r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7983
Expires: Sun, 27 Nov 2022 09:04:05 GMT
Date: Sun, 27 Nov 2022 06:51:02 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14908
Expires: Sun, 27 Nov 2022 10:59:30 GMT
Date: Sun, 27 Nov 2022 06:51:02 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 15b59d5e62caedb4bec3ba6724906c1e
960f801e608a56fdd11449f4face29f62cad2b21
8c72a45737c2eeddf328b0ed3236f3243551d904e94ec9dd7254972ebfb9229e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1515
Cache-Control: max-age=101120
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:02 GMT
Etag: "6381eaec-1d7"
Expires: Mon, 28 Nov 2022 10:56:22 GMT
Last-Modified: Sat, 26 Nov 2022 10:31:08 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: CcwUjnyr/KqUQZl9ynIXtbBPuVDrN1kZvib3YTnoT4EZfwb/ZbTZl7ol27omjVSEKkbacUIRIDc=
x-amz-request-id: 77ZCNNCJA0VYYBRJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 27 Nov 2022 06:44:32 GMT
age: 390
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 27 Nov 2022 06:19:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1901
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:51:02 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
book.dypics.com/search/konacu
172.67.216.247301 Moved Permanently 172 B URL HTTP/1.1 book.dypics.com/search/konacu
IP 172.67.216.247:0
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash b2a51087dd82565797a5f2f97299418e
d34f64abe785e0e1a526d9fdb5a6d7c65f06b78a
c5a465333fe0a2579bfc06b66539e76b180ba618518ce29a09da85d2557dc003
Analyzer Verdict Alert fortinet Phishing
GET /search/konacu HTTP/1.1
Host: book.dypics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sun, 27 Nov 2022 06:51:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.torrentkitty.lol/search/search/konacu
X-Powered-By: ASP.NET
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x0rxN0azBg8guYKhoDrHEtHbTaI3bpD0Bl2IJPVWX7ujTfE3T11M1kJja4FAT8KA6DM7trdQSDiEpXwUTvlI3aotCPixmfStO7ojVUszVKNvpxIFKwaFPYyZMLAaQgE0JMY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7708eeda6e90b4fd-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 27 Nov 2022 06:11:12 GMT
cache-control: public,max-age=3600
age: 2390
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash d3df71aab146eefc49acb608796aab63
8401892995193919376dfcd798b09c8261579454
a616c1e54e896576601e6107c1814adbebf35364d8ed807cdd89ac36b8200c88
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2443
Cache-Control: max-age=96991
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:03 GMT
Etag: "6381d72b-1d7"
Expires: Mon, 28 Nov 2022 09:47:34 GMT
Last-Modified: Sat, 26 Nov 2022 09:06:51 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.212.166.60101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.212.166.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: On/H2Eqa1I43+twqffBy7g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: dIOQuPUS77Wmj+/Hl9jQC4pHG4w=
ocsp.digicert.com/
93.184.220.29200 OK 2.3 kB IP 93.184.220.29:0
Hash 014285ff28e54133fb26cd7c3b00ff88
d01496c869b39019199a36c6e30bcaf2d358c888
16ee0c24a75ecf5de41f70e64bd84d2040d765dd32f9b53caec71f3cc22f281f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6251
Cache-Control: max-age=126718
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:03 GMT
Etag: "63823c6a-117"
Expires: Mon, 28 Nov 2022 18:03:01 GMT
Last-Modified: Sat, 26 Nov 2022 16:18:50 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
a.exdynsrv.com/popunder1000.js
205.185.216.42200 OK 40 kB URL HTTP/1.1 a.exdynsrv.com/popunder1000.js
IP 205.185.216.42:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash e29e61608dcf36a4dd6b3d8eacf48d3f
ae219c941ce5ab23148e010464c3762c6a4f2527
81a3a060539f23b2b95ddb995d84b30c0a4f1985221e1b9b84d31d89ddb7f2fb
GET /popunder1000.js HTTP/1.1
Host: a.exdynsrv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:51:03 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 39971
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"3ad893acf0f115f3a9b29e6fafa"
X-HW: 1669531863.dop202.sk1.t,1669531863.cds209.sk1.shn,1669531863.dop202.sk1.t,1669531863.cds001.sk1.c
Access-Control-Allow-Origin: *, *
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 4fda3a1744a9d9aa0237251143c11754
adf4cc97bd31503e934971ef32342e8ed4b6ee4e
61d5b272b74daeb78d0d9a965cd1caafb4c2dd85d00518ddf253745c081eb311
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6251
Cache-Control: max-age=126718
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:03 GMT
Etag: "63823c6a-117"
Expires: Mon, 28 Nov 2022 18:03:01 GMT
Last-Modified: Sat, 26 Nov 2022 16:18:50 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c4c58dfeb0236008bf5f73eb6b4329e3
0344d1aab4b1972b2578357790cdfde87ddff39d
7150f6602c8f9b2c80cf515e5ae8790663d1075a0336ad89b9709dff5fbf63a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7150F6602C8F9B2C80CF515E5AE8790663D1075A0336AD89B9709DFF5FBF63A1"
