firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 01:02:13 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ainD12c3-QuiHsgkeQylS7Q6LCSuxwrVXT4Tpe7enKfBA0K2NegcwQ==
Age: 2230
codegratuit.net/
200 OK 329 B IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: codegratuit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 11 Sep 2022 01:39:24 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14243
Expires: Sun, 11 Sep 2022 05:36:47 GMT
Date: Sun, 11 Sep 2022 01:39:24 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WmKMrw_-q3fvssmWRslYNjBccjkuzOFtgmBCq6Gi7GejWoBqgp6rrw==
age: 66132
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
200 OK 28 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 4b5f47439b640180cc3450f7de05d0d8
5a0dc9bcab80ddc409dd35fcb00a88fe6846fee2
1f85e8b327f42c17c025d69849914068536d9aa95412fe473ae90ffb2f4ebd82
GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://codegratuit.net
Connection: keep-alive
Referer: http://codegratuit.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 01:39:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 27958
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb09ed3-15d84"
last-modified: Mon, 04 May 2020 23:01:39 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 8304068
expires: Fri, 01 Sep 2023 01:39:24 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cEz%2BQ59ALB4Tsqx2M2HMZr06VkiAz1Rh8VagVAiIQgSxAw9HDG0i20808wIpxBmxBxecszRazTl546AduHEeswlhPrqOg4WAxIcRoLdg0Q46dzRE0z5jiR0BCfj4SZ4C2dgARZ5Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 748cb0808eebb517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 01:39:24 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 703c3b43c74f4ada748b6ee077b94462
0ee56d4ab6c06bcacee73fc73ac596bbafb57239
8ae688ac279de79c7ba31bcfea870d65a760d692a0a1274f71b269054ce708a8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "8AE688AC279DE79C7BA31BCFEA870D65A760D692A0A1274F71B269054CE708A8"
Last-Modified: Sat, 10 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16020
Expires: Sun, 11 Sep 2022 06:06:24 GMT
Date: Sun, 11 Sep 2022 01:39:24 GMT
Connection: keep-alive
codegratuit.net/favicon.ico
200 OK 329 B URL HTTP/1.1 codegratuit.net/favicon.ico
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ecbcb8bae64098de3e587487b474f8b8
e275409fb40ea27c3826af493f70faf147d0f995
2597a3f2418586d8a9fb0764743a84486ba066c6af3ff194922fb6c65a783688
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: codegratuit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://codegratuit.net/
HTTP/1.1 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 11 Sep 2022 01:39:25 GMT
content-type: text/html
last-modified: Wed, 12 Jan 2022 17:20:45 GMT
etag: W/"61df0ded-1ad"
content-encoding: gzip
transfer-encoding: chunked
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 11 Sep 2022 00:56:07 GMT
Cache-Control: max-age=3600
Expires: Sun, 11 Sep 2022 01:08:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dlbyyJ4j2Tod83-AZZusr5BbQrSDnVHOC9OZLKdKqYd-adBrS3OR7g==
Age: 2598
domaincntrol.com/?orighost=http://codegratuit.net/
200 OK 28 B URL HTTP/2 domaincntrol.com/?orighost=http://codegratuit.net/
IP
File type ASCII text, with no line terminators
Hash a976531385725cf1f4fad81bff2709fa
2e09e75ceaaa9553a9a7de4d6d51d1eca8e6c73f
74a1fd6f5b1850c3290cb6287f907eff44743e1de9ee6f41451e1f7c3942341a
GET /?orighost=http://codegratuit.net/ HTTP/1.1
Host: domaincntrol.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://codegratuit.net
Connection: keep-alive
Referer: http://codegratuit.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 11 Sep 2022 01:39:25 GMT
content-type: text/javascript;charset=UTF-8
content-length: 28
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ud3U6DbzAp%2FuNVAVO5r8nCxhvZf5t7xYniX9LgS8%2B3n16s%2FY3nKhJ1EOzNJXPYByGjXJc%2FDh779mBj1C%2BRIxA2VPONqitVhXpbzSYv1T2fgvVBCF96HylfcrHSDkIqNQDdw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 748cb0812c7c0b06-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 36fe04277220227ba5ecfe7d2ff1d9d9
2eb9f6560336248cc45c1cd66d87505b5ebdf5d4
94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4969
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 01:39:25 GMT
Last-Modified: Sun, 11 Sep 2022 00:16:36 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C1Z2tkCl9XienWmxNtHMrw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kCuOT/P5Rm7F9OcpBn1zeQrIxdc=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15307
Expires: Sun, 11 Sep 2022 05:54:33 GMT
Date: Sun, 11 Sep 2022 01:39:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15307
Expires: Sun, 11 Sep 2022 05:54:33 GMT
Date: Sun, 11 Sep 2022 01:39:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15307
Expires: Sun, 11 Sep 2022 05:54:33 GMT
Date: Sun, 11 Sep 2022 01:39:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd9e47f-6214-4e20-b9ff-3e738ad551e3.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd9e47f-6214-4e20-b9ff-3e738ad551e3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 47ae5cf125ce99bad80c283de8a85cec
0c0c1f84d8693d0c150c97faed21204622d48132
95f5b8cddbfcdb2b6105ed5a0d5ff0dd86390839e5df7416d4f879d69fcf20c1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0dd9e47f-6214-4e20-b9ff-3e738ad551e3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6269
x-amzn-requestid: 8f3cabdd-78c3-47d2-841b-02b674a79123
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FSCoAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-4b44c935456026ba700a5759;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3lrbjYxWvd1Cm5rO-XAy1tCULAXdaeVZJAPCImd9GqQC7uZ3r3TxeA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:46:28 GMT
age: 13978
etag: "0c0c1f84d8693d0c150c97faed21204622d48132"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6d8445a-180c-442b-bbf8-b1d1c1f11deb.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6d8445a-180c-442b-bbf8-b1d1c1f11deb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2293bd4f960ea1c141a1c96101c228e4
a58b35b79806c3af981c5cfb219364a6b85ccaf8
1a6c5b918de60160d9b2aa5c7ec8dffc675a08380ef7f391999d6b2af6a08071
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6d8445a-180c-442b-bbf8-b1d1c1f11deb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7595
x-amzn-requestid: 30d23edb-7ec6-4c70-a0fd-bffa7fe29dba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0erTHdvIAMFo-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ab14-1e49dd2e1a5928017d542cf9;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:04:52 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: W6iet4rnG60OsdntFwXVqReNaCwNl8qYQhzN1MC1GVqbUC2dOKDzZA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 07:30:51 GMT
age: 65315
etag: "a58b35b79806c3af981c5cfb219364a6b85ccaf8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ec2646c56c4c522f0744768ad20342b
ad1d9eee90556a359547dc7cbb6758aee2c804cd
0bf9eaa4420bf6290535fd23895c6c723c7de6b849995ba83774532862cfe8b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7635
x-amzn-requestid: dbd07cc7-d0f6-4500-83c6-b19fa9fa2e3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xt5xDEfUIAMFYXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630f09a0-3771b23118f3711e5caca699;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 07:11:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ILut4hEDJbs6jNr3wpPST1HgAYMabIT7cdZebRFETn8lL_QfS92KBA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 00:50:01 GMT
age: 2965
etag: "ad1d9eee90556a359547dc7cbb6758aee2c804cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57d797a1c3f6589746a1135bdb19f54f
7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97
ff8855ca951f53ed5f3886cc81a7f28384d41288edeca4fdc621250e4d01c6fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6889
x-amzn-requestid: c82ac543-90cd-4aeb-a65b-7e1bbbacc407
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2UEE-3IAMFYBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d0419-427a29067c9c92ec0db6567f;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:39:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BPWrjstB3xKeYzHK9eQoJL8ORgRFsqjmNxu0j10epBANBtZCRU-m2g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:43:06 GMT
age: 14180
etag: "7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99bd16c51d8e4853d6ee542d2ec9fb22
a9f77626875d68e1aea2516f78d491eba9969e37
b360c3c9fa12dc4f57fdbfc88fe820ecee1c049f2d43f44cd38b740513d8e9f8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8092dc3d-1f2d-4e22-b40a-bf1c53ea42e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10298
x-amzn-requestid: f2e2d57b-1f6f-401a-bf0d-ca5c05dd5e59
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE-nmHBKIAMFrZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63184496-52d1369463143fc94894e347;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:13:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: xW7Lli2tEVlm-nAL_JANbf0u4uZcPpslrE3rd2rWPoj_af_2WpiJ8Q==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:41:01 GMT
age: 14305
etag: "a9f77626875d68e1aea2516f78d491eba9969e37"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe41cdec0-ceff-4e9c-88a7-3a5565f1a459.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe41cdec0-ceff-4e9c-88a7-3a5565f1a459.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12666d69f9af3ceb23fdfc2100bd3226
c4d17e3ea44ef6dee9819c1586424e5f056f149c
054236a4d1f88a486f48b8f3a8ac01d21ec2179d5b1f3fc9791d0982d07a88a2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe41cdec0-ceff-4e9c-88a7-3a5565f1a459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5752
x-amzn-requestid: 622ffff0-1bd5-4eb4-a9ff-eb54c5ae44a7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YBrqiFiToAMF0tA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6316f310-49efdcc572b4fad3543f857d;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VKsU4S6tKOso216JLUWn7b1bKDyfruIVukt98JooNCjwaXDT9bkPYQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 19:50:13 GMT
age: 20953
etag: "c4d17e3ea44ef6dee9819c1586424e5f056f149c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ww2.codegratuit.net/
200 OK 1.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (647)
Hash 34d4a63d41aac21a7eaa500b2ea45f8d
586d1c3dd3a9ff6c09ceabb1d3028c964b77de93
0c9352ca4395c22bcc0f6b87f34c77d78cf3e989bf73008fd2108aac5cf5d441
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: ww2.codegratuit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://codegratuit.net/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Sun, 11 Sep 2022 01:39:28 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_LNRWiNPZvFhXRtgJncxPv1pJ2b9w16r2WwNpSqMaFlGqyhACXSNUsVDKV/8nIlewwCvm9P6eBDBluw0ShzyUzg==
last-modified: Sun, 11 Sep 2022 01:39:25 GMT
x-cache-miss-from: parking-b7c449b98-k5vhs
server: NginX
content-encoding: gzip
img.sedoparking.com/images/js_preloader.gif
200 OK 4.3 kB URL HTTP/1.1 img.sedoparking.com/images/js_preloader.gif
IP
File type GIF image data, version 89a, 16 x 16\012- data
Hash 90c93102a88c2ab94bff1575b7a6e86e
56d71bf13de464534643db9d127629a0a3bf677a
5f6ad7031600056b578a6e8c6b34bc718d13125cc8256aa4a9050e549576f81a
GET /images/js_preloader.gif HTTP/1.1
Host: img.sedoparking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.codegratuit.net/
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 01:39:28 GMT
Content-Type: image/gif
Content-Length: 4254
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=604800
Expires: Sun, 18 Sep 2022 01:39:28 GMT
X-CFHash: "90c93102a88c2ab94bff1575b7a6e86e"
X-CFF: B
Last-Modified: Fri, 15 Mar 2019 12:24:07 GMT
X-CF3: H
CF4Age: 156700
x-cf-tsc: 1648179742
CF4ttl: 31536000.000
X-CF2: H
Server: CFS 0215
X-CF-ReqID: 6b7d0c8819aa8fd64d19f1f7836cc319
X-CF1: 11696:fA.arn1:cf:cacheN.arn1-01:H
Accept-Ranges: bytes
ww2.codegratuit.net/search/tsc.php?200=Mzk0NzI3ODc4&21=OTEuOTAuNDIuMTU0&681=MTY2Mjg2MDM2NzAwNWY3MzM4YTYxZDUzZTZmMzBkMWJjNzRhYmMwZjJh&crc=54b33d62ea3b59c31c1bd73c26129ee74c950cc8&cv=1
200 OK 0 B URL HTTP/1.1 ww2.codegratuit.net/search/tsc.php?200=Mzk0NzI3ODc4&21=OTEuOTAuNDIuMTU0&681=MTY2Mjg2MDM2NzAwNWY3MzM4YTYxZDUzZTZmMzBkMWJjNzRhYmMwZjJh&crc=54b33d62ea3b59c31c1bd73c26129ee74c950cc8&cv=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tsc.php?200=Mzk0NzI3ODc4&21=OTEuOTAuNDIuMTU0&681=MTY2Mjg2MDM2NzAwNWY3MzM4YTYxZDUzZTZmMzBkMWJjNzRhYmMwZjJh&crc=54b33d62ea3b59c31c1bd73c26129ee74c950cc8&cv=1 HTTP/1.1
Host: ww2.codegratuit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.codegratuit.net/
HTTP/1.1 200 OK
date: Sun, 11 Sep 2022 01:39:28 GMT
content-type: text/html; charset=UTF-8
content-length: 0
x-cache-miss-from: parking-b7c449b98-4drk2
server: NginX
ww2.codegratuit.net/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 0 B URL HTTP/1.1 ww2.codegratuit.net/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww2.codegratuit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww2.codegratuit.net/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sun, 11 Sep 2022 01:39:28 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 11 Sep 2022 01:39:28 GMT
location: /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D
x-cache-miss-from: parking-b7c449b98-ptz98
server: NginX
ww2.codegratuit.net/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D
302 Found 311 B URL HTTP/1.1 ww2.codegratuit.net/search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d504c9483d6c1d4afb6acadd2cd6546b
602698d1ab037f8a91a41dd6e353440be3f0cb9d
1f8c63374a000c8b7ec7c94dae915627e93d4d43ba560205ca413dd4331d619f
Analyzer Verdict Alert quad9 Sinkholed
GET /search/tcerider.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DJ69Xi5IOC9g_0&v=NjcxZDVmZDc5YzliMDgyOTNhNTcyYmM4YThlYTRlNjIJMQl3dzIuY29kZWdyYXR1aXQubmV0NjMxZDNjNGRjMTYwMzQuNTk3NjYwNzIJd3cyLmNvZGVncmF0dWl0Lm5ldDYzMWQzYzRkYzE2NGE3LjQ0MjkyMzg5CTE2NjI4NjAzNjcJYWRfNjNfMA==&l=OAk4MTQzYzBkODQ2ODBmMzhhNTBkMzRjYmY4ODlhMWIzYgkwCTM1CTAJOTA1YjE1YTQ1YTBiMWZjMjBiZDk1MTZkN2I5ZDgzZWUJMzk0NzI3ODc4CWNvZGVncmF0dWl0CTAJNjMJNgkyCTE2NjI4NjAzNjcJMC4wMDA0MjIJTgkwCTEJMTUxMgkxMjA1CTIyNjQ3NjQzMQk5MS45MC40Mi4xNTQJMA%3D%3D HTTP/1.1
Host: ww2.codegratuit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.codegratuit.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
date: Sun, 11 Sep 2022 01:39:28 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
last-modified: Sun, 11 Sep 2022 01:39:28 GMT
location: http://xml.sedodna.com/click?i=J69Xi5IOC9g_0
x-cache-miss-from: parking-b7c449b98-4drk2
server: NginX
xml.sedodna.com/click?i=J69Xi5IOC9g_0
302 Found 0 B URL HTTP/1.1 xml.sedodna.com/click?i=J69Xi5IOC9g_0
IP
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click?i=J69Xi5IOC9g_0 HTTP/1.1
Host: xml.sedodna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.codegratuit.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://api.quotes.com/91c6dc92-3172-11ed-9f03-e1b3e9b4ed47
Pragma: no-cache
api.quotes.com/91c6dc92-3172-11ed-9f03-e1b3e9b4ed47
200 OK 171 B URL HTTP/1.1 api.quotes.com/91c6dc92-3172-11ed-9f03-e1b3e9b4ed47
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash e21c222f3f0c68a5ae85011e33e70fd9
e6f7b1af1277ee483c96aaf87f927d0947f03123
49c64bdf930e84f2e675086650d52cdcbbe112fceaa5276ebe5991cf9e0ed6a9
GET /91c6dc92-3172-11ed-9f03-e1b3e9b4ed47 HTTP/1.1
Host: api.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww2.codegratuit.net/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 171
content-type: text/html; charset=utf-8
date: Sun, 11 Sep 2022 01:39:28 GMT
server: nginx
api.quotes.com/91c6dc92-3172-11ed-9f03-e1b3e9b4ed47?hr=1
302 Found 11 B URL HTTP/1.1 api.quotes.com/91c6dc92-3172-11ed-9f03-e1b3e9b4ed47?hr=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /91c6dc92-3172-11ed-9f03-e1b3e9b4ed47?hr=1 HTTP/1.1
Host: api.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 11 Sep 2022 01:39:28 GMT
location: http://balor-ghn.com/zcvisitor/91d806c3-3172-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=21df8310-2377-11ed-a767-128084d1ce51
server: nginx
balor-ghn.com/zcvisitor/91d806c3-3172-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=21df8310-2377-11ed-a767-128084d1ce51
200 996 B URL HTTP/1.1 balor-ghn.com/zcvisitor/91d806c3-3172-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=21df8310-2377-11ed-a767-128084d1ce51
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5012b0e5e6e08032ef50372834680085
63b87ad76b6b52f6dc8970ad5331b7053ccea0cd
99d2b7525a425a0c6db0a9951e4eec98e4ded86172930eddbe80950a3078fbb7
GET /zcvisitor/91d806c3-3172-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=21df8310-2377-11ed-a767-128084d1ce51 HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 11 Sep 2022 01:39:29 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Server: RCEjJqak
balor-ghn.com/zcredirect?visitid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
200 700 B URL HTTP/1.1 balor-ghn.com/zcredirect?visitid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (307)
Hash 3bfff176f04ba2859dd6de138ca21c88
4f12d2d399f6123f860e27b3f03b2f627ded1040
c36a4b93b27eafd4c7e0eec4fee24b956c3d535f542d97d52bf776076ecdac70
GET /zcredirect?visitid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcvisitor/91d806c3-3172-11ed-a1a7-0a45ab1ca4cf/72092e88-2c53-401c-b988-51ef43ce1034?campaignid=21df8310-2377-11ed-a767-128084d1ce51
Upgrade-Insecure-Requests: 1
HTTP/1.1 200
Date: Sun, 11 Sep 2022 01:39:29 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
redirected: JS
Server: ZMVphWgz
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 03e8395d7614cedde5faec6f22812f72
f2ebfcc1be86de471841c1931070e3cccc4dd0e9
70b51a3dde4a2f99b34c707d6d489897fbe0d7f290c03fe1368ace3009aeb7c6
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 11 Sep 2022 01:39:29 GMT
Last-Modified: Sun, 11 Sep 2022 00:55:32 GMT
Server: ECS (nyb/1D2E)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7Zsi0_7bmWUKWAOx-dD-eX9_bWlYJAnaC5bE_6gemrkjswGUKFpu3g==
Age: 2637
balor-ghn.com/favicon.ico
404 653 B URL HTTP/1.1 balor-ghn.com/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (649), with no line terminators
Hash ba2732b1b2fa2626ffaa15f62f9e7d66
203d4e7fbb1d80449d6e4e1f3ae7a9bf8625debe
879861cb72fe9fbb476dab246021c4c83b4066327de2529e05ec54d3afb0a1c8
GET /favicon.ico HTTP/1.1
Host: balor-ghn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://balor-ghn.com/zcredirect?visitid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&type=js&browserWidth=1280&browserHeight=939&iframeDetected=false
HTTP/1.1 404
Date: Sun, 11 Sep 2022 01:39:29 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 653
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
x-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline'
X-WebKit-CSP: default-src 'self'; script-src 'self' 'unsafe-inline'
Content-Language: en
Server: ZUDbhQYH
ayxvy.voluumtrk3.com/zp-redirect?target=https%3A%2F%2Fbriskbonus.life%2F%3Fu%3Dxunwwwr%26o%3Db0hp0zn%26cid%3Dwdsotrb7q4jis1viit03cjgm&caid=158b5b73-ccca-408f-a150-a43e12f193d8&zpid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&cid=wdsotrb7q4jis1viit03cjgm&rt=R
302 Found 0 B URL HTTP/2 ayxvy.voluumtrk3.com/zp-redirect?target=https%3A%2F%2Fbriskbonus.life%2F%3Fu%3Dxunwwwr%26o%3Db0hp0zn%26cid%3Dwdsotrb7q4jis1viit03cjgm&caid=158b5b73-ccca-408f-a150-a43e12f193d8&zpid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&cid=wdsotrb7q4jis1viit03cjgm&rt=R
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /zp-redirect?target=https%3A%2F%2Fbriskbonus.life%2F%3Fu%3Dxunwwwr%26o%3Db0hp0zn%26cid%3Dwdsotrb7q4jis1viit03cjgm&caid=158b5b73-ccca-408f-a150-a43e12f193d8&zpid=91d806c3-3172-11ed-a1a7-0a45ab1ca4cf&cid=wdsotrb7q4jis1viit03cjgm&rt=R HTTP/1.1
Host: ayxvy.voluumtrk3.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://balor-ghn.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 11 Sep 2022 01:39:29 GMT
content-length: 0
location: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
cache-control: no-store, no-cache, pre-check=0, post-check=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
set-cookie: voluum-cid-v4=%7B%22cid%22%3A%22wdsotrb7q4jis1viit03cjgm%22%2C%22caid%22%3A%22158b5b73-ccca-408f-a150-a43e12f193d8%22%7D; Max-Age=31536000; Expires=Mon, 11-Sep-2023 01:39:29 GMT; Domain=ayxvy.voluumtrk3.com; Path=/; Secure; HttpOnly;SameSite=None
server: nginx
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 934ff5064aebfa17da5458becc17d88e
f9b839da6db51bbacb4078e349190b74caeecd31
a44458a245127953b179d57ccc695fcd0302038be64c734bd0a99fe5e9fc38a9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A44458A245127953B179D57CCC695FCD0302038BE64C734BD0A99FE5E9FC38A9"
Last-Modified: Fri, 09 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14604
Expires: Sun, 11 Sep 2022 05:42:54 GMT
Date: Sun, 11 Sep 2022 01:39:30 GMT
Connection: keep-alive
briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
200 OK 10 kB URL HTTP/1.1 briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (528)
Hash 2667f908419f42b34ea9384666f6a1a5
5e39e5e07fa15ec3d2cd5d840a160d8e906425d8
1d430008875e99870b7f833393e882b2bd788090096fa28dbedae05957260073
GET /?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://balor-ghn.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: text/html
Content-Length: 10027
Connection: keep-alive
set-cookie: sid=t2~5fzemzbe3akotw4u3ozro40z; path=/
cache-control: private, no-transform
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 01:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:300,400,400i,700
200 OK 1.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300,400,400i,700
IP
Hash 6a35d649942910876ccb8d3c4c81b7dc
9ed3a4dc1964755b1c6b0b806111479c39236966
6a1e8a1237acb15c40686bf4dffafe415d8d6a75105d340f34ecdd3dd5781dcd
GET /css?family=Open+Sans:300,400,400i,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 11 Sep 2022 01:39:30 GMT
date: Sun, 11 Sep 2022 01:39:30 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
briskbonus.life/media/gambling/en/winner-survey/bootstrap.min.css
200 OK 121 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/bootstrap.min.css
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 121 kB (120824 bytes)
Hash d25f929a84b08675b6d02f1d99f6019f
9e5a8d9af75000d2772cc0fa724e77b03a0b1eef
a6ac521089df5f54b92c84a900516f09ba9d14488c7091a9e78f11812dce44d8
GET /media/gambling/en/winner-survey/bootstrap.min.css HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: text/css
Content-Length: 120824
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "d25f929a84b08675b6d02f1d99f6019f"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA395CA3CA69
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/app.css
200 OK 821 B URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/app.css
IP
File type ASCII text, with very long lines (821), with no line terminators
Hash d1d2bfb2433c6034710c15ffd373d5e7
7843eda5dd9bb1dac739d00616147d8dc32ce774
e9786f2b0a173e5e372392ec65f820b68027e3733a9071d5b55a1961459ef75c
GET /media/gambling/en/winner-survey/app.css HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: text/css
Content-Length: 821
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "d1d2bfb2433c6034710c15ffd373d5e7"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA39952E6F17
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/sound.js
200 OK 1.1 kB URL HTTP/1.1 briskbonus.life/media/gambling/sound.js
IP
File type ASCII text, with CRLF line terminators
Hash 3787b349cb8b744b6917fe43f96b1ccd
ab26d82699a166f520a51f722bc6262ef1d5421f
8e4cbdda4f0a209714e470984de7250f946c3afd35ded05302ef431be048e918
GET /media/gambling/sound.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 1083
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "3787b349cb8b744b6917fe43f96b1ccd"
Last-Modified: Wed, 31 Aug 2022 09:34:56 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A9AEBFE2D747
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/icon.js
200 OK 1.6 kB URL HTTP/1.1 briskbonus.life/media/gambling/icon.js
IP
File type ASCII text, with CRLF line terminators
Hash 2b25502a979c3b240fc77e52689e4c29
790d306577b490abe99d88fb55bce2e815689843
328a90c5503266ebe4dda1e9c84558e62016811f112a159aecb36fc489563577
GET /media/gambling/icon.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 1580
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "2b25502a979c3b240fc77e52689e4c29"
Last-Modified: Wed, 31 Aug 2022 09:34:54 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A9AEBBA7082F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/util/utils-gmb.js
200 OK 4.7 kB URL HTTP/1.1 briskbonus.life/util/utils-gmb.js
IP
File type ASCII text, with very long lines (641), with CRLF line terminators
Hash 570df3f849036a1a4a75ca2a28047d36
f69147076e3912116a9765a2ed34afe3cae67978
221e1a80f62592306f7a357aa9ee1a43b32a10314f340b64604ca9d351cf33c4
GET /util/utils-gmb.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 4651
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "570df3f849036a1a4a75ca2a28047d36"
Last-Modified: Wed, 31 Aug 2022 09:38:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A9AEC386CF39
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/font-awesome.min.css
200 OK 29 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/font-awesome.min.css
IP
File type ASCII text, with very long lines (28774)
Hash cdc54495aca33daaff8378ebc027fde3
0f61e66c24550eafd4b295c789e2a78863660c4c
ad86edb2831729a4ff3322927fbb26aaa60f26835ddccfa707aa793dd379995c
GET /media/gambling/en/winner-survey/font-awesome.min.css HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: text/css
Content-Length: 28937
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "cdc54495aca33daaff8378ebc027fde3"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA3980C2476D
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/cookie/js.cookie9.js
200 OK 4.4 kB URL HTTP/1.1 briskbonus.life/cookie/js.cookie9.js
IP
File type ASCII text, with very long lines (1709)
Hash 16e07bf02a8e81d2cd5679dc45cc318c
7c205205935a3a56a8976b2ac648502b43103b5f
96e91577f6be403fc263780e07e6b7839373588026f793d2b4edd77dcbba871e
GET /cookie/js.cookie9.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 4395
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "16e07bf02a8e81d2cd5679dc45cc318c"
Last-Modified: Wed, 31 Aug 2022 09:31:17 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A9917E16474E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/backbutton_gmb.js
200 OK 3.9 kB URL HTTP/1.1 briskbonus.life/media/gambling/backbutton_gmb.js
IP
File type ASCII text, with CRLF line terminators
Hash 42a42a2180debd55caba94527379964c
562c1754c94ce49326b0381805ee14d175487778
52afe26d88ec86edf4a46d872db86007597b8ff5f6d9e79e47c9e6b899d0b781
GET /media/gambling/backbutton_gmb.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 3923
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "42a42a2180debd55caba94527379964c"
Last-Modified: Wed, 31 Aug 2022 09:34:51 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A9918C4AD95F
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/confetti.js
200 OK 3.5 kB URL HTTP/1.1 briskbonus.life/media/gambling/confetti.js
IP
File type ASCII text, with very long lines (3533), with no line terminators
Hash 116c9460f5e882a7fcf4e837f7efc72a
13a88e74735d05985e5d07e8cbff716329f5d81c
651141c8290087af54c66793aa063ee5697661fb914925f56bd09390a2895ce4
GET /media/gambling/confetti.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 3533
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "116c9460f5e882a7fcf4e837f7efc72a"
Last-Modified: Wed, 31 Aug 2022 09:34:52 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A99191B880F6
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/exit_gmb.js
200 OK 1.6 kB URL HTTP/1.1 briskbonus.life/media/gambling/exit_gmb.js
IP
File type ASCII text, with CRLF line terminators
Hash 5202df93e55f911a83a995fa38af7ee6
6c0ce8fd3d83e819b40bdff250b8c9331a2bbcf8
28ef9927757f823b79b11ebc2b24e22940e84492d5d78ede4591e4e520a43681
GET /media/gambling/exit_gmb.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 1550
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "5202df93e55f911a83a995fa38af7ee6"
Last-Modified: Wed, 31 Aug 2022 09:34:54 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA39EF17F331
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/geo-no.js
200 OK 5.4 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/geo-no.js
IP
File type ASCII text, with very long lines (5432), with no line terminators
Hash 895f9ab89c7c00c418261e8893524267
45235dbdbe783e6992796f0561766f5f82945cd0
e4107206ac68c68e6ac23e6ebc2b25a108a57afe084c105cfd8ba94041d5d66a
GET /media/gambling/en/winner-survey/geo-no.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 5432
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "895f9ab89c7c00c418261e8893524267"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AAB26D0BB3ED
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/mainstream/jquery.js
200 OK 96 kB URL HTTP/1.1 briskbonus.life/media/mainstream/jquery.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 54322fed505345128683f1d324608b71
7dd56ba6f6a60c7ec537c6e6fb51e2583d1d3e38
60dc662df463ede4ecd32c9f99f6adc59713ffc9dc5bb7cf35733557825bf32d
GET /media/mainstream/jquery.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 96294
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "54322fed505345128683f1d324608b71"
Last-Modified: Wed, 31 Aug 2022 09:36:23 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA39E7E96440
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/bootstrap.min.js
200 OK 37 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/bootstrap.min.js
IP
File type ASCII text, with very long lines (32033)
Hash 5869c96cc8f19086aee625d670d741f9
430a443d74830fe9be26efca431f448c1b3740f9
53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef
GET /media/gambling/en/winner-survey/bootstrap.min.js HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: application/javascript
Content-Length: 37045
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "5869c96cc8f19086aee625d670d741f9"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA39EF452CA5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/news.png
200 OK 60 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/news.png
IP
File type PNG image data, 598 x 258, 8-bit colormap, non-interlaced\012- data
Hash 044889ac67ac71ea9df92ff1db11462b
c0ea99c4eb10c5d5ccd559392ee88695ef85dd9c
7c2ff4aea80c7c0e642be1b8c7c7653fa21c5e346070a515737f931dfe60974a
GET /media/gambling/en/winner-survey/news.png HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: image/png
Content-Length: 60238
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "044889ac67ac71ea9df92ff1db11462b"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA39F9E628B5
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/im-logo.jpg
200 OK 22 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/im-logo.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x100, components 3\012- data
Hash 46287f31da853166f47627080ae19e21
2b34c077ab70a45102281ca3c14d1e42c6146a75
afe8deacc1672566d86dd2664775b86198c08df406aa472bc654d598cdc3504c
GET /media/gambling/en/winner-survey/im-logo.jpg HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: image/jpeg
Content-Length: 22541
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "46287f31da853166f47627080ae19e21"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AA39F272FB91
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 01:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 01:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 01:39:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://briskbonus.life
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 08:31:01 GMT
expires: Wed, 06 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 407309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 01:39:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
briskbonus.life/media/gambling/en/winner-survey/vegasplus.png
200 OK 32 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/vegasplus.png
IP
File type PNG image data, 300 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 8df36b1013a292ec4e13cb00ce277954
c6e735fdcb20c05c553076cfbc92f3725cb57b51
5788155e1cc2a7627677f4ed742a16bfcffa7ca92065e7654fd06309c302a521
GET /media/gambling/en/winner-survey/vegasplus.png HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:30 GMT
Content-Type: image/png
Content-Length: 32044
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "8df36b1013a292ec4e13cb00ce277954"
Last-Modified: Wed, 31 Aug 2022 09:34:54 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713AAB27A16710E
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:30 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/favicon.ico
204 No Content 0 B URL HTTP/1.1 briskbonus.life/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 204 No Content
Server: nginx
Date: Sun, 11 Sep 2022 01:39:31 GMT
Connection: keep-alive
Cache-Control: no-transform
briskbonus.life/media/gambling/en/winner-survey/alert.mp3
200 OK 2.4 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/alert.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 32 kbps, 22.05 kHz, Monaural\012- data
Hash 1cc1d4ac3c38c157acf9380ce15cd8ff
f4704d7dea8340c83f568383d1c2dbe93c4d667a
67a6dc7e24f4a3c142724bb37a358037538befb731478c33d58f236ba836ed78
GET /media/gambling/en/winner-survey/alert.mp3 HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:31 GMT
Content-Type: audio/mpeg
Content-Length: 2428
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "1cc1d4ac3c38c157acf9380ce15cd8ff"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A991C8301C88
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:31 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
briskbonus.life/media/gambling/en/winner-survey/alert.mp3
200 OK 2.4 kB URL HTTP/1.1 briskbonus.life/media/gambling/en/winner-survey/alert.mp3
IP
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 32 kbps, 22.05 kHz, Monaural\012- data
Hash 1cc1d4ac3c38c157acf9380ce15cd8ff
f4704d7dea8340c83f568383d1c2dbe93c4d667a
67a6dc7e24f4a3c142724bb37a358037538befb731478c33d58f236ba836ed78
GET /media/gambling/en/winner-survey/alert.mp3 HTTP/1.1
Host: briskbonus.life
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://briskbonus.life/?u=xunwwwr&o=b0hp0zn&cid=wdsotrb7q4jis1viit03cjgm
Cookie: sid=t2~5fzemzbe3akotw4u3ozro40z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 01:39:31 GMT
Content-Type: audio/mpeg
Content-Length: 2428
Connection: keep-alive
Content-Security-Policy: block-all-mixed-content
ETag: "1cc1d4ac3c38c157acf9380ce15cd8ff"
Last-Modified: Wed, 31 Aug 2022 09:34:53 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin, Accept-Encoding
X-Amz-Request-Id: 1713A991C8301C88
X-Content-Type-Options: nosniff
X-Xss-Protection: 1; mode=block
Expires: Mon, 11 Sep 2023 01:39:31 GMT
Cache-Control: max-age=31536000, no-transform
Accept-Ranges: bytes
64.225.91.73
95.101.11.115
104.17.25.14
3.127.201.54
37.221.65.58
93.184.220.29
5.79.68.236