Report - lapskaus.xghl.info/48-707S040424/?u=14C707

Report Overview

Submitted URL
lapskaus.xghl.info/48-707S040424/?u=14C707
IP
104.21.3.32
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-05 05:42:37
Access
public
Website Title
Nagrody za ankietę
Final URL
lapskaus.xghl.info/48-707S040424/?u=14C707
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.by.wonderpush.com	34220	2014-03-25	2017-09-30	2024-05-04	799 B	95 kB	104.18.19.183
www.googletagmanager.com	75	2011-11-11	2013-05-22	2024-05-03	387 B	102 kB	142.250.74.168
natureviewer.in	unknown	2023-06-19	2023-06-19	2024-04-14	406 B	634 B	172.67.192.18
region1.analytics.google.com	unknown	1997-09-15	2022-03-17	2024-05-04	721 B	427 B	216.239.34.36
www.google.no	25607	2001-02-26	2016-04-05	2024-05-03	548 B	580 B	172.217.21.163
lapskaus.xghl.info	unknown	unknown	No data	No data	8.3 kB	2.3 MB	104.21.3.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	lapskaus.xghl.info/48-707S040424/?u=14C707	Allegro

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	lapskaus.xghl.info/48-707S040424/?u=14C707	558 B	2024-05-05	2024-05-05
Pretty URL lapskaus.xghl.info/48-707S040424/?u=14C707 IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-05-05 07:42:44 Last Seen2024-05-05 07:42:44 Times Seen1 Hash 05ad9e7f73138ef9b66f5f5967439ad4 fd3e73a684a445a8c5f7e57f27a8b5840418c1ee 81321838ca66857ef4851fcb861cbde2042358cd541a92656d9472ee85adc068 Loading...

	lapskaus.xghl.info/48-707S040424/?u=14C707	144 B	2023-04-26	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/?u=14C707 IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-26 20:30:02 Last Seen2024-05-14 08:58:41 Times Seen160 Hash 9865e082ce464be3e92b96e7240f9480 c0cb21290b77c70bb873d932ef5e8fc6d6ce70c3 cbacaccc01608e175df4cd24b8e10ab4f4e4b6708013b709250519be4b29affd Loading...

	lapskaus.xghl.info/48-707S040424/?u=14C707	26 B	2023-03-07	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/?u=14C707 IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:46:09 Last Seen2024-05-14 08:58:41 Times Seen71 Hash d42a9f800baa2a63373ad7d78aa5f510 681c589826cfd1ea27ac20de2fee24fea32f9969 021ad6aa9fc62ec7bbe7074d1c847f212404cb31671665b77f94be44488748b0 Loading...

	lapskaus.xghl.info/48-707S040424/all/all.js	1.2 MB	2023-03-07	2024-05-18
Pretty URL lapskaus.xghl.info/48-707S040424/all/all.js IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:31 Last Seen2024-05-18 02:04:22 Times Seen1415 Hash 5e29440867fdb02a48dffded02338c31 c8bfbbfca7eb327e2e98caf637d6de05e5ee737a 812ab0e46f86b2ce98ab2425ab2224b90d0845952a1ac0d5abd734b6217e98bf Loading...

	cdn.by.wonderpush.com/sdk/1.1/wonderpush-loader.min.js	1.8 kB	2024-04-26	2024-05-14
Pretty URL cdn.by.wonderpush.com/sdk/1.1/wonderpush-loader.min.js IP 104.18.19.183 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 00:16:21 Last Seen2024-05-14 08:58:41 Times Seen10 Hash 952ccf62101718da9fea97dd115efb0a ee1d230ffb718b9370d6a63ad2015ad332396df0 df579647037e29557eaae753e6340816d0470a97ea5e42f44835daa9567c9cd1 Loading...

	www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7	305 kB	2024-05-05	2024-05-05
Pretty URL www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-05 07:42:44 Last Seen2024-05-05 07:42:45 Times Seen2 Hash 8b81c0eb1828dff71c66558b39c35989 d73bd15a53ddd700c342aa8b996543aeffd51c2c 4a55e0e70e5c144e52b3a524809096861a115fb3c08f07639b3025f798733bba Loading...

	lapskaus.xghl.info/48-707S040424/all/datehead.js	2.6 kB	2024-04-05	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/all/datehead.js IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 17:38:35 Last Seen2024-05-14 08:58:41 Times Seen21 Hash 1e5d9d54d199f5b2a350bb97fd215d33 8dc3861884666c88b08de1afb6c2d94c10bcdc1d 9064d6859d4292cb5415b27630665043daedcbfa99102d73cd677866e26b669f Loading...