Last-Modified: Fri, 25 Nov 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2577
Expires: Sun, 27 Nov 2022 07:34:01 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 06cd7ab07c8aa1bb40b432ec64d91aa3
c07b10cf1e65d4f7f81bd654c52106bd55a524a0
68fef97f79c99a5c63f54fd995c40c373d986d22d627bb307a1b7ff7bed1f1d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "68FEF97F79C99A5C63F54FD995C40C373D986D22D627BB307A1B7FF7BED1F1D0"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4326
Expires: Sun, 27 Nov 2022 08:03:10 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
charmshoist.com/26/ca/06/26ca065a5fb871c74739646a26f0622b.js
173.233.137.36200 OK 13 kB URL HTTP/1.1 charmshoist.com/26/ca/06/26ca065a5fb871c74739646a26f0622b.js
IP 173.233.137.36:0
File type ASCII text, with very long lines (37129), with no line terminators
Hash 6c254d3f79a7684137cc617bb539de56
ff185c917ccacdb5227f3c9f0daf80afc7826778
3e766a77575afa7d80248bcae957001df365b8852947b1770cb4bafb8d0e3d8e
Analyzer Verdict Alert quad9 Sinkholed
GET /26/ca/06/26ca065a5fb871c74739646a26f0622b.js HTTP/1.1
Host: charmshoist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a82e06659faafc45f9d0812a42cd0f9d
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
accentneglectporter.com/80497e49a2c17fe3a1aff4077eee1810/invoke.js
192.243.59.20200 OK 9.8 kB URL HTTP/1.1 accentneglectporter.com/80497e49a2c17fe3a1aff4077eee1810/invoke.js
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash 6973821f2ae6d400843eb152a21951df
16b59408d1b2803dbd5922eb91a129054d67e57d
322ea4095c48fb13a4aa48b0e32294e8bc4bce49c7288f2771d6bd2631747ba1
Analyzer Verdict Alert quad9 Sinkholed
GET /80497e49a2c17fe3a1aff4077eee1810/invoke.js HTTP/1.1
Host: accentneglectporter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sun, 27 Nov 2022 06:51:04 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5d1bea5ae506b6fac5054b82e47f168c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
get.geojs.io/v1/ip/geo.js
172.67.70.233200 OK 681 B URL HTTP/2 get.geojs.io/v1/ip/geo.js
IP 172.67.70.233:0
File type ASCII text, with very long lines (306)
Hash 28069cff7ac1f141235824160785986c
71c4329c1e9130431ff3d9ff52b84ea3b7db015e
2c115b4cc1d0a202e402b90b03e9d661bc2f962accf1c3ac6ac1163b91251d50
GET /v1/ip/geo.js HTTP/1.1
Host: get.geojs.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:03 GMT
content-type: application/javascript; charset=utf-8
x-request-id: adb83bd0d1376df9884205d827b2b435-AMS
strict-transport-security: max-age=15552000; includeSubDomains; preload
access-control-allow-origin: *
access-control-allow-methods: GET
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, private, max-age=0
x-geojs-location: AMS
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rlNBIy9mXw8RRfXOxkH1looc8W0rRyHTvlzN3zNlxlZFz8G%2FH3pxjRNFmuSC%2BNMwMPXw0iwab6TSP0yXbKMSQ0KkzhWTsH%2BHezFwCJe9Pyay0%2BYdGvldH%2BdClj91Vg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7708eee41a65fac8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash cfbcb12817712d4f8f816c208590444a
9999caeedbb1a95ae4236a5b962c233633df6799
b5a41ab77d5ff4ba1a17ff074eb91bc18824d56dfc4b6c3320e900bbd6f3a90a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 27 Nov 2022 06:51:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 04:30:31 GMT
Expires: Sun, 04 Dec 2022 04:30:30 GMT
Etag: "9999caeedbb1a95ae4236a5b962c233633df6799"
Cache-Control: max-age=595765,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7708eee94842b506-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15286
Expires: Sun, 27 Nov 2022 11:05:50 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15286
Expires: Sun, 27 Nov 2022 11:05:50 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15286
Expires: Sun, 27 Nov 2022 11:05:50 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 4af47334194a0d10c2bfd52f16eb91ac
8ea04d240499dea43f26c738c8428df118dd622d
6741505308b8f473e68a567b74e6cd099b7a624b3711cc0acab45b2add675f74
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=116646
Date: Sun, 27 Nov 2022 06:51:04 GMT
Etag: "63821517-1d7"
Expires: Mon, 28 Nov 2022 15:15:10 GMT
Last-Modified: Sat, 26 Nov 2022 13:31:03 GMT
Server: ECS (dcb/7F18)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Fvn4ibv1oEIUW_VrP3d8kSQq9wUqAotj29y9K-6baLdvAehZHDcNqw==
Age: 6247
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32013626-b98e-4f6b-bd84-ffd1a2c2b7ea.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32013626-b98e-4f6b-bd84-ffd1a2c2b7ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8965857253845582ad8333615154be59
6636e8929347aed0b19a22dd1e60065a9014ee30
42941561f6315d974d28f45104cfe79fb2eaf594e5e4efccf4f1377972cbb972
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32013626-b98e-4f6b-bd84-ffd1a2c2b7ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5483
x-amzn-requestid: b20511dd-2a15-4c90-b4c3-77f153b89c18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIymCEY9IAMFUnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63803159-384168242833530b79db4012;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 03:07:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UMNbrUUysmXw3Ka-xZR59cgRy-mnkYxjeW50TXsfAflQpfpSunNhCA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 03:27:49 GMT
age: 12195
etag: "6636e8929347aed0b19a22dd1e60065a9014ee30"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
34.120.237.76200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e97baa4851785eac92c719abf481c64
c32a57038d3cdbc514c9081c9938eca6a04fb481
adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 12:27:20 GMT
age: 66224
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg
34.120.237.76200 OK 4.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 514b4077fad50ba782e4bbb2c95c6852
4770f56d4d9489df43f33952e4bfa84d8e46414e
a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4374
x-amzn-requestid: 16fa9401-4b57-4300-9377-3a7d96de3a38
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGB7uFWJIAMFfTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f16b1-3386c7b54d828c3b1393b9ce;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:01:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 6XMNeYqDwM9yHZf1rkBRhZ6k_iZE92MWKavu0vlQnT2jZ--tswQwWw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 07:07:08 GMT
age: 85436
etag: "4770f56d4d9489df43f33952e4bfa84d8e46414e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iFHoIAMF2-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
age: 32930
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 892849386662d30042f01ab952a3ec14
3b349ac17a00d68875e64bee110ec85d07cffda2
893797d55f15081d45af7a31af9fefe106ace9ba236e9b113787d07ab416faf9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F661e728e-05a1-40d9-ae81-c058443324b3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9926
x-amzn-requestid: 4e2c72af-2cce-4740-9962-6a7f9e217272
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b_cVCHwEoAMF3lQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c7420-51c2e04b4fae5b576a679db5;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 07:02:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rZTk5ONMhQB66WF0VWIRmlTOdzEJO-NJVl4TCibzbH2fZXY_9Mx9kQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 18:42:19 GMT
age: 43725
etag: "3b349ac17a00d68875e64bee110ec85d07cffda2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2cd887044e91d7ed0f1a8d7119ff7dd0
ae8aa4ce6ddaccba771fe65446926b60fc5628da
bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: K2eKLQhrsCdd4ASsfEibRuZAYW4CpPTlO3fZs7xdoKrw1HBxfTGkEA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sat, 26 Nov 2022 21:42:14 GMT
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
content-type: image/jpeg
age: 32930
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
52.28.211.11200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
File type ASCII text, with no line terminators
Hash c530b950b6c8d6324cd0f1358cacb746
bd0a87a47cec5bd750406dd8715665dd4494008a
c942fde018780e8adc773e2c8339171a803f5a776e6ec03d06e7d8c90a9a063b
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:04 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
set-cookie: uid_id2=e998f6a7-fd67-4b31-891a-8f0eeb9bad3c:2:1; expires=Wed, 24 Nov 2032 06:51:04 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
52.28.211.11200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
File type ASCII text, with no line terminators
Hash 696e9141d30420c05180598292e71696
b51f418c81009da920d5c2420a70510d581f9d4e
4ed9ee11e876965d97072284508169e9e5d036a7eb1306a1c6d9ecad19cff5fa
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:04 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
set-cookie: uid_id2=6f5448da-abad-4fce-aafd-19a1dd252d6e:1:1; expires=Wed, 24 Nov 2032 06:51:04 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 6e1414e400940a0efa989aec457bc6dd
973e8b9b593327f55f5a0646625ac9078bf09246
8b900d132d26112029ad1dd8290d721e32c03f5c9bc30d3d69252977cc46c05f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2870
Cache-Control: max-age=97807
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:04 GMT
Etag: "6381d8b1-117"
Expires: Mon, 28 Nov 2022 10:01:11 GMT
Last-Modified: Sat, 26 Nov 2022 09:13:21 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d08d079d04458028065ddfa315e8ca41
146b9eb370f649d3a230226ab373e05f39fd80af
c108c7e6ef9d790abca48344401f4b5a2204fe16287908f48a865181f711f000
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C108C7E6EF9D790ABCA48344401F4B5A2204FE16287908F48A865181F711F000"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7383
Expires: Sun, 27 Nov 2022 08:54:07 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d08d079d04458028065ddfa315e8ca41
146b9eb370f649d3a230226ab373e05f39fd80af
c108c7e6ef9d790abca48344401f4b5a2204fe16287908f48a865181f711f000
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C108C7E6EF9D790ABCA48344401F4B5A2204FE16287908F48A865181F711F000"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7383
Expires: Sun, 27 Nov 2022 08:54:07 GMT
Date: Sun, 27 Nov 2022 06:51:04 GMT
Connection: keep-alive
simplewebanalysis.com/stats
52.28.211.11200 OK 46 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
Hash 94e1678fcd108420fcb23a7f5297b3a9
75ca391693d27dc62141a542be1a30c6c6bfcc5e
e84524ac78865f34e766b7efd9a0384f879162ca5088d6f15f024731af3c8dce
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: uid_id2=6f5448da-abad-4fce-aafd-19a1dd252d6e:1:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:05 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 110fe5160840681a476d93793f7942c0
f80a103ed642d0db8c008939d7bfc2621681747b
ded9668d16fdba5a785700ae8d8427758811695525d05419914b5e0fbdf8df7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DED9668D16FDBA5A785700AE8D8427758811695525D05419914B5E0FBDF8DF7E"
Last-Modified: Sat, 26 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12278
Expires: Sun, 27 Nov 2022 10:15:43 GMT
Date: Sun, 27 Nov 2022 06:51:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d7194132f3926cf4c0cc0cba0d1a1d5f
94e321281174b32394e34e4a9ece6a0c0aa9e011
dcf5885214fc0bfabfdf53807303bd0715be72ddbb9088ec40f3fc2fbb5923ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DCF5885214FC0BFABFDF53807303BD0715BE72DDBB9088EC40F3FC2FBB5923EE"
Last-Modified: Sat, 26 Nov 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16387
Expires: Sun, 27 Nov 2022 11:24:12 GMT
Date: Sun, 27 Nov 2022 06:51:05 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9131e8d3f3d4cb75936096e0bed676f1
6004d602e55df4312a11da35d0f56fe0a029b1f3
ac8636d95cc774c776dfbc2facb52a79bed6e29bce86d2745db64a1dcdb08240
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC8636D95CC774C776DFBC2FACB52A79BED6E29BCE86D2745DB64A1DCDB08240"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18255
Expires: Sun, 27 Nov 2022 11:55:21 GMT
Date: Sun, 27 Nov 2022 06:51:06 GMT
Connection: keep-alive
lightssyrupdecree.com/watch.812062005586.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2Fkonacu&tz=0&dev=e&res=12.1055&uuid=e998f6a7-fd67-4b31-891a-8f0eeb9bad3c%3A2%3A1
192.243.61.227307 Temporary Redirect 0 B URL HTTP/1.1 lightssyrupdecree.com/watch.812062005586.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2Fkonacu&tz=0&dev=e&res=12.1055&uuid=e998f6a7-fd67-4b31-891a-8f0eeb9bad3c%3A2%3A1
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.812062005586.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2Fkonacu&tz=0&dev=e&res=12.1055&uuid=e998f6a7-fd67-4b31-891a-8f0eeb9bad3c%3A2%3A1 HTTP/1.1
Host: lightssyrupdecree.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Sun, 27 Nov 2022 06:51:06 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.torrentkitty.lol
Access-Control-Allow-Origin: https://www.torrentkitty.lol
Access-Control-Allow-Credentials: true
Location: https://lightssyrupdecree.com/watch.812062005586.js?key=80497e49a2c17fe3a1aff4077eee1810&kw=%5B%22search%22%2C%22-%22%2C%22torrent%22%2C%22kitty%22%5D&refer=https%3A%2F%2Fwww.torrentkitty.lol%2Fsearch%2Fsearch%2Fkonacu&tz=0&dev=e&res=12.1055&uuid=e998f6a7-fd67-4b31-891a-8f0eeb9bad3c%3A2%3A1&shu=d7b83a3074869b3e68eae437471bb0dc22871df83eaff8d409475159456527f625159bf45c954b40e03abbf95e239bbf135d0df04300f8f2e94da34bd1ec2d2ae8a1a6a5349f34e57f87bfe4b45e41891740fe70&pst=1669531926&rmtc=t
Set-Cookie: u_pl=17298897; expires=Mon, 28 Nov 2022 06:51:06 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.N9RgYHOTIQaLiYrg1tQRXDQ7k6q-cuOWktBE0wcyXTY; expires=Sun, 27 Nov 2022 06:52:06 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1420d827e043d05d996a442240447f9f
Strict-Transport-Security: max-age=0; includeSubdomains
wastedinvaluable.com/sbar.json?key=26ca065a5fb871c74739646a26f0622b&uuid=6f5448da-abad-4fce-aafd-19a1dd252d6e%3A1%3A1
173.233.137.36200 OK 3.3 kB URL HTTP/1.1 wastedinvaluable.com/sbar.json?key=26ca065a5fb871c74739646a26f0622b&uuid=6f5448da-abad-4fce-aafd-19a1dd252d6e%3A1%3A1
IP 173.233.137.36:0
File type JSON data\012- , ASCII text, with very long lines (5935), with no line terminators
Hash db41daa40849b248fb2b930088efa5e4
cd48bf5ef5fa2e0fb0266d81abee388ff92d253b
4fed9c95f5cfbc76ea078de6a1cd37490aa5ee03c25c60cb0d252e53f35d4a9b
GET /sbar.json?key=26ca065a5fb871c74739646a26f0622b&uuid=6f5448da-abad-4fce-aafd-19a1dd252d6e%3A1%3A1 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:06 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.torrentkitty.lol
Access-Control-Allow-Origin: https://www.torrentkitty.lol
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=17550729; expires=Mon, 28 Nov 2022 06:51:06 GMT; secure; SameSite=None
uid_id2=6f5448da-abad-4fce-aafd-19a1dd252d6e:1:1; expires=Sun, 04 Dec 2022 06:51:06 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 28 Nov 2022 06:51:06 GMT; secure; SameSite=None
uncs=1; expires=Mon, 28 Nov 2022 06:51:06 GMT; secure; SameSite=None
pdhtkv29=true; expires=Mon, 28 Nov 2022 06:51:06 GMT; secure; SameSite=None
uncs29=1; expires=Mon, 28 Nov 2022 06:51:06 GMT; secure; SameSite=None
slec26ca065a5fb871c74739646a26f0622b=[3760951]; expires=Sun, 27 Nov 2022 06:51:11 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 031f3a9182ac888a47e7da5b8337ad77
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 0b22265adf4fd99a7235ed0ac7add76f
d23fa4d3a7b6d8f52656040c4d63c4d8a832c468
67ca414c8555f4757545f05b38ac55c7e3d98d40fee3c291059a04ae2028421c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4322
Cache-Control: max-age=132370
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:06 GMT
Etag: "63825a0a-116"
Expires: Mon, 28 Nov 2022 19:37:16 GMT
Last-Modified: Sat, 26 Nov 2022 18:25:14 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
secure.statcounter.com/counter/counter.js
104.20.229.67200 OK 42 kB URL HTTP/2 secure.statcounter.com/counter/counter.js
IP 104.20.229.67:0
File type ASCII text, with very long lines (43632), with no line terminators
Hash 11c35278a92d74b9a087a4aa7ed6c2c4
b5bd8e3a9636757c06ad64f58722d818afb95ed0
ca8828b3e7e15d6970f5d027a22bde1d8d5c9a08297b38e0a6480ada3b166263
GET /counter/counter.js HTTP/1.1
Host: secure.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:04 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Fri, 25 Nov 2022 14:36:48 GMT
etag: W/"6380d300-aa70"
expires: Sun, 27 Nov 2022 18:32:55 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 1089
server: cloudflare
cf-ray: 7708eee99ed5b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
wastedinvaluable.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2Btzne%2FIEYQgxcPyhxEFNzZ7p7umR0jLMaYEMwvkki8VldV75Zb09VUVU%2Fv7mkxIBEFJwjisffNJks0aPIHiNLxEgaFHQ%2Byggt6yVUN5JKLzOzA4ge6P5%2Bq9w6f9159tFXsEx8F3bt4Tm9IpehC3PQbr16VGdelbZy%2F0gj8pn%2B8cVVm7eh4Y23yM%2F03Aj9u%2Bq81Tgu2qhdCP%2FD9wA8ap6QRqV5bmKKQ%2BZ1u0Oz6zShsBnGENfPfsy08WOqB9%2FfJMUg%2B%2Fv%2FKg3uQrEbWu3tS2FWn89ff6RWKOm3Q5zvvZauZLjP0DsfUeEiznRkb2o4J%2BfIIdLYzUwDd354oQCLHxPs1QJLtzNZE0r95sGmiIDIk%2FCjKfg2hakhag%2BlrkHyXAIzj%2FAVkvVvntSnp%2BgFKJ%2BiYzD1%2BBFmOydzvzyPrfXNCybXGZa0KJ3VmsZZWkGs15HKNvLgPt%2BFBlvfB3IeQ%2FGey8Pgsst72Bas0JN97uZ3GUbTI6TxNKJ%2BPUibmKU35fNClAedhHPK2mFokZQ2Z1lBiAGo9FJNPeihSD0Xuocf3GjTupr7fSZO01VqMGGOtFmPxYpvHvBUtpj4KNtEwgMsHYGoAZjaRm02syhu78TGY4gfYlQqWe7COoM8rlIKgtAQlJSglQekIyn51kysb2uoWV7ZIglkPZ71VDbVb3qI3tVsWGdnK98lzE%2B%2B8oz99jFWx1wjbjPrtmMZpstgJWCfqtLrtqE3Dduq3wzCBlRWkPTJVujEJ8s0byOXus6eR0BpW1WDyGGjxImg57IQ%2B6MowWvSxkX3rtDEic6vSufWm64PrCrmbg1v3ttQ%2BeWEaYpd1INho6dHtJw%2FVJyfBTIXcVPhA%2FkiwrK4PL%2BmSbF%2FSpSX3LuRO9uQGnQR82VEn5r56V6yX2vAzJ%2B3g9ltsAkzGO1eEdWdpxmW2bMnXJyTnwpzShgny3Rl7VSQXC7tyojBZkZ%2B9%2BPapM73cCGulzmpQudv5HEyOydPnNqdP96VPH0CaGqao0CtGZFaQ%2Bj5Yvgmbj5b%2BPDf%2B%2B%2FaTh7CawKhDTpJ7KItqaMLk8FLJMWm98g%2BUGC3d%2FeyLP94vngFNKlhxaEMiRt%2F%2FdcDfstexbDxQdw1Zr0LfVOirClQNYIv%2FDV1uRku%2FtKaFRHnDRBlvO1FG3Tiw18q9hohTPxV%2BKJK0m6Qd6vNuGnUT2g1EJ4lpAGfH7NpTv%2F0LAAD%2F%2FwEAAP%2F%2Fkpxsw5YEAAA%3D
173.233.137.36200 OK 7 B URL HTTP/1.1 wastedinvaluable.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2Btzne%2FIEYQgxcPyhxEFNzZ7p7umR0jLMaYEMwvkki8VldV75Zb09VUVU%2Fv7mkxIBEFJwjisffNJks0aPIHiNLxEgaFHQ%2Byggt6yVUN5JKLzOzA4ge6P5%2Bq9w6f9159tFXsEx8F3bt4Tm9IpehC3PQbr16VGdelbZy%2F0gj8pn%2B8cVVm7eh4Y23yM%2F03Aj9u%2Bq81Tgu2qhdCP%2FD9wA8ap6QRqV5bmKKQ%2BZ1u0Oz6zShsBnGENfPfsy08WOqB9%2FfJMUg%2B%2Fv%2FKg3uQrEbWu3tS2FWn89ff6RWKOm3Q5zvvZauZLjP0DsfUeEiznRkb2o4J%2BfIIdLYzUwDd354oQCLHxPs1QJLtzNZE0r95sGmiIDIk%2FCjKfg2hakhag%2BlrkHyXAIzj%2FAVkvVvntSnp%2BgFKJ%2BiYzD1%2BBFmOydzvzyPrfXNCybXGZa0KJ3VmsZZWkGs15HKNvLgPt%2BFBlvfB3IeQ%2FGey8Pgsst72Bas0JN97uZ3GUbTI6TxNKJ%2BPUibmKU35fNClAedhHPK2mFokZQ2Z1lBiAGo9FJNPeihSD0Xuocf3GjTupr7fSZO01VqMGGOtFmPxYpvHvBUtpj4KNtEwgMsHYGoAZjaRm02syhu78TGY4gfYlQqWe7COoM8rlIKgtAQlJSglQekIyn51kysb2uoWV7ZIglkPZ71VDbVb3qI3tVsWGdnK98lzE%2B%2B8oz99jFWx1wjbjPrtmMZpstgJWCfqtLrtqE3Dduq3wzCBlRWkPTJVujEJ8s0byOXus6eR0BpW1WDyGGjxImg57IQ%2B6MowWvSxkX3rtDEic6vSufWm64PrCrmbg1v3ttQ%2BeWEaYpd1INho6dHtJw%2FVJyfBTIXcVPhA%2FkiwrK4PL%2BmSbF%2FSpSX3LuRO9uQGnQR82VEn5r56V6yX2vAzJ%2B3g9ltsAkzGO1eEdWdpxmW2bMnXJyTnwpzShgny3Rl7VSQXC7tyojBZkZ%2B9%2BPapM73cCGulzmpQudv5HEyOydPnNqdP96VPH0CaGqao0CtGZFaQ%2Bj5Yvgmbj5b%2BPDf%2B%2B%2FaTh7CawKhDTpJ7KItqaMLk8FLJMWm98g%2BUGC3d%2FeyLP94vngFNKlhxaEMiRt%2F%2FdcDfstexbDxQdw1Zr0LfVOirClQNYIv%2FDV1uRku%2FtKaFRHnDRBlvO1FG3Tiw18q9hohTPxV%2BKJK0m6Qd6vNuGnUT2g1EJ4lpAGfH7NpTv%2F0LAAD%2F%2FwEAAP%2F%2Fkpxsw5YEAAA%3D
IP 173.233.137.36:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scxR%2Btzne%2FIEYQgxcPyhxEFNzZ7p7umR0jLMaYEMwvkki8VldV75Zb09VUVU%2Fv7mkxIBEFJwjisffNJks0aPIHiNLxEgaFHQ%2Byggt6yVUN5JKLzOzA4ge6P5%2Bq9w6f9159tFXsEx8F3bt4Tm9IpehC3PQbr16VGdelbZy%2F0gj8pn%2B8cVVm7eh4Y23yM%2F03Aj9u%2Bq81Tgu2qhdCP%2FD9wA8ap6QRqV5bmKKQ%2BZ1u0Oz6zShsBnGENfPfsy08WOqB9%2FfJMUg%2B%2Fv%2FKg3uQrEbWu3tS2FWn89ff6RWKOm3Q5zvvZauZLjP0DsfUeEiznRkb2o4J%2BfIIdLYzUwDd354oQCLHxPs1QJLtzNZE0r95sGmiIDIk%2FCjKfg2hakhag%2BlrkHyXAIzj%2FAVkvVvntSnp%2BgFKJ%2BiYzD1%2BBFmOydzvzyPrfXNCybXGZa0KJ3VmsZZWkGs15HKNvLgPt%2BFBlvfB3IeQ%2FGey8Pgsst72Bas0JN97uZ3GUbTI6TxNKJ%2BPUibmKU35fNClAedhHPK2mFokZQ2Z1lBiAGo9FJNPeihSD0Xuocf3GjTupr7fSZO01VqMGGOtFmPxYpvHvBUtpj4KNtEwgMsHYGoAZjaRm02syhu78TGY4gfYlQqWe7COoM8rlIKgtAQlJSglQekIyn51kysb2uoWV7ZIglkPZ71VDbVb3qI3tVsWGdnK98lzE%2B%2B8oz99jFWx1wjbjPrtmMZpstgJWCfqtLrtqE3Dduq3wzCBlRWkPTJVujEJ8s0byOXus6eR0BpW1WDyGGjxImg57IQ%2B6MowWvSxkX3rtDEic6vSufWm64PrCrmbg1v3ttQ%2BeWEaYpd1INho6dHtJw%2FVJyfBTIXcVPhA%2FkiwrK4PL%2BmSbF%2FSpSX3LuRO9uQGnQR82VEn5r56V6yX2vAzJ%2B3g9ltsAkzGO1eEdWdpxmW2bMnXJyTnwpzShgny3Rl7VSQXC7tyojBZkZ%2B9%2BPapM73cCGulzmpQudv5HEyOydPnNqdP96VPH0CaGqao0CtGZFaQ%2Bj5Yvgmbj5b%2BPDf%2B%2B%2FaTh7CawKhDTpJ7KItqaMLk8FLJMWm98g%2BUGC3d%2FeyLP94vngFNKlhxaEMiRt%2F%2FdcDfstexbDxQdw1Zr0LfVOirClQNYIv%2FDV1uRku%2FtKaFRHnDRBlvO1FG3Tiw18q9hohTPxV%2BKJK0m6Qd6vNuGnUT2g1EJ4lpAGfH7NpTv%2F0LAAD%2F%2FwEAAP%2F%2Fkpxsw5YEAAA%3D HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=6f5448da-abad-4fce-aafd-19a1dd252d6e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec26ca065a5fb871c74739646a26f0622b=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:06 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0bafce0ba3f5da1948bb72b3c44ddc38
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3a1eb8e3d7b5e963c21e1905e849e570
fff8193edc6218562c5612b0e02f73dbcca98c0c
12db50941a08926a1f14146c52b53cfc6acc1dcb6ac858f6fcfb421330dfb12f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12DB50941A08926A1F14146C52B53CFC6ACC1DCB6AC858F6FCFB421330DFB12F"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16831
Expires: Sun, 27 Nov 2022 11:31:37 GMT
Date: Sun, 27 Nov 2022 06:51:06 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3a1eb8e3d7b5e963c21e1905e849e570
fff8193edc6218562c5612b0e02f73dbcca98c0c
12db50941a08926a1f14146c52b53cfc6acc1dcb6ac858f6fcfb421330dfb12f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12DB50941A08926A1F14146C52B53CFC6ACC1DCB6AC858F6FCFB421330DFB12F"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16831
Expires: Sun, 27 Nov 2022 11:31:37 GMT
Date: Sun, 27 Nov 2022 06:51:06 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/close.png
172.64.109.13200 OK 6.0 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/close.png
IP 172.64.109.13:0
File type PNG image data, 522 x 391, 8-bit/color RGBA, non-interlaced\012- data
Hash c489ce2c491a22ee37a55e26a92dfd73
2fa588ab09e94dd902e5bd24b48f98ad1949c9d6
1eed147c7d5de6291c25fbc5274830c12d5549262fb144271576d4e15966e5bd
GET /sb/notifications/software/multi/browsers/ff/3/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:06 GMT
content-type: image/png
content-length: 5982
last-modified: Thu, 08 Sep 2022 07:49:57 GMT
etag: "63199ea5-175e"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 306486
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oRr%2FTm14uRkpkVzX0UvQHD75LBS0Zi7O1dhf94D0h9PuJwDtUU8oHooGukdA0mp%2FX4a5936uoR1nn26tuWt0IkqVB4a29FLe5EpGGSOYsoBGHF5Jt0%2BWULufNuyezSJzwxv0x1n3BEn3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708eef539ba7443-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/update-icon.png
172.64.109.13200 OK 175 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/img/update-icon.png
IP 172.64.109.13:0
File type PNG image data, 452 x 453, 8-bit/color RGBA, non-interlaced\012- data
Size 175 kB (174730 bytes)
Hash 85bc2f8a287afa33ac84c90178055d00
c98e7ebd06397a77a20607f55fe4ebf1b57ca334
85d20d101efc753f9b0619a33901e1689d1e0c11a46bf6d6d657c1393542cc30
GET /sb/notifications/software/multi/browsers/ff/3/img/update-icon.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:06 GMT
content-type: image/png
content-length: 174730
last-modified: Thu, 08 Sep 2022 07:49:58 GMT
etag: "63199ea6-2aa8a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 306486
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bfeoCjkB%2BSc5mTtCPIHXMrvpiT%2BWArZjylbHQTPjdhSgq8b5pzA0P9osvhpMEQc44BqDDc7OIJJfD0YbmjSXGaTuEH8pkF8AoOeq%2BDLDR%2BQBIGCmNjWsuJ1V24QJnJHIpaZmhfORNSVJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708eef539b97443-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 5af61422c4eaa1b995ec63e463abda26
db75634681ed688840773ce828c169ac9da7d131
506791493bb08d458008ad072ac34a26c2170c1e775b83f55f20cd8af97aa895
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3a1eb8e3d7b5e963c21e1905e849e570
fff8193edc6218562c5612b0e02f73dbcca98c0c
12db50941a08926a1f14146c52b53cfc6acc1dcb6ac858f6fcfb421330dfb12f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "12DB50941A08926A1F14146C52B53CFC6ACC1DCB6AC858F6FCFB421330DFB12F"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16831
Expires: Sun, 27 Nov 2022 11:31:37 GMT
Date: Sun, 27 Nov 2022 06:51:06 GMT
Connection: keep-alive
wastedinvaluable.com/pixel/sbe?t=3&error=timeout
173.233.137.36200 OK 0 B URL HTTP/1.1 wastedinvaluable.com/pixel/sbe?t=3&error=timeout
IP 173.233.137.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbe?t=3&error=timeout HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=6f5448da-abad-4fce-aafd-19a1dd252d6e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec26ca065a5fb871c74739646a26f0622b=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fjs%2Fscript.js&l=8814&fd=29
173.233.137.36200 OK 0 B URL HTTP/1.1 wastedinvaluable.com/pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fjs%2Fscript.js&l=8814&fd=29
IP 173.233.137.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pixel/sbls?bv=22.33.5038&tmpl=482&u=https%3A%2F%2Fcdn.creative-bars1.com%2Fsb%2Fnotifications%2Fsoftware%2Fmulti%2Fbrowsers%2Fff%2F3%2Fjs%2Fscript.js&l=8814&fd=29 HTTP/1.1
Host: wastedinvaluable.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=17550729; uid_id2=6f5448da-abad-4fce-aafd-19a1dd252d6e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec26ca065a5fb871c74739646a26f0622b=[3760951]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1f6b302933d460ab447356556838501c
00d2123ec7f0ef5bf0d648bf4d15e69cd9902f4e
8240f397607869e239c216ca93f78f84e25299c0ad4e7483b2bd53f7861142f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8240F397607869E239C216CA93F78F84E25299C0AD4E7483B2BD53F7861142F0"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2712
Expires: Sun, 27 Nov 2022 07:36:18 GMT
Date: Sun, 27 Nov 2022 06:51:06 GMT
Connection: keep-alive
www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17298897
173.233.137.52200 OK 1.3 kB URL HTTP/1.1 www.spikereekvelocity.com/dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17298897
IP 173.233.137.52:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash f8b3a3cd1c9ac6c2a5f02983626a6355
4b9e16e80657b532dbc07b22a1cc6a31fb948a7c
b5c3e2b89f893f58702e5bfd5595b0793b98154efda27b4b174640fd8ed8a8a6
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?key=863705bcbb4b6a554ddb359665395a6f&psid=17298897 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Cookie: u_pl=16122660; iprc027aa7c29f5bf06ddc85716e91df63ca=3806410; pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:06 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: ain=eyJhbGciOiJIUzI1NiJ9.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.V5mic3yo5U23JEvczcKjjZRcngyDU_Cw7uQq-QDV-go; expires=Sun, 27 Nov 2022 06:52:06 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 63010be42cdcfa5349de2cd795805227
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.spikereekvelocity.com/dyfc1k09?shu=081f23af2f6263616f33b5b9e9981436f6182cb758be7fca2f4903128049aff7f8c0ecfbdd33449b658f810e9b7a9ff119ec7efe27c5941fa1678c2dde47ebe9e84584eefc8f1e706da8a08392bc4751856b510e2254c3061b11df7baf48390e9c9a49&pst=1669531926&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.torrentkitty.lol%2F&psid=17298897
173.233.137.52302 Found 0 B URL HTTP/1.1 www.spikereekvelocity.com/dyfc1k09?shu=081f23af2f6263616f33b5b9e9981436f6182cb758be7fca2f4903128049aff7f8c0ecfbdd33449b658f810e9b7a9ff119ec7efe27c5941fa1678c2dde47ebe9e84584eefc8f1e706da8a08392bc4751856b510e2254c3061b11df7baf48390e9c9a49&pst=1669531926&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.torrentkitty.lol%2F&psid=17298897
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /dyfc1k09?shu=081f23af2f6263616f33b5b9e9981436f6182cb758be7fca2f4903128049aff7f8c0ecfbdd33449b658f810e9b7a9ff119ec7efe27c5941fa1678c2dde47ebe9e84584eefc8f1e706da8a08392bc4751856b510e2254c3061b11df7baf48390e9c9a49&pst=1669531926&rmtc=t&uuid=&pii=&in=false&key=863705bcbb4b6a554ddb359665395a6f&refer=https%3A%2F%2Fwww.torrentkitty.lol%2F&psid=17298897 HTTP/1.1
Host: www.spikereekvelocity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.spikereekvelocity.com/dyfc1k09?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122660
Cookie: u_pl=16122660; iprc027aa7c29f5bf06ddc85716e91df63ca=3806410; pdhtkv=true; uncs=1; pdhtkv28=true; uncs28=1; ain=eyJhbGciOiJIUzI1NiJ9.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.V5mic3yo5U23JEvczcKjjZRcngyDU_Cw7uQq-QDV-go; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Sun, 27 Nov 2022 06:51:07 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: http://binomnet.com/c3t2l4k.php?key=rxlhweg90v6uku0l17w0&SUB_ID_SHORT=18d1208137b154c3f62c68a9b85439fb&Cost=0.900000&PLACEMENT_ID=16122660&CAMPAIGN_ID=690726&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2041683
Set-Cookie: iprc25c5b62c41eeceebc64b26b015fdadea=3818673; expires=Thu, 01 Dec 2022 06:51:07 GMT
uncs=2; expires=Mon, 28 Nov 2022 06:51:07 GMT
uncs28=2; expires=Mon, 28 Nov 2022 06:51:07 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8e7f0c7b689fbc88906b0a16b25b4c4c
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/script.js
172.64.109.13200 OK 4.9 kB URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/script.js
IP 172.64.109.13:0
Hash 52e09a76d5c77aea6e4e39c37ed23f50
671ab4ce2e6ce4bbd4b99b5a32bd2dea4723d50d
57dd0534bbb95e1f81aee274ec01852b8a965ecd6a274551ab395584248c3108
GET /sb/notifications/software/multi/browsers/ff/3/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:06 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 07:49:59 GMT
etag: W/"63199ea7-2ae2"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 383
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=stuHhTyFapT6eDj7ezdGCIDCbV2R6MiyUI35WbFnAUP8KUwCI6Vr5958V1TZADswgS26dHv0iRoz%2Bmb8RfwMT8ONzB%2BUKsLZ4XKf2U%2BJKbjqRV8nUmuCcMwAygUqjwe4sDlaCTm7KmOY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708eef5c9fd7443-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ak.hetapus.com/afu.php?zoneid=5460778&ymid=c8d45vce2pmh9vr5cb&var=16122660
23.36.77.10200 OK 952 B URL HTTP/2 ak.hetapus.com/afu.php?zoneid=5460778&ymid=c8d45vce2pmh9vr5cb&var=16122660
IP 23.36.77.10:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (513)
Hash a55af8e4ef747873a9e00a3e08068fb1
08a4f326edf0f6e897eb733596981175eea416e1
695f3da3615775d0308e95297ee92c2025da5f0048d8cd0b467f3ad9f9bf359a
Analyzer Verdict Alert quad9 Sinkholed
GET /afu.php?zoneid=5460778&ymid=c8d45vce2pmh9vr5cb&var=16122660 HTTP/1.1
Host: ak.hetapus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 2e666889d7f1e7ca107372e4c8cc1bf8
link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://bnr.thedataclicks.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
expires: Sun, 27 Nov 2022 06:51:07 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 27 Nov 2022 06:51:07 GMT
content-length: 952
vary: Accept-Encoding
set-cookie: OAID=d32ed73142a2416c92f988103e94082f; expires=Mon, 27 Nov 2023 06:51:07 GMT; path=/; secure; SameSite=None
oaidts=1669531867; expires=Mon, 27 Nov 2023 06:51:07 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash e413346bdf4cea48847886fc7871e4d8
5d89ec3ae90ebf5069321bfc6fb0abeff77db028
85398a907af9d7c7041b28ec00595c5056ee3ecb51d9f09e4e75b6bfa0859d84
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "85398A907AF9D7C7041B28EC00595C5056EE3ECB51D9F09E4E75B6BFA0859D84"
Last-Modified: Sat, 26 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10874
Expires: Sun, 27 Nov 2022 09:52:21 GMT
Date: Sun, 27 Nov 2022 06:51:07 GMT
Connection: keep-alive
ak.hetapus.com/favicon.ico
23.36.77.10204 No Content 0 B URL HTTP/2 ak.hetapus.com/favicon.ico
IP 23.36.77.10:0
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: ak.hetapus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: OAID=d32ed73142a2416c92f988103e94082f; oaidts=1669531867
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
expires: Sun, 27 Nov 2022 06:51:08 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Sun, 27 Nov 2022 06:51:08 GMT
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=merge&userId=d32ed73142a2416c92f988103e94082f
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=d32ed73142a2416c92f988103e94082f
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=d32ed73142a2416c92f988103e94082f HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sun, 27 Nov 2022 06:51:08 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d32ed73142a2416c92f988103e94082f; expires=Mon, 27 Nov 2023 06:51:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 26bffbad82e21fad334d1124bc8aedda
56a0af610494246f53279c81a7c36870539cc028
b83263063d1d40104cb9f759fd9e767265fa8d37876a080c06afa07e32d00077
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=171200
Date: Sun, 27 Nov 2022 06:51:08 GMT
Etag: "6383029c-1d7"
Expires: Tue, 29 Nov 2022 06:24:28 GMT
Last-Modified: Sun, 27 Nov 2022 06:24:28 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: --k_w03gPrbju4EAHYbE_f0LuK_vkaiInP2Khwtx98NpeHA7B2PbCg==
bnr.thedataclicks.com/get/3aaXhDsaBY714mUXMA89pND9?connectionType=broadband&carrier=?&browserVersion=105®ion=03&device=desktop&operatingSystem=windows&osVersion=win10&country=NO&language=en&userAgent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&browser=firefox&zoneId=5460778&cost=0.002240&campaignId=6359297&paid=620624235538424227&rdk=rk1
54.205.118.100200 OK 1.6 kB URL HTTP/2 bnr.thedataclicks.com/get/3aaXhDsaBY714mUXMA89pND9?connectionType=broadband&carrier=?&browserVersion=105®ion=03&device=desktop&operatingSystem=windows&osVersion=win10&country=NO&language=en&userAgent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&browser=firefox&zoneId=5460778&cost=0.002240&campaignId=6359297&paid=620624235538424227&rdk=rk1
IP 54.205.118.100:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (823)
Hash 4740d1bb9862ec4ab3d36a01d87d962e
961b262f6ff774c6a63c591f21b70aa2de159d8b
2a7078409183c2791b91afa84702a9ad07a9140bdde819559ea176a473bb7d85
GET /get/3aaXhDsaBY714mUXMA89pND9?