sexjk.com/
301 Moved Permanently 185 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a107aba61c93cdf7882a9c6750a4b8fc
8b9bea8c8373e3f0386e14134443c1873e3cf219
69758c97903bb258a8ccdea130baf19bb258861c475667b5320454d143bcbd3a
GET / HTTP/1.1
Host: sexjk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://aflamaljins.com/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8284
Expires: Sat, 28 Jan 2023 06:04:36 GMT
Date: Sat, 28 Jan 2023 03:46:32 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14636
Expires: Sat, 28 Jan 2023 07:50:28 GMT
Date: Sat, 28 Jan 2023 03:46:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 28 Jan 2023 03:35:27 GMT
content-type: application/json
age: 665
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5600
Expires: Sat, 28 Jan 2023 05:19:52 GMT
Date: Sat, 28 Jan 2023 03:46:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: avAXxV3BpArHOi+A95oCmAVml9hsmN0Si2ZjeQjz6uq2oDudi5htrTjexv0GYt4QMByAiw8NwaE=
x-amz-request-id: KHHJ9FR2Y110KQT3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 28 Jan 2023 03:20:49 GMT
age: 1543
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:32 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2f099b8288d5b34983e78b2e9106a92
b2371810290c1399f9fe8a6cdc5298a66b46535c
93c3128876cf23bacf5a277e5b206059f02aa3f275a8ecfb72c660df5365dbc5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "93C3128876CF23BACF5A277E5B206059F02AA3F275A8ECFB72C660DF5365DBC5"
Last-Modified: Thu, 26 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21514
Expires: Sat, 28 Jan 2023 09:45:06 GMT
Date: Sat, 28 Jan 2023 03:46:32 GMT
Connection: keep-alive
aflamaljins.com/
200 OK 8.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (544)
Hash 2d868c57713aa8ad634bf95ad6ee0dbb
44c150c50e0400483be38b813579dfb014f42c66
e5cc8897342b60dbe014963d64fcbea4f835af13dbd0bad02279f50b992f1d62
GET / HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; path=/; domain=.aflamaljins.com; SameSite=Lax
kt_ips=91.90.42.154; expires=Sun, 29-Jan-2023 03:46:32 GMT; Max-Age=86400; path=/; domain=.aflamaljins.com; SameSite=Lax
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 28 Jan 2023 02:49:03 GMT
age: 3449
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9158
Expires: Sat, 28 Jan 2023 06:19:10 GMT
Date: Sat, 28 Jan 2023 03:46:32 GMT
Connection: keep-alive
aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
200 OK 19 kB URL HTTP/1.1 aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
IP
File type ASCII text, with very long lines (722), with CRLF line terminators
Hash 637d70d17392a9914e38c203476a333c
47cc4a4e9b800ed2c316eda14a4a779fee04ca5f
f94a48659d99c198fdcdd80e18ddc8d29331f00cb7c989a3bfbad8c2729a8c1b
GET /static/styles/all-responsive-white.css?v=8.2 HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:32 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 19:09:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61ae5fe7-1e99c"
Expires: Sun, 29 Jan 2023 03:46:32 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
aflamaljins.com/static/styles/jquery.fancybox-white.css?v=8.2
200 OK 1.2 kB URL HTTP/1.1 aflamaljins.com/static/styles/jquery.fancybox-white.css?v=8.2
IP
File type ASCII text, with very long lines (3982), with no line terminators
Hash b6709d7b44d6a8bda9b3da28391f75e2
369b41d63e866dba91a87436823cfa315a3d64df
5d8dc897d8b52da33edc7499eba8c84c0080e6b5543d02572041339ac6c54d44
GET /static/styles/jquery.fancybox-white.css?v=8.2 HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:32 GMT
Content-Type: text/css
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61ae1186-f8e"
Expires: Sun, 29 Jan 2023 03:46:32 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
aflamaljins.com/static/images/header-bg.png
200 OK 1.1 kB URL HTTP/1.1 aflamaljins.com/static/images/header-bg.png
IP
File type PNG image data, 28 x 105, 8-bit/color RGBA, non-interlaced\012- data
Hash d0a235dc109409d95806a8909b38fd1b
4df10d7103b784da34cbec9b823c97d61af4c1ca
4bfbe5740aa9c863f0e93a271f00aecec6cec0eb31a8352439a080eb3273479a
GET /static/images/header-bg.png HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:32 GMT
Content-Type: image/png
Content-Length: 1057
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Connection: keep-alive
ETag: "61ae1186-421"
Expires: Sun, 29 Jan 2023 03:46:32 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/static/images/block-title-bg.png
200 OK 1.1 kB URL HTTP/1.1 aflamaljins.com/static/images/block-title-bg.png
IP
File type PNG image data, 28 x 69, 8-bit/color RGBA, non-interlaced\012- data
Hash e2960f78eddff6e17e61eefcf86debd3
ae39ab64310c51059633862be381049c3c6c1e53
dffcbbaef48eeacaa79d00c284988af730bb577cb26bbd189fa041ecf51bfe9a
GET /static/images/block-title-bg.png HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:32 GMT
Content-Type: image/png
Content-Length: 1087
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Connection: keep-alive
ETag: "61ae1186-43f"
Expires: Sun, 29 Jan 2023 03:46:32 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/static/js/main.min.js?v=8.2
200 OK 67 kB URL HTTP/1.1 aflamaljins.com/static/js/main.min.js?v=8.2
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash e970575874854ff4724ccf3987c84520
53da8a68239208abd4baeafdee2bc3ec4496bfd9
2840a0817c13b02355506e486b27eda17539daf485df80d48029b55bbe66417f
GET /static/js/main.min.js?v=8.2 HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:32 GMT
Content-Type: application/javascript
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61ae1186-32389"
Expires: Sun, 29 Jan 2023 03:46:32 GMT
Cache-Control: max-age=86400
Content-Encoding: gzip
aflamaljins.com/static/images/block-title-h-bg.png
200 OK 809 B URL HTTP/1.1 aflamaljins.com/static/images/block-title-h-bg.png
IP
File type PNG image data, 43 x 44, 8-bit colormap, non-interlaced\012- data
Hash 21100d2fb889bb6da98b2d170315d763
1ef376a7e54f8f56c51772cdbeb58a79fc81528d
39ec8a50959d30ccf79f65d9df4070dd831baab4ea3b598fa90355f6f9d8eb39
GET /static/images/block-title-h-bg.png HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/png
Content-Length: 809
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Connection: keep-alive
ETag: "61ae1186-329"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/static/images/fonts/icomoon.ttf?nddhpi
200 OK 9.6 kB URL HTTP/1.1 aflamaljins.com/static/images/fonts/icomoon.ttf?nddhpi
IP
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Hash 21263355cf739547055f2da9fd6759bd
762384d3af0de2d2bd630855b3f388326038ba92
2674595ece6d29bba3197719873b35d8e2893e9eb3a0271bad0ea717e9b3d405
GET /static/images/fonts/icomoon.ttf?nddhpi HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: font/ttf
Content-Length: 9568
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
ETag: "2560-5d27a52eb7ff7"
Accept-Ranges: bytes
Cache-Control: max-age=2592000
Expires: Mon, 27 Feb 2023 03:46:33 GMT
aflamaljins.com/static/images/footer-bg.png
200 OK 1.1 kB URL HTTP/1.1 aflamaljins.com/static/images/footer-bg.png
IP
File type PNG image data, 28 x 109, 8-bit/color RGBA, non-interlaced\012- data
Hash cce2c56248bc7b74b07caab54ef84890
adbfeb06bdc959d4f6a0e0e49fd6d4fc31664678
40369be4580f3e44670e97c4f6cef0d54ce658c8602e5fc9a56bd390aa06e15d
GET /static/images/footer-bg.png HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/static/styles/all-responsive-white.css?v=8.2
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/png
Content-Length: 1061
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Connection: keep-alive
ETag: "61ae1186-425"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
ocsp.buypass.com/
200 OK 1.7 kB IP
ASN #20940 Akamai International B.V.
Hash 8894ddb64228295d7c602d819e4c3edf
bc15197df888f93fe54af86b42da12eac6f71aec
78ab01bd4b891eb9a8ec65fa7db929ddf72870f866573b2a59536c6e8ef5dcb5
POST / HTTP/1.1
Host: ocsp.buypass.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 78
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Access-Control-Allow-Origin: https://www.buypass.no
Access-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With,Content-Length,Accept,Origin,X-Buypass-Session-Id,X-Buypass-Locale
Access-Control-Allow-Credentials: false
Access-Control-Allow-Methods: GET,POST
MDC-correlationId: c1a96b34-d8aa-4ad5-8ea5-fd15434894c3
Content-Length: 1701
Date: Sat, 28 Jan 2023 03:46:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0d42a9b07cd22be74e5f54db7eba07af
2fa42d8db82ce1685571cbf9f8d5db201f6be93b
a8acdf7700bb2e5d9fcae806074b7cf878be1a0e18b8067765c2ce91a6f80423
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8ACDF7700BB2E5D9FCAE806074B7CF878BE1A0E18B8067765C2CE91A6F80423"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=883
Expires: Sat, 28 Jan 2023 04:01:16 GMT
Date: Sat, 28 Jan 2023 03:46:33 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mL5LbNO0aTUEAuuFmAGWaA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Jshbn62B73NYhpw+9gFPpgK7iH8=
cdn.pncloudfl.com/pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png
200 OK 27 kB URL HTTP/2 cdn.pncloudfl.com/pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0bc7572129e84749c119db04346b0f07
bf8ae67f194c2faeb6a47d419d130dde27b9ae6f
6363f6dc72449ab775a6af3103e61617ecf70ebb8140996b9384a3eaa8b3698d
GET /pn/b0a/10a/a6c/b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.png HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: image/webp
content-length: 26892
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=70331
content-disposition: inline; filename="b0a10aa6c9f37143f4a63e2bb1bfb8be79b3ef4b.webp"
etag: def74d9769fe75363891a2868865d99a
expires: Sat, 28 Jan 2023 21:53:27 GMT
last-modified: Tue, 22 Nov 2022 09:19:36 GMT
vary: Accept
x-openstack-request-id: txa3bf70e532dd40ea8f5b2-00637c9634
x-proxy-cache: HIT
x-timestamp: 1669108775.40440
x-trans-id: txa3bf70e532dd40ea8f5b2-00637c9634
cf-cache-status: HIT
age: 107586
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 7906bddd5bd2b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mt34iofvjay.com/chicken.gif?z=1884730&pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=3oSz0OfwMfWAHjZwkIK6vTu1mat1_AmV1lcIq5I8Z3rjdbXp8ySc92EPxv5DbHVtsU6zqYE-xV7bHCD7rgMhgNLla8skwtcnbyPjOu_nZnq7S4yRhvwQ2ovYsKpAAv0gCDDFfdR-JYgehUMxUpvvaH3DChTMSfejze0e1LBXaXEDh1turb8sh2ImuIAuDLjoQf9s8yOvJ0SHfk4fTxn4wMubga0eWxDZEyWdo9PmEkgXnDIpXRdleHVBk4evn5CsqwBpH6-IYPouTU_hV5hc48gPEjhGJN23WZC8b9GyNR4PSwSzbMgpHJC_3kmftjUg31IQwdolPgWZzmrva_b4bsCkNMhyjiC73RNsi8q3ZEtZBU6ByOTWsDxL4PKAVtY2Xddry3ow8KVRTtui23dXkHahrRSeJbqAfxSvnh0EQWBM3a_32wBNqxMYGLbQwjav2JzAAkumCEY7DDwOWn5Zi-9YFVrFLldSfrXpXJM-sJlYFkJiVYtsZRcTpMjoSWpsZiQrO2uBIE_yOog85Upd_02Bwye--9t3AHwcxhL-M8Gomm17SDFxkLvjv_YkaiYcw1l65am9JS311CEoJrwWPnuOT7DOSyOpyv2jVHz-XaYOmG8cwluuZqqozYVsPB2QqtTMOtpjvl2AKhbotSCFZPK-FfgJobPwxRYxW7F7XLyQzmCHnfJ4JvaEsRTGPf_-NjRCR8eCNm-1GwBPgjzhEx_h4F6dpV6pxz5HV2bu7HOMxgQYXYX6gSnsmdWFJAcJS7WpmSzesOrI8BlmrSdkBFlcQdsZtOJF0LKpRFuVN0ntL3SBMdiasl7BIiOO03aQfSaO-0yVRS7aA2caU2A6Uemt3Rfx-TZKu1sB6JAVxKQo7maVMRw4AoozA8xuGSUix9iEHqnFNiDhG8pNzoP0VGQCi8epnkiw2ZUkBlnzQwaoY2UzrwscSv_s_UzD7-cMHz12eNX235K0K1Zq5EVayQ==&abvar=0&os=0
200 OK 43 B URL HTTP/2 mt34iofvjay.com/chicken.gif?z=1884730&pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=3oSz0OfwMfWAHjZwkIK6vTu1mat1_AmV1lcIq5I8Z3rjdbXp8ySc92EPxv5DbHVtsU6zqYE-xV7bHCD7rgMhgNLla8skwtcnbyPjOu_nZnq7S4yRhvwQ2ovYsKpAAv0gCDDFfdR-JYgehUMxUpvvaH3DChTMSfejze0e1LBXaXEDh1turb8sh2ImuIAuDLjoQf9s8yOvJ0SHfk4fTxn4wMubga0eWxDZEyWdo9PmEkgXnDIpXRdleHVBk4evn5CsqwBpH6-IYPouTU_hV5hc48gPEjhGJN23WZC8b9GyNR4PSwSzbMgpHJC_3kmftjUg31IQwdolPgWZzmrva_b4bsCkNMhyjiC73RNsi8q3ZEtZBU6ByOTWsDxL4PKAVtY2Xddry3ow8KVRTtui23dXkHahrRSeJbqAfxSvnh0EQWBM3a_32wBNqxMYGLbQwjav2JzAAkumCEY7DDwOWn5Zi-9YFVrFLldSfrXpXJM-sJlYFkJiVYtsZRcTpMjoSWpsZiQrO2uBIE_yOog85Upd_02Bwye--9t3AHwcxhL-M8Gomm17SDFxkLvjv_YkaiYcw1l65am9JS311CEoJrwWPnuOT7DOSyOpyv2jVHz-XaYOmG8cwluuZqqozYVsPB2QqtTMOtpjvl2AKhbotSCFZPK-FfgJobPwxRYxW7F7XLyQzmCHnfJ4JvaEsRTGPf_-NjRCR8eCNm-1GwBPgjzhEx_h4F6dpV6pxz5HV2bu7HOMxgQYXYX6gSnsmdWFJAcJS7WpmSzesOrI8BlmrSdkBFlcQdsZtOJF0LKpRFuVN0ntL3SBMdiasl7BIiOO03aQfSaO-0yVRS7aA2caU2A6Uemt3Rfx-TZKu1sB6JAVxKQo7maVMRw4AoozA8xuGSUix9iEHqnFNiDhG8pNzoP0VGQCi8epnkiw2ZUkBlnzQwaoY2UzrwscSv_s_UzD7-cMHz12eNX235K0K1Zq5EVayQ==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /chicken.gif?z=1884730&pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=3oSz0OfwMfWAHjZwkIK6vTu1mat1_AmV1lcIq5I8Z3rjdbXp8ySc92EPxv5DbHVtsU6zqYE-xV7bHCD7rgMhgNLla8skwtcnbyPjOu_nZnq7S4yRhvwQ2ovYsKpAAv0gCDDFfdR-JYgehUMxUpvvaH3DChTMSfejze0e1LBXaXEDh1turb8sh2ImuIAuDLjoQf9s8yOvJ0SHfk4fTxn4wMubga0eWxDZEyWdo9PmEkgXnDIpXRdleHVBk4evn5CsqwBpH6-IYPouTU_hV5hc48gPEjhGJN23WZC8b9GyNR4PSwSzbMgpHJC_3kmftjUg31IQwdolPgWZzmrva_b4bsCkNMhyjiC73RNsi8q3ZEtZBU6ByOTWsDxL4PKAVtY2Xddry3ow8KVRTtui23dXkHahrRSeJbqAfxSvnh0EQWBM3a_32wBNqxMYGLbQwjav2JzAAkumCEY7DDwOWn5Zi-9YFVrFLldSfrXpXJM-sJlYFkJiVYtsZRcTpMjoSWpsZiQrO2uBIE_yOog85Upd_02Bwye--9t3AHwcxhL-M8Gomm17SDFxkLvjv_YkaiYcw1l65am9JS311CEoJrwWPnuOT7DOSyOpyv2jVHz-XaYOmG8cwluuZqqozYVsPB2QqtTMOtpjvl2AKhbotSCFZPK-FfgJobPwxRYxW7F7XLyQzmCHnfJ4JvaEsRTGPf_-NjRCR8eCNm-1GwBPgjzhEx_h4F6dpV6pxz5HV2bu7HOMxgQYXYX6gSnsmdWFJAcJS7WpmSzesOrI8BlmrSdkBFlcQdsZtOJF0LKpRFuVN0ntL3SBMdiasl7BIiOO03aQfSaO-0yVRS7aA2caU2A6Uemt3Rfx-TZKu1sB6JAVxKQo7maVMRw4AoozA8xuGSUix9iEHqnFNiDhG8pNzoP0VGQCi8epnkiw2ZUkBlnzQwaoY2UzrwscSv_s_UzD7-cMHz12eNX235K0K1Zq5EVayQ==&abvar=0&os=0 HTTP/1.1
Host: mt34iofvjay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230127224699168e77db344e94849cb42508
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACMMLgAAAAAAAAAB; Path=/; Expires=Mon, 27 Feb 2023 03:46:33 GMT; Secure; SameSite=None
OACIBLOCK=ACMMLgAAAABj1I%2Bw; Path=/; Expires=Mon, 27 Feb 2023 03:46:33 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Sun, 29 Jan 2023 03:46:33 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
mt34iofvjay.com/whob.gif?z=1884730&pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=3oSz0OfwMfWAHjZwkIK6vTu1mat1_AmV1lcIq5I8Z3rjdbXp8ySc92EPxv5DbHVtsU6zqYE-xV7bHCD7rgMhgNLla8skwtcnbyPjOu_nZnq7S4yRhvwQ2ovYsKpAAv0gCDDFfdR-JYgehUMxUpvvaH3DChTMSfejze0e1LBXaXEDh1turb8sh2ImuIAuDLjoQf9s8yOvJ0SHfk4fTxn4wMubga0eWxDZEyWdo9PmEkgXnDIpXRdleHVBk4evn5CsqwBpH6-IYPouTU_hV5hc48gPEjhGJN23WZC8b9GyNR4PSwSzbMgpHJC_3kmftjUg31IQwdolPgWZzmrva_b4bsCkNMhyjiC73RNsi8q3ZEtZBU6ByOTWsDxL4PKAVtY2Xddry3ow8KVRTtui23dXkHahrRSeJbqAfxSvnh0EQWBM3a_32wBNqxMYGLbQwjav2JzAAkumCEY7DDwOWn5Zi-9YFVrFLldSfrXpXJM-sJlYFkJiVYtsZRcTpMjoSWpsZiQrO2uBIE_yOog85Upd_02Bwye--9t3AHwcxhL-M8Gomm17SDFxkLvjv_YkaiYcw1l65am9JS311CEoJrwWPnuOT7DOSyOpyv2jVHz-XaYOmG8cwluuZqqozYVsPB2QqtTMOtpjvl2AKhbotSCFZPK-FfgJobPwxRYxW7F7XLyQzmCHnfJ4JvaEsRTGPf_-NjRCR8eCNm-1GwBPgjzhEx_h4F6dpV6pxz5HV2bu7HOMxgQYXYX6gSnsmdWFJAcJS7WpmSzesOrI8BlmrSdkBFlcQdsZtOJF0LKpRFuVN0ntL3SBMdiasl7BIiOO03aQfSaO-0yVRS7aA2caU2A6Uemt3Rfx-TZKu1sB6JAVxKQo7maVMRw4AoozA8xuGSUix9iEHqnFNiDhG8pNzoP0VGQCi8epnkiw2ZUkBlnzQwaoY2UzrwscSv_s_UzD7-cMHz12eNX235K0K1Zq5EVayQ==&abvar=0&os=0
200 OK 43 B URL HTTP/2 mt34iofvjay.com/whob.gif?z=1884730&pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=3oSz0OfwMfWAHjZwkIK6vTu1mat1_AmV1lcIq5I8Z3rjdbXp8ySc92EPxv5DbHVtsU6zqYE-xV7bHCD7rgMhgNLla8skwtcnbyPjOu_nZnq7S4yRhvwQ2ovYsKpAAv0gCDDFfdR-JYgehUMxUpvvaH3DChTMSfejze0e1LBXaXEDh1turb8sh2ImuIAuDLjoQf9s8yOvJ0SHfk4fTxn4wMubga0eWxDZEyWdo9PmEkgXnDIpXRdleHVBk4evn5CsqwBpH6-IYPouTU_hV5hc48gPEjhGJN23WZC8b9GyNR4PSwSzbMgpHJC_3kmftjUg31IQwdolPgWZzmrva_b4bsCkNMhyjiC73RNsi8q3ZEtZBU6ByOTWsDxL4PKAVtY2Xddry3ow8KVRTtui23dXkHahrRSeJbqAfxSvnh0EQWBM3a_32wBNqxMYGLbQwjav2JzAAkumCEY7DDwOWn5Zi-9YFVrFLldSfrXpXJM-sJlYFkJiVYtsZRcTpMjoSWpsZiQrO2uBIE_yOog85Upd_02Bwye--9t3AHwcxhL-M8Gomm17SDFxkLvjv_YkaiYcw1l65am9JS311CEoJrwWPnuOT7DOSyOpyv2jVHz-XaYOmG8cwluuZqqozYVsPB2QqtTMOtpjvl2AKhbotSCFZPK-FfgJobPwxRYxW7F7XLyQzmCHnfJ4JvaEsRTGPf_-NjRCR8eCNm-1GwBPgjzhEx_h4F6dpV6pxz5HV2bu7HOMxgQYXYX6gSnsmdWFJAcJS7WpmSzesOrI8BlmrSdkBFlcQdsZtOJF0LKpRFuVN0ntL3SBMdiasl7BIiOO03aQfSaO-0yVRS7aA2caU2A6Uemt3Rfx-TZKu1sB6JAVxKQo7maVMRw4AoozA8xuGSUix9iEHqnFNiDhG8pNzoP0VGQCi8epnkiw2ZUkBlnzQwaoY2UzrwscSv_s_UzD7-cMHz12eNX235K0K1Zq5EVayQ==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
GET /whob.gif?z=1884730&pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=3oSz0OfwMfWAHjZwkIK6vTu1mat1_AmV1lcIq5I8Z3rjdbXp8ySc92EPxv5DbHVtsU6zqYE-xV7bHCD7rgMhgNLla8skwtcnbyPjOu_nZnq7S4yRhvwQ2ovYsKpAAv0gCDDFfdR-JYgehUMxUpvvaH3DChTMSfejze0e1LBXaXEDh1turb8sh2ImuIAuDLjoQf9s8yOvJ0SHfk4fTxn4wMubga0eWxDZEyWdo9PmEkgXnDIpXRdleHVBk4evn5CsqwBpH6-IYPouTU_hV5hc48gPEjhGJN23WZC8b9GyNR4PSwSzbMgpHJC_3kmftjUg31IQwdolPgWZzmrva_b4bsCkNMhyjiC73RNsi8q3ZEtZBU6ByOTWsDxL4PKAVtY2Xddry3ow8KVRTtui23dXkHahrRSeJbqAfxSvnh0EQWBM3a_32wBNqxMYGLbQwjav2JzAAkumCEY7DDwOWn5Zi-9YFVrFLldSfrXpXJM-sJlYFkJiVYtsZRcTpMjoSWpsZiQrO2uBIE_yOog85Upd_02Bwye--9t3AHwcxhL-M8Gomm17SDFxkLvjv_YkaiYcw1l65am9JS311CEoJrwWPnuOT7DOSyOpyv2jVHz-XaYOmG8cwluuZqqozYVsPB2QqtTMOtpjvl2AKhbotSCFZPK-FfgJobPwxRYxW7F7XLyQzmCHnfJ4JvaEsRTGPf_-NjRCR8eCNm-1GwBPgjzhEx_h4F6dpV6pxz5HV2bu7HOMxgQYXYX6gSnsmdWFJAcJS7WpmSzesOrI8BlmrSdkBFlcQdsZtOJF0LKpRFuVN0ntL3SBMdiasl7BIiOO03aQfSaO-0yVRS7aA2caU2A6Uemt3Rfx-TZKu1sB6JAVxKQo7maVMRw4AoozA8xuGSUix9iEHqnFNiDhG8pNzoP0VGQCi8epnkiw2ZUkBlnzQwaoY2UzrwscSv_s_UzD7-cMHz12eNX235K0K1Zq5EVayQ==&abvar=0&os=0 HTTP/1.1
Host: mt34iofvjay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=230127224699168e77db344e94849cb42508
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.banner.view
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
steinfqwe6782beck.com/solid.gif?z=1884733&abvar=0
200 OK 43 B URL HTTP/2 steinfqwe6782beck.com/solid.gif?z=1884733&abvar=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
POST /solid.gif?z=1884733&abvar=0 HTTP/1.1
Host: steinfqwe6782beck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aflamaljins.com
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.tag.loaded
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
forlumineoner.com/zone?pub=1&zone_id=1884734&is_mobile=false&domain=aflamaljins.com&var=&ymid=&var_3=
200 OK 619 B URL HTTP/2 forlumineoner.com/zone?pub=1&zone_id=1884734&is_mobile=false&domain=aflamaljins.com&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (618)
Hash 910dab2bc2b8c8e0b756a0dad12dd330
05f0132209b731702053519fbac47f5df55bb4c4
a9ccf5dbe94a28a4736d5f8fc211642ec598b6036a3af4139830487f0d3c0bf1
GET /zone?pub=1&zone_id=1884734&is_mobile=false&domain=aflamaljins.com&var=&ymid=&var_3= HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aflamaljins.com/
Origin: https://aflamaljins.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: application/json; charset=utf-8
content-length: 619
x-trace-id: d35ea1c6d78273835323d5bf5009c89d
access-control-allow-origin: https://aflamaljins.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
aflamaljins.com/?mode=async&action=js_stats&rand=1674877594142
200 OK 43 B URL HTTP/1.1 aflamaljins.com/?mode=async&action=js_stats&rand=1674877594142
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /?mode=async&action=js_stats&rand=1674877594142 HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.30
Set-Cookie: kt_is_visited=1; expires=Sun, 29-Jan-2023 03:46:33 GMT; Max-Age=86400; path=/; domain=.aflamaljins.com; SameSite=Lax
forlumineoner.com/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://aflamaljins.com/
Origin: https://aflamaljins.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://aflamaljins.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
forlumineoner.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aflamaljins.com/
Content-Type: application/json
Origin: https://aflamaljins.com
Content-Length: 384
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: a6f68b9ed40c96bf0a7bf32b2f31aaff
access-control-allow-origin: https://aflamaljins.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
limurol.com/ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=23012722460322907bb9414f41a2cbbb57da; Path=/; Expires=Sun, 28 Jan 2024 03:46:33 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=2301272246a9ce9b667b9c4ea794094a80ae; Path=/; Expires=Sun, 28 Jan 2024 03:46:33 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
limurol.com/ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
200 OK 7 B URL HTTP/2 limurol.com/ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /ssp/req/1884733/?pb=ff730104570ca4da1eb8ad6b48d666be1674884793&psp=yJ0tkbd-es3zi4ppBvGyt2Oywnwwtg1BpWfq-rcNNrhGM7usmUT3ZK2ELbyoviHKSMEINV_bbCyb26mB4lQz0sZn0yqw_VxRh_HiKPa4LvU89xvBwPEUeGWrzUO51FjTk0xkVIoqOYlTKDHB8Y7XZUSWhOtPtLBuOfGPa_7EiHpIvtQ3437j3nQl3G6zK_dAi31F3ulH_NmHfICMqzKkcn7BD9doKjhmx1GpA20haY4FnH_FGTx8BuMXF6h9jJRZqXnIu5xngijhB9t1v42ayZDud-tCcd6m0wqr7Y8oxmDQZMKDlteujAwUCWbsTCZwuDE-RmuQZh2u9l5pGrHcvSo0cppS6faDIi_4C4Y6ykBz2wq5_xcmV16LTH0IEQbBmMW52g_V5nNaJfCvuEPTDJVWxD4x5DxmJpmBviF4LoJ02hfuVdNb5xy_tZo6PRnZOx5zB9YQm8pKHONrGtUJIpcwrtTxOgLpgoe_oqQyTHGmaMQrUr6OnQLCorZUOkja7DodiRWYTgb3mUoxkuXiNnooiCxAjS-NqUE38muI0ylNM2k40-GRtoKiaH77H440k3Ql6IDGte-3YjtJBNmSaK9NhzdW_ccwjsXpNpI6xSuKxgISdAX_odCOAgxdN2xBPlIGJN3EMIdij4L6eD6scnBZTmzbkf1I5MQZsJYgRVwZGH90WbgtwcOUu9O5z8vo39C0kGU-8-l-dYL9Iw==&cb=_clel9v4lg8imt4sus1igxt&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24 HTTP/1.1
Host: limurol.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: text/javascript
content-length: 7
x-route-id: ssp.bet
set-cookie: UID=2301272246b692118d4e714f928c09d0979b; Path=/; Expires=Sun, 28 Jan 2024 03:46:33 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
aflamaljins.com/favicon.ico
200 OK 15 kB URL HTTP/1.1 aflamaljins.com/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 8a787f39ea7054ac1697cdeed869ae68
6bf4c8220bbec84f8f77883fc186b099c4ec3314
98e292fff0e557d0efb5d5373dd2b1a52d7a424301f9255bb15b3333f55f749e
GET /favicon.ico HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/vnd.microsoft.icon
Content-Length: 15406
Connection: keep-alive
Last-Modified: Mon, 06 Dec 2021 19:18:36 GMT
ETag: "3c2e-5d27f1f99d2e2"
Accept-Ranges: bytes
Cache-Control: max-age=2628000, public
Expires: Sat, 04 Feb 2023 03:46:33 GMT
ocsp.digicert.com/
200 OK 471 B IP
Hash b10c572a58f34d8fb28433f25bb9c885
8bc11baa4e367bfcf8738f28000a3befc9866cc8
678014c585151112a3bd14158afd8509eeec3d4bad3117d6ccd9ecaa109107bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4823
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:46:33 GMT
Last-Modified: Sat, 28 Jan 2023 02:26:10 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash b10c572a58f34d8fb28433f25bb9c885
8bc11baa4e367bfcf8738f28000a3befc9866cc8
678014c585151112a3bd14158afd8509eeec3d4bad3117d6ccd9ecaa109107bc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4823
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 28 Jan 2023 03:46:33 GMT
Last-Modified: Sat, 28 Jan 2023 02:26:10 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
aflamaljins.com/contents/videos_screenshots/0/537/336x189/1.jpg
200 OK 3.2 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/0/537/336x189/1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 54a1ba2db8e0083982a15bdb68d2b2a7
fb145a7bf15ce9694aaa27bebb33bc267047ec85
531a637b1fc630af3d9086162b5abbd86d7868e4953f2967a6dfd8b5cf62d23e
GET /contents/videos_screenshots/0/537/336x189/1.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/jpeg
Content-Length: 3160
Last-Modified: Mon, 06 Dec 2021 13:34:57 GMT
Connection: keep-alive
ETag: "61ae1181-c58"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/contents/videos_screenshots/1000/1956/336x189/2.jpg
200 OK 7.5 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/1000/1956/336x189/2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a7eebfa33c473a8790c439e54776d9ec
55a327607d9ea66b410cb703955587952de4347a
2289a3065c44603de260e75e2e002cad06a48672ce412168cb527d1e7e3eae25
GET /contents/videos_screenshots/1000/1956/336x189/2.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/jpeg
Content-Length: 7488
Last-Modified: Wed, 10 Aug 2022 19:59:02 GMT
Connection: keep-alive
ETag: "62f40e06-1d40"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/contents/videos_screenshots/1000/1948/336x189/1.jpg
200 OK 4.9 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/1000/1948/336x189/1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8e05ed94bf377d903f53d19ef81eb0f7
28356aed275db666dfaf6d0d02e7a9bffda87144
6304f9e24299fc45220524e57e25d98ce9f50786f389d6335bb94be6b7363b0a
GET /contents/videos_screenshots/1000/1948/336x189/1.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/jpeg
Content-Length: 4938
Last-Modified: Wed, 10 Aug 2022 19:46:12 GMT
Connection: keep-alive
ETag: "62f40b04-134a"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/contents/videos_screenshots/1000/1317/336x189/2.jpg
200 OK 4.1 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/1000/1317/336x189/2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c370b70a35968ad1b78d43bc3aead48f
e9117f409055b40a04a2747361f60993f0ba6e42
ec7e73e7f10390422188041173a1e1d780561b2a2a1689122e959adcade50da0
GET /contents/videos_screenshots/1000/1317/336x189/2.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/jpeg
Content-Length: 4146
Last-Modified: Sat, 18 Dec 2021 22:23:03 GMT
Connection: keep-alive
ETag: "61be5f47-1032"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 20 kB URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
Hash 9fa3c3671040c0eaa55a39964ae93a5c
4846a68b9dc01978180d990c089051fb57beefed
a929275b25ef663808d0343d821e265f6b98ba92b0fd6326ec93bb68cd21b14f
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: RZaY/iZgAn6kn3+elH78OW05x/878usMJdS8+c5Of21FOAIyy1nPZBdRD3o0i7P7tUtAoRzDY+2bghHYXaUubA==
date: Sat, 28 Jan 2023 03:46:33 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aflamaljins.com/static/images/logo.png
200 OK 50 kB URL HTTP/1.1 aflamaljins.com/static/images/logo.png
IP
File type PNG image data, 366 x 84, 8-bit/color RGB, non-interlaced\012- data
Hash e9594acf8695833c0be6536960a1cc5a
94f1cf053fa9b8a8a881816c2e4c7a604396572e
5a5873af30b626392d108e7ad03cd8abbd3d88151e1133d1a902afffa4d18db6
GET /static/images/logo.png HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:33 GMT
Content-Type: image/png
Content-Length: 50277
Last-Modified: Mon, 06 Dec 2021 13:35:02 GMT
Connection: keep-alive
ETag: "61ae1186-c465"
Expires: Sun, 29 Jan 2023 03:46:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
forlumineoner.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aflamaljins.com/
Content-Type: application/json
Origin: https://aflamaljins.com
Content-Length: 748
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:34 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 7137e24d2b3d0518b9eebc44e227a952
access-control-allow-origin: https://aflamaljins.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
aflamaljins.com/contents/videos_screenshots/1000/1897/336x189/2.jpg
200 OK 5.1 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/1000/1897/336x189/2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 98e9fe40a948efd42487297e3110ffd7
1377489c9a08d050271e0e39b4890171b9fc9552
95c2b6cf383fca70fd4f1204cfcd4a639e36bbd5f90e1e0b41c6b833b0fdd9a6
GET /contents/videos_screenshots/1000/1897/336x189/2.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:34 GMT
Content-Type: image/jpeg
Content-Length: 5112
Last-Modified: Wed, 10 Aug 2022 18:59:09 GMT
Connection: keep-alive
ETag: "62f3fffd-13f8"
Expires: Sun, 29 Jan 2023 03:46:34 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/contents/videos_screenshots/0/856/336x189/4.jpg
200 OK 2.2 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/0/856/336x189/4.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7a7cdccd8cb2f7e4ab2029e69f140f3f
d05acce4f665ea9253889a57f67cc5d7b4ac2fb6
11e7174db32a133e255b41be287779b4fae87b7cb6931aa41f798f0b62f5afe3
GET /contents/videos_screenshots/0/856/336x189/4.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:34 GMT
Content-Type: image/jpeg
Content-Length: 2186
Last-Modified: Mon, 06 Dec 2021 13:34:58 GMT
Connection: keep-alive
ETag: "61ae1182-88a"
Expires: Sun, 29 Jan 2023 03:46:34 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/contents/videos_screenshots/0/928/336x189/3.jpg
200 OK 3.0 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/0/928/336x189/3.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 5681184094bbc9f7f92c40348124f699
f569d8d146c8e0017c05fb7d609ca9bf2da57b5b
ade273675e625ee34f20a6924b1a4f0975aa6b6499aa588a1006907b6ac5e6eb
GET /contents/videos_screenshots/0/928/336x189/3.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:34 GMT
Content-Type: image/jpeg
Content-Length: 2996
Last-Modified: Mon, 06 Dec 2021 13:34:59 GMT
Connection: keep-alive
ETag: "61ae1183-bb4"
Expires: Sun, 29 Jan 2023 03:46:34 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
aflamaljins.com/contents/videos_screenshots/1000/1299/336x189/2.jpg
200 OK 3.1 kB URL HTTP/1.1 aflamaljins.com/contents/videos_screenshots/1000/1299/336x189/2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 336x189, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 042654eb71cce6001d9a966961779763
82c7b5cafc845c5cf2e1bc10d0f138084af6cf35
7c3e0b0d8467f8a459856d4b9b2ccac8a8f88f4119d73a1638d11b186fab4bbd
GET /contents/videos_screenshots/1000/1299/336x189/2.jpg HTTP/1.1
Host: aflamaljins.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Cookie: PHPSESSID=j7ml4esl62lcrto1l3t2ovn04a; kt_ips=91.90.42.154; bnState={"impressions":1,"delayStarted":0}; kt_tcookie=1; __PPU___PPU_SESSION_URL=%2F; kt_is_visited=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.14.1
Date: Sat, 28 Jan 2023 03:46:34 GMT
Content-Type: image/jpeg
Content-Length: 3128
Last-Modified: Fri, 17 Dec 2021 22:46:56 GMT
Connection: keep-alive
ETag: "61bd1360-c38"
Expires: Sun, 29 Jan 2023 03:46:34 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4974
Expires: Sat, 28 Jan 2023 05:09:28 GMT
Date: Sat, 28 Jan 2023 03:46:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4974
Expires: Sat, 28 Jan 2023 05:09:28 GMT
Date: Sat, 28 Jan 2023 03:46:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:56:46 GMT
age: 20988
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4afa01d2ffe17f8378e4c0b5afd4608
f5c7e2137efa07a207427a6b6fe1df541f85ea25
84fc0c05d25d674b5594b54720017332b86d391f66c7136d76cfce3e884e8e12
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6f884785-3b60-4d1a-b7b9-f58e73d6d819.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13375
x-amzn-requestid: 372fcbe8-85a1-4be2-a006-31fb9289c5e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CxF6BoAMFyGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-4b9860545c612cc416cbe599;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yEFlWGi3J14JLA0l2h02VlIqV8opHesKP6GOvfoP5Tp0m7dOYDxIGA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:59:32 GMT
age: 20822
etag: "f5c7e2137efa07a207427a6b6fe1df541f85ea25"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2033b2-0708-4731-82a4-5bbc9f000ae2.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2033b2-0708-4731-82a4-5bbc9f000ae2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a2881cea3ae511d3dfd2f6b7cd598a4e
105d8d675aaafce5602e4015aee2d1659553d1b1
0993ef71c2af9e07ed09e0e2ba40a4d9fdd01444154c2f39f8fc48a4dfef1730
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0a2033b2-0708-4731-82a4-5bbc9f000ae2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10863
x-amzn-requestid: db873091-be76-4276-aa3e-f9bd44051508
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbAMbHCMoAMFsYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4471c-57f14d6a3ebcc8a1788bae80;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:50:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 00zN6NcdSHaq-4mWQeizXw9SDgUZJOFnB_6dTo6skjlytfBuz8ud3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:57:22 GMT
age: 20952
etag: "105d8d675aaafce5602e4015aee2d1659553d1b1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cb7be12333fa7ea3353901b4b3215af
4b758cc432874384f330568177eef5a328d7e69a
d6f86c0ddbabd5c4fd7cee72ce4da62ccddd9d29139c9ab033bb1ab8425bae22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F409361f2-a546-44d7-82d6-d496f6ee134d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11918
x-amzn-requestid: baf2eddf-03cc-4af7-b799-c2c68b90d7a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fUf4sFUYoAMFg6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d1ad04-696c5dd015428f7429a5ccec;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 22:28:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dI2BG_eOmY3zIev7w_cnkk-Cy3nkXPmxA2o6htVQzaFGJfl0g6Q_iw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 16:14:27 GMT
age: 41527
etag: "4b758cc432874384f330568177eef5a328d7e69a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0413594-1aeb-47e8-8448-af5800cfa30e.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0413594-1aeb-47e8-8448-af5800cfa30e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d1a1e953f3f857726f15465313d082e5
1962e632f29d87d4f5455a29aa096eea057e15c0
a5b193f6de91c69c9e554f75dfa4a00f9cb8c47a26fdca61ed03ffe1dce7cc87
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0413594-1aeb-47e8-8448-af5800cfa30e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7637
x-amzn-requestid: f22c88bd-1eb9-47fa-aab1-95108b540f35
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-D3HN1oAMFQDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443b2-05068ae37469a90c2355b4ec;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 03aXePxD_sCOwoLYYvykhq0YDOjyTtuoljGYXU_7Wsue1dO-b7gnuw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:43 GMT
age: 21051
etag: "1962e632f29d87d4f5455a29aa096eea057e15c0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb319f83c-740d-415f-b846-a8262bdecebc.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb319f83c-740d-415f-b846-a8262bdecebc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50175d32bf658166ca26db1633fdb95b
69bb6d345d73cd24fd33ad009cc1d3315e7d94e7
d3d3b551cc8b557a1f92a4d819cbb7ab618ef3fac9568f57513fb4905817dad4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb319f83c-740d-415f-b846-a8262bdecebc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5092
x-amzn-requestid: 05cd1dc0-54b4-457a-83f6-5f774e65766f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa-CwH_toAMFweQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d443ab-3a038caa6435720711028ac9;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:35:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b8qwvqxTXSugeN2wjEA1e1E_bUeWOsEzMZOMHeX9FpCAVsRnltLhyw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 27 Jan 2023 21:55:35 GMT
age: 21059
etag: "69bb6d345d73cd24fd33ad009cc1d3315e7d94e7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ejcet5y9ag.com/pn07uscr/f/tr/zavbn/1884734/lib.js
200 OK 0 B URL HTTP/2 ejcet5y9ag.com/pn07uscr/f/tr/zavbn/1884734/lib.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /pn07uscr/f/tr/zavbn/1884734/lib.js HTTP/1.1
Host: ejcet5y9ag.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:32 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: script
set-cookie: UID=23012722468fe6a838a24447d1ae1c1a7422; Path=/; Expires=Sun, 28 Jan 2024 03:46:32 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
mt34iofvjay.com/get/1884730?zoneid=1884730&jp=_cle884jjup0ym5kcvrxgad&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1517139661540576
200 OK 0 B URL HTTP/2 mt34iofvjay.com/get/1884730?zoneid=1884730&jp=_cle884jjup0ym5kcvrxgad&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1517139661540576
IP
GET /get/1884730?zoneid=1884730&jp=_cle884jjup0ym5kcvrxgad&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=1517139661540576 HTTP/1.1
Host: mt34iofvjay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=230127224699168e77db344e94849cb42508; Path=/; Expires=Sun, 28 Jan 2024 03:46:33 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
1304.snowmiracles.com/v3/a/pop/js/209165
200 OK 0 B URL HTTP/2 1304.snowmiracles.com/v3/a/pop/js/209165
IP
ASN #39572 DataWeb Global Group B.V.
GET /v3/a/pop/js/209165 HTTP/1.1
Host: 1304.snowmiracles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:32 GMT
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
content-encoding: gzip
X-Firefox-Spdy: h2
1304.snowmiracles.com/hiJDCYQxPAjnZtdxoEWUMWYX08lW-9GEffxYfo_FTpdGNc6c9opRoJuNW95heNLKkdgHcvR2jvrqFui6Hea9aS6VmqTCpLmBbQMdLr0nJH5jv81IrkbcjEtBt3IHAbvptpx3ypw?kws=&abl=0&fsb=0&pageUri=https%3A%2F%2Faflamaljins.com%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221152%22%2C%22921%22%2C%221152%22%2C%22836%22%2C%221140%22%2C%22836%22%2C%22false%22%2C%221%22%2C%2216%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Sat%20Jan%2028%202023%2003%3A46%3A33%20GMT%2B0000%20(Coordinated%20Universal%20Time)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%221%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1
200 OK 0 B URL HTTP/2 1304.snowmiracles.com/hiJDCYQxPAjnZtdxoEWUMWYX08lW-9GEffxYfo_FTpdGNc6c9opRoJuNW95heNLKkdgHcvR2jvrqFui6Hea9aS6VmqTCpLmBbQMdLr0nJH5jv81IrkbcjEtBt3IHAbvptpx3ypw?kws=&abl=0&fsb=0&pageUri=https%3A%2F%2Faflamaljins.com%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221152%22%2C%22921%22%2C%221152%22%2C%22836%22%2C%221140%22%2C%22836%22%2C%22false%22%2C%221%22%2C%2216%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Sat%20Jan%2028%202023%2003%3A46%3A33%20GMT%2B0000%20(Coordinated%20Universal%20Time)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%221%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1
IP
ASN #39572 DataWeb Global Group B.V.
GET /hiJDCYQxPAjnZtdxoEWUMWYX08lW-9GEffxYfo_FTpdGNc6c9opRoJuNW95heNLKkdgHcvR2jvrqFui6Hea9aS6VmqTCpLmBbQMdLr0nJH5jv81IrkbcjEtBt3IHAbvptpx3ypw?kws=&abl=0&fsb=0&pageUri=https%3A%2F%2Faflamaljins.com%2F&referer=&bdd=%5B%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0%22%2C%22false%22%2C%22Linux%20x86_64%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22false%22%2C%22true%22%2C%221280%22%2C%221024%22%2C%221280%22%2C%221024%22%2C%221152%22%2C%22921%22%2C%221152%22%2C%22836%22%2C%221140%22%2C%22836%22%2C%22false%22%2C%221%22%2C%2216%22%2C%220%22%2C%22aaaaacccefiflmmprrsstlllecstaaahtscellllpss%22%2C%22Sat%20Jan%2028%202023%2003%3A46%3A33%20GMT%2B0000%20(Coordinated%20Universal%20Time)%22%2C%220%22%2C%22en-US%22%2C%22en-US%2Cen%22%2C%22false%22%2C%22false%22%2C%22781877177%22%2C%222697903995%22%2C%221%22%2C%22false%22%2C%22%5B%5D%22%5D&prsl=1 HTTP/1.1
Host: 1304.snowmiracles.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://aflamaljins.com
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:36 GMT
content-type: text/plain; charset=UTF-8
vary: Accept-Encoding
access-control-allow-origin: https://aflamaljins.com
access-control-allow-credentials: true
access-control-max-age: 86400
referrer-policy: unsafe-url
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Device-Memory
accept-ch-lifetime: 31536000
p3p: CP="NOI DEVa TAIa OUR BUS UNI STA"
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
last-modified: Sat, 28 Jan 2023 03:46:36 UTC
expires: Sat, 28 Jan 2023 03:46:36 UTC
content-encoding: gzip
X-Firefox-Spdy: h2
mt34iofvjay.com/lv/esnk/1884730/code.js
200 OK 0 B URL HTTP/2 mt34iofvjay.com/lv/esnk/1884730/code.js
IP
GET /lv/esnk/1884730/code.js HTTP/1.1
Host: mt34iofvjay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:32 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 13:21:09 GMT
vary: Accept-Encoding
etag: W/"63d27e45-1a2c5"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
steinfqwe6782beck.com/t/9/fret/meow4/1884733/f2e46a2c.js
200 OK 0 B URL HTTP/2 steinfqwe6782beck.com/t/9/fret/meow4/1884733/f2e46a2c.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /t/9/fret/meow4/1884733/f2e46a2c.js HTTP/1.1
Host: steinfqwe6782beck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 13:21:09 GMT
vary: Accept-Encoding
etag: W/"63d27e45-10d38"
x-js-ab1: current
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
forlumineoner.com/pfe/current/universal.min.js?v=3.1.415
200 OK 0 B URL HTTP/2 forlumineoner.com/pfe/current/universal.min.js?v=3.1.415
IP
GET /pfe/current/universal.min.js?v=3.1.415 HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://aflamaljins.com/
Origin: https://aflamaljins.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: application/javascript
last-modified: Fri, 27 Jan 2023 11:03:49 GMT
etag: W/"63d3af95-18c6c"
access-control-allow-origin: https://aflamaljins.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
steinfqwe6782beck.com/get/1884733?zoneid=1884733&jp=_clu3sewlfqba3j1mabvzek&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=6865164219068103
200 OK 0 B URL HTTP/2 steinfqwe6782beck.com/get/1884733?zoneid=1884733&jp=_clu3sewlfqba3j1mabvzek&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=6865164219068103
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1884733?zoneid=1884733&jp=_clu3sewlfqba3j1mabvzek&nojs=0&ix=0&abvar=0&t=0&x=1152&y=836&wcks=1&wgl=0&cnvs=1&os=0&md=0&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&sp=0&cid=6865164219068103 HTTP/1.1
Host: steinfqwe6782beck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://aflamaljins.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 28 Jan 2023 03:46:33 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
set-cookie: UID=230127224683d04e00612049d5afd59acf9b; Path=/; Expires=Sun, 28 Jan 2024 03:46:33 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
185.198.164.91
34.160.144.191
23.36.76.129
93.184.220.29
157.240.200.35
0.0.0.0