bytes=0&cid=990449647e7a243f&ts=759&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/close.png | 185.246.188.125 | 200 OK | 13 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/close.png IP185.246.188.125:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerLet's Encrypt Subjectloadingscripts.com Fingerprint3B:F4:90:A2:E3:9C:3B:64:90:0B:3F:CC:AA:18:65:A1:2D:A1:E9:39 ValidityMon, 21 Oct 2024 08:50:45 GMT - Sun, 19 Jan 2025 08:50:44 GMT
File typePNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced Hash8e61cf3dccea6ab862bfb51e362a1516 967f3b30680bd39126eeeb3b3c131833cb89ca51 cead1002bb2a8ef60efc22804d0ef0596b9e19a7362d40cde2d5a3a7c6b83668
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /progress_p/pwa_links/adult/dating/msngr_1/2/close.png HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Fri, 25 Oct 2024 00:26:48 GMT
Content-Type: image/png
Content-Length: 12752
Last-Modified: Fri, 30 Jun 2023 10:57:11 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "649eb507-31d0"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 | 172.67.179.151 | 200 OK | 23 kB |
URL User Request GET HTTP/2app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 IP172.67.179.151:443
CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typeHTML document, Unicode text, UTF-8 text Hashe61495ea563155017edb457f97f64246 440db7228b6ad31728d008bc2f0b98090e504058 67e42168ce4033f021d8af1a1cf8e5c7f46dbcf14b574bf9f0247f9960a2973b
GET /preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 25 Oct 2024 00:26:47 GMT
content-type: text/html
last-modified: Fri, 23 Aug 2024 14:03:37 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nQwRCIY2zlBWd5LwPF0vVB28SID9fFHjpXtZtn%2FTUjD%2FB0QMkIEea1s7LRHgLJqA9QN7z55xT7Ze%2FV8JzB6u%2Fz9WiiUELWUgSSOcbOKI5P98hJk%2BqRezz4xEF9lAeV8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8d7e13bffd3e569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=22059&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3202&recv_bytes=1299&delivery_rate=235523&cwnd=249&unsent_bytes=0&cid=a24e7ee4a0bec9b3&ts=170&x=0"
X-Firefox-Spdy: h2
|
|
| loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/icon.gif | 185.246.188.125 | 200 OK | 428 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/icon.gif IP185.246.188.125:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerLet's Encrypt Subjectloadingscripts.com Fingerprint3B:F4:90:A2:E3:9C:3B:64:90:0B:3F:CC:AA:18:65:A1:2D:A1:E9:39 ValidityMon, 21 Oct 2024 08:50:45 GMT - Sun, 19 Jan 2025 08:50:44 GMT
File typeGIF image data, version 89a, 72 x 72 Size428 kB (428380 bytes) Hash56d34aedb3898c46f944bbd77586f253 fdfc709635e673ad42d1bea9a72c692b532b22b7 b7369c8ad07a60e14596bde65ac34ac4685b099b6123439c86c6d07ad1f20c4b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /progress_p/pwa_links/adult/dating/msngr_1/2/icon.gif HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Fri, 25 Oct 2024 00:26:48 GMT
Content-Type: image/gif
Content-Length: 428380
Last-Modified: Fri, 26 Jul 2024 10:54:02 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "66a3804a-6895c"
Accept-Ranges: bytes
|
|
| loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/adobe_flash_player.png | 185.246.188.125 | 200 OK | 251 kB |
URL GET HTTP/1.1loadingscripts.com/progress_p/pwa_links/adult/dating/msngr_1/2/adobe_flash_player.png IP185.246.188.125:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerLet's Encrypt Subjectloadingscripts.com Fingerprint3B:F4:90:A2:E3:9C:3B:64:90:0B:3F:CC:AA:18:65:A1:2D:A1:E9:39 ValidityMon, 21 Oct 2024 08:50:45 GMT - Sun, 19 Jan 2025 08:50:44 GMT
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced Size251 kB (251006 bytes) Hash10c2122f98764f5809c47d352dcaaf10 a51ded577583aeac7d1975015474c2dde1bbb497 dca3bc35213248abbf4a06299942b32b84d9abe308c57381a1eda93ff9526ab5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /progress_p/pwa_links/adult/dating/msngr_1/2/adobe_flash_player.png HTTP/1.1
Host: loadingscripts.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.23.4
Date: Fri, 25 Oct 2024 00:26:48 GMT
Content-Type: image/png
Content-Length: 251006
Last-Modified: Fri, 26 Jul 2024 10:59:29 GMT
Connection: keep-alive
Keep-Alive: timeout=10
ETag: "66a38191-3d47e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/favicon.ico | 172.67.179.151 | 200 OK | 4.3 kB |
