URL User Request GET HTTP/2IP 188.114.96.1:443
CertificateIssuerGoogle Trust Services Subjectavio.bio Fingerprint31:60:06:0B:CE:69:E8:37:13:4D:63:B2:E8:54:4F:0B:0E:FC:FA:4D ValidityWed, 02 Oct 2024 03:18:12 GMT - Tue, 31 Dec 2024 03:18:11 GMT
File typeHTML document, ASCII text, with no line terminators Hashb0f623103cd51d764412d46f8a7e0816 3c88223adef88d7cb3ef5536b4b398ef54f31781 fe40b26bcb3f34ba8f180d33623bb3b109597ba9b3f5596ba1bc6b665b8dcb67
GET /NsyQ1bz HTTP/1.1
Host: avio.bio
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 14 Nov 2024 15:40:01 GMT
content-type: text/html; charset=UTF-8
location: https://politicallyhoistawesome.com/wzhmrfwua?key=23ee4a9373c649d9c5d90f15cd5cfbda
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
access-control-max-age: 7200
set-cookie: PHPSESSID=e5b5de3e2b0a3c62f5c788df45d1a4a0; path=/; SameSite=Lax
s_statistics_3194=0; expires=Fri, 15 Nov 2024 15:40:01 GMT; Max-Age=86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XA%2FYN1TMWPmSm1gV8R9%2BNYqhVoG1CixnLcEGOAncOQ%2FVw1Bbx%2FW6ICLWw%2BigmF9QKY6eTk%2F9Syg3%2BbfiJBdh4n0M9DvS11fO2EVCpGWf961eo6%2Bgm8Rwepp7jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8e2818fe2ed742c8-EWR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=101079&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3264&recv_bytes=1239&delivery_rate=45667&cwnd=35&unsent_bytes=0&cid=47e38001cbd41380&ts=304&x=0"
X-Firefox-Spdy: h2
|
| GET politicallyhoistawesome.com/favicon.ico |  172.240.108.84 | 200 OK | 0 B |
URL GET HTTP/1.1politicallyhoistawesome.com/favicon.ico IP172.240.108.84:443
Requested byhttps://politicallyhoistawesome.com/wzhmrfwua?key=23ee4a9373c649d9c5d90f15cd5cfbda CertificateIssuerLet's Encrypt Subjectpoliticallyhoistawesome.com Fingerprint03:39:2A:EB:05:C0:5B:A0:42:F2:90:59:D8:56:BA:E6:0A:EB:9E:8F ValidityMon, 04 Nov 2024 13:42:50 GMT - Sun, 02 Feb 2025 13:42:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: politicallyhoistawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://politicallyhoistawesome.com/wzhmrfwua?key=23ee4a9373c649d9c5d90f15cd5cfbda
Cookie: u_pl24543339=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 14 Nov 2024 15:40:02 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fc4a38bd4c081b0bf5c354885b684719
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
| GET politicallyhoistawesome.com/wzhmrfwua?key=23ee4a9373c649d9c5d90f15cd5cfbda | 172.240.108.84 | 200 OK | 118 B |
URL User Request GET HTTP/1.1politicallyhoistawesome.com/wzhmrfwua?key=23ee4a9373c649d9c5d90f15cd5cfbda IP172.240.108.84:443
CertificateIssuerLet's Encrypt Subjectpoliticallyhoistawesome.com Fingerprint03:39:2A:EB:05:C0:5B:A0:42:F2:90:59:D8:56:BA:E6:0A:EB:9E:8F ValidityMon, 04 Nov 2024 13:42:50 GMT - Sun, 02 Feb 2025 13:42:49 GMT
File typeHTML document, ASCII text, with no line terminators Hashf27a6605cecb455a5e513507b214304b 8acbe09daafdc3adc0d57c5f5d8f93cd6186d55c f5cd5731dbf2e0185b4161ba81031fe68d04849a91d1a0ff8c713d6077292266
GET /wzhmrfwua?key=23ee4a9373c649d9c5d90f15cd5cfbda HTTP/1.1
Host: politicallyhoistawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 14 Nov 2024 15:40:02 GMT
Content-Type: text/html
Content-Length: 118
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl24543339=1; expires=Fri, 15 Nov 2024 15:40:02 GMT; path=/
Host: politicallyhoistawesome.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 362728b845af1348f73a2a329f8c1a99
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
104.21.74.252