	cdn.by.wonderpush.com/sdk/1.1.33.37/wonderpush.min.js	384 kB	2024-04-26	2024-05-14
Pretty URL cdn.by.wonderpush.com/sdk/1.1.33.37/wonderpush.min.js IP 104.18.19.183 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 00:16:19 Last Seen2024-05-14 08:58:41 Times Seen10 Hash d4206e84e21183fcdae34b2e249235d3 a806f50aee8875711c35da68a892c773613424bf b34caf5af44f1cee73b1c7676e0d44219c0db4b91a142c56c8ce80e749de3703 Loading...

	lapskaus.xghl.info/48-707S040424/?u=14C707	27 B	2023-03-07	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/?u=14C707 IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:46:09 Last Seen2024-05-14 08:58:41 Times Seen69 Hash e3c80c56250053c8dfb8085f5461ece2 dd13620f3ed810338965cea31d5bc3301481e45b b4463ae373d7a8703d3377353adcb45ed9e7ccfd021a8287a1b77732d6107824 Loading...

	lapskaus.xghl.info/48-707S040424/?u=14C707	27 B	2023-03-29	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/?u=14C707 IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-29 21:48:44 Last Seen2024-05-14 08:58:41 Times Seen68 Hash fe17ee931a1bb21ace51bb32f845c508 1c9271b4c27d48e60202c32d31278f268b4008d3 67f10ee5b79bd73d81a1fd0a21f0a3e4780bb8f768f9832a6bebf55b00a2bb12 Loading...

	lapskaus.xghl.info/48-707S040424/all/script.js	7.2 kB	2024-04-05	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/all/script.js IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-05 17:38:35 Last Seen2024-05-14 08:58:41 Times Seen22 Hash 1baa2f14f4a489677288c3111a75ccf8 0544fb481bdb67d83eefb3427d091b57a2155af9 47ae4ac4bab3a472cb64f13f0d7c092ba62060299ec523ae01603c052646bdf0 Loading...

	lapskaus.xghl.info/48-707S040424/?u=14C707	503 B	2023-09-18	2024-05-14
Pretty URL lapskaus.xghl.info/48-707S040424/?u=14C707 IP 104.21.3.32 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-18 07:22:10 Last Seen2024-05-14 08:58:41 Times Seen65 Hash 87a0f7543bd9bcc01ead09853c421e2c 2224af8df76bddb2f0f93fd52857e0ca11880ba1 f1a12b078972c9fc727447095d31f047e94f7868d91de1c7b5b77d254b59055f Loading...

		Size	First Seen	Last Seen
	#1 Write - 80f0f7bea286ab324c044bbb15f547c7	12 B	2024-05-05	2024-05-05
Pretty Observations First Seen2024-05-05 07:42:44 Last Seen2024-05-05 07:42:44 Times Seen1 Hash 80f0f7bea286ab324c044bbb15f547c7 940fe26602aa185d28b11616ffaf4fc90b1f931e 16a005b742dd69d542cc85688b8a4c407e95c82051e7b9a1d53d774cb517fff9 Loading...

	#2 Write - a41a49db22d75b1ce8e0cc21f9fda166	9 B	2024-05-05	2024-05-05
Pretty Observations First Seen2024-05-05 07:42:44 Last Seen2024-05-05 07:42:44 Times Seen1 Hash a41a49db22d75b1ce8e0cc21f9fda166 f651bbba49f49e4a0c8b7275d88ac9b113e37a9f f0000f3c3a746044018c90af00a83c5cf4bbeed3d57e2bd482e9730eb4d69682 Loading...

	#3 Write - 07811dc6c422334ce36a09ff5cd6fe71	4 B	2023-03-11	2024-05-18
Pretty Observations First Seen2023-03-11 11:15:57 Last Seen2024-05-18 18:45:35 Times Seen2390 Hash 07811dc6c422334ce36a09ff5cd6fe71 7e79a3af2634de6635e59c9404d251b3955d39f9 6557739a67283a8de383fc5c0997fbec7c5721a46f28f3235fc9607598d9016b Loading...