URL GET HTTP/3app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/favicon.ico IP172.67.179.151:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashafc121b1cd96c74c098eaeb465143b92 ad828debdadb2d2895c1922d91294d8a7bd3ca3f e4befe258ea113860d4ddecc0869b746d4535b6a69eba3a5aaedc86d0e25a036
GET /preland/video_app/adult/default/app-store-downloading/1/assets/favicon.ico HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 25 Oct 2024 00:26:49 GMT
content-type: image/x-icon
last-modified: Fri, 23 Aug 2024 14:03:38 GMT
etag: W/"66c896ba-10be"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GWM4ZLkKEXuMvaPyXq2YocIIihCAD6KNQaehAGL4pZj3H4r%2FakcwuhtQnDjw2pZ3bkKhKdh0sMPcFPbMyRet76zRExfiNs2zshpWBoXRTWAH8laPTN7ZePZHw6JYrQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d7e13c93f6056c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=27201&sent=132&recv=19&lost=0&retrans=0&sent_bytes=140857&recv_bytes=3985&delivery_rate=676474&cwnd=90000&unsent_bytes=0&cid=990449647e7a243f&ts=1804&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 | 142.250.74.99 | 200 OK | 18 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 IP142.250.74.99:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subject*.gstatic.com FingerprintA7:6D:44:6D:0D:8C:29:A8:CF:9A:12:0B:7C:B9:A0:F9:B0:72:5E:E9 ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 18536, version 1.0 Hash8eff0b8045fd1959e117f85654ae7770 227fee13ceb7c410b5c0bb8000258b6643cb6255 89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571
GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://app-lite.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Oct 2024 11:37:11 GMT
expires: Fri, 24 Oct 2025 11:37:11 GMT
cache-control: public, max-age=31536000
age: 46177
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap | 142.250.74.106 | 200 OK | 7.2 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap IP142.250.74.106:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint04:E9:E7:03:97:99:66:D7:5B:E7:AE:2C:40:95:6F:E2:07:A3:7D:6C ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT
File typeASCII text, with very long lines (7364), with no line terminators Hashe082b2c49137015642f9e60e58c34f87 02ab175bf4bcab25a605a280bb2405ea233d3085 654f6d483488078da3ff22c940040ea8a603172ff7d43d21a57b213976e06ec5
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 25 Oct 2024 00:26:48 GMT
date: Fri, 25 Oct 2024 00:26:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/jquery.min.js | 172.67.179.151 | 200 OK | 84 kB |
URL GET HTTP/3app-lite.com/preland/video_app/adult/default/app-store-downloading/1/assets/jquery.min.js IP172.67.179.151:443
Requested byhttps://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221 CertificateIssuerGoogle Trust Services Subjectapp-lite.com Fingerprint19:F6:25:F1:25:B7:8B:3D:78:9F:2A:2C:EF:42:8A:C5:FA:0C:52:0A ValiditySat, 21 Sep 2024 13:42:01 GMT - Fri, 20 Dec 2024 13:42:00 GMT
File typeJavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators Hash6326c600df01e3bfb9b40e1aa08176f8 6b4fb754d29b297b539bf62ba9b4eaf0f33f314a df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3
GET /preland/video_app/adult/default/app-store-downloading/1/assets/jquery.min.js HTTP/1.1
Host: app-lite.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://app-lite.com/preland/video_app/adult/default/app-store-downloading/1/index.html?c=6504&u=28&p1=https://krmnk.com/click?key=6049a003d4cd19423455&SUB_ID_SHORT=447493fa089a3a599da7c204178590a2&PLACEMENT_ID=24697553&COUNTRY=US&LAND_ID=6504&CAMPAIGN_ID=1089221
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 25 Oct 2024 00:26:48 GMT
content-type: application/javascript
last-modified: Fri, 23 Aug 2024 14:03:38 GMT
etag: W/"66c896ba-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 557361
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=66gInSsFFu%2FERBw8JsbB0l7qfrDKbMrlVGN%2BW0pekMgYdrjq7k5XN3ZGULmIn4HGB2thVBqqvz3ke6wPMCnjUJrL89R5022aIyT1zNcYUkv%2FjxI29I6RU3Kpz8IDVQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d7e13c2bb1b56c7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=29250&sent=14&recv=9&lost=0&retrans=0&sent_bytes=4123&recv_bytes=2774&delivery_rate=21039&cwnd=12000&unsent_bytes=0&cid=990449647e7a243f&ts=299&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
104.21.31.189