| racaty.net/tpg92s5zd1lq |  172.67.145.12 | 301 Moved Permanently | 0 B |
IP172.67.145.12:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tpg92s5zd1lq HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 02 Oct 2022 16:41:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 02 Oct 2022 17:41:12 GMT
Location: https://racaty.net/tpg92s5zd1lq
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YHAV91O06DPN04vbCKBWwpsCx%2Blyhwll%2BVzYzE80qY0Gq%2FloETC5JQL7gHULZTow6rEa3hpB8%2Bo0%2B1g%2BDYRPCqjLl81ZnYEZfVVUdQlOvCxl2T0doSgR%2FHGR1YMd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753ee25bfe940b65-OSL
alt-svc: h2=":443"; ma=60
|
|
| firefox.settings.services.mozilla.com/v1/ | 18.165.201.17 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP18.165.201.17:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 02 Oct 2022 16:03:11 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 04bb33465149b34afca4988622dca584.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: C-DxdQF0_cDw8Adph0huXFHafN7-SfbOlDrJhHDByM6i4DTKG0Rq3Q==
Age: 2281
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash60e4edea7b5f4d19f3547a3bb2d5df57 3ee076bab4da3416c2c5808f730cb316c28baef7 763e2dadfdd286a51327cd2000ca335e30cd0b9b7267875d22ca33f7556ba200
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5149
Expires: Sun, 02 Oct 2022 18:07:01 GMT
Date: Sun, 02 Oct 2022 16:41:12 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 108.156.28.95 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP108.156.28.95:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 02 Oct 2022 03:33:17 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 c9e93510e33ab69af0de2f41455fbb80.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: sUdx3hd5J16xXpsn-cLgb6jq5a5m0cRSLWriHb7_bsczhyhLmF3TjQ==
age: 47276
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 18.165.201.17 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP18.165.201.17:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Sun, 02 Oct 2022 16:32:56 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sun, 02 Oct 2022 16:54:57 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 bfad1bfbe8b9892941877774853e07da.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P3
X-Amz-Cf-Id: 0pRfKUCDbqOlj2OYevElTWddZKka-_Ab2CwBxtD_S4mnLXO-MkIcqA==
Age: 499
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4eb30b4a4234809cf7d5f89fa1f6ceeb 797242aab2f13c820050aa9accd11b7b950cd177 ce9d833a0ac321a908184b655d6632c481f758a04a9c936a7c303bb253444146
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4474
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:13 GMT
Last-Modified: Sun, 02 Oct 2022 15:26:39 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.161.230.192 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.161.230.192:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1yWJTUZ4Yaf5bMiDhZ9vPA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rlLhoOmM3gAX+vlpHJCumpt+F80=
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash83f9407574c75ca600c57af0637cb200 4ebabbc1900b8f575e90186e2024e48097b0c8d2 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash83f9407574c75ca600c57af0637cb200 4ebabbc1900b8f575e90186e2024e48097b0c8d2 1e166ac737e5c3c015e0dc0c68115ebc5eeb53958682a9b77928ddb647137ac1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash72e8c21988f5ecd736fde162321f0984 4bb9f82a2f6114b344600d920f91f1cc9260bc42 326533b2b3a8b24f0b21dbe9b94e5d9086f862ad74a1d01942fb829dff0352f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3710
Cache-Control: max-age=140273
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:14 GMT
Etag: "6339319d-1d7"
Expires: Tue, 04 Oct 2022 07:39:07 GMT
Last-Modified: Sun, 02 Oct 2022 06:37:17 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
|
|
| racaty.net/racaty_new/css/webfonts/fa-solid-900.woff2 | 172.67.145.12 | 200 OK | 118 kB |
URL HTTP/2racaty.net/racaty_new/css/webfonts/fa-solid-900.woff2 IP172.67.145.12:0
File typeWeb Open Font Format (Version 2), TrueType, length 117616, version 329.31064\012- data Size118 kB (117616 bytes) Hash00d3012700332144ce43a62a3b7ec4f1 49524191161f278c89e03476289f9c2e3415375d 47c58e41e2f38d9813c39b6641c96e12408522bf774779cb58973f67303875a7
GET /racaty_new/css/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://racaty.net/racaty_new/css/style.min.css?v=3.7
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: font/woff2
content-length: 117616
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: "1cb70-5c4c6339e211d"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 5799
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lTcS5db1jNc75WsADC1j6WKcjbN%2BgIEde3h2M6L0YnMrHfrqdi%2B5ENqhnI9pM4JLVGASEil6M3G%2FddeLaGY1QLLLbWhsfk6T%2BThD6%2FqkUFLFLnrFEyI%2Fma8hHlFG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ee266cc2cb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/css/webfonts/fa-brands-400.woff2 | 172.67.145.12 | 200 OK | 72 kB |
URL HTTP/2racaty.net/racaty_new/css/webfonts/fa-brands-400.woff2 IP172.67.145.12:0
File typeWeb Open Font Format (Version 2), TrueType, length 72124, version 329.31064\012- data Hash99f3121dc63babcf368cb6aee3b535f6 b9699e182c5f9a6fb2ef744f3089e3a7960fd4ca a3eb2d0caf3502359966882d146b1a75e34bf933cbdace1c286395ea3fd1f567
GET /racaty_new/css/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://racaty.net/racaty_new/css/style.min.css?v=3.7
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: font/woff2
content-length: 72124
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:51 GMT
etag: "119bc-5c4c6339bb403"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 5799
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8N95JsexkG5lImFjF%2F8swp9uuBwc4BYotn7%2Bn7tOlRPoaPAY4KzBbnFBjtVfcfSloYOvqOL%2Fxgn%2BQUVmqOZ07kgbOagePr2tCGwwhSNhC659neAC%2F75VTeQzKseR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ee266fc5ab50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasheb2de1a6c4c76b62bd9b5844ac8f0711 205f8666f86cf5f699ed5c8252c46004492fa88e d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasheb2de1a6c4c76b62bd9b5844ac8f0711 205f8666f86cf5f699ed5c8252c46004492fa88e d0f5a54640474e3d0383d5302a9899e8060456287379906d2359925c6d36c46b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd84ea19af5cccb1e0235479ab9bb2ead 9c500459d5bb98ff78d6534d9a5c186997c92e4c 44dcc04044df84ba1cafd3787ecf1d54e2d12f01cdc49858ee544c43fcfc7710
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44DCC04044DF84BA1CAFD3787ECF1D54E2D12F01CDC49858EE544C43FCFC7710"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7546
Expires: Sun, 02 Oct 2022 18:47:00 GMT
Date: Sun, 02 Oct 2022 16:41:14 GMT
Connection: keep-alive
|
|
| www.facebook.com/plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FofficialRacaty%2F&width=670&layout=button_count&action=like&size=small&share=true&height=46&appId | 157.240.221.35 | 200 OK | 0 B |
URL HTTP/2www.facebook.com/plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FofficialRacaty%2F&width=670&layout=button_count&action=like&size=small&share=true&height=46&appId IP157.240.221.35:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FofficialRacaty%2F&width=670&layout=button_count&action=like&size=small&share=true&height=46&appId HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: kurC1zYlnKTAEw8lqeLIhuJ9teEelPEDpZlHlgiPL7L7gO7MV+h6PBCmvHjeEkvp9cWsxM8nIj8XC3Lox7p6pw==
content-length: 0
date: Sun, 02 Oct 2022 16:41:14 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashd84ea19af5cccb1e0235479ab9bb2ead 9c500459d5bb98ff78d6534d9a5c186997c92e4c 44dcc04044df84ba1cafd3787ecf1d54e2d12f01cdc49858ee544c43fcfc7710
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44DCC04044DF84BA1CAFD3787ECF1D54E2D12F01CDC49858EE544C43FCFC7710"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7546
Expires: Sun, 02 Oct 2022 18:47:00 GMT
Date: Sun, 02 Oct 2022 16:41:14 GMT
Connection: keep-alive
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 | 216.58.207.195 | 200 OK | 13 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data Hashb4a68b1e743ee317eaaf0bbadd131571 f24f7823d4e3830c7cfa5bcb33733d2897c00f13 ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://racaty.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 29 Sep 2022 06:06:20 GMT
expires: Fri, 29 Sep 2023 06:06:20 GMT
cache-control: public, max-age=31536000
age: 297294
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 | 216.58.207.195 | 200 OK | 26 kB |
URL HTTP/2fonts.gstatic.com/s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 IP216.58.207.195:0
File typeWeb Open Font Format (Version 2), TrueType, length 25672, version 1.0\012- data Hashfe3e5be2baa0126122ba9367ebab73c8 40bec99106dfab5f3721ed725483eb618a9016cd 8b166007d6f54c33b3ea10ea23572bc3166f55f365840d3cbd6ef7b5dcf6674e
GET /s/quicksand/v30/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://racaty.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25672
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Sep 2022 21:16:00 GMT
expires: Tue, 26 Sep 2023 21:16:00 GMT
cache-control: public, max-age=31536000
age: 501914
last-modified: Mon, 18 Jul 2022 19:12:08 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/jquery-backstretch/2.0.3/jquery.backstretch.min.js |  104.17.24.14 | 200 OK | 1.5 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/jquery-backstretch/2.0.3/jquery.backstretch.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (3909) Hash1767f41cedce70298bf986847f55dbba 307c8be6864bc709e03c3163156aa9e2195de5f5 eb24bf2d83e4b6159f9d0a1732cd66904e66dba2d4bd8544d3385638196b62f3
GET /ajax/libs/jquery-backstretch/2.0.3/jquery.backstretch.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 1478
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec1-fcf"
last-modified: Mon, 04 May 2020 16:11:45 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7772223
expires: Fri, 22 Sep 2023 16:41:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j5wHmrBs5kMRE5c8ugt6PWon68i95q2nTpf4vo9EIt0FD9mHoHMSGWPKT5Muz6kYaNffizOuD5LG58xxTPnVf%2F5kDr1sr7qWUxeql1BSp44LkHUS4aCYO7v%2Fd92s%2FfopOFTGxuNp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 753ee26779c90afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js | 104.17.24.14 | 200 OK | 14 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (57791) Hashf7ec1f608a6644d182a2aef3308d3fc1 504609ff13eb3af8a2364b6753f73bc3ad3b4e1b 398376b9590200f385c71475b834492c281ce9cd34bc137a57f087e7a65bd7fb
GET /ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 13537
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb04010-e2d8"
last-modified: Mon, 04 May 2020 16:17:20 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15622871
expires: Fri, 22 Sep 2023 16:41:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nXtODGI7D%2FfCfEuXEAnmA3rvwVYVhO1go8rOqul0%2FqG2u5ZlKsOqpzf7fJvh48fz1qkWK6INZufe%2BDx%2FkKCVjs2yVFhxVrFoFOvYdZRATmmoW8%2Ffv1P7HwjvYsW%2Fw54tlVeHXcqw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 753ee26779c60afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.6 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (20831) Hash368c425fc94c424e1688caadefbed981 13d24c22c199ef6668d758434819f44307a65094 ed9c7a83e1c1300a93ecd08807a736ebe7b87ab8262a40bc7e3859d00a46a102
GET /ajax/libs/popper.js/1.14.7/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 6646
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-520c"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 349947
expires: Fri, 22 Sep 2023 16:41:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0HGV7REG8zOftqvJrjN9lUAJ9snBq81gsO%2BOf9LYnZus0xewkVyJofRw2vrirOQ0Zk3fMRGjzVssPAxSlS52ReJSE0Y8YbO4zwz1EHmZDwTRvOCOA7GnvLDfup3LpNv%2BbObP%2BgAN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 753ee26779ca0afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.4/clipboard.min.js | 104.17.24.14 | 200 OK | 3.0 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/clipboard.js/2.0.4/clipboard.min.js IP104.17.24.14:0
File typeUnicode text, UTF-8 text, with very long lines (10645) Hash3a22bcc6c05a8cbf8909ede597f5367d a230ada58d7db9020ceed9d993b5c9925c162c94 e13ba0e04c4706a07074d16b322d76631e957685ec6d5ca7c5c43e1e84ec87a1
GET /ajax/libs/clipboard.js/2.0.4/clipboard.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript; charset=utf-8
content-length: 2976
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e29-2a02"
last-modified: Mon, 04 May 2020 16:09:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2073595
expires: Fri, 22 Sep 2023 16:41:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pc%2FtkdouosJJ8mAmPMzJPKRRPhoLATXJVysyFkQ%2B2OLs975BKyFBhzVp4CLjHyHBBgWTuyIMP1IYayYjOSZirWkn4F5dW5Pb8n7aSO9ucA0vipwWhsSbRV1zBvvOOQGMZJZGoPgR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 753ee26779d00afa-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1664726400 | 172.67.145.12 | 200 OK | 14 kB |
URL HTTP/2racaty.net/cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1664726400 IP172.67.145.12:0
File typeASCII text, with very long lines (38212), with no line terminators Hash656b11504ba3f70f4b7dcdf3c844ed2b 74fecb8ce1e0387cf7fc219b3071d7217ae499f6 7b803e7b0ac4d43657a703940c7d9dcdcaa04a3485477f5eca77027ba376ab2c
GET /cdn-cgi/challenge-platform/h/b/scripts/alpha/invisible.js?ts=1664726400 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
cache-control: max-age=14400, public
x-control-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FX%2F%2Fgh0NEwt%2B5uNhb4vmrcv07WKJsXNb3WnSVrfN63k5HeQk8WUpM5K%2FgQxRpIRvLKDpeLknipiJrGU1oKQKGBQD4Q8lV%2Fm2oBsmkcdM5x%2FXitigS1ke0Zcc9RID"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee2675cf8b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash63ee7e605da25dbf1d62eea30a1ef246 c86b43b61afc5926ee7bc124cc30598d37ceb661 cb737283476421b6ce93b2909cf5277e82a7adbc3001f66946ff59ad6fabfdb2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js | 142.250.74.74 | 200 OK | 31 kB |
URL HTTP/2ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js IP142.250.74.74:0
File typeASCII text, with very long lines (65451) Hash81182f4b684635f6bdcbdd907ee66f25 a1f2f151df72ede41397c8131bd47a3ce85575b3 be40946c98d9a78a3c7c9ad097d379ab12549a195bd7a4766919a1d3fd987396
GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 15:53:22 GMT
expires: Wed, 27 Sep 2023 15:53:22 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 434872
last-modified: Mon, 13 May 2019 14:37:17 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| louchees.net/tag.min.js | 139.45.197.236 | 200 OK | 23 kB |
IP139.45.197.236:0
File typeASCII text, with very long lines (65536), with no line terminators Hash55bfb65a45375a59df27572861a64783 2838cf8e3623bfbccf2618dac1495f992dae2b6c 9c86b08b70bf998cacd69539dbd479bfe6cc5f973cd514cd8c3f29c21092b5c1
GET /tag.min.js HTTP/1.1
Host: louchees.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 22987
content-encoding: br
x-trace-id: 4f0a2b8e8a90e81be504c37bb5c226a0
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Wed, 28 Sep 2022 07:58:44 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf5e503471cc78b95c0a3e75785615e5f 145b1e4d850c145a78577b5d7d4fadae9658d7a4 61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4291
Expires: Sun, 02 Oct 2022 17:52:45 GMT
Date: Sun, 02 Oct 2022 16:41:14 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf5e503471cc78b95c0a3e75785615e5f 145b1e4d850c145a78577b5d7d4fadae9658d7a4 61bf2bddece68c7876ab5481c14ed1b1879343e55c86ee013b4f3a8d3353e6b4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61BF2BDDECE68C7876AB5481C14ED1B1879343E55C86EE013B4F3A8D3353E6B4"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4291
Expires: Sun, 02 Oct 2022 17:52:45 GMT
Date: Sun, 02 Oct 2022 16:41:14 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6047192460abf4afd600948abb5e6ee1 6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4 d1fd21a5913f6831d2128c8e9e84767d9730bf9e779da5395dc31b82a10e32e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18b1ba6d-ca56-4474-afa8-cd3b53cce28e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9340
x-amzn-requestid: e892265e-836d-4638-871f-0548eda57745
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf8FCEoAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-7f39bb92066a75a90868dd03;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Sk1Dahp1gliiBIghSCZselE7-Fy45svrCk7TdmunOwNefSNqY1P1jA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:47:23 GMT
age: 68031
etag: "6d6d52fb5024e7772dd45dd459bfe3ec90cb5ce4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg | 34.120.237.76 | 200 OK | 6.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9dddb9d84a16a3004821d89836b83dc3 087521979efd5936416fd7f030779fa5725f0a8f a6251ac43958031d765b5743d43e14bc04b1e465bed81f757c3609ee6f2bea66
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd4280e4-6b15-45b7-9469-d13ba14c37db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6871
x-amzn-requestid: e1fdb2ee-c0e7-4a0c-ae26-d968aef00503
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEIOGp2IAMFxSQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ce-24b26a8048ffd84071a2ad57;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:30 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -svKnYBuiMSdWObzJyNah9TDIi6IuPP6VMzEJWmn0zxoZbFmwpzkJw==
via: 1.1 c07670802688417c8b871124c547eb0a.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:35 GMT
age: 67659
etag: "087521979efd5936416fd7f030779fa5725f0a8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash206fb65e75dbadf119512f71e0b78402 58ff0bf8ce7528b303d28bab01a80ad721705569 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 02 Oct 2022 04:41:39 GMT
age: 43175
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg | 34.120.237.76 | 200 OK | 5.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash463bdcfbec5426e18ecef83b1c373b71 2e533332ee5c49143e58dad32ee3717a39179532 2c40befd28781482b9be249a792571612d68d7045324083d2c832fa5ec42f04b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F59054e54-a013-42c5-98a5-abe2b6af4fc6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4987
x-amzn-requestid: 763edd04-7f8d-42ae-8864-482be3549958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHpFs4oAMFbqg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3ca-2f7b67e85aa83b69183e62b5;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:26 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Zoggf30lA-Kvt5QYa-IdhGePHCNiphR7pfFiOaFvL8ZkWZIaiK4pA==
via: 1.1 f4367b41311e3e9a490d7461b7b85490.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:54:45 GMT
etag: "2e533332ee5c49143e58dad32ee3717a39179532"
content-type: image/jpeg
age: 67589
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg | 34.120.237.76 | 200 OK | 8.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash94d82ad8d70761f6ee1384b4183335f3 5d3389a965cfa45dab2202d89b40264368674e8a ad495dc0ede3bfcbaebfd3bf2eb55fc5596cd7643a539e030ccce0b8a3bcf8dd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d657f8a-70bc-42c6-9aae-1127c4403047.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8602
x-amzn-requestid: 89329169-bc7a-46b1-85fc-20383a85cae8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf9GxzoAMFg0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-27952f8357fa25c956b1cd72;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: YDfn3Xd8m6jaBrj_M9hs4dePku_eEhJbYv3NJSHjCdAWifhBkiKUhw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:38 GMT
age: 67656
etag: "5d3389a965cfa45dab2202d89b40264368674e8a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashedded48f558f739287a040151349ef67 d63b6ba630736d32c364b0e6a369274b2389b7ff 33b4a459df0ba7b36b907ba96d74e08660cc75640c42a5748b97d18ec2e9d533
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fccb5f775-a073-47ba-b076-ad1c96659b64.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11083
x-amzn-requestid: 53e2c961-bcc0-4977-8648-ee3c1aed9cde
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWEHRFWfIAMFhlA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b3c7-070212d7386d5efa1b4aa8d3;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Z1KmxHJh9QNfg5x0enkqOjbmiqHvg7nlQiMnuDuCRNWQUBFEiKELbw==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:35 GMT
etag: "d63b6ba630736d32c364b0e6a369274b2389b7ff"
content-type: image/jpeg
age: 67659
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash22bbadbf9153b08926fb421afeb1f325 ec618520fe120af4bab23db755a6437e3c28a15b ea1fe53fdaeb6d6ec08fdb0422ca5da69182c4c08cf3f152c5f0ca0a6495df05
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA1FE53FDAEB6D6EC08FDB0422CA5DA69182C4C08CF3F152C5F0CA0A6495DF05"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2653
Expires: Sun, 02 Oct 2022 17:25:27 GMT
Date: Sun, 02 Oct 2022 16:41:14 GMT
Connection: keep-alive
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash3f221772ec0c9958b2c88cae5babcd0b dc78dc227b42d1d4967d64c81374693440bf3f4f 037c8d5c260b070d810b31fd5d9db67c9aa44f3e103ec170cbd7234210555ba1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 16:41:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 29 Sep 2022 18:25:21 GMT
Expires: Thu, 06 Oct 2022 18:25:20 GMT
Etag: "dc78dc227b42d1d4967d64c81374693440bf3f4f"
Cache-Control: max-age=351245,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753ee26a5bb9b506-OSL
|
|
| my.rtmark.net/gid.js?userId=4327f2b9d5864a78b7b7022a5bf12271 | 139.45.195.8 | 200 OK | 65 B |
URL HTTP/2my.rtmark.net/gid.js?userId=4327f2b9d5864a78b7b7022a5bf12271 IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash4af7456197d8fdbfb10690b43b84883b 772c92dfbb71235ab1f9c1f13ee6a24a4b04b43e 14eb7138c6a694341c4b18e6ba9de6e5a9168c391c2540dbacdffee7d1969a44
GET /gid.js?userId=4327f2b9d5864a78b7b7022a5bf12271 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=4327f2b9d5864a78b7b7022a5bf12271; expires=Mon, 02 Oct 2023 16:41:14 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha2d3925dad8ae1248c7b5d96220bd00a 8b6326da45860d5f480504e23864de0c28523b61 421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ssl.google-analytics.com/ga.js | 142.250.74.40 | 200 OK | 17 kB |
URL HTTP/2ssl.google-analytics.com/ga.js IP142.250.74.40:0
File typeASCII text, with very long lines (1305) Hash01d5892e6e243b52998310c2925b9f3a 58180151b6a6ee4af73583a214b68efb9e8844d4 7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Sun, 02 Oct 2022 16:29:20 GMT
expires: Sun, 02 Oct 2022 18:29:20 GMT
cache-control: public, max-age=7200
age: 714
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hasha2d3925dad8ae1248c7b5d96220bd00a 8b6326da45860d5f480504e23864de0c28523b61 421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Oct 2022 16:41:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| racaty.net/cdn-cgi/challenge-platform/h/b/cv/result/753ee25dbf3eb50c | 172.67.145.12 | 200 OK | 477 B |
URL HTTP/2racaty.net/cdn-cgi/challenge-platform/h/b/cv/result/753ee25dbf3eb50c IP172.67.145.12:0
File typeASCII text, with no line terminators Hash9c41be52a74b14f76e604a86f7da937d 2a999dc7a7b15232d704beb5dcaf00dce2db768e bb5edaa9efc11c96abf5c583ce3da1706338e775941ceca8e9f63139875765d8
POST /cdn-cgi/challenge-platform/h/b/cv/result/753ee25dbf3eb50c HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12330
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english; __cf_bm=4O7Poz7_xsVMiH6P5.D4BzvKnH6fOFPCMcDhYOQT0kQ-1664728874-0-AdsYUDiCYaV8LHiCWkmRF6u3G6wh8Wfv9pZyUC7GQlp4i3MlyZSbUsyVrgL86sDCJKCIO8g1/MZysUloZBS/dP7eszkck9zfVWyLvr66qAX3H569SebD7vvVmRx0l2F6OQ==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=vIpaBRREX_1603gTkxMoPgpI7QTYnDH_23G8fGN2bwE-1664728874-0-AXPJe8hKdVGGZel7N14QCFRhJs3OVyrSb0f0FfWlV329Z9q0lx78YigRjkajpD3Rklv2hEDmClczJRwb+2VGpnGqY88TvwsblqI2OermXvg8a+UO7CYGPzYaPttDHntlDg==; path=/; expires=Sun, 02-Oct-22 17:11:14 GMT; domain=.racaty.net; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SUXw11S0e5nhKssAvjuB3RXtHLsX7wZ0JLFnNhhJLHnKb38rEhWjXPlQ%2F19QdOcxCDe7%2BIMfiFFfWkg0nZVDTkFyUbz0VnuvpWo7t%2Fzx9dirsdIgHLsqgt9KfAjT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee26c0cbdb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/42/38?z=3976876 | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2tovanillitechan.com/42/38?z=3976876 IP139.45.197.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /42/38?z=3976876 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=e071a91f30ce461e86f332271dfadac0; oaidts=1664728874
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:14 GMT
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 731800e1943f375452fdf97a1d512475
access-control-expose-headers: X-Sc
set-cookie: OAID=e071a91f30ce461e86f332271dfadac0; expires=Mon, 02 Oct 2023 16:41:14 GMT; secure; SameSite=None
oaidts=1664728874; expires=Mon, 02 Oct 2023 16:41:14 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hashf60bc2080bf7684041cc89c21e5b1619 fd872d2805bd8fde213f3d21f4a723383584d237 068fcdfb94bd56e0f3b9408d6b932c38fec1443a13c62c59e5e76c0a8081e2f9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 02 Oct 2022 16:41:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 01 Oct 2022 17:22:38 GMT
Expires: Sat, 08 Oct 2022 17:22:37 GMT
Etag: "fd872d2805bd8fde213f3d21f4a723383584d237"
Cache-Control: max-age=520281,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 753ee26d8ff6b506-OSL
|
|
| youradexchange.com/n/display.php?r=6300066&atag=1&czid=233thr5p0y&aggr=1&ppv=1 | 35.190.41.116 | 204 No Content | 0 B |
URL HTTP/2youradexchange.com/n/display.php?r=6300066&atag=1&czid=233thr5p0y&aggr=1&ppv=1 IP35.190.41.116:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /n/display.php?r=6300066&atag=1&czid=233thr5p0y&aggr=1&ppv=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: openresty
date: Sun, 02 Oct 2022 16:41:15 GMT
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&oaid=4327f2b9d5864a78b7b7022a5bf12271 | 139.45.197.239 | 204 No Content | 0 B |
URL HTTP/2tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&oaid=4327f2b9d5864a78b7b7022a5bf12271 IP139.45.197.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
OPTIONS /9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&oaid=4327f2b9d5864a78b7b7022a5bf12271 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://racaty.net/
Origin: https://racaty.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/suurl4.php?r=6300074&atag=1&czid=233thr5p0y&cbur=0.7596316336720289&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Resident%20Evil%204%20-%20PC.rar%20free%20download%20at%20Racaty&cbpage=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&cbref=&cbdescription=Racaty%20is%20cloud%20storage%2C%20data%20synchronization%20service%20where%20you%20can%20upload%20%26%20share%20large%20files%20for%20free%20without%20registration%2Fsign%20up%2C%20with%20no%20limits%20%26%20unlimited%20storage.&cbkeywords=&cbcdn=acscdn.com&aggr=1 | 35.190.41.116 | 204 No Content | 0 B |
URL HTTP/2youradexchange.com/script/suurl4.php?r=6300074&atag=1&czid=233thr5p0y&cbur=0.7596316336720289&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Resident%20Evil%204%20-%20PC.rar%20free%20download%20at%20Racaty&cbpage=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&cbref=&cbdescription=Racaty%20is%20cloud%20storage%2C%20data%20synchronization%20service%20where%20you%20can%20upload%20%26%20share%20large%20files%20for%20free%20without%20registration%2Fsign%20up%2C%20with%20no%20limits%20%26%20unlimited%20storage.&cbkeywords=&cbcdn=acscdn.com&aggr=1 IP35.190.41.116:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suurl4.php?r=6300074&atag=1&czid=233thr5p0y&cbur=0.7596316336720289&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Resident%20Evil%204%20-%20PC.rar%20free%20download%20at%20Racaty&cbpage=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&cbref=&cbdescription=Racaty%20is%20cloud%20storage%2C%20data%20synchronization%20service%20where%20you%20can%20upload%20%26%20share%20large%20files%20for%20free%20without%20registration%2Fsign%20up%2C%20with%20no%20limits%20%26%20unlimited%20storage.&cbkeywords=&cbcdn=acscdn.com&aggr=1 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://racaty.net/
Origin: https://racaty.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: openresty
date: Sun, 02 Oct 2022 16:41:15 GMT
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| youradexchange.com/script/push.php?r=6300070&ipp=1&mads=1&position=top&czid=233thr5p0y&aggr=1&atag=1&cbpage=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&cbref= | 35.190.41.116 | 204 No Content | 0 B |
URL HTTP/2youradexchange.com/script/push.php?r=6300070&ipp=1&mads=1&position=top&czid=233thr5p0y&aggr=1&atag=1&cbpage=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&cbref= IP35.190.41.116:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/push.php?r=6300070&ipp=1&mads=1&position=top&czid=233thr5p0y&aggr=1&atag=1&cbpage=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&cbref= HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://racaty.net/
Origin: https://racaty.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: openresty
date: Sun, 02 Oct 2022 16:41:15 GMT
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/11?rnd=612090075&z=3976876&b=14566424&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg==&ruid=a9c0a82f-8670-4985-a243-1becbe348b72&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&ot=148 | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2tovanillitechan.com/11?rnd=612090075&z=3976876&b=14566424&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg==&ruid=a9c0a82f-8670-4985-a243-1becbe348b72&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&ot=148 IP139.45.197.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /11?rnd=612090075&z=3976876&b=14566424&var=&rqtdbc=1&rcvdbc=1&btp=7&rb=oMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg==&ruid=a9c0a82f-8670-4985-a243-1becbe348b72&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&ot=148 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=4327f2b9d5864a78b7b7022a5bf12271; oaidts=1664728874
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: c00a4faff6db651f7c5f9a519d3d9fdc
access-control-expose-headers: X-Sc
set-cookie: OAID=4327f2b9d5864a78b7b7022a5bf12271; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
oaidts=1664728874; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash778732d06a43686fdee34ca25ecb40ea fcf46bd71c44b19fdbd97dffacae286eacca9a16 9626489b377fe9d71d2f051f02fc46329b29403f3b5d7e0e5b00ffa390f323d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9626489B377FE9D71D2F051F02FC46329B29403F3B5D7E0E5B00FFA390F323D4"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8075
Expires: Sun, 02 Oct 2022 18:55:50 GMT
Date: Sun, 02 Oct 2022 16:41:15 GMT
Connection: keep-alive
|
|
| interstitial-07.com/contents/s/d8/50/db/3008ab8caf4cc7d31e3920dfd5/0876908758031.jpeg | 139.45.197.155 | 200 OK | 21 kB |
URL HTTP/2interstitial-07.com/contents/s/d8/50/db/3008ab8caf4cc7d31e3920dfd5/0876908758031.jpeg IP139.45.197.155:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 256x256, components 3\012- data Hashd850db3008ab8caf4cc7d31e3920dfd5 27d23973fff676162e979b4696e2a3aa07801c73 6e46cbcff6d5b6b01c3b0ad71034fafcb1f590cec4d189d61a7a0c36c14498af
GET /contents/s/d8/50/db/3008ab8caf4cc7d31e3920dfd5/0876908758031.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=p8NYtlbFpV62T4w&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D52040234%26z%3D3976876%26b%3D14566424%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DoMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg%3D%3D%26bag%3Dfau4SF9FownNcHj8beUzeA%3D%3D%26ruid%3Da9c0a82f-8670-4985-a243-1becbe348b72%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252Ftpg92s5zd1lq%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D3%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: image/jpeg
content-length: 20778
last-modified: Thu, 16 Sep 2021 07:03:01 GMT
etag: "6142ec25-512a"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash94f9b42cc2b8053a78ece596fb76cd74 266ab6674dc4958b814c312b3ef154a904c37ec7 a02d6fef62ba6464204a25042119224783f8c6eb056be210f432f974cfe95917
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A02D6FEF62BA6464204A25042119224783F8C6EB056BE210F432F974CFE95917"
Last-Modified: Fri, 30 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9713
Expires: Sun, 02 Oct 2022 19:23:08 GMT
Date: Sun, 02 Oct 2022 16:41:15 GMT
Connection: keep-alive
|
|
| interstitial-07.com/contents/s/2f/0c/5c/05fe4242e3b0d6a0486ead3410/033925084315.jpeg | 139.45.197.155 | 200 OK | 47 kB |
URL HTTP/2interstitial-07.com/contents/s/2f/0c/5c/05fe4242e3b0d6a0486ead3410/033925084315.jpeg IP139.45.197.155:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 492x328, components 3\012- data Hash2f0c5c05fe4242e3b0d6a0486ead3410 2fe595fc2851b76263649bb2c4781f2c20933dd2 a22ffbd7bf69000b15925f4c7e1655fecf0774e360a897134a7708103a25024d
GET /contents/s/2f/0c/5c/05fe4242e3b0d6a0486ead3410/033925084315.jpeg HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/?l=p8NYtlbFpV62T4w&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D52040234%26z%3D3976876%26b%3D14566424%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DoMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg%3D%3D%26bag%3Dfau4SF9FownNcHj8beUzeA%3D%3D%26ruid%3Da9c0a82f-8670-4985-a243-1becbe348b72%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252Ftpg92s5zd1lq%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D3%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: image/jpeg
content-length: 47320
last-modified: Thu, 16 Sep 2021 07:03:00 GMT
etag: "6142ec24-b8d8"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| unphionetor.com/vctx?t=72747 | 139.45.197.236 | 204 No Content | 0 B |
URL HTTP/2unphionetor.com/vctx?t=72747 IP139.45.197.236:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /vctx?t=72747 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 3d9da4673657abd8112c9fd99392c47b
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined | 139.45.197.236 | 204 No Content | 0 B |
URL HTTP/2unphionetor.com/vbl?t=72747&bid=undefined&aid=undefined IP139.45.197.236:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /vbl?t=72747&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://interstitial-07.com
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
access-control-allow-origin: https://interstitial-07.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 992420c66e375cc315d9333d707a24df
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/11?rnd=612090075&z=3976876&b=14566424&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg==&ruid=a9c0a82f-8670-4985-a243-1becbe348b72&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2tovanillitechan.com/11?rnd=612090075&z=3976876&b=14566424&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg==&ruid=a9c0a82f-8670-4985-a243-1becbe348b72&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 IP139.45.197.239:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /11?rnd=612090075&z=3976876&b=14566424&var=&rqtdbc=0&rcvdbc=0&btp=7&rb=oMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg==&ruid=a9c0a82f-8670-4985-a243-1becbe348b72&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=4327f2b9d5864a78b7b7022a5bf12271; oaidts=1664728874
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 410780330b71eea6d655c702603fe412
access-control-expose-headers: X-Sc
set-cookie: OAID=4327f2b9d5864a78b7b7022a5bf12271; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
oaidts=1664728874; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
oaidvc=1; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
CNT=1_v1_GETeAAEAAABDSwAA; expires=Sun, 02 Oct 2022 17:41:15 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash91c43e8f8caa27091b10fc006c309e96 377251ce16059a304e1ada7e7bdade2eee86bfdb 81d98f635686a13e149a86149db28f794097b35fc0b7af82beb0199edfc82a38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91d14136-4e81-4e18-80ca-f688f18110b7.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 9073
x-amzn-requestid: 6337e85e-904c-4346-b11d-1cf213eba1a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWDf8EyIIAMF_Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338b2cc-05c231ba25850508201eda0d;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 21:36:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2WCasBR9fFvqGZ61uURK1W4vhzCBO81FTvpSCs6eKH8HBClVUFybpQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 01 Oct 2022 21:53:37 GMT
age: 67664
etag: "377251ce16059a304e1ada7e7bdade2eee86bfdb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| racaty.net/tpg92s5zd1lq | 172.67.145.12 | 200 OK | 0 B |
IP172.67.145.12:0
GET /tpg92s5zd1lq HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:13 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=0;includeSubDomains;
expires: Sat, 01 Oct 2022 16:41:13 GMT
set-cookie: aff=179723; domain=.racaty.net; path=/; expires=Sun, 16-Oct-2022 16:41:13 GMT
lang=english; domain=.racaty.net; path=/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w9ZUqFA8mDHCPg1GP%2FG3%2F%2BHhdD3mLzNCGXZ9ke6EiQjZ0PUjhgP8PS8ZsVxiQVPMCXg7aN1tZfLY3K7FNWxoy7U9BpVXAXAvkhuUOtjWGddf3mWuERLss05iouPL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee25dbf3eb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/css/style.min.css?v=3.7 | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/racaty_new/css/style.min.css?v=3.7 IP172.67.145.12:0
GET /racaty_new/css/style.min.css?v=3.7 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:13 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: W/"1c941-5c4c6339fcae7-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7503997
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B0dAL3%2FpmglWvOZ4mbbtP7hP51Swp7HlTszVQ8m4aL0rqahx07TfWfilWv9S%2BPEsE7JKL0OYw1frirAzlRFgJPx5hzq9YKUbps9qvXrkYVqyfRUutt0nXJGtvyuG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee265aac7b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/css/bootstrap.min.css | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/racaty_new/css/bootstrap.min.css IP172.67.145.12:0
GET /racaty_new/css/bootstrap.min.css HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/racaty_new/css/style.min.css?v=3.7
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:13 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: W/"2606e-5c4c633a141e9-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7503997
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P1TIV4odFwQe62TbGLhOXR7%2Fz%2FE1%2F08gbXxUg1N1CD0dT7GO9fuwvDJhNL6QPiUfrXoYg0%2FqMpCCTr%2BHW7rzmH30kMD%2F5ZF%2FXzWbpGqyr82qfZCM9Uhi0RrKNGhq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee265cae5b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/img/onehund.min.png | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/racaty_new/img/onehund.min.png IP172.67.145.12:0
GET /racaty_new/img/onehund.min.png HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:13 GMT
content-type: image/png
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:51 GMT
etag: W/"144c-5c4c633965ccd-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7503997
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QyG7HaKaVoCIAREsPeWcKBT7uX0%2BhB5X9ak5IA4Cp5GIJ19V9hzK1Zf9GZk1%2BExRFTKTrNti9ZHD0cRcXnWG2sp3dSv7Ly1ZFkDkU8yfx%2FmR5O6HQtsTMW93enUa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee265caf1b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Montserrat|Quicksand:400,500,700&display=swap | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Montserrat|Quicksand:400,500,700&display=swap IP142.250.74.10:0
GET /css?family=Montserrat|Quicksand:400,500,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 02 Oct 2022 16:41:13 GMT
date: Sun, 02 Oct 2022 16:41:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| louchees.net/apu.php?zoneid=3579972&oo=1 | 139.45.197.236 | 200 OK | 0 B |
URL HTTP/2louchees.net/apu.php?zoneid=3579972&oo=1 IP139.45.197.236:0
GET /apu.php?zoneid=3579972&oo=1 HTTP/1.1
Host: louchees.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/json
x-trace-id: 0bec8f8e52213d32be9dff862378d6fb
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: https://racaty.net
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=4327f2b9d5864a78b7b7022a5bf12271; expires=Mon, 02 Oct 2023 16:41:14 GMT; path=/; secure; SameSite=None
oaidts=1664728874; expires=Mon, 02 Oct 2023 16:41:14 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| racaty.net/rcty/favs/favicon-194x194.png?v=algwbxEnAR | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/rcty/favs/favicon-194x194.png?v=algwbxEnAR IP172.67.145.12:0
GET /rcty/favs/favicon-194x194.png?v=algwbxEnAR HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: image/png
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:46 GMT
etag: W/"e85-5c4c633464875-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:33:36 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7502858
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gIlxjmFQ6gMfa09FLb%2BBcvPQBxdVrVd7B%2BAsExSS4Ec71UaHuDKWUuC5e0sOX6Ot9H90blKuSShTITpSsV1PI39hoaguPEfwiV5BjTjoNCNsM3AD5ZhtRADkLoLy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee267edd6b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/cdn-cgi/challenge-platform/h/b/cv/result/753ee25dbf3eb50c | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/cdn-cgi/challenge-platform/h/b/cv/result/753ee25dbf3eb50c IP172.67.145.12:0
POST /cdn-cgi/challenge-platform/h/b/cv/result/753ee25dbf3eb50c HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 12330
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=4O7Poz7_xsVMiH6P5.D4BzvKnH6fOFPCMcDhYOQT0kQ-1664728874-0-AdsYUDiCYaV8LHiCWkmRF6u3G6wh8Wfv9pZyUC7GQlp4i3MlyZSbUsyVrgL86sDCJKCIO8g1/MZysUloZBS/dP7eszkck9zfVWyLvr66qAX3H569SebD7vvVmRx0l2F6OQ==; path=/; expires=Sun, 02-Oct-22 17:11:14 GMT; domain=.racaty.net; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zK2HoxDgymLh4kLyK7sF%2B%2BZdawhHP%2FOWtvGmuBBERhtCnSsF%2Fve3BMPxyfAlsEcY1JsH9l4Yz9an8%2B68X5xsLNgX9VQ3EgCCopZIQmR7E9ZKtg%2BP0JYqfEpqsQ62"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee269784ab50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/27/b7bd02994a2771796f8a835cfb750d4b | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2tovanillitechan.com/27/b7bd02994a2771796f8a835cfb750d4b IP139.45.197.239:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /27/b7bd02994a2771796f8a835cfb750d4b HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=e071a91f30ce461e86f332271dfadac0; oaidts=1664728874
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
cache-control: max-age:290304000, public
last-modified: Thu, 22 Sep 2022 08:42:06 GMT
expires: Thu, 22 Oct 2082 08:42:06 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| interstitial-07.com/?l=p8NYtlbFpV62T4w&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D52040234%26z%3D3976876%26b%3D14566424%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DoMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg%3D%3D%26bag%3Dfau4SF9FownNcHj8beUzeA%3D%3D%26ruid%3Da9c0a82f-8670-4985-a243-1becbe348b72%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252Ftpg92s5zd1lq%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D3%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 | 139.45.197.155 | 200 OK | 0 B |
URL HTTP/2interstitial-07.com/?l=p8NYtlbFpV62T4w&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D52040234%26z%3D3976876%26b%3D14566424%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DoMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg%3D%3D%26bag%3Dfau4SF9FownNcHj8beUzeA%3D%3D%26ruid%3Da9c0a82f-8670-4985-a243-1becbe348b72%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252Ftpg92s5zd1lq%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D3%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 IP139.45.197.155:0
GET /?l=p8NYtlbFpV62T4w&cd_meta_crid=50535&trkintimp&target_url=https%3A%2F%2Ftovanillitechan.com%2F12%3Frnd%3D52040234%26z%3D3976876%26b%3D14566424%26c%3D5990211%26var%3D%26d%3Dhttp%253A%252F%252Ftryhardnow.com%252Fbase.php%253Fc%253D350%2526key%253D2c1f9aa01554345b3025ac0d005c7bea%2526zoneid%253D%257Bzoneid%257D%2526banner%253D%257Bbannerid%257D%26cln%3D1%26btp%3D7%26rb%3DoMtx_Rxw1UcDPcQSHH_ebwqCZii75N5noK1mqEkbqbfzo6_kw8Tp7qoKZeL4gugan1tz2MCN_rk8R6vGsO3tC_yYMpt907dBYWn-sUxeb6W6GcoQzUa-Pbv4Pn-EWNEOlpJEYApyyCQfGSLmuBNj7fhOFEOMIZ4RJmMOmVEsvYyMG0EwntMMx-6eERiOSq7Zo-6Ul0P5TpbsHjHxIzasVrXoFgS44_E5UbofP9chPCp1NTiSxyEKJwvMPNdHhtA1rvwIrpeFfZ54mIAZPMfsTpGHPhk0LMDyC7de7-WKVXV6AzOgemLDNJjo3xj05_kG6C98tuwcWM19jdrB3XDNM23nGavQHRcJISHooAKmOdOqxa8V9PN9QFcMcHWUQUZp45HOvoa8vgSEQCBpRbr_zY0M06EopU__gTy31osP56Yub3QAZ9XARcBZ7pQuEToF2_vfEva3Sc5AOa4J3d3akfK50siWIborvwsp2D6XZyuHuc6H_rZK7ousxXKruiNEmPIqxWJskQY5tzIlz8G5Sb7YyvomOizLDJ95aiKvWLSZZm2IEu9PO9kUxAadtNC-59uqlwFXOwJvDJYSNtI4hIEID_XnGq5K002I78xc6LeCKvP-AuSew3ZPOpQh3GkD5_tB9Q6ZqdKMpE0BUv5_Bg%3D%3D%26bag%3Dfau4SF9FownNcHj8beUzeA%3D%3D%26ruid%3Da9c0a82f-8670-4985-a243-1becbe348b72%26ng%3D1%26ix%3D0%26pt%3D0%26np%3D1%26gp%3D-1%26bp%3D-1%26nw%3D1%26nb%3D1%26sw%3D1280%26sh%3D1024%26pl%3Dhttps%253A%252F%252Fracaty.net%252Ftpg92s5zd1lq%26wy%3D0%26wx%3D0%26ww%3D1280%26wh%3D1024%26cw%3D1268%26wiw%3D1280%26wih%3D939%26wfc%3D3%26sah%3D1002%26drf%3D%26hil%3D1%26ist%3D0%26tbc%3D0 HTTP/1.1
Host: interstitial-07.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/7.4.25
set-cookie: reverse=9WPN2bZWQzY6SHBdBwKXYTgB9AbY-yyNI8w6xsQkTQE; expires=Sun, 02-Oct-2022 17:41:15 GMT; Max-Age=3600; path=/
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| acscdn.com/script/atg.js | 104.21.82.12 | 200 OK | 0 B |
IP104.21.82.12:0
GET /script/atg.js HTTP/1.1
Host: acscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:13 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdsYeMqd1h5xQQ8mpDKYtDFSfEcoFRndqO0Lhz4JeNqWUKIBGJyxBwgvyViDBSmCnx5pT9AlBOBILkVPdquixeyLvaL45rUd
x-goog-generation: 1662291096576502
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97006
x-goog-hash: crc32c=cP6rPg==, md5=cHzYdZFLhO0KtH/SFwBqJw==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 02 Oct 2022 16:59:57 GMT
cache-control: public, max-age=14400
age: 2118
last-modified: Sun, 04 Sep 2022 11:31:36 GMT
etag: W/"707cd875914b84ed0ab47fd217006a27"
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=naX7Eg%2BBD%2Bh2NoxSY5xyLvZbcOJeNK7USh7uo1BYgCYqYuJQB9qWiVlb27l39v64QU8nzgxbtmygv6JO76GfxGBV3Q6CzGYnrPhDiyectzgydV5DulLnPf%2B9DD0E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 753ee2663999b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/1?z=3976876 | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2tovanillitechan.com/1?z=3976876 IP139.45.197.239:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /1?z=3976876 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: aa310791d5073bb4733bdd2361508a79
access-control-expose-headers: X-Sc
x-sc: r_LXFmn_ET0OprQhI5uAaCTHAEvIzzoN1w9KZ72UEZM0so17illxRiLwsmtFxM7qM0Q8Ohd6zrBF6SKhvk5rchuy2Tc=
set-cookie: scm=1; expires=Mon, 02 Oct 2023 16:41:14 GMT; secure; SameSite=None
OAID=e071a91f30ce461e86f332271dfadac0; expires=Mon, 02 Oct 2023 16:41:14 GMT; secure; SameSite=None
oaidts=1664728874; expires=Mon, 02 Oct 2023 16:41:14 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| unphionetor.com/fv.js?t=72747&cb=437894866 | 139.45.197.236 | 200 OK | 0 B |
URL HTTP/2unphionetor.com/fv.js?t=72747&cb=437894866 IP139.45.197.236:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /fv.js?t=72747&cb=437894866 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://interstitial-07.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: c23a2f5afb2babae2e32370c8ae9b4e8
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/js/scriptglobal.min.js?v=3 | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/racaty_new/js/scriptglobal.min.js?v=3 IP172.67.145.12:0
GET /racaty_new/js/scriptglobal.min.js?v=3 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript
x-frame-options: SAMEORIGIN
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
etag: W/"1fdf9-5c4c633a61836-gzip"
cache-control: max-age=31536000
expires: Fri, 07 Jul 2023 20:14:37 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 7503997
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CdHx3bcxKVwt3iED8WAANT7WzAQ6RhaM0LuKdnPwWn%2FxCXYzFJWwp3o3ckq0h9iiE2vin%2BjAyokcaqxOfJi8oPcbAC14fHDrnAoyzdLE5DuG7Yd%2BaU0HU1otKff4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee2673cc0b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/js/countdown.js?rand=dfgf1g | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/racaty_new/js/countdown.js?rand=dfgf1g IP172.67.145.12:0
GET /racaty_new/js/countdown.js?rand=dfgf1g HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=675
etag: W/"2a3-5c4c633a875b1-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 7503996
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dwQC97vsVCjwMzuZDmhcHUDLkArrGEa2QRRm2RDuETrJ3P7M%2Fdd%2BhQEvIGKuhpOn0KKiyp1eSO69bux8OUjxkwgJgzIp3V4LhV4xS50eV%2Bwxiv6BT0XxFKn3uSAj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee2673cc3b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/racaty_new/js/main.js | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/racaty_new/js/main.js IP172.67.145.12:0
GET /racaty_new/js/main.js HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=99128
etag: W/"18338-5c4c633a6d3b7-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:52 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 7503996
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yMN7O3rUU7pB0n2FYUn9gYeHZNPZXndr0wWkRSvghTa8UNMb0vJHrFyqiP2ztIB3RPQfm1NuBoD%2FXTMg5OQKauC0cGL%2FlWxrjhw52wVgJnfgtBF0YaC9cZzJjM7F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee2674cdcb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&oaid=4327f2b9d5864a78b7b7022a5bf12271 | 139.45.197.239 | 200 OK | 0 B |
URL HTTP/2tovanillitechan.com/9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&oaid=4327f2b9d5864a78b7b7022a5bf12271 IP139.45.197.239:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /9?z=3976876&ng=1&ix=0&pt=0&np=1&gp=-1&bp=-1&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fracaty.net%2Ftpg92s5zd1lq&wy=0&wx=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=3&sah=1002&drf=&hil=1&ist=0&oaid=4327f2b9d5864a78b7b7022a5bf12271 HTTP/1.1
Host: tovanillitechan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 260
Origin: https://racaty.net
Connection: keep-alive
Referer: https://racaty.net/
Cookie: scm=1; OAID=e071a91f30ce461e86f332271dfadac0; oaidts=1664728874
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://racaty.net
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION
x-trace-id: 06354145522813a14fcff18303ed380f
access-control-expose-headers: X-Sc
set-cookie: OAID=4327f2b9d5864a78b7b7022a5bf12271; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
oaidts=1664728874; expires=Mon, 02 Oct 2023 16:41:15 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| racaty.net/js/ctooltip.js | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/js/ctooltip.js IP172.67.145.12:0
GET /js/ctooltip.js HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=1738
etag: W/"6ca-5c4c633ae45ff-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:53 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 7503996
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GncJ8%2B94wEea%2FTKzCRCdrVCV8y4aMbONtiulB3FTTZm12dCGadk0QZNzAe90Bhg76VcvuDNG7QQQFVyv9sCkKhMScnRLtSWmNinSBCngVm0I26%2FYp9LTnQJuBm9n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee2673cc6b50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| racaty.net/r_dep.js?v=1.5 | 172.67.145.12 | 200 OK | 0 B |
URL HTTP/2racaty.net/r_dep.js?v=1.5 IP172.67.145.12:0
GET /r_dep.js?v=1.5 HTTP/1.1
Host: racaty.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://racaty.net/tpg92s5zd1lq
Cookie: aff=179723; lang=english
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 02 Oct 2022 16:41:14 GMT
content-type: application/javascript
cache-control: max-age=31536000
cf-bgj: minify
cf-polished: origSize=2297
etag: W/"8f9-5c4c633751908-gzip"
expires: Fri, 07 Jul 2023 20:14:38 GMT
last-modified: Tue, 15 Jun 2021 04:13:49 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 7503996
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HoZvEXTh0FZ3d3y0PDjgVEMRWuxL223FuZ6WklcGpuhwLZQDyQ8qXDmgqpEyRACMehoLnH3pNi%2F2AQYRe5UwrXGzumFnqr9KkGT4AJgOYlxj42vB2NORFT5km9xd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 753ee2674ccbb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| youradexchange.com/ad/czcf.php?cz=233thr5p0y | 35.190.41.116 | 200 OK | 0 B |
URL HTTP/2youradexchange.com/ad/czcf.php?cz=233thr5p0y IP35.190.41.116:0
GET /ad/czcf.php?cz=233thr5p0y HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://racaty.net/
Origin: https://racaty.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 02 Oct 2022 16:41:15 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|