HTTP Transactions (26)

URL IP Response Size

lapskaus.xghl.info/48-707S040424/all/loadingbar.gif

104.21.3.32

200 OK

2.6 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/loadingbar.gif
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
GIF image data, version 89a, 616 x 102
Size
2.6 kB (2605 bytes)
Hash
a77c2ead54226b770270ffddd715861a
fc352d68c8f16d97c9bf6837e03ea5b2bcb1fe13
04eac20568da346678336bdbc3df526c6ceb27533dc6e5b6a3b9078fd69a44f5

HTTP Headers

GET /48-707S040424/all/loadingbar.gif HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/gif
content-length: 2605
last-modified: Thu, 04 Apr 2024 12:04:23 GMT
etag: "a2d-6154423cf1fc0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QNAPehEcgoD16qAixqPaZpAJ4aQCrroX2QyeqqkJ78%2Bj7DCTP7iV18XH3mqc5Au6HQITa7b%2FSB60O%2BwZ4PoEXGbpeDVQ2YKqKTkIw1oHzgBJtOlxsTgdw27g1aRs4g5Xvg8fiG0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c845696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/1.jpg

104.21.3.32

200 OK

46 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/1.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=730, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=729], progressive, precision 8, 150x150, components 3
Size
46 kB (45907 bytes)
Hash
7a6bbbedccb104287d9ff32905d745f4
455acacb65a1abf28ad0a37f65206d793af82193
8e7dc85c3520478d73fe61832297fec8e37955e03ee8a87108030f50582841fe

HTTP Headers

GET /48-707S040424/all/1.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 45907
last-modified: Thu, 04 Apr 2024 12:03:55 GMT
etag: "b353-615442223e0c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2BkAnjZpMwJnqSl2nv36ZJbGqBC31oRbAYzIDVfSmb71bUGtxZw9laqJg1RV15xmd%2Fy32uNbCD%2BgVR%2B7aws6%2Fwh7ZQ5qrJwZvTFPLwAOZNt0xkJ4ZXIajHIHshtJxqxuOaciXAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e03c885696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/2.jpg

104.21.3.32

200 OK

49 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/2.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2015, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1504], progressive, precision 8, 150x150, components 3
Size
49 kB (48965 bytes)
Hash
c99aef9f700889d34266563695de4311
86c0b06bbedb14fea123fb4c8071dfc5f4b7f166
32444886364c971cff1c32a7f2b0a81ec06c739cc5a1780dc8c26bfd39d2a447

HTTP Headers

GET /48-707S040424/all/2.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 48965
last-modified: Thu, 04 Apr 2024 12:03:57 GMT
etag: "bf45-6154422426540"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXDDvBulT6LrOTBjrdAVbiMTL4TF%2FehQu0H6DU9IHAw6WscjZi7GlnMtWfsCk9tWke2cmEuXHLkdvRz3XfcrnWBcGOEUgCuJ0YZLalPMjJf%2B4cqb5o1%2BUsgfSxGuSxVVnZWDCvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e03c895696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/prize100.png

104.21.3.32

200 OK

519 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/prize100.png
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
PNG image data, 960 x 960, 8-bit/color RGBA, non-interlaced
Size
519 kB (519220 bytes)
Hash
13e8bfd7362756c6250e2f9787f7f8c2
5094e4463ceb9386f4f8755c89f00a93e507ba20
d1a2e7ba44d6b2acb7f360d2b7ec482662d8d30b4e250c4e40070400537ff84b

HTTP Headers

GET /48-707S040424/all/prize100.png HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/png
content-length: 519220
last-modified: Thu, 04 Apr 2024 12:04:37 GMT
etag: "7ec34-6154424a4bf40"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hEppEaJaYzJe6TXJezKjSnclTaudn3KtrRkjjH7K1S%2FWBoOJLaSmmY%2FNzaqdQOZ5%2BcYGbBLKjJAvhZsyd63w6ujIKvKLjmxyBr%2BGooOPtSBVqW3EB9vpWJdJAMUahMfhanqhu0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c825696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/100.jpg

104.21.3.32

200 OK

86 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/100.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=360, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 264x406, components 3
Size
86 kB (86273 bytes)
Hash
8a65a993ab232e112da746f2d729f469
726440453cbf8c8dee88ab5cea850b550bc6d0ca
94a44ec571afce18231fa4cb678d724e50775c519f5aae0bb9303c079ca0d5f5

HTTP Headers

GET /48-707S040424/all/100.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 86273
last-modified: Thu, 04 Apr 2024 12:03:55 GMT
etag: "15101-615442223e0c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dC4L4L8JIJTx%2BV%2FEbw9pyGY98cdUUSu5eASTBMcwoWRyrs4QW0kOB0nZr5HQ15mfHWL%2BgNNFxcG5l1srPVw7lXMoYtcPTqWawfQK7wTR719XwslpOquu56cahMIz3E22ixyNFH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e03c8a5696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/3.jpg

104.21.3.32

200 OK

50 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/3.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=960], progressive, precision 8, 150x150, components 3
Size
50 kB (49820 bytes)
Hash
3be37c6ff49e4f441f4af26f40c42317
748f774957c6ddb5a02dec9447c7f040773e1de1
d7be9e8a2a42c6296ec989ea3cdafbc1f145eb8169c3b40ee634996b9f2c7ec8

HTTP Headers

GET /48-707S040424/all/3.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 49820
last-modified: Thu, 04 Apr 2024 12:04:00 GMT
etag: "c29c-6154422702c00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JN5b877u8c7wVFswdYwnPximydfdtqQjsCtlqk6UpLrnhk8kTik%2Bwb5j4X6mZX1TqhRHDL8gvJYlb3%2FyKQHFtvH8dorX7jOvp6bBBfwqiCmBKbBE29GI9Rj3IikGgVi0qXcSc9w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e03c8b5696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/4.jpg

104.21.3.32

200 OK

38 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/4.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=642, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x150, components 3
Size
38 kB (38543 bytes)
Hash
070c06aeae08c0e340f3e213aeb3ea48
ae401d17e518fc7baeac8bda84b5e8b3bd60fac0
3e5737a7a9e0d9588443dd20d2c4cda5034ee79b4caf2d2d61daa8a811196d64

HTTP Headers

GET /48-707S040424/all/4.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 38543
last-modified: Thu, 04 Apr 2024 12:04:01 GMT
etag: "968f-61544227f6e40"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s5wvmSgBAk%2BvG1kg2HEuoJ3RMkHv2cR1tt4C%2BOkJYiAuGWN74NLwWbTpMxkezzD7cp5mEZ3nr5bE5L1Y2CIov%2Bu4DESBo97hbAJv9o1tAsoxLxqMgwTgkV22eNQWEvvPCIEuGlg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e03c8c5696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/5.jpg

104.21.3.32

200 OK

37 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/5.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=658, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=640], progressive, precision 8, 150x154, components 3
Size
37 kB (37181 bytes)
Hash
80f39f0b4ab728c5e9f37ef0621f4fda
33f7e601daa44671e78c958341132f0a3c754414
204928c8b1cbaf5a3e846e0616dbb17af95a0fbe4846008c1b1f771620114b33

HTTP Headers

GET /48-707S040424/all/5.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 37181
last-modified: Thu, 04 Apr 2024 12:04:02 GMT
etag: "913d-61544228eb080"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkC5fvAMh47N383x73JDvtKRQRFWM2iocp9OYRe3SWRbk6X8Hfkbysk683QQm%2FUpk7fa3uae1ZvU2hYXW6LPfmki0234E0GogHj5nBt4rICS1E6TnLCO7FveGluSR7b72Mt0sIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e04c9a5696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/f_guarantee.png

104.21.3.32

200 OK

6.4 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/f_guarantee.png
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
PNG image data, 94 x 93, 8-bit colormap, non-interlaced
Size
6.4 kB (6352 bytes)
Hash
22508899121504e1b30622e4b68367ee
9064ac9456f4d6cc7ecbaf6b6f0168f89e9da4a6
bf97443d681d2bc0ca04b707d0d3d443bcf99b1bf4fc0af84ac51286d0b4e02b

HTTP Headers

GET /48-707S040424/all/f_guarantee.png HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/png
content-length: 6352
last-modified: Thu, 04 Apr 2024 12:04:22 GMT
etag: "18d0-6154423bfdd80"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2FnLMB%2FNQSinOwznEenAr0jgGESLaEZX3o7RlZJk6DnrajQLBw6govCHLSnY1W9iZ5LRuGcxF9AWiAVgmCIzaRazvVhyyXdbiCaZbyH9BrQ5nF2I%2BD0eM%2Fk6kvy8ney%2FIYBXOek%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e04c9c5696-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/f_secure_1.png

104.21.3.32

200 OK

9.9 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/f_secure_1.png
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
PNG image data, 138 x 133, 8-bit colormap, non-interlaced
Size
9.9 kB (9862 bytes)
Hash
96de7278165f82601754fd6d5b84adc4
8b05b2606fb419545011c03f6f59260f2ad56b6f
c6c896e27ff1f1d6cb22ce652dcca916946ce9f003bcb4fe30d1265fcb531a95

