Report - greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true

Report Overview

Submitted URL
greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
IP
172.67.164.94
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-03 22:14:24
Access
public
Website Title
greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Final URL
greenorbitly.com/blank
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
greenorbitly.com	unknown	2023-12-20	2023-12-21	2024-04-18	8.0 kB	390 kB	104.21.66.209
undefined	142677	unknown	2020-01-28	2023-07-23	468 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-03	medium	undefined	Sinkholed

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js	141 kB	2023-04-09	2024-05-17
Pretty URL greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-09 05:13:29 Last Seen2024-05-17 08:58:20 Times Seen200 Hash 6081d0683ad8f48c96c1fa6ba4b00a6c 288295b31b2be8ca70324de3142b75483a4571cf 1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580 Loading...

	greenorbitly.com/_next/static/chunks/7928-6075f0412f935ecd.js	107 kB	2024-05-03	2024-05-04
Pretty URL greenorbitly.com/_next/static/chunks/7928-6075f0412f935ecd.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 10:07:29 Last Seen2024-05-04 00:14:24 Times Seen8 Hash 6c7db7758838662a5f8685cbedfce10d 3d5ce68eebecb975393a6896d1cb35668fc2fc50 ad836c52e873697d018b5c985226104f41e73624b3ab43b8acf261fe2e26ce5f Loading...

	greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_buildManifest.js	1.0 kB	2024-05-03	2024-05-04
Pretty URL greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_buildManifest.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 10:07:29 Last Seen2024-05-04 00:14:24 Times Seen4 Hash 65bc49320ddec1a463b0003d5268a4b5 e0a76cd3dc944a7b6687b44bf850ada1e1682a04 bae148ca0c030f2445a9eaaf70daea526971e20c044eafde5e17b3d0fcf00068 Loading...

	greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_ssgManifest.js	77 B	2023-03-07	2024-05-18
Pretty URL greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_ssgManifest.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:02 Last Seen2024-05-18 00:40:01 Times Seen87269 Hash b6652df95db52feb4daf4eca35380933 65451d110137761b318c82d9071c042db80c4036 6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e Loading...

	greenorbitly.com/_next/static/chunks/pages/blank-00d9d4043ff6723a.js	1.1 kB	2024-05-03	2024-05-17
Pretty URL greenorbitly.com/_next/static/chunks/pages/blank-00d9d4043ff6723a.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 10:07:29 Last Seen2024-05-17 08:58:21 Times Seen32 Hash 38fc14f44fa572618ab1078b8805aa09 b12b5b7d77e9184718ef36774779d504e44504b5 cec5f494bc7f46aeb7e0302b0ef59e2aec3b7eee99fe0106ec73db9c3636b639 Loading...

	greenorbitly.com/_next/static/chunks/webpack-e1529826d7166144.js	12 kB	2024-05-03	2024-05-04
Pretty URL greenorbitly.com/_next/static/chunks/webpack-e1529826d7166144.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 10:07:29 Last Seen2024-05-04 00:14:24 Times Seen8 Hash 188ea6bfef3f808e7161847fc91ddc8c a0f28007fdcabd0a5c528d52099e92b43f71f461 cd701c75d5f318b4bbe49ea523aee01950a7bcb1e1ae882c7f97fe2ceed269df Loading...

	greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js	89 kB	2023-12-01	2024-05-17
Pretty URL greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-01 17:43:42 Last Seen2024-05-17 08:58:20 Times Seen87 Hash 8de5f1bfeb434ccf34a254a49093706a 78e1085a0f56e6e20f14f84a70ed45079b2a4da9 0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a Loading...

	greenorbitly.com/_next/static/chunks/pages/_app-8670c2f453ae24a7.js	21 kB	2024-05-03	2024-05-04
Pretty URL greenorbitly.com/_next/static/chunks/pages/_app-8670c2f453ae24a7.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 10:07:29 Last Seen2024-05-04 00:14:24 Times Seen8 Hash 4c685704fe7beb026c71418a4433b6a3 61c500f40a8a5a6e1f366c8fed679d329f794420 c9a31dd498e84cff2faf9cb91faf3f0d336de3098e2f623773cff935294d03c2 Loading...

	greenorbitly.com/_next/static/chunks/pages/index-391fb21e96fbf8f9.js	24 kB	2024-05-03	2024-05-04
Pretty URL greenorbitly.com/_next/static/chunks/pages/index-391fb21e96fbf8f9.js IP 104.21.66.209 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-03 10:07:29 Last Seen2024-05-04 00:14:24 Times Seen8 Hash 8e223b3a7aadf823956dd19aec6bdb41 f29ab26fa84657a4e7f990e6e0b99c2d4da277b1 a7728794c46aae2aea176b3fae3af6c29586ec1b6f69a943240ca66a4f9a73d9 Loading...

HTTP Transactions (13)

URL IP Response Size

greenorbitly.com/_next/static/css/9d92a176c9608aa4.css

104.21.66.209

200 OK

78 B

URL GET HTTP/3
greenorbitly.com/_next/static/css/9d92a176c9608aa4.css
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
ASCII text, with no line terminators
Size
78 B (78 bytes)
Hash
6cf10bb0ebaccbb83a7d95b8b2faf6a2
0c203afc6a2c883c7b4f0a8561cd6df35dca1ba3
9b5d584b6200dfb2ea17d372ceb88c61ee68bf6e7ae5cabed28d31952b048a10

HTTP Headers

GET /_next/static/css/9d92a176c9608aa4.css HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Mon, 29 Apr 2024 22:48:25 GMT
etag: W/"66-18f2c0b8ab1"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 266450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cwePoB0bGzsNTbksw3Ji%2F8uf3IYbfJhtGqtjqpDbtpSjCC9vylq1Ylj1SwemiG8So3sRjBY9%2BrSnbj3mfyz17TV1HIzMyyRVPfShAMOQnjw%2BAXdEageFnxgZopekfBIUXsXd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f68ebf5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/pages/blank-00d9d4043ff6723a.js

104.21.66.209

200 OK

20 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/pages/blank-00d9d4043ff6723a.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (1052), with no line terminators
Size
20 kB (20274 bytes)
Hash
38fc14f44fa572618ab1078b8805aa09
b12b5b7d77e9184718ef36774779d504e44504b5
cec5f494bc7f46aeb7e0302b0ef59e2aec3b7eee99fe0106ec73db9c3636b639

HTTP Headers

GET /_next/static/chunks/pages/blank-00d9d4043ff6723a.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"41c-18f3ce5eaa8"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 50816
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lUYdVRGn72zMwheaDnSeFoEb9xuhEw55Xzq%2BiGaneOivObVY3kHVVlgXocBM7ez84UHJ0qxkaJfi%2FWKeW8GJcIqvbz2SQSLqR%2FGu1ccl3D4H1bWtnnIBlR4jZ%2FPh3m9iOuRM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f7bf9e5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/7928-6075f0412f935ecd.js

104.21.66.209

200 OK

43 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/7928-6075f0412f935ecd.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
43 kB (42582 bytes)
Hash
6c7db7758838662a5f8685cbedfce10d
3d5ce68eebecb975393a6896d1cb35668fc2fc50
ad836c52e873697d018b5c985226104f41e73624b3ab43b8acf261fe2e26ce5f

HTTP Headers

GET /_next/static/chunks/7928-6075f0412f935ecd.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"1a2bf-18f3ce5eaa4"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlOyKwpLZLUydkVP8TJR8XCcmmEI%2BSoFFjS6amKgYRnjipF%2B50pG1jTxylbeU0IUB9MaSOIxLqXIqHjB49RB9wTlDysPzLm33qUTEJBoz3%2BQHHatSlIkhmyK5YwrYoThRdeq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f69ecc5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/pages/index-391fb21e96fbf8f9.js

104.21.66.209

200 OK

24 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/pages/index-391fb21e96fbf8f9.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (24237), with no line terminators
Size
24 kB (24237 bytes)
Hash
8e223b3a7aadf823956dd19aec6bdb41
f29ab26fa84657a4e7f990e6e0b99c2d4da277b1
a7728794c46aae2aea176b3fae3af6c29586ec1b6f69a943240ca66a4f9a73d9

HTTP Headers

GET /_next/static/chunks/pages/index-391fb21e96fbf8f9.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"5ead-18f3ce5eaa8"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Xfe9BRTLJEg09P%2FE1GeYVRb6622BzUI1eHg%2FsmwdLxt6SrsZy3amDcEOmkQa9Bz3y9m%2BEUPlLJD69bxrHGjuZeGJ9YUHiyECdGzzNkNyPrGPjeylFxxPIiwgzeSZwv5Wm7P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f6aed15694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/webpack-e1529826d7166144.js

104.21.66.209

200 OK

12 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/webpack-e1529826d7166144.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (12470), with no line terminators
Size
12 kB (12470 bytes)
Hash
188ea6bfef3f808e7161847fc91ddc8c
a0f28007fdcabd0a5c528d52099e92b43f71f461
cd701c75d5f318b4bbe49ea523aee01950a7bcb1e1ae882c7f97fe2ceed269df

HTTP Headers

GET /_next/static/chunks/webpack-e1529826d7166144.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"30b6-18f3ce5eaa4"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwOeIsctCMh8IscdT2i37qwytIITDG3fXszY0Rssz6iBZa19ypPlc9CHot7Q90U48UwW6cWw5CGd%2BAGPpc5Mns%2F0fk0KUzh7GWnjPOBwYjLzSC5dpr6FdMLmB99eLEihBCrc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f68ec05694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js

104.21.66.209

200 OK

89 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/main-403c8612371c9360.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
89 kB (89343 bytes)
Hash
8de5f1bfeb434ccf34a254a49093706a
78e1085a0f56e6e20f14f84a70ed45079b2a4da9
0514cea519259a90ef195e663ef8f544520a3b08a3e3986179e7e43a56cfba1a

HTTP Headers

GET /_next/static/chunks/main-403c8612371c9360.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"15cff-18f3ce5eaa4"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZFv9F%2FdQe7pB9PTcrx5qNqtsClMrecYyKWXw91vKpBiVDdIeDhBanIVN%2FnghWqjIMXXPvutXXaZfElnNWSTRpgCwk2jcpQlCO0n0UL4pSPnt04fHFhohwtpPebx59iMvlh%2By"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f69ec45694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/favicon.ico

104.21.66.209

200 OK

26 kB

URL GET HTTP/3
greenorbitly.com/favicon.ico
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
26 kB (25931 bytes)
Hash
c30c7d42707a47a3f4591831641e50dc
9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e
2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Fri, 03 May 2024 05:20:37 GMT
etag: W/"654b-18f3ce5b2dc"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uu7CmOAcY5iV0MCjD89JJ7dPo8ZtWTmXFMznmSc7C8vFZLSRusNaUSq8l%2B8naknLQtp2%2BScMlR49QNBUYb3U%2Fy7ogLabH8vutOn8%2B7PvozX3xvSivph1Rm2f%2BANe023QR0Ov"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f7dfb25694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js

104.21.66.209

200 OK

141 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/framework-3671d8951bf44e4e.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (65201)
Size
141 kB (141053 bytes)
Hash
6081d0683ad8f48c96c1fa6ba4b00a6c
288295b31b2be8ca70324de3142b75483a4571cf
1845c289c582dd2b58a3ab7f8eadb695ebabbfe7a2685e5f9012ae16e0541580

HTTP Headers

GET /_next/static/chunks/framework-3671d8951bf44e4e.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"226fd-18f3ce5eaa8"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XwAmLXCgNBH6uvQHdn2pgbxlWgm2q0kAaLau2d5YJXmZhFDZea2CV%2FXzG5RjdimniuNb9ioGSj0eUVdJIBCGh1W8ck8Oq%2BfMyaGGVaSH1v40kbL96%2FZ4YzRSO5hGodMF14px"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f69ec35694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_buildManifest.js

104.21.66.209

200 OK

1.0 kB

URL GET HTTP/3
greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_buildManifest.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
ASCII text, with very long lines (1102), with no line terminators
Size
1.0 kB (1034 bytes)
Hash
1b5713df3cbb560932c34fb260e64648
5faa22788e87b41214503383e8b2358e96dde0a7
62e687d121d67c499f5609b7bc45a807f264e17e6999386538cb4becde348a42

HTTP Headers

GET /_next/static/_dIanAkdopzxUtzo4bCMT/_buildManifest.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"40a-18f3ce5eaa8"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UyLqGUWWbx3CNv43ib%2BVkZ6pCzv7tFZNiNJs1hTS8wPOLRVnTzPdWRS5LwV2B0wo0h99aCFWMoGKtQ87GQdhmlR8GaHNN2%2B2aX4fRc8KbL22BreeDzU5mRJEuY22BJZTouoQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f6aed35694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/chunks/pages/_app-8670c2f453ae24a7.js

104.21.66.209

200 OK

21 kB

URL GET HTTP/3
greenorbitly.com/_next/static/chunks/pages/_app-8670c2f453ae24a7.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
JavaScript source, ASCII text, with very long lines (20750), with no line terminators
Size
21 kB (20750 bytes)
Hash
4c685704fe7beb026c71418a4433b6a3
61c500f40a8a5a6e1f366c8fed679d329f794420
c9a31dd498e84cff2faf9cb91faf3f0d336de3098e2f623773cff935294d03c2

HTTP Headers

GET /_next/static/chunks/pages/_app-8670c2f453ae24a7.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"510e-18f3ce5eaa8"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qhH1dxjxwK6inTw%2F6ZAAYVu4lyWCDjX1XbMeBSsr2G607axMNMayUAUPCe%2BuExbs1qDoEH3kQfXjGqCvNi%2FydY8OQwKQs%2BCO2i%2BkbK5%2BRo4G5elpVs9EHL7UinNEZP6FBv3W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f69ec85694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_ssgManifest.js

104.21.66.209

200 OK

77 B

URL GET HTTP/3
greenorbitly.com/_next/static/_dIanAkdopzxUtzo4bCMT/_ssgManifest.js
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
ASCII text, with no line terminators
Size
77 B (77 bytes)
Hash
b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

HTTP Headers

GET /_next/static/_dIanAkdopzxUtzo4bCMT/_ssgManifest.js HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 03 May 2024 22:13:59 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000, immutable
last-modified: Fri, 03 May 2024 05:20:51 GMT
etag: W/"4d-18f3ce5eaa8"
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: HIT
age: 60418
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWrhX%2BUnJ5T%2F3%2BfMae7ykYo7GzUDY0rFAyoB1to0P40TE5bKuq3MdIHp1lrt%2BniIoSRJN8u51TG9i5jmVPrLeKrbpIlWxbLNIdURZJeeUqzTR1FG7TUvwkFQvWU48SH77esE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f6aed65694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

undefined/click?upd_clickid=coqm2u32r96s73ebihf0&add_event6=1

0.0.0.0

0 B

URL GET
undefined/click?upd_clickid=coqm2u32r96s73ebihf0&add_event6=1
IP
0.0.0.0:0
ASN
#0

Requested by
https://greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /click?upd_clickid=coqm2u32r96s73ebihf0&add_event6=1 HTTP/1.1
Host: undefined
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://greenorbitly.com
DNT: 1
Connection: keep-alive
Referer: https://greenorbitly.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true

104.21.66.209

200 OK

1.6 kB

URL User Request GET HTTP/2
greenorbitly.com/?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true
IP
104.21.66.209:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgreenorbitly.com
Fingerprint20:8D:8D:8E:76:E0:4E:5B:60:BC:37:C1:13:E2:DE:3F:66:5A:E8:B8
ValidityTue, 16 Apr 2024 15:08:25 GMT - Mon, 15 Jul 2024 15:08:24 GMT

File type
HTML document, ASCII text, with very long lines (1755), with no line terminators
Size
1.6 kB (1621 bytes)
Hash
159cf80e12b0e37e71e78abe5daa2303
b4d551cd2e0cd4f9cf3c3ef9a04999752ed4c97d
298bfecfc6eb83dbfdaa4d86f2cbb4556a4bd8b2d1773145746d5aa7be3d809d

HTTP Headers

GET /?extension=ytube_adskipper&promo=salmon&big=none&clk_domain=datatechdrift.com&flow=binom&campaignId=10557&trafficsource=32&src=6534395&cid=coqm2u32r96s73ebihf0&lpkey=17147cdcefa95e6abee59b57d04155a80d8f774692&isV2=true HTTP/1.1
Host: greenorbitly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 03 May 2024 22:13:58 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mnv6y6cmTneUoWKIXEF3sjOAvZmVJ9EbqiQkeUe5Kfx6VA37Sx4dcJ%2BMdIclVztefqOHwYXFxqyQHfoECbfta%2FicBY%2FkZz6BduLTcGjspiOqhApa8JSHcgNjyjZ7lcg92%2Bpi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e399f2bb2256c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML