r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 21b1296f31569e4fb94048c52df34904
3e3194f640d71b9da28e809660443e332bdba310
7ebe5d06efe28c8507b4cdfbf68c6e5bbd9919ba776990fb8a22d90cca0c1c1b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7EBE5D06EFE28C8507B4CDFBF68C6E5BBD9919BA776990FB8A22D90CCA0C1C1B"
Last-Modified: Sat, 27 Aug 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2389
Expires: Tue, 30 Aug 2022 03:01:38 GMT
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 30 Aug 2022 01:25:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: tRXxQbEz5xaCMKnSj0rxxCzMW0_NL4VG7SLBe_Jc6b4aTNEDjOOH7w==
Age: 3363
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 29 Aug 2022 22:35:59 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: K4HTayec497-lP4ZFnRM5kL_7D7W65oTruEAunMfFhLwKX-xI7roLQ==
age: 13551
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 30 Aug 2022 02:21:49 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 30 Aug 2022 02:17:12 GMT
Cache-Control: max-age=3600
Expires: Tue, 30 Aug 2022 03:08:29 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: mTBpLUzsQNzd1m6DS1v-huscUsOQESEIxMJfalFJvwoCdPsAI2j_RQ==
Age: 278
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 482aaffff49fe5727a2771a30d1a5a51
f615becd41a1e28054d6f213db9646d26b48253a
0c9687ceab24c778de0010ff6d03991fd789a93290bf09e4026165decdf356b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4773
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 30 Aug 2022 02:21:50 GMT
Last-Modified: Tue, 30 Aug 2022 01:02:17 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
waptrick.com/en/free/mp3/Jimmy-Nevis/
104.36.23.148200 OK 3.6 kB URL HTTP/1.1 waptrick.com/en/free/mp3/Jimmy-Nevis/
IP 104.36.23.148:0
File type gzip compressed data, from NTFS filesystem (NT)\012- data
Hash 7458ce73a80fa4d01a3c3282ddca27d6
aba24c86d6b4755e348ff693a60323c1cd57a920
f3a8c9d462ed7040da03d27015facdf608ec11b078cd1156722b3881bd962927
GET /en/free/mp3/Jimmy-Nevis/ HTTP/1.1
Host: waptrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: Microsoft-IIS/7.5
Date: Tue, 30 Aug 2022 02:22:35 GMT
Content-type: text/html; charset=utf-8
Expires: 0
Pragma: no-cache
Cache-control: max-age=0, no-store, no-cache, must-revalidate
Vary: accept-encoding, user-agent
Set-cookie: uuid=0x12bf96a0b28d99b3;Domain=waptrick.com;Expires=Tue, 13-Sep-2022 02:22:35 GMT;Path=/
adsterra=Y;Domain=waptrick.com;Expires=Tue, 30-Aug-2022 02:27:35 GMT;Path=/
Content-encoding: gzip
Transfer-encoding: chunked
Connection: close
push.services.mozilla.com/
34.211.93.78101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.211.93.78:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3pwvl+1BT88scuT0Jscc1Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vpS4Lbtt90iHl7eZmHsLjwmOuhk=
a.exdynsrv.com/ad-provider.js
205.185.216.10200 OK 24 kB URL HTTP/1.1 a.exdynsrv.com/ad-provider.js
IP 205.185.216.10:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash aaf9807f02b627e17287d72f44ff064f
4a1127fcf78e8c8ed1f5b3d4c5eb775f9ca544cc
16164f450c0554c9c08c3fa1a797c4c27f47ff8ef6fbf823bd0c56a1a6629d6e
GET /ad-provider.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 02:21:50 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 23722
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"73ec54b6a3b356d666103cfbac5"
X-HW: 1661826110.dop068.sk1.t,1661826110.cds244.sk1.shn,1661826110.dop068.sk1.t,1661826110.cds246.sk1.c
Access-Control-Allow-Origin: *, *
nabalpal.com/tvlP48j0j7GHQZa/37433
23.109.248.165200 OK 25 B URL HTTP/1.1 nabalpal.com/tvlP48j0j7GHQZa/37433
IP 23.109.248.165:0
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tvlP48j0j7GHQZa/37433 HTTP/1.1
Host: nabalpal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:50 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Wed, 31-Aug-2022 02:21:50 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Wed, 31-Aug-2022 02:21:50 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
samp.waptrick.org/js/jquery_scroll.js
162.251.163.98200 OK 2.0 kB URL HTTP/1.1 samp.waptrick.org/js/jquery_scroll.js
IP 162.251.163.98:0
File type ASCII text, with CRLF line terminators
Hash e183fa3c407ab5574fd031fc9dff9c82
60dcaf14911262a7312d92f5218d06c3c558cb8e
84714cc57554d33bcac659c53b181b27d590a77445ed1ca84c0876fea58dabe8
GET /js/jquery_scroll.js HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 07:58:36 GMT
Accept-Ranges: bytes
ETag: "09eddbd4adfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:48 GMT
Connection: close
Content-Length: 1995
samp.waptrick.org/js/combinedv136.js
162.251.163.98200 OK 2.3 kB URL HTTP/1.1 samp.waptrick.org/js/combinedv136.js
IP 162.251.163.98:0
File type Unicode text, UTF-8 text, with very long lines (519), with CRLF line terminators
Hash 1c780d06b80889abc2b4dc2c42da1a0d
0b2e2d8d1dddd2e1a4644c5bd40fbac1c8ea1e45
3f40410d685839a594f1d8eb6dfec0e4c8adc7664774d4a796e84e912b038e51
GET /js/combinedv136.js HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 07:56:44 GMT
Accept-Ranges: bytes
ETag: "0c61b7b4adfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:48 GMT
Connection: close
Content-Length: 2279
samp.waptrick.org/css/htmlv125_basic.css
162.251.163.98200 OK 5.8 kB URL HTTP/1.1 samp.waptrick.org/css/htmlv125_basic.css
IP 162.251.163.98:0
File type ASCII text, with very long lines (25053), with no line terminators
Hash 04fc8047a2f34f1b1d0e61e00e6ac803
777ff47e71982bfa284e04d8b63df0f203b7a6f1
0dcdc08230cb9ba8e66315ca0aff736f5543c643e07304de785631bf342d6dfa
GET /css/htmlv125_basic.css HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 08:24:45 GMT
Accept-Ranges: bytes
ETag: "80410654edfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:48 GMT
Connection: close
Content-Length: 5752
cudgelridge.com/bf/0d/76/bf0d7612e94ed920aec918d8bc477e4f.js
192.243.61.225200 OK 20 kB URL HTTP/1.1 cudgelridge.com/bf/0d/76/bf0d7612e94ed920aec918d8bc477e4f.js
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (59396), with no line terminators
Hash c0784ea901e3cabf6c7282dced1dca2d
e8a9559e05e7120cab2ff4e02b46de10481535af
9acee2e853234b0b70d04c5715b1a9dcfd435e2d295556505e989ac7f3adacee
Analyzer Verdict Alert quad9 Sinkholed
GET /bf/0d/76/bf0d7612e94ed920aec918d8bc477e4f.js HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 37e61605893160cf325423081ba7886d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cudgelridge.com/da/fe/7e/dafe7e98dace1e50d48969e5c8a626a4.js
192.243.61.225200 OK 13 kB URL HTTP/1.1 cudgelridge.com/da/fe/7e/dafe7e98dace1e50d48969e5c8a626a4.js
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37131), with no line terminators
Hash 9b5abf322ec2c397572e0721dd4204a3
e97585ee5a8ff6fc082acd0cbf63304e15a4a32d
53b2f1ed30720cea0bb4f3fc55571dbbbe5e4d18e8618793ebf9ba9e64bb5880
Analyzer Verdict Alert quad9 Sinkholed
GET /da/fe/7e/dafe7e98dace1e50d48969e5c8a626a4.js HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b64407a69b0216b650cc6bcb31c6fa66
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
samp.waptrick.org/imgs/htmlcssv11/back_home_icon32x32.png
162.251.163.98200 OK 459 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/back_home_icon32x32.png
IP 162.251.163.98:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 208c830c05cacb548355849c1dd3bd81
087981869aa8e1ed51b7a5d36f74bad3ca24dc08
64253536f1c9ed9b084061ac08f0f80f068dab87302fa8114821a08d7d7fc483
GET /imgs/htmlcssv11/back_home_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Wed, 09 Apr 2014 08:31:00 GMT
Accept-Ranges: bytes
ETag: "0fa369ce53cf1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 459
samp.waptrick.org/js/jquery-3.4.1.min.js
162.251.163.98200 OK 31 kB URL HTTP/1.1 samp.waptrick.org/js/jquery-3.4.1.min.js
IP 162.251.163.98:0
File type ASCII text, with very long lines (65451)
Hash 3195e7e20d5daf86f6c6f6107c7bad9d
f5dc59013bfc44a61d3379e5c2e0356935ccda0e
524f9b76882cacbfa2459d4e6464bd039da02db98a25dc29754c54ea4b2d8867
GET /js/jquery-3.4.1.min.js HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 31 Dec 2020 08:01:30 GMT
Accept-Ranges: bytes
ETag: "0e993254bdfd61:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:48 GMT
Connection: close
Content-Length: 30737
samp.waptrick.org/imgs/waptrick_html_flag.png
162.251.163.98200 OK 2.2 kB URL HTTP/1.1 samp.waptrick.org/imgs/waptrick_html_flag.png
IP 162.251.163.98:0
File type PNG image data, 155 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 8dabbade5c7050e85ed02fd7ffea93db
efaf45364e8d6041a27e1246a07591b002a67b2e
106ebe3072f58bb44727eb4d1700f1a8f7ca3b106282a36227245873fbbb3e46
GET /imgs/waptrick_html_flag.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 12 Dec 2019 07:05:11 GMT
Accept-Ranges: bytes
ETag: "fae0a77ebab0d51:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 2230
nabalpal.com/tvlP48j0j7GHQZa/37433
23.109.248.165200 OK 25 B URL HTTP/1.1 nabalpal.com/tvlP48j0j7GHQZa/37433
IP 23.109.248.165:0
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /tvlP48j0j7GHQZa/37433 HTTP/1.1
Host: nabalpal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Wed, 31-Aug-2022 02:21:51 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Wed, 31-Aug-2022 02:21:51 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
cudgelridge.com/watchnew?key=0d90779d5172c783ebd7800dad489a3d
192.243.61.225200 OK 1.1 kB URL HTTP/1.1 cudgelridge.com/watchnew?key=0d90779d5172c783ebd7800dad489a3d
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 31fa6eb6a28cc1bf560e88d57646d853
1bc50f10977346db240284ba0a0aa97321988ef7
ea28638e673ea2c89a85555eb9b61393fa57984183720453461da40dd0c92e2d
Analyzer Verdict Alert quad9 Sinkholed
GET /watchnew?key=0d90779d5172c783ebd7800dad489a3d HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=14457359; expires=Wed, 31 Aug 2022 02:21:51 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.6k1zLKsdRe0HVR9_pedaogRuSi3jCy7OzdKkuB7rToQ; expires=Tue, 30 Aug 2022 02:22:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 987669c8ddfcfde26fedac659a3af754
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
samp.waptrick.org/imgs/htmlcssv11/music_clip_list_icon_bg32x32.png
162.251.163.98200 OK 625 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/music_clip_list_icon_bg32x32.png
IP 162.251.163.98:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 626a4a0e6d0726fa82dc9bdaa27d92ff
fb658ad1d4eaf36e95a9fa0b1a61edff0f75810b
672078fc6728ce8d749f3b8b645b4c5900ac551d025b2476134531138474979a
GET /imgs/htmlcssv11/music_clip_list_icon_bg32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 30 Jan 2015 15:43:34 GMT
Accept-Ranges: bytes
ETag: "0174781a33cd01:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 625
samp.waptrick.org/imgs/flags/NORWAY.png
162.251.163.98200 OK 2.2 kB URL HTTP/1.1 samp.waptrick.org/imgs/flags/NORWAY.png
IP 162.251.163.98:0
File type PNG image data, 25 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d63618403a5116c6f67652c052780939
76a973780634b8753544f896c10c07cf1d308cb6
a2afdc332e5e773e12aae4ac22807a41b982c338398e103b5d46aa28ef5728c7
GET /imgs/flags/NORWAY.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 12 Dec 2019 08:10:42 GMT
Accept-Ranges: bytes
ETag: "0ad8ea5c3b0d51:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 2214
samp.waptrick.org/imgs/htmlcssv11/new_music_icon32x32.png
162.251.163.98200 OK 1.9 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/new_music_icon32x32.png
IP 162.251.163.98:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5403612166c9a0c55ae1006dfb55528f
6b043201338f85e7eb69a12465059ee8502e3367
7747dc4e3f40289c701afbf500a4956d9167867a6c2b62933027118dbec403ac
GET /imgs/htmlcssv11/new_music_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Mon, 26 Jan 2015 11:03:00 GMT
Accept-Ranges: bytes
ETag: "08ac7a55739d01:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 1947
creepingbrings.com/sfp.js
104.21.234.233200 OK 23 kB URL HTTP/1.1 creepingbrings.com/sfp.js
IP 104.21.234.233:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 487ad2b48cd98e36abf708a3b60f4a36
ccf7b110523d50bb619becd48c3f013cc5fdce87
768eff747f795e1232d182eb859170e32d4f06ed29da872c09af5363c459668f
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 9d85a513ab0a385a7896d4dded7baa86
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Tue, 30 Aug 2022 02:21:51 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iyqSerZ9q84fpM5GsS%2B0S6ShTU878Xe2b%2FbzQhybyLEXGEd3Q%2F51sWdJedcf1m4GBeWP6Mh0fP8O94h0bUaZcuuQTzDdUmJiazWLoVB%2BN47%2B4QmGKW74R6locwSCgLShQXwAaP0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 742a0e2cea967786-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
syndication.exdynsrv.com/v1/api.php
95.211.229.247200 OK 4.1 kB URL HTTP/1.1 syndication.exdynsrv.com/v1/api.php
IP 95.211.229.247:0
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (9687), with no line terminators
Hash 4725abc14f94c0ed69e4374d99ed2ac8
62e2cb0de7d7eaff218dd72ef421f9cfecb8ffd8
2151e320bd615ef0ae7d53fb73aaca959b9c26997ee1dbf55637af0b4d0c90d7
POST /v1/api.php HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 277
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Headers: Authorization, Content-Type
Access-Control-Request-Method: POST
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 5d7d8cb71a0828029154db95f67cef48
fd2ccb76696b9e73b8ab3ade3a386205cc4b0180
fa22c1bf8151b2d4a4c72af8bf40658d9874ea59bf17ff6cdac1eed7b6fac2e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 02:21:51 GMT
Last-Modified: Tue, 30 Aug 2022 02:02:56 GMT
Server: ECS (nyb/1D10)
X-Cache: Miss from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 8Lx1WOWHpLfvWBEmU-Cuv9OFtixyuVyDT843itNVy0hKrO0XwCyRVQ==
Age: 1135
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 5d7d8cb71a0828029154db95f67cef48
fd2ccb76696b9e73b8ab3ade3a386205cc4b0180
fa22c1bf8151b2d4a4c72af8bf40658d9874ea59bf17ff6cdac1eed7b6fac2e8
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Tue, 30 Aug 2022 02:21:51 GMT
Last-Modified: Tue, 30 Aug 2022 00:39:55 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zCKZwcCm0e9VzDSZOIIgWWGmqbJf-e_zOiLlK3niGoX-NK-NeePqIw==
Age: 6116
simplewebanalysis.com/stats
3.127.140.33200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.127.140.33:0
File type ASCII text, with no line terminators
Hash a6639818afe246c39f97756fc44119b9
d19aac343455f0e9d89f4e60224cb5de1d2ad373
a82a9b348c70d33d879add67cdff80986ae033e4b751dd34ba73c576a11c7e6b
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://waptrick.com
access-control-allow-credentials: true
set-cookie: uid_id2=ee102cd0-6fcc-41a6-8bda-4dc354a104b2:3:1; expires=Fri, 27 Aug 2032 02:21:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
3.127.140.33200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 3.127.140.33:0
File type ASCII text, with no line terminators
Hash 02dff853d069d940133d89d6b546f511
a288117d7d1d3a86977ef105ea494ca989ee017b
1fe49ae748479e1e587905c9c67adee737ec9edcc895a6a2c606624eaa136a72
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://waptrick.com
access-control-allow-credentials: true
set-cookie: uid_id2=c61f9be4-89e2-4f80-b475-81646a815ef3:1:1; expires=Fri, 27 Aug 2032 02:21:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
addresseepaper.com/sfp.js
104.21.235.2200 OK 23 kB URL HTTP/1.1 addresseepaper.com/sfp.js
IP 104.21.235.2:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 487ad2b48cd98e36abf708a3b60f4a36
ccf7b110523d50bb619becd48c3f013cc5fdce87
768eff747f795e1232d182eb859170e32d4f06ed29da872c09af5363c459668f
Analyzer Verdict Alert quad9 Sinkholed
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: max-age=14400
X-Request-ID: 4528dc24fc9802a1937045b66c460391
Strict-Transport-Security: max-age=0; includeSubdomains
CF-Cache-Status: EXPIRED
Last-Modified: Tue, 30 Aug 2022 02:21:51 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3d4Sg4a2rV89A9UNtCec9vHYyGiBWOGSo2n2tWKBaq6hgptcoXoNcpGhY1dmID4N22SQbRIRkGlsVNQghvbK5COoWTANlTwVDj9NrsrFmYn0VNEWIbhMqBrcYFmijJGDD43g31Q%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 742a0e2cf9b071ba-LHR
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
samp.waptrick.org/special/imgs/arrow3.gif
162.251.163.98200 OK 4.7 kB URL HTTP/1.1 samp.waptrick.org/special/imgs/arrow3.gif
IP 162.251.163.98:0
File type GIF image data, version 89a, 46 x 45\012- data
Hash 5e3fe9cb5884127f8c5019d4e5024792
ef89e4b0b503f050f5da55721812e2aebfbdd821
ae854ce2fa9f63fac0194423327dd54da777ef172072c9b4e85160bb3a40d8dc
GET /special/imgs/arrow3.gif HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/gif
Last-Modified: Tue, 26 Mar 2019 06:51:37 GMT
Accept-Ranges: bytes
ETag: "9dbb9f5ba0e3d41:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 4725
samp.waptrick.org/imgs/htmlcssv11/clear_icon.png
162.251.163.98200 OK 294 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/clear_icon.png
IP 162.251.163.98:0
File type PNG image data, 21 x 15, 8-bit colormap, non-interlaced\012- data
Hash e7932d617d61ef466439d3379e29c5b4
5ffb19024492dc19a6108d0b6f0487f2193aadf7
ddec118279ef42ab6c7170391e8422ab7d647a85875cfd12b9ea4d55ea8cc7d6
GET /imgs/htmlcssv11/clear_icon.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 05 Oct 2012 15:59:42 GMT
Accept-Ranges: bytes
ETag: "0eb5d6e12a3cd1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 294
samp.waptrick.org/imgs/htmlcssv11/back_change_language_icon32x32.png
162.251.163.98200 OK 3.0 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/back_change_language_icon32x32.png
IP 162.251.163.98:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 9879e97102aaacacf42f1257a5afb761
e523a42312b049a9aadb51a0f0a62833ec1fca96
209d59d004a87671c892d53fffc966ec01aa511ba5cd5bef59c16b5455f24102
GET /imgs/htmlcssv11/back_change_language_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Wed, 09 Apr 2014 09:02:34 GMT
Accept-Ranges: bytes
ETag: "0712072d253cf1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 3042
cudgelridge.com/watchnew?shu=1372ff45e922ca899a58e38d6d1537e1f4fcae3682aea6f64401920347c65b2cd5a5e5fdcc49a948ffaa722e07d2ef04cd88e62686fee7c0e91baacde2687de6f2dcaaee4bc3f3b827c47bb548f06a8901285b84&pst=1661826171&rmtc=t&uuid=&pii=&in=false&key=0d90779d5172c783ebd7800dad489a3d&refer=http%3A%2F%2Fwaptrick.com%2F
192.243.61.225200 OK 1.7 kB URL HTTP/1.1 cudgelridge.com/watchnew?shu=1372ff45e922ca899a58e38d6d1537e1f4fcae3682aea6f64401920347c65b2cd5a5e5fdcc49a948ffaa722e07d2ef04cd88e62686fee7c0e91baacde2687de6f2dcaaee4bc3f3b827c47bb548f06a8901285b84&pst=1661826171&rmtc=t&uuid=&pii=&in=false&key=0d90779d5172c783ebd7800dad489a3d&refer=http%3A%2F%2Fwaptrick.com%2F
IP 192.243.61.225:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2322)
Hash 3bf229c7211113716d3d725324ef7b11
bc9c3b7bf83cde228881fa33c88ada435c14fe80
bbc18ed0ef06d13dab257ea1c6be3a4a619b99f651fa4ccf3d6a34c4db87e306
Analyzer Verdict Alert quad9 Sinkholed
GET /watchnew?shu=1372ff45e922ca899a58e38d6d1537e1f4fcae3682aea6f64401920347c65b2cd5a5e5fdcc49a948ffaa722e07d2ef04cd88e62686fee7c0e91baacde2687de6f2dcaaee4bc3f3b827c47bb548f06a8901285b84&pst=1661826171&rmtc=t&uuid=&pii=&in=false&key=0d90779d5172c783ebd7800dad489a3d&refer=http%3A%2F%2Fwaptrick.com%2F HTTP/1.1
Host: cudgelridge.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cudgelridge.com/watchnew?key=0d90779d5172c783ebd7800dad489a3d
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://waptrick.com/
Access-Control-Allow-Origin: http://waptrick.com/
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=14457359; expires=Wed, 31 Aug 2022 02:21:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 31 Aug 2022 02:21:51 GMT; secure; SameSite=None
uncs=1; expires=Wed, 31 Aug 2022 02:21:51 GMT; secure; SameSite=None
pdhtkv5=true; expires=Wed, 31 Aug 2022 02:21:51 GMT; secure; SameSite=None
uncs5=1; expires=Wed, 31 Aug 2022 02:21:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 317a7e2b4947da3bd1fd1e78b71ee6c5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
s3t3d2y8.afcdn.net/widget-branding-logo.png
185.76.9.16200 OK 1.5 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/widget-branding-logo.png
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type PNG image data, 94 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a95be207bf27c9a91720b8ac81976ca
6412e94ce13924fede8b1bec73cb8e049b76688c
5325d5beb64d82d48d3f7d78b606ee93b8e975a55868bba038905329ed1044b9
GET /widget-branding-logo.png HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: image/png
Content-Length: 1547
Connection: keep-alive
Last-Modified: Mon, 15 Apr 2019 09:03:59 GMT
ETag: "5cb448ff-60b"
Expires: Fri, 30 Jun 2023 16:01:02 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Cache-OP: HIT
X-Accel-Expires: @1688195204
Server: CDN77-Turbo
X-77-NZT: AblMCQ1181j/O9dOAA
X-77-NZT-Ray: 64b5OMHaTQA
X-Cache: HIT
X-Age: 5166907
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
s3t3d2y8.afcdn.net/library/551406/9666970f3af4e2c1501312eadc910fa7da72a5ce.jpg
185.76.9.16200 OK 16 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/551406/9666970f3af4e2c1501312eadc910fa7da72a5ce.jpg
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash 075ae891da5893d6a4914c673bcb23df
9666970f3af4e2c1501312eadc910fa7da72a5ce
06d0a655b9bf19996a5b1ffd875265a285bb753cf2798a61beb4aefd5e430657
GET /library/551406/9666970f3af4e2c1501312eadc910fa7da72a5ce.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: image/jpeg
content-length: 15657
last-modified: Wed, 26 May 2021 05:14:02 GMT
etag: "60add91a-3d29"
expires: Sat, 29 Jul 2023 14:09:02 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1690681173
server: CDN77-Turbo
x-77-nzt: AblMCQ2b0dn/augoAA
x-77-nzt-ray: pYlGbDXXHMY
x-cache: HIT
x-age: 2680938
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/702594/4eb0e249dddf76cea2a5b38f3b0408f9e7a0a985.jpg
185.76.9.16200 OK 26 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/702594/4eb0e249dddf76cea2a5b38f3b0408f9e7a0a985.jpg
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash fe3f6bf1620ec522163605cbea68b3b0
4eb0e249dddf76cea2a5b38f3b0408f9e7a0a985
130e81904f94c4c1a49b337b3d1f58fcedf4b8a0772220f3f4a315d87a0dfeb6
GET /library/702594/4eb0e249dddf76cea2a5b38f3b0408f9e7a0a985.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: image/jpeg
content-length: 25465
last-modified: Tue, 16 Mar 2021 14:48:52 GMT
etag: "6050c554-6379"
expires: Fri, 30 Jun 2023 18:49:27 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688195228
server: CDN77-Turbo
x-77-nzt: AblMCQ2kZHT/I9dOAA
x-77-nzt-ray: RBmrpXJ2Vy0
x-cache: HIT
x-age: 5166883
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/702594/9e5689a0de92e43938b5187e57f6add65ff65608.jpg
185.76.9.16200 OK 35 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/702594/9e5689a0de92e43938b5187e57f6add65ff65608.jpg
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash ea03442b4065697d0b7efcf48362ed05
9e5689a0de92e43938b5187e57f6add65ff65608
1b337e965dacb8b57d2fd63b5f5303f8c6965341025fabd6a753f07c3862e0a7
GET /library/702594/9e5689a0de92e43938b5187e57f6add65ff65608.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: image/jpeg
content-length: 35411
last-modified: Tue, 16 Mar 2021 14:48:52 GMT
etag: "6050c554-8a53"
expires: Fri, 30 Jun 2023 19:05:15 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688196980
server: CDN77-Turbo
x-77-nzt: AblMCQ2mYdT/S9BOAA
x-77-nzt-ray: Z6BHV8qUs8Q
x-cache: HIT
x-age: 5165131
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
s3t3d2y8.afcdn.net/library/551406/bf45fdb4f306fadbd08d76fb08ee9617adecc6c5.jpg
185.76.9.16200 OK 19 kB URL HTTP/2 s3t3d2y8.afcdn.net/library/551406/bf45fdb4f306fadbd08d76fb08ee9617adecc6c5.jpg
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x300, components 3\012- data
Hash a22bae949b684bf348010f5764820bb1
bf45fdb4f306fadbd08d76fb08ee9617adecc6c5
4b07c49f760a589f755c58fe79044b80bda6a9b959117951be72671510702f35
GET /library/551406/bf45fdb4f306fadbd08d76fb08ee9617adecc6c5.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: image/jpeg
content-length: 18723
last-modified: Wed, 08 Jun 2022 05:29:20 GMT
etag: "62a033b0-4923"
expires: Fri, 30 Jun 2023 11:15:26 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
x-cache-op: HIT
x-accel-expires: @1688198998
server: CDN77-Turbo
x-77-nzt: AblMCQ2PmNr/achOAA
x-77-nzt-ray: 5Nj1TR02bHg
x-cache: HIT
x-age: 5163113
x-77-pop: stockholmSE
x-77-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VP7UoEMQx8FV9gl2Sa9ON++1tB8QF22zsQ8U5UUGEe3uyCZ0PLJDPNJBBgkjqh3QAH6MGVTecms2FWN97dP9CUX8vb5/tzf5kv5yPd1STTUSHGItldQlRFWqWrBtPQQlE8ueQqVGeiRMCT2YZmEVEG9fR4u1+NgDDezZKotMDyvf0aDWttXoCWa19hWrSNoSftY4zjugn/R+yX191rd4Fia/xXYFJLMHDSa2KMI9zp5ePn3MmrPPZCbp425HubRDWLjViwrDFD6aWuI6eSU7JhHQOnUmqXX4FVAY5bAQAA
95.211.229.247200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VP7UoEMQx8FV9gl2Sa9ON++1tB8QF22zsQ8U5UUGEe3uyCZ0PLJDPNJBBgkjqh3QAH6MGVTecms2FWN97dP9CUX8vb5/tzf5kv5yPd1STTUSHGItldQlRFWqWrBtPQQlE8ueQqVGeiRMCT2YZmEVEG9fR4u1+NgDDezZKotMDyvf0aDWttXoCWa19hWrSNoSftY4zjugn/R+yX191rd4Fia/xXYFJLMHDSa2KMI9zp5ePn3MmrPPZCbp425HubRDWLjViwrDFD6aWuI6eSU7JhHQOnUmqXX4FVAY5bAQAA
IP 95.211.229.247:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA0VP7UoEMQx8FV9gl2Sa9ON++1tB8QF22zsQ8U5UUGEe3uyCZ0PLJDPNJBBgkjqh3QAH6MGVTecms2FWN97dP9CUX8vb5/tzf5kv5yPd1STTUSHGItldQlRFWqWrBtPQQlE8ueQqVGeiRMCT2YZmEVEG9fR4u1+NgDDezZKotMDyvf0aDWttXoCWa19hWrSNoSftY4zjugn/R+yX191rd4Fia/xXYFJLMHDSa2KMI9zp5ePn3MmrPPZCbp425HubRDWLjViwrDFD6aWuI6eSU7JhHQOnUmqXX4FVAY5bAQAA HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VP7UoEMQx8FV9gS5Im2+Z+618FxQe4trsg4t2hggrz8GYPWTs0ybSTLyGRieokfiNyED4Ywzk5JZXEprh/eIQyvo6Xz/eX/prOpwWFxFxhUoU02GxGIapEXmHM0CzkqlDPxcwEbMiggFiOdwInupsMlfD8dHu9HBBC2K0lmAQahL63tOHSqlsR8bn2JsqFfQxeuY8xlrYJ/2fs57egpplr1FFiASWScBvoD5ljTBVMvBNFHML1+/jxc+rALo8NZXbLW2R7GcayWm1UlMraqHW2ZfHOc1lp5Kqt/QLrTRhKYgEAAA==
95.211.229.247200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VP7UoEMQx8FV9gS5Im2+Z+618FxQe4trsg4t2hggrz8GYPWTs0ybSTLyGRieokfiNyED4Ywzk5JZXEprh/eIQyvo6Xz/eX/prOpwWFxFxhUoU02GxGIapEXmHM0CzkqlDPxcwEbMiggFiOdwInupsMlfD8dHu9HBBC2K0lmAQahL63tOHSqlsR8bn2JsqFfQxeuY8xlrYJ/2fs57egpplr1FFiASWScBvoD5ljTBVMvBNFHML1+/jxc+rALo8NZXbLW2R7GcayWm1UlMraqHW2ZfHOc1lp5Kqt/QLrTRhKYgEAAA==
IP 95.211.229.247:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA0VP7UoEMQx8FV9gS5Im2+Z+618FxQe4trsg4t2hggrz8GYPWTs0ybSTLyGRieokfiNyED4Ywzk5JZXEprh/eIQyvo6Xz/eX/prOpwWFxFxhUoU02GxGIapEXmHM0CzkqlDPxcwEbMiggFiOdwInupsMlfD8dHu9HBBC2K0lmAQahL63tOHSqlsR8bn2JsqFfQxeuY8xlrYJ/2fs57egpplr1FFiASWScBvoD5ljTBVMvBNFHML1+/jxc+rALo8NZXbLW2R7GcayWm1UlMraqHW2ZfHOc1lp5Kqt/QLrTRhKYgEAAA== HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VQ0UoEMQz8FX/glmSabJt79llB8QN2t3sg4p2ooMJ8vNkFz4SWtJnMJIEAB2kHxA1whB5dGTqEDIZB3Xh3/0BTfk1vn+/Py8twOa90V5ORjgYxVhndJUFNJBpdNTOBSET14jJWozoLJR1ezLZoEBFlEz493u5H0yHMe5MkGrOM8r1V9cDcwisQY1tmmFaN3vWkS+99nTfgf4vL5XXX2lVKtpTEfx8sagUGHvT6MKYJ9/T08XNeyCs858IYXrbId5pCNZPk7JgWRT3l2K2OJ5Q+r5GEsdZcROm/aTcdtVsBAAA=
95.211.229.247200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VQ0UoEMQz8FX/glmSabJt79llB8QN2t3sg4p2ooMJ8vNkFz4SWtJnMJIEAB2kHxA1whB5dGTqEDIZB3Xh3/0BTfk1vn+/Py8twOa90V5ORjgYxVhndJUFNJBpdNTOBSET14jJWozoLJR1ezLZoEBFlEz493u5H0yHMe5MkGrOM8r1V9cDcwisQY1tmmFaN3vWkS+99nTfgf4vL5XXX2lVKtpTEfx8sagUGHvT6MKYJ9/T08XNeyCs858IYXrbId5pCNZPk7JgWRT3l2K2OJ5Q+r5GEsdZcROm/aTcdtVsBAAA=
IP 95.211.229.247:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA0VQ0UoEMQz8FX/glmSabJt79llB8QN2t3sg4p2ooMJ8vNkFz4SWtJnMJIEAB2kHxA1whB5dGTqEDIZB3Xh3/0BTfk1vn+/Py8twOa90V5ORjgYxVhndJUFNJBpdNTOBSET14jJWozoLJR1ezLZoEBFlEz493u5H0yHMe5MkGrOM8r1V9cDcwisQY1tmmFaN3vWkS+99nTfgf4vL5XXX2lVKtpTEfx8sagUGHvT6MKYJ9/T08XNeyCs858IYXrbId5pCNZPk7JgWRT3l2K2OJ5Q+r5GEsdZcROm/aTcdtVsBAAA= HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VP0UoEMQz8FX9glyRNNs0966uC4gdc2xVEvBMVVJiPN3vImqGh00yaiZDIRHWSuBI5CB+METwHzSozm+L27h7K+Dq+fb4/95f5fFrhJBYKkyqkyRYzSlEligpjhhahUIVGcTOtYEMBJcRKvhN4ppvJUAmPD9eXwwkhZN5GgkmgSeh7axshrYa5SCy1N1F2jjH4ifsYY22b8N9jP78mNS2ck0mJBTRTSXOSoD8UTpsqmHgnigzCpXz8+Dl1YJfnhrKEle1m+zeMsZQatZO4t97NfF3H6os3d23e2i/VwD1hYgEAAA==
95.211.229.247200 OK 20 B URL HTTP/1.1 syndication.exdynsrv.com/cimp.php?t=api&data=H4sIAAAAAAAAA0VP0UoEMQz8FX9glyRNNs0966uC4gdc2xVEvBMVVJiPN3vImqGh00yaiZDIRHWSuBI5CB+METwHzSozm+L27h7K+Dq+fb4/95f5fFrhJBYKkyqkyRYzSlEligpjhhahUIVGcTOtYEMBJcRKvhN4ppvJUAmPD9eXwwkhZN5GgkmgSeh7axshrYa5SCy1N1F2jjH4ifsYY22b8N9jP78mNS2ck0mJBTRTSXOSoD8UTpsqmHgnigzCpXz8+Dl1YJfnhrKEle1m+zeMsZQatZO4t97NfF3H6os3d23e2i/VwD1hYgEAAA==
IP 95.211.229.247:0
ASN #60781 LeaseWeb Netherlands B.V.
Hash a4745abc5e7fdb89cc6df3069f3c6e69
74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed
d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
GET /cimp.php?t=api&data=H4sIAAAAAAAAA0VP0UoEMQz8FX9glyRNNs0966uC4gdc2xVEvBMVVJiPN3vImqGh00yaiZDIRHWSuBI5CB+METwHzSozm+L27h7K+Dq+fb4/95f5fFrhJBYKkyqkyRYzSlEligpjhhahUIVGcTOtYEMBJcRKvhN4ppvJUAmPD9eXwwkhZN5GgkmgSeh7axshrYa5SCy1N1F2jjH4ifsYY22b8N9jP78mNS2ck0mJBTRTSXOSoD8UTpsqmHgnigzCpXz8+Dl1YJfnhrKEle1m+zeMsZQatZO4t97NfF3H6os3d23e2i/VwD1hYgEAAA== HTTP/1.1
Host: syndication.exdynsrv.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0a33ba7be4a82ee3ea61ba9213ca39d3
15df43b3ff07de9a05a77df82de3abf767b22532
56f869e4731a71a8978d29d285db3d7337e5eb8844d081c1cbef639b2b26f6a7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56F869E4731A71A8978D29D285DB3D7337E5EB8844D081C1CBEF639B2B26F6A7"
Last-Modified: Sun, 28 Aug 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1894
Expires: Tue, 30 Aug 2022 02:53:25 GMT
Date: Tue, 30 Aug 2022 02:21:51 GMT
Connection: keep-alive
samp.waptrick.org/imgs/htmlcssv11/golge_10px.png
162.251.163.98200 OK 91 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/golge_10px.png
IP 162.251.163.98:0
File type PNG image data, 2 x 10, 8-bit gray+alpha, non-interlaced\012- data
Hash 3adcffb90087422d4d7cfeb880a49597
4462b6a9ecf51133959b333e8014b9b3c9927031
ea5c7819f351e03a6adbb3957c73e8f1b516039869c2667da27b188c92121a65
GET /imgs/htmlcssv11/golge_10px.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 31 Aug 2012 07:13:58 GMT
Accept-Ranges: bytes
ETag: "03f38304887cd1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 91
samp.waptrick.org/imgs/htmlcssv11/whatsapp_icon32x32.png
162.251.163.98200 OK 3.1 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/whatsapp_icon32x32.png
IP 162.251.163.98:0
File type PNG image data, 36 x 37, 8-bit/color RGBA, non-interlaced\012- data
Hash af1b134ddf468446228d0fb5f69c62d0
9ffd6a9d6d624e3ca00a6c49df8c0762aefeba30
f9f611dc16257617b61ba4b01892a5eeda564ed9430c14e0edf86d872d729097
GET /imgs/htmlcssv11/whatsapp_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 09 May 2019 10:03:17 GMT
Accept-Ranges: bytes
ETag: "89cf366c4e6d51:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 3057
sillinessinterfere.com/pixel/purst?dl=0&th=0&sc=0&rs=1626&rd=1626&fd=577&bv=22.8.v.1&tmpl=70
192.243.59.13200 OK 0 B URL HTTP/1.1 sillinessinterfere.com/pixel/purst?dl=0&th=0&sc=0&rs=1626&rd=1626&fd=577&bv=22.8.v.1&tmpl=70
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1626&rd=1626&fd=577&bv=22.8.v.1&tmpl=70 HTTP/1.1
Host: sillinessinterfere.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
banquetunarmedgrater.com/advertisers.js
192.243.59.12200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:51 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8d5cf9db8dd8636464df0242ad37f97f
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/cti/f6/35/b7/f635b77bafc2b1ad71606bdc54eae832/1627915979.png
45.133.44.10200 OK 99 kB URL HTTP/2 cdn.cloudimagesb.com/cti/f6/35/b7/f635b77bafc2b1ad71606bdc54eae832/1627915979.png
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced\012- data
Hash 59fc14989b83eecea47eb45a035deccf
7045cc026440c00106f4c9af3055ccf1d04eefae
c482478da1573a4ff26d9df46a35f7d273ac2b22fe67c68bf62c45aa62fa7389
GET /cti/f6/35/b7/f635b77bafc2b1ad71606bdc54eae832/1627915979.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cudgelridge.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:51 GMT
content-type: image/png
content-length: 98812
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 14:53:10 GMT
etag: "610806d6-181fc"
expires: Thu, 01 Sep 2022 02:21:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14990
Expires: Tue, 30 Aug 2022 06:31:42 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14990
Expires: Tue, 30 Aug 2022 06:31:42 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14990
Expires: Tue, 30 Aug 2022 06:31:42 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8483eb99dbd130593ed0072e2fbaccf9
fcb83f0b4a448f0b94b0bf9db431cc802413dacd
5e07e7bbf5dd7a48f9330dbc0248b7a1aa69dff7a9a913f493a384d2ec332f74
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5E07E7BBF5DD7A48F9330DBC0248B7A1AA69DFF7A9A913F493A384D2EC332F74"
Last-Modified: Sun, 28 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14990
Expires: Tue, 30 Aug 2022 06:31:42 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c4c8a2d-eb22-4a41-af7b-1b9056a15633.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c4c8a2d-eb22-4a41-af7b-1b9056a15633.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4352c2cb1e905c5f2f2e88a1cd5c2c99
5a57ae963a47eb9d11dbeb31e9d6740faf018def
45a60bafd18e7602005a16d86f2b969f8a3f220d1a999d7f2680b735388c2653
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c4c8a2d-eb22-4a41-af7b-1b9056a15633.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8736
x-amzn-requestid: e402643c-7ae2-41a7-bdc2-30542423d38d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpSwWFEkoAMFRAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d319b-5b530111143497dd2db988e7;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: N4s-TLJHA1QloiRNGiwhO8xxIXOjVm4Zq1Aj7Bg0el0Igp0GkKFJSg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:50:48 GMT
age: 16264
etag: "5a57ae963a47eb9d11dbeb31e9d6740faf018def"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30e82b5b-a56c-41b0-a279-56f51141a886.jpeg
34.120.237.76200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30e82b5b-a56c-41b0-a279-56f51141a886.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27d8d37b27d0408328438cffd4f0aee8
1d99159e207d5010b802244d2ed5599845147ba1
f69d79367acb29222021e5d3d0ff2bf4dbdced8adfe1291370a695144879d15b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30e82b5b-a56c-41b0-a279-56f51141a886.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7104
x-amzn-requestid: b25f82cc-2df3-473a-a799-aa3be6eb3034
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTR0GbUIAMF12g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d3271-2a332bd536e5ba2822bf8a8f;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ta8pVV4YTiCFUbhiWa9E7tT-Jz0Vx0l-IfPO52usuWuuvy-boDc5xA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:50:49 GMT
age: 16263
etag: "1d99159e207d5010b802244d2ed5599845147ba1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
samp.waptrick.org/imgs/htmlcssv11/white_transparent_bg.png
162.251.163.98200 OK 156 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/white_transparent_bg.png
IP 162.251.163.98:0
File type PNG image data, 50 x 41, 8-bit/color RGBA, non-interlaced\012- data
Hash 393837b5c8fb68fcb4d40762f47409ad
78a9a294025c862052fe164d785b2687cbdbdc7b
2bfe590cdd9bc99659992219cc6ece86327ffcb6e66ab95cd0e04098708467a8
GET /imgs/htmlcssv11/white_transparent_bg.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Fri, 13 Jul 2012 08:36:56 GMT
Accept-Ranges: bytes
ETag: "0419a9d260cd1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 156
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19e4053-4c42-4436-ba83-5e76fd16f5a4.webp
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19e4053-4c42-4436-ba83-5e76fd16f5a4.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0502c5060f29d82fd10f9f79459e2ce0
110f2eecf72c6b89f250ebefeff5ef664dc2f3f6
f722656c432bbec2baa63b6edc4116c1996850462864456105d9fea9c3bc7ff4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb19e4053-4c42-4436-ba83-5e76fd16f5a4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10056
x-amzn-requestid: 2eb7bbf2-47ad-4f80-98e8-ecb45e98961b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xguh2H_woAMFXnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6309c472-7dda060b4e7c81262aef3421;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 07:14:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 1cunCq4Z1J-oQSmTlcAtgfXO0A4_XpHKl2UHpRCbf75--3eHEIgZGQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 08:09:59 GMT
age: 65513
etag: "110f2eecf72c6b89f250ebefeff5ef664dc2f3f6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
samp.waptrick.org/imgs/htmlcssv11/more_content_icon32x32.png
162.251.163.98200 OK 778 B URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/more_content_icon32x32.png
IP 162.251.163.98:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash baec56d8e9b034c2849690fa5897ad47
d2ac9cce0eabd87eb375969970cc0647c03ec881
67c48950a529b391622aaddeaea1fe85fbb53c68557ecef82dbfc2c955171e2c
GET /imgs/htmlcssv11/more_content_icon32x32.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Wed, 09 Apr 2014 12:11:00 GMT
Accept-Ranges: bytes
ETag: "0227c5ec53cf1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 778
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2a55d6-b016-4fec-afbe-3f47854b5005.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2a55d6-b016-4fec-afbe-3f47854b5005.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 810b6cab69ecb2f72dd2e0360f40f1d9
1e92605c0d6cb7f3d423ecf3da32645fdeded8d6
b7981142e17e66684649389d755375800dee0d0cb9de8f6d562e62b992910d44
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2a55d6-b016-4fec-afbe-3f47854b5005.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5902
x-amzn-requestid: 79581460-c769-4ca6-bd4e-2aac2a6dc61f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpSc_FkPIAMFe_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d311f-730d3e17759130a52f5bb72b;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -6UcCSArrODIKtB6QUhP7P5yeDcF1L4jC4TWGLcf-kprHQZfEMZNvQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:43:55 GMT
age: 16677
etag: "1e92605c0d6cb7f3d423ecf3da32645fdeded8d6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f9132960db725a095b0db1773dc6f69
bf1d4347e1641da5aebe6ae438c0431232ae6242
0e0b84df674d48517a04819604deb555c904518f093784691de4914b6ddb9e9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac04243-b8b9-46aa-ad1f-285d333e6c88.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10672
x-amzn-requestid: 9044b578-ffc7-4890-a16f-bf6d5e242f46
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XnTWcEUnoAMF_UA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630c65c2-4397932f1417f6ab2463c4b0;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 07:07:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FYQeP7CvcQ32gOIUs05pGdUdbK7yM5puKWzMI6ylpLyE5uR7ncdzWw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 07:44:48 GMT
age: 67024
etag: "bf1d4347e1641da5aebe6ae438c0431232ae6242"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4aa2a22c2851d082acd55c1c9782cee9
20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e
d0d6a3cc781786f5377191e2b1f3495ac76f4f8af7c56291f761a49a167b8726
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67641144-189e-4213-b00d-7d27d45f0e9b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8684
x-amzn-requestid: b1f808e9-a765-453f-a7cb-2054d3dd45e6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpTRyGxKIAMFXkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d3271-79de3e365428be651400d407;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 21:41:05 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ciFN36F5h8hh3JPmeHR2WtZQcb4F1OUZFUnwntZfTwgST3EkV9Vy1Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Mon, 29 Aug 2022 21:52:03 GMT
age: 16189
etag: "20b6a116eb4d8a7c1321e09c7ad4d8aa1269603e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
samp.waptrick.org/imgs/htmlcssv11/newheader_sprite.png
162.251.163.98200 OK 7.7 kB URL HTTP/1.1 samp.waptrick.org/imgs/htmlcssv11/newheader_sprite.png
IP 162.251.163.98:0
File type PNG image data, 132 x 89, 8-bit/color RGBA, non-interlaced\012- data
Hash c69713a312d1b997f56a3cb735d20c18
e5cf3bfddfe63e46bae6878a3822b60df05708ac
1283d6887d31cbf075e56f03e88b9300ef4a5a1504203880046b7189b4e2dcef
GET /imgs/htmlcssv11/newheader_sprite.png HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://samp.waptrick.org/css/htmlv125_basic.css
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/png
Last-Modified: Thu, 18 Apr 2013 10:39:32 GMT
Accept-Ranges: bytes
ETag: "0cadd2213cce1:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 7735
samp.waptrick.org/special/videovak/videovak_336x280_2_en.jpg
162.251.163.98200 OK 16 kB URL HTTP/1.1 samp.waptrick.org/special/videovak/videovak_336x280_2_en.jpg
IP 162.251.163.98:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 336x280, components 3\012- data
Hash 9c5a9020912a7d2b38326bcc6bb766b6
6ef50751055494e7e43e96afd1fe3905d473faca
c150d9f05a2da55a56c7a32594fecec6f7a431178ab0db5721cac4b054d74f43
GET /special/videovak/videovak_336x280_2_en.jpg HTTP/1.1
Host: samp.waptrick.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Cache-Control: max-age=2592000
Content-Type: image/jpeg
Last-Modified: Fri, 10 Jan 2020 09:28:48 GMT
Accept-Ranges: bytes
ETag: "4c41a55c98c7d51:0"
Server: Microsoft-IIS/8.5
Date: Tue, 30 Aug 2022 02:21:49 GMT
Connection: close
Content-Length: 15818
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 6740a215291bd83e2862570abcf4b988
f8e411b85f14f2f7fa0d7570424e731ab32c8e74
f0231f67dc86e68f95127f808e9e7057b19881725f2b3c64d343062be05d6ee6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F0231F67DC86E68F95127F808E9E7057B19881725F2B3C64D343062BE05D6EE6"
Last-Modified: Sun, 28 Aug 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7571
Expires: Tue, 30 Aug 2022 04:28:03 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=c61f9be4-89e2-4f80-b475-81646a815ef3&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=bf0d7612e94ed920aec918d8bc477e4f&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=2
192.243.61.227200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=c61f9be4-89e2-4f80-b475-81646a815ef3&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=bf0d7612e94ed920aec918d8bc477e4f&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=2
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=c61f9be4-89e2-4f80-b475-81646a815ef3&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=bf0d7612e94ed920aec918d8bc477e4f&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=2 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 02:21:52 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 762c0a6afa9aaa59505701c8d85bc342
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=c61f9be4-89e2-4f80-b475-81646a815ef3&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=dafe7e98dace1e50d48969e5c8a626a4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=2
192.243.61.227200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=c61f9be4-89e2-4f80-b475-81646a815ef3&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=dafe7e98dace1e50d48969e5c8a626a4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=2
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=c61f9be4-89e2-4f80-b475-81646a815ef3&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.29&b_frame=0&pk=dafe7e98dace1e50d48969e5c8a626a4&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=2 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Tue, 30 Aug 2022 02:21:52 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 14d4fcc571753e66b1c194f2e3a4a22a
Strict-Transport-Security: max-age=0; includeSubdomains
decencyjessiebloom.com/sbar.json?key=dafe7e98dace1e50d48969e5c8a626a4&uuid=c61f9be4-89e2-4f80-b475-81646a815ef3%3A1%3A1
192.243.59.12200 OK 3.3 kB URL HTTP/1.1 decencyjessiebloom.com/sbar.json?key=dafe7e98dace1e50d48969e5c8a626a4&uuid=c61f9be4-89e2-4f80-b475-81646a815ef3%3A1%3A1
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5689), with no line terminators
Hash d849fe8c23b76b86321d83daf35f2532
31736a5c7476d71110f191db01593d6148b2eb07
2429222a7c4482d5d7f1ac54dfa442ed3a2c3d27a4e0d44a6a416316c48ed030
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=dafe7e98dace1e50d48969e5c8a626a4&uuid=c61f9be4-89e2-4f80-b475-81646a815ef3%3A1%3A1 HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:52 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: http://waptrick.com
Access-Control-Allow-Origin: http://waptrick.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15627934; expires=Wed, 31 Aug 2022 02:21:52 GMT; secure; SameSite=None
uid_id2=c61f9be4-89e2-4f80-b475-81646a815ef3:1:1; expires=Tue, 06 Sep 2022 02:21:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Wed, 31 Aug 2022 02:21:52 GMT; secure; SameSite=None
uncs=1; expires=Wed, 31 Aug 2022 02:21:52 GMT; secure; SameSite=None
pdhtkv29=true; expires=Wed, 31 Aug 2022 02:21:52 GMT; secure; SameSite=None
uncs29=1; expires=Wed, 31 Aug 2022 02:21:52 GMT; secure; SameSite=None
slecdafe7e98dace1e50d48969e5c8a626a4=[3364903]; expires=Tue, 30 Aug 2022 02:21:57 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5b5995731be93c6abe20fae6b9a87dd4
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 61a1ce60f68222ea23539ead32a62796
f7a8756a31ce3271c771e03a623bb82d2874a3e0
893aa15f459674be08625f9cb855cc9eefa556784d96950ef68df4bb8c1e82e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "893AA15F459674BE08625F9CB855CC9EEFA556784D96950EF68DF4BB8C1E82E6"
Last-Modified: Sun, 28 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1998
Expires: Tue, 30 Aug 2022 02:55:10 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 61a1ce60f68222ea23539ead32a62796
f7a8756a31ce3271c771e03a623bb82d2874a3e0
893aa15f459674be08625f9cb855cc9eefa556784d96950ef68df4bb8c1e82e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "893AA15F459674BE08625F9CB855CC9EEFA556784D96950EF68DF4BB8C1E82E6"
Last-Modified: Sun, 28 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1998
Expires: Tue, 30 Aug 2022 02:55:10 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 61a1ce60f68222ea23539ead32a62796
f7a8756a31ce3271c771e03a623bb82d2874a3e0
893aa15f459674be08625f9cb855cc9eefa556784d96950ef68df4bb8c1e82e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "893AA15F459674BE08625F9CB855CC9EEFA556784D96950EF68DF4BB8C1E82E6"
Last-Modified: Sun, 28 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1998
Expires: Tue, 30 Aug 2022 02:55:10 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 344 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 61a1ce60f68222ea23539ead32a62796
f7a8756a31ce3271c771e03a623bb82d2874a3e0
893aa15f459674be08625f9cb855cc9eefa556784d96950ef68df4bb8c1e82e6
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "893AA15F459674BE08625F9CB855CC9EEFA556784D96950EF68DF4BB8C1E82E6"
Last-Modified: Sun, 28 Aug 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3438
Expires: Tue, 30 Aug 2022 03:19:10 GMT
Date: Tue, 30 Aug 2022 02:21:52 GMT
Connection: keep-alive
decencyjessiebloom.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWskRRit3uQgioiyHhSUOQgqmEn3TE9Pj3tYjTESzG6WXcW9aXVV9aSc6q6mqnt6klNwcdnj7B%2BQzptkw2oQBa8uMlnYQ0DY8ZSD%2BQmCCHvyIDMbHP2g%2Bb7X7x3e9766vVecERcFPV29onekUnS5VXdrb930vEu1DZkWg9ogDD4P%2FEs103%2B3E9Tdt2sfCdbTyw3Xc13P9Wpr0ohYD5anJGR21PHqHbfuN%2Bpey8fA%2FB%2FbwoGlDnj%2FjLwEySeLD52LkGyMNPlhVdherrN3PkwKRXNt0OeHn6a9VJcpkvkYGwdxeniuhraP1x5Apwczu9D9f4WRnBDn0QNE6eG5SUT9%2FZnPSEGkiPhzKPtjCDWGpGMwfQuSPyYA47i6iTS5d1Wbkm4%2FZemUnZDFJ39BlhOy%2BPtFpMn3K0oOaje0KnKpU4tBXEEOxpDdMbLiGPnOBcjyGCz%2FCpL%2FSpafbCBN9jet0pD89A0WeHEnEv5S2BGNJT8O3aXIb7eWQi%2FwAxp6LRE3ZwFJOYaMx1BiCGodFNNPOihiB0XmIOGnNeZ5XtvljLphh7Emb4so4K5H27FHPTcIUbDpDkPk2RBMDcHMLjKzi54cwhS%2FwG5VsNyBzQn6vEIpCEpLUFKCUhKUOUHZrw64sg1b3ePKFpF33hvnvVmNdN7dowc674qU7GVn5MVZcH%2F0v0FPnNY4jUVbdEJOmfBEy%2BV%2B2Ak6osVCGjQC6sPKCtJemK25Mz3i3ReQTfvKs4joMaw6BpMvgxavgZajdsMF3Rr5oYud9KikWW4k69WZTsB1hSxfRL7t7Kkz8srMR%2FPmmxDs5PIX0ZXJn%2Ff%2FBjMVMlPhS%2FmQoKvujK7rkuxf16UlP25muUzkDp0e90ZOc7Hw7cdiu9SGr6%2Fa4f332ZSYjkefCJtv0JTLtGvJdyuSc2HWtGGC%2FLxuPxPRtcJurRQmLbKNax%2BsrSeZEdZKnY5B5YSQRydgckKe%2Belg9m5f%2Ffo2pBnDFBWS4oScF6Q%2BBst2YbO5f6sXYNRcE2UOyqIamUY0%2F6kkgRJzTKMK9j84ms979g665nXQ%2FBbSpELfVOirClQNYYuFUZ6Zk8u%2FNWeFSDmjSBlnP1JG3X0arpWntXaz6dKg0%2FLabSrakd8I48DjlDb8oBEEtIncTtjz%2BXv%2FAAAA%2F%2F8BAAD%2F%2F%2FNoUquCBAAA
192.243.59.12200 OK 7 B URL HTTP/1.1 decencyjessiebloom.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSQWskRRit3uQgioiyHhSUOQgqmEn3TE9Pj3tYjTESzG6WXcW9aXVV9aSc6q6mqnt6klNwcdnj7B%2BQzptkw2oQBa8uMlnYQ0DY8ZSD%2BQmCCHvyIDMbHP2g%2Bb7X7x3e9766vVecERcFPV29onekUnS5VXdrb930vEu1DZkWg9ogDD4P%2FEs103%2B3E9Tdt2sfCdbTyw3Xc13P9Wpr0ohYD5anJGR21PHqHbfuN%2Bpey8fA%2FB%2FbwoGlDnj%2FjLwEySeLD52LkGyMNPlhVdherrN3PkwKRXNt0OeHn6a9VJcpkvkYGwdxeniuhraP1x5Apwczu9D9f4WRnBDn0QNE6eG5SUT9%2FZnPSEGkiPhzKPtjCDWGpGMwfQuSPyYA47i6iTS5d1Wbkm4%2FZemUnZDFJ39BlhOy%2BPtFpMn3K0oOaje0KnKpU4tBXEEOxpDdMbLiGPnOBcjyGCz%2FCpL%2FSpafbCBN9jet0pD89A0WeHEnEv5S2BGNJT8O3aXIb7eWQi%2FwAxp6LRE3ZwFJOYaMx1BiCGodFNNPOihiB0XmIOGnNeZ5XtvljLphh7Emb4so4K5H27FHPTcIUbDpDkPk2RBMDcHMLjKzi54cwhS%2FwG5VsNyBzQn6vEIpCEpLUFKCUhKUOUHZrw64sg1b3ePKFpF33hvnvVmNdN7dowc674qU7GVn5MVZcH%2F0v0FPnNY4jUVbdEJOmfBEy%2BV%2B2Ak6osVCGjQC6sPKCtJemK25Mz3i3ReQTfvKs4joMaw6BpMvgxavgZajdsMF3Rr5oYud9KikWW4k69WZTsB1hSxfRL7t7Kkz8srMR%2FPmmxDs5PIX0ZXJn%2Ff%2FBjMVMlPhS%2FmQoKvujK7rkuxf16UlP25muUzkDp0e90ZOc7Hw7cdiu9SGr6%2Fa4f332ZSYjkefCJtv0JTLtGvJdyuSc2HWtGGC%2FLxuPxPRtcJurRQmLbKNax%2BsrSeZEdZKnY5B5YSQRydgckKe%2Belg9m5f%2Ffo2pBnDFBWS4oScF6Q%2BBst2YbO5f6sXYNRcE2UOyqIamUY0%2F6kkgRJzTKMK9j84ms979g665nXQ%2FBbSpELfVOirClQNYYuFUZ6Zk8u%2FNWeFSDmjSBlnP1JG3X0arpWntXaz6dKg0%2FLabSrakd8I48DjlDb8oBEEtIncTtjz%2BXv%2FAAAA%2F%2F8BAAD%2F%2F%2FNoUquCBAAA
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSQWskRRit3uQgioiyHhSUOQgqmEn3TE9Pj3tYjTESzG6WXcW9aXVV9aSc6q6mqnt6klNwcdnj7B%2BQzptkw2oQBa8uMlnYQ0DY8ZSD%2BQmCCHvyIDMbHP2g%2Bb7X7x3e9766vVecERcFPV29onekUnS5VXdrb930vEu1DZkWg9ogDD4P%2FEs103%2B3E9Tdt2sfCdbTyw3Xc13P9Wpr0ohYD5anJGR21PHqHbfuN%2Bpey8fA%2FB%2FbwoGlDnj%2FjLwEySeLD52LkGyMNPlhVdherrN3PkwKRXNt0OeHn6a9VJcpkvkYGwdxeniuhraP1x5Apwczu9D9f4WRnBDn0QNE6eG5SUT9%2FZnPSEGkiPhzKPtjCDWGpGMwfQuSPyYA47i6iTS5d1Wbkm4%2FZemUnZDFJ39BlhOy%2BPtFpMn3K0oOaje0KnKpU4tBXEEOxpDdMbLiGPnOBcjyGCz%2FCpL%2FSpafbCBN9jet0pD89A0WeHEnEv5S2BGNJT8O3aXIb7eWQi%2FwAxp6LRE3ZwFJOYaMx1BiCGodFNNPOihiB0XmIOGnNeZ5XtvljLphh7Emb4so4K5H27FHPTcIUbDpDkPk2RBMDcHMLjKzi54cwhS%2FwG5VsNyBzQn6vEIpCEpLUFKCUhKUOUHZrw64sg1b3ePKFpF33hvnvVmNdN7dowc674qU7GVn5MVZcH%2F0v0FPnNY4jUVbdEJOmfBEy%2BV%2B2Ak6osVCGjQC6sPKCtJemK25Mz3i3ReQTfvKs4joMaw6BpMvgxavgZajdsMF3Rr5oYud9KikWW4k69WZTsB1hSxfRL7t7Kkz8srMR%2FPmmxDs5PIX0ZXJn%2Ff%2FBjMVMlPhS%2FmQoKvujK7rkuxf16UlP25muUzkDp0e90ZOc7Hw7cdiu9SGr6%2Fa4f332ZSYjkefCJtv0JTLtGvJdyuSc2HWtGGC%2FLxuPxPRtcJurRQmLbKNax%2BsrSeZEdZKnY5B5YSQRydgckKe%2Belg9m5f%2Ffo2pBnDFBWS4oScF6Q%2BBst2YbO5f6sXYNRcE2UOyqIamUY0%2F6kkgRJzTKMK9j84ms979g665nXQ%2FBbSpELfVOirClQNYYuFUZ6Zk8u%2FNWeFSDmjSBlnP1JG3X0arpWntXaz6dKg0%2FLabSrakd8I48DjlDb8oBEEtIncTtjz%2BXv%2FAAAA%2F%2F8BAAD%2F%2F%2FNoUquCBAAA HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Cookie: u_pl=15627934; uid_id2=c61f9be4-89e2-4f80-b475-81646a815ef3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecdafe7e98dace1e50d48969e5c8a626a4=[3364903]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1dffa98e783b634de3f369aa782ce28c
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/css/animate.css
172.67.183.56200 OK 5.5 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/css/animate.css
IP 172.67.183.56:0
Hash 21f161968edd59617782250723935f44
cbbf10e0f602586e16716068a2bc818a874e0e94
35f91f778b8f59ccafbad216d08f539ee244a3f940b41af347bd56b534e5572d
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:52 GMT
content-type: text/css
last-modified: Mon, 17 Jan 2022 14:25:59 GMT
etag: W/"61e57c77-1358d"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 767327
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EV70czcBVLif95u5Ka4LEqC35Y9MpxxJ05ur1LASvQFyo16MaaQTqtaN%2Fm4qsKyIagNHj2LKV6k1Sd%2FGBaLur49n3NAddSMa9dEdr7YADkdK5zWNoffMDhVAA2ToFcs1S4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742a0e358d47b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/index.html
104.26.6.19200 OK 427 B URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/index.html
IP 104.26.6.19:0
File type HTML document text\012- HTML document, ASCII text
Hash 8693070f0adf83df6bb1cb58b14baf71
d465d54050430256e7faac3a5e5c1c5767fa85e9
3ac43eb1b36509f20c611a6c95cec9101245835a58910dea433c7270e16fecd6
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:52 GMT
content-type: text/html
last-modified: Wed, 09 Feb 2022 11:25:40 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 169667
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uUHWV1CseUgiL%2BNzcTyGkMS0cDESB2ndA90iepheBn30VoF%2Bpgml1tuHHO2s3bfOm%2BebhtL8VxNH5zc311gEUlbSL6Yj14c3Bsk1SKATCFR%2FNvoUnBa9YfbGMjGtt8BXqAQOET4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742a0e351b64b500-OSL
content-encoding: br
X-Firefox-Spdy: h2
waptrick.com/favicon.ico
104.36.23.148301 Moved Permanently 1.5 kB IP 104.36.23.148:0
File type gzip compressed data, from NTFS filesystem (NT)\012- data
Hash 0224583c0e5db4f0e32c5bff35b2e5ae
95e3f8b3ca7aa74b17b32b3aec84d59588e7a28c
0ce8ee4119351f3f007a3c678d5ca75d75cb5e970d6eb2fe2a482c0868e259e4
GET /favicon.ico HTTP/1.1
Host: waptrick.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/en/free/mp3/Jimmy-Nevis/
Cookie: uuid=0x12bf96a0b28d99b3; adsterra=Y; dom3ic8zudi28v8lr6fgphwffqoz0j6c=c61f9be4-89e2-4f80-b475-81646a815ef3%3A1%3A1; sb_main_dafe7e98dace1e50d48969e5c8a626a4=1; sb_count_dafe7e98dace1e50d48969e5c8a626a4=1; ppu_main_bf0d7612e94ed920aec918d8bc477e4f=1
HTTP/1.1 301 Moved Permanently
Server: Microsoft-IIS/7.5
Date: Tue, 30 Aug 2022 02:22:36 GMT
Content-type: text/html
Location: http://samp.waptrick.org/favicon.ico
Connection: close
Content-encoding: gzip
decencyjessiebloom.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F16%2Findex.html&l=1659&fd=28
192.243.59.12200 OK 0 B URL HTTP/1.1 decencyjessiebloom.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F16%2Findex.html&l=1659&fd=28
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.yourwebbars.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F16%2Findex.html&l=1659&fd=28 HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/js/script.js
172.67.183.56200 OK 257 B URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/js/script.js
IP 172.67.183.56:0
Hash 8e903260935524c1f5eb8e07417fc653
2eba6224960e767d7d9ceb5641fa06204551f668
b7a9e40afd034f0fe6d1fce20d4e469416b5ca9208593096fe2cc61dd441e44f
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:52 GMT
content-type: application/javascript
last-modified: Mon, 17 Jan 2022 14:40:54 GMT
etag: W/"61e57ff6-1e8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 345778
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yeSDgoDgq96OeAACdeKNhCyYgZHNDQWrkC0eGZNRGL0dS7wwc0v0RqtMKsKvrHXav%2BLEgnxOvN58lWevNhy%2FTcqS4wQluQebQIbm1YA51LtqcBTeZ0lQSMW1IAD7gKKODP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742a0e358d48b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
decencyjessiebloom.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F16%2Fcss%2Fanimate.css&l=79245&fd=61
192.243.59.12200 OK 0 B URL HTTP/1.1 decencyjessiebloom.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F16%2Fcss%2Fanimate.css&l=79245&fd=61
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fnotifications%2Futility%2Fdefault%2Fus%2Fblog%2FProgamerage%2Fflip_icon%2F16%2Fcss%2Fanimate.css&l=79245&fd=61 HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://waptrick.com/
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15744
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 24 Aug 2022 20:14:32 GMT
Expires: Thu, 24 Aug 2023 20:14:32 GMT
Cache-Control: public, max-age=31536000
Age: 454041
Last-Modified: Wed, 11 May 2022 19:24:48 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/1.1 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 15860
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 24 Aug 2022 20:15:21 GMT
Expires: Thu, 24 Aug 2023 20:15:21 GMT
Cache-Control: public, max-age=31536000
Age: 453992
Last-Modified: Wed, 11 May 2022 19:24:42 GMT
Content-Type: font/woff2
cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/css/style.css
172.67.183.56200 OK 2.9 kB URL HTTP/2 cdn.sb4you1.com/sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/css/style.css
IP 172.67.183.56:0
Hash c946033d4c42d9501c2a09f60ab09d0f
877d2347c2f1c79367a83f7c2baa08bdcb357fb5
497035342800ae6cd3012b45762116ee8357f95c10a9e038e7a49dbc3a20aa81
GET /sb/notifications/utility/default/us/blog/Progamerage/flip_icon/16/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://waptrick.com
Connection: keep-alive
Referer: http://waptrick.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 30 Aug 2022 02:21:52 GMT
content-type: text/css
last-modified: Wed, 09 Feb 2022 11:25:27 GMT
etag: W/"6203a4a7-2751"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 169667
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3UGdiRlwar%2BRYJH1lbozZS%2FFCBQHjFI1u3exfAkHj%2BAmaE%2BhQVVeKAyfLh2G%2BqB2LYSCLKyyWJI9MT1wMJaqfT%2FV3pvUMvpZlIuvYMIdiDbaZzJQKah%2BJ93Eh8vkASt%2FoBM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 742a0e358d46b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
decencyjessiebloom.com/pixel/sbs?c=1
192.243.59.12200 OK 0 B URL HTTP/1.1 decencyjessiebloom.com/pixel/sbs?c=1
IP 192.243.59.12:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://waptrick.com/
Cookie: u_pl=15627934; uid_id2=c61f9be4-89e2-4f80-b475-81646a815ef3:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slecdafe7e98dace1e50d48969e5c8a626a4=[3364903]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Tue, 30 Aug 2022 02:21:53 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
zonkewap.com/en/free/mp3/Jimmy-Nevis
104.36.23.145301 Moved Permanently 0 B URL HTTP/1.1 zonkewap.com/en/free/mp3/Jimmy-Nevis
IP 104.36.23.145:0
GET /en/free/mp3/Jimmy-Nevis HTTP/1.1
Host: zonkewap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Microsoft-IIS/7.5
Date: Tue, 30 Aug 2022 02:22:34 GMT
Content-type: text/html
Location: http://waptrick.one/en/free/mp3/jimmy-nevis
Connection: close
Content-encoding: gzip
waptrick.one/en/free/mp3/jimmy-nevis
104.36.23.151301 Moved Permanently 0 B URL HTTP/1.1 waptrick.one/en/free/mp3/jimmy-nevis
IP 104.36.23.151:0
GET /en/free/mp3/jimmy-nevis HTTP/1.1
Host: waptrick.one
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: Microsoft-IIS/7.5
Date: Tue, 30 Aug 2022 02:22:34 GMT
Content-type: text/html
Pragma: no-cache
Cache-control: max-age=0, no-store, no-cache, must-revalidate
Vary: accept-encoding, user-agent
Location: http://waptrick.com/en/free/mp3/Jimmy-Nevis/
Connection: close
Content-encoding: gzip