HTTP Headers

GET /48-707S040424/all/f_secure_1.png HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/png
content-length: 9862
last-modified: Thu, 04 Apr 2024 12:04:23 GMT
etag: "2686-6154423cf1fc0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1443
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ElWADBFSSu06DsiVSg0HB7zLWLtjMPFyVmHGYDX%2FPvZll99C1G6fe1sqAechLHEIt0EfirQrPLAJhWsTt7GI2B8FTlZUYDA7Zs17UrbrTQDdkoSi26%2BCKDPlLE41ywb5hmzyRiU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e04c9d5696-OSL
alt-svc: h3=":443"; ma=86400

cdn.by.wonderpush.com/sdk/1.1/wonderpush-loader.min.js

104.18.19.183

200 OK

872 B

URL GET HTTP/2
cdn.by.wonderpush.com/sdk/1.1/wonderpush-loader.min.js
IP
104.18.19.183:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerGoogle Trust Services LLC
Subjectwonderpush.com
Fingerprint81:BC:61:78:68:1B:99:BD:9F:41:DD:A2:EF:5F:67:72:8D:5B:73:E3
ValidityFri, 29 Mar 2024 14:20:27 GMT - Mon, 24 Jun 2024 00:45:42 GMT

File type
JavaScript source, ASCII text, with very long lines (1790), with no line terminators
Size
872 B (872 bytes)
Hash
952ccf62101718da9fea97dd115efb0a
ee1d230ffb718b9370d6a63ad2015ad332396df0
df579647037e29557eaae753e6340816d0470a97ea5e42f44835daa9567c9cd1

HTTP Headers

GET /sdk/1.1/wonderpush-loader.min.js HTTP/1.1
Host: cdn.by.wonderpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: application/javascript; charset=utf-8
content-length: 872
last-modified: Wed, 24 Apr 2024 16:36:02 GMT
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET
access-control-max-age: 86400
etag: "89b86e4bc8bcf8e2aab93eb6b391c45fed6e"
x-cache: Miss from cloudfront
via: 1.1 1df45692f7304ec32e8154a5de939176.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: G6a8l7y60q0mTjGkRp5rJLYMyBHLrt4kVA2zeFd_iUUUYqT0Hd_bxw==
cf-cache-status: HIT
age: 934
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e18d8d0b3d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7

142.250.74.168

200 OK

102 kB

URL GET HTTP/2
www.googletagmanager.com/gtag/js?id=G-MB2WV0SZV7
IP
142.250.74.168:443
ASN
#15169 GOOGLE

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type
JavaScript source, ASCII text, with very long lines (5955)
Size
102 kB (101592 bytes)
Hash
8b81c0eb1828dff71c66558b39c35989
d73bd15a53ddd700c342aa8b996543aeffd51c2c
4a55e0e70e5c144e52b3a524809096861a115fb3c08f07639b3025f798733bba

HTTP Headers

GET /gtag/js?id=G-MB2WV0SZV7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 05 May 2024 05:42:11 GMT
expires: Sun, 05 May 2024 05:42:11 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 101592
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lapskaus.xghl.info/48-707S040424/all/mycss.css

104.21.3.32

200 OK

1.8 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/mycss.css
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
ASCII text, with very long lines (5766), with CRLF line terminators
Size
1.8 kB (1821 bytes)
Hash
6d554fbf7fa975f221e436001923981a
f23244dd3d83ff1c74ea7bb49a0d6b6fd1f606bf
03deaf29e0b517de981d3ead80180fa1ceb7d1c969c838992757b7f2fc71efa1

HTTP Headers

GET /48-707S040424/all/mycss.css HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: text/css
last-modified: Thu, 04 Apr 2024 12:04:26 GMT
etag: W/"16cc-6154423fce680"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lEv0x0T%2FBC%2Funh1JE3QgOGOuMnTGvksKW4hWhNJLtg1nDhSEDCtqAgi2S%2BgKcKoBq7ZVroOB9pMysL78F72Deer8rr1ahzE2MH8TIPJuundQXGNM1J0KYEmvN77lnpfjqMo7M1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c7a5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

natureviewer.in/clicks?p=707P14C707&e=&s3=&s4=

172.67.192.18

200 OK

43 B

URL GET HTTP/2
natureviewer.in/clicks?p=707P14C707&e=&s3=&s4=
IP
172.67.192.18:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectnatureviewer.in
Fingerprint52:6D:C9:FF:BF:08:D8:26:8B:0D:0F:3F:33:07:37:11:34:6D:CE:0F
ValiditySat, 13 Apr 2024 23:42:13 GMT - Fri, 12 Jul 2024 23:42:12 GMT

File type
data
Size
43 B (43 bytes)
Hash
50745986240b73cb0547b0867030feb5
fb268574c28db4bfde68dcea97eb45d5f71cbb5b
9bddfd495eeb03db2e37ff2ea454b04e129e1c0cc649637be4d01692fa95098a

HTTP Headers

GET /clicks?p=707P14C707&e=&s3=&s4= HTTP/1.1
Host: natureviewer.in
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BLizRpPno%2B65KHXU52eNDT1Y2X4xVq6NGuLOGRxdiIVZ7e2e0L3wVPtnVcKdnL8l78anCerrhwkUoP4aUQFwyglesUnYnHuePYfBJuAm1yVwxZfF%2B2ilvhS%2Bm0ZghZ8xUWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ee67e27f46b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-MB2WV0SZV7&gtm=45je4510v9115169269za200&_p=1714887731299&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1428428551.1714887732&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714887731&sct=1&seg=0&dl=https%3A%2F%2Flapskaus.xghl.info%2F48-707S040424%2F%3Fu%3D14C707&dt=Nagrody%20za%20ankiet%C4%99&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1022

216.239.34.36

204 No Content

0 B

URL POST HTTP/2
region1.analytics.google.com/g/collect?v=2&tid=G-MB2WV0SZV7&gtm=45je4510v9115169269za200&_p=1714887731299&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1428428551.1714887732&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714887731&sct=1&seg=0&dl=https%3A%2F%2Flapskaus.xghl.info%2F48-707S040424%2F%3Fu%3D14C707&dt=Nagrody%20za%20ankiet%C4%99&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1022
IP
216.239.34.36:443
ASN
#15169 GOOGLE

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint93:6B:D2:9D:92:BE:2D:D8:02:67:82:83:5E:EF:A3:F9:13:F3:26:AE
ValidityTue, 16 Apr 2024 03:18:45 GMT - Tue, 09 Jul 2024 03:18:44 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-MB2WV0SZV7&gtm=45je4510v9115169269za200&_p=1714887731299&_gaz=1&gcd=13l3l3l2l1&npa=1&dma_cps=sypham&dma=1&cid=1428428551.1714887732&ul=en-us&sr=1280x1024&pscdl=noapi&_s=1&sid=1714887731&sct=1&seg=0&dl=https%3A%2F%2Flapskaus.xghl.info%2F48-707S040424%2F%3Fu%3D14C707&dt=Nagrody%20za%20ankiet%C4%99&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=1022 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: null
date: Sun, 05 May 2024 05:42:12 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.by.wonderpush.com/sdk/1.1.33.37/wonderpush.min.js

104.18.19.183

200 OK

92 kB

URL GET HTTP/3
cdn.by.wonderpush.com/sdk/1.1.33.37/wonderpush.min.js
IP
104.18.19.183:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerGoogle Trust Services LLC
Subjectwonderpush.com
Fingerprint81:BC:61:78:68:1B:99:BD:9F:41:DD:A2:EF:5F:67:72:8D:5B:73:E3
ValidityFri, 29 Mar 2024 14:20:27 GMT - Mon, 24 Jun 2024 00:45:42 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
Size
92 kB (92344 bytes)
Hash
d4206e84e21183fcdae34b2e249235d3
a806f50aee8875711c35da68a892c773613424bf
b34caf5af44f1cee73b1c7676e0d44219c0db4b91a142c56c8ce80e749de3703

HTTP Headers

GET /sdk/1.1.33.37/wonderpush.min.js HTTP/1.1
Host: cdn.by.wonderpush.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 92344
last-modified: Wed, 24 Apr 2024 16:35:58 GMT
x-amz-server-side-encryption: AES256
cache-control: public,max-age=31536000
content-encoding: gzip
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET
access-control-max-age: 86400
etag: "9d02b6af77f2ec4e9894c3f3b13e50e0ed6e"
x-cache: Miss from cloudfront
via: 1.1 e8b87bee9c1c3339a630856119b4f376.cloudfront.net (CloudFront)
x-amz-cf-pop: CPH50-P1
x-amz-cf-id: oV81DJyjoIO6KsKSyeFQxSmVSP5lWJ7F8kmV616U9TNDul1CWGBG0A==
cf-cache-status: HIT
age: 385431
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67f358b756be-OSL
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/script.js

104.21.3.32

200 OK

9.4 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/script.js
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
9.4 kB (9448 bytes)
Hash
1baa2f14f4a489677288c3111a75ccf8
0544fb481bdb67d83eefb3427d091b57a2155af9
47ae4ac4bab3a472cb64f13f0d7c092ba62060299ec523ae01603c052646bdf0

HTTP Headers

GET /48-707S040424/all/script.js HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: application/javascript
last-modified: Thu, 04 Apr 2024 12:04:28 GMT
etag: W/"1c1b-61544241b6b00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBMdNE%2FLToUHCWsa%2BKCqybnf%2BBE7VMyiAUghRh2Y37lVDA9eL3ct0wJjqwGDrJy9V%2BQzMmKMZU8yiy1p1i2z2TB2ETPoMIXVyYU7uQ2LN6h8xk6HiP7gz2MNxIhirlmcCz5cBQo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e04c9e5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/datehead.js

104.21.3.32

200 OK

2.6 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/datehead.js
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (2924), with no line terminators
Size
2.6 kB (2636 bytes)
Hash
f8cd2930a83f05dd8f00dd0b8ad7ee6c
ce43b230f3035a8eb26d86d3442924937ab101ee
216a884f74213fb6439d360b95443f47b0b54e42e6e7f66fb200186f982c507f

HTTP Headers

GET /48-707S040424/all/datehead.js HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: application/javascript
last-modified: Thu, 04 Apr 2024 12:04:21 GMT
etag: W/"a4c-6154423b09b40"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNjd0QZtEB4t2tmAurHebDJQmprk%2Be%2F9eDV6%2FyQX3Nmf59WSHjt3DE4FQa6RKPdyaWWVH3IWO1cvCGfdrh%2FA5Td3MGG4F%2BnQ2Q9skPgPfExIpf2VWbRXiN1OvfeZPIzKK3nwYjM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c7e5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/favicon.ico

104.21.3.32

404 Not Found

196 B

URL GET HTTP/3
lapskaus.xghl.info/favicon.ico
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
HTML document, ASCII text, with no line terminators
Size
196 B (196 bytes)
Hash
4c2721a6662ce6d1ac5be54d16d51d12
a1541245769dedbff563e4ff40a83cb8d675e6e8
d3887c1020b92158055e9155e606f4cb8bed040d5a67e7550e74e8efbe649f8b

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Sun, 05 May 2024 05:42:11 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4B6KAtwHm6PBNlGeVweFG%2B8TF%2Bs83BwyMx%2Fve%2BmqXEO0dh3dUa%2FPPfWCQsYymKSKQU2bkwMXe5xEBLCHYoYlAK7g5g%2B2R3AJtUWiJpWyxvdEWYPYKsrx1mzkd%2BNrtNPzMJwFSfg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e37e875696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/styles.css

104.21.3.32

200 OK

18 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/styles.css
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
ASCII text, with CRLF line terminators
Size
18 kB (18402 bytes)
Hash
2faa160c138d1906e7cf928b6f5150a9
5d9862c0c7556bef603a4b1a6c447fd9404c2493
905f5926f802f7c0935255716ba33960d6d075fb98687a1a7d8bf2c2237de298

HTTP Headers

GET /48-707S040424/all/styles.css HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: text/css
last-modified: Thu, 04 Apr 2024 12:04:32 GMT
etag: W/"47e2-6154424587400"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RO2sPgANsppbPP4SXMX%2B1KLKBafWzvtc6v2p5%2Bi6h8hyCMQOcaDj%2BH6pHw%2FOL5fzbA7adyGYlA%2FLkT3NDKmtK%2F2yo4MbJFCcn40AX%2FUXXp4RmEGyElfh3it%2FdMQdi6AkeoBnLx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e01c735696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/animate.min.css

104.21.3.32

200 OK

72 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/animate.min.css
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
ASCII text, with very long lines (65348)
Size
72 kB (71750 bytes)
Hash
c0be8e53226ac34833fd9b5dbc01ebc5
b81ef1b22de26af8a7a4656f565fbc91a69d7518
5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f

HTTP Headers

GET /48-707S040424/all/animate.min.css HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: text/css
last-modified: Thu, 04 Apr 2024 12:04:19 GMT
etag: W/"11846-61544239216c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i56VKn%2BHdAnkF5%2FAqZ%2F5fwXCKFR1CpXfXiaB%2FPCK86NERbKgVKjqLtgaB%2FsjoyvMMSCBeLi2byk9F2JedTYVJ5rdIMMx6tvYdazGsaQm533XkzlI6uEiaMojy7FEUh9ZQzIAz3Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c785696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/all.js

104.21.3.32

200 OK

1.2 MB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/all.js
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type

Size
1.2 MB (1196706 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /48-707S040424/all/all.js HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: application/javascript
last-modified: Thu, 04 Apr 2024 12:04:20 GMT
etag: W/"1242a2-6154423a15900"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n8NtJji5oFNF7kiB75ymAVjdYWVZ4MXyutZwT0xtleIByjER7QTpikO3lcQ8mKghhJv%2FLSbmZWl8E%2B4R7IUdWvYe6mhe3ujrstEDXN0el7okbGcDIAHHdbsXOizFrZY9ay0274g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c7b5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/?u=14C707

104.21.3.32

200 OK

42 kB

URL User Request GET HTTP/2
lapskaus.xghl.info/48-707S040424/?u=14C707
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type

Size
42 kB (41909 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Allegro

HTTP Headers

GET /48-707S040424/?u=14C707 HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 05 May 2024 05:42:10 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7i2g%2F0hVnEIOanLuJwfZPkjXB%2BlWBXUXs7Q3MkLCQ9BiFbFcvPXmq9bI3KUuK9whgLz7z8DYKE15QvNgDa%2BOYkH0VeEs2NxcjywLTGFsMUXwf%2BIZvsODlZeaKlW%2BMxE09GRYJSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87ee67ddcdf45693-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MB2WV0SZV7&cid=1428428551.1714887732&gtm=45je4510v9115169269za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1590237028

172.217.21.163

200 OK

42 B

URL GET HTTP/2
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MB2WV0SZV7&cid=1428428551.1714887732&gtm=45je4510v9115169269za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1590237028
IP
172.217.21.163:443
ASN
#15169 GOOGLE

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint7D:68:6D:B1:32:34:52:51:20:C9:53:FF:B9:B7:8F:7E:05:F9:F5:97
ValidityTue, 16 Apr 2024 04:31:00 GMT - Tue, 09 Jul 2024 04:30:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
42 B (42 bytes)
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629

HTTP Headers

GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-MB2WV0SZV7&cid=1428428551.1714887732&gtm=45je4510v9115169269za200&aip=1&dma=1&dma_cps=sypham&gcd=13l3l3l2l1&npa=1&z=1590237028 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 05 May 2024 05:42:11 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

lapskaus.xghl.info/48-707S040424/all/logo.svg

104.21.3.32

200 OK

2.1 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/logo.svg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
SVG Scalable Vector Graphics image
Size
2.1 kB (2143 bytes)
Hash
02b3f3938de6524caff7373a25987cb5
e5f4cf6dec6eb7101c0b707fdc0f9d05a8b4ae89
da25105f7d78a4ba852dc513829de5ce98fb78e52fec2dc359f8107cba2ea62c

HTTP Headers

GET /48-707S040424/all/logo.svg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/svg+xml
last-modified: Thu, 04 Apr 2024 12:04:24 GMT
etag: W/"85f-6154423de6200"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1443
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RxYwoJPqRLjuy6HmoDl2rKyfJtY25ED54ABaO5M%2FKtRxviQdz%2BP2LooyZI4ClR%2B4xmyR4Ebgt%2Bv54DAJdP5E4LFGAQbdhJoJV4FCuzwrh%2FcFfr%2Bq70%2Fiz8HX%2BTEUlgGJNSIA2cU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e02c815696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

lapskaus.xghl.info/48-707S040424/all/200.jpg

104.21.3.32

200 OK

111 kB

URL GET HTTP/3
lapskaus.xghl.info/48-707S040424/all/200.jpg
IP
104.21.3.32:443
ASN
#13335 CLOUDFLARENET

Requested by
https://lapskaus.xghl.info/48-707S040424/?u=14C707
Certificate
IssuerLet's Encrypt
Subjectxghl.info
FingerprintED:BA:C0:03:E0:A6:9B:E8:7D:04:47:8D:97:3E:D2:03:88:0A:97:D4
ValidityThu, 18 Apr 2024 12:31:50 GMT - Wed, 17 Jul 2024 12:31:49 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=237, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=350], progressive, precision 8, 237x350, components 3
Size
111 kB (110804 bytes)
Hash
8f8db2df6f24b9aefa7e0a986b88b9e5
541ff995d6822c7c15f36b5594dc5a4660afa1ee
aaa778fb4ff56b6083302dfa1ef274f24d83858d1e986e3afe60a52d0e96166a

HTTP Headers

GET /48-707S040424/all/200.jpg HTTP/1.1
Host: lapskaus.xghl.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 05 May 2024 05:42:11 GMT
content-type: image/jpeg
content-length: 110804
last-modified: Thu, 04 Apr 2024 12:03:59 GMT
etag: "1b0d4-615442260e9c0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jyG4xuWHR3lHtM7Ty76AA6f%2BOhOyNyL3W63J6SsDah%2F1hOLnyrIm5LO1S6XSDmsnqvBsFlrDAyKomj79NpqNt%2Fiu5dShi3GFnJogIy5CzNnJBG%2BlvXUGp3H8s%2F24MzYzNHH2O6Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ee67e04c925696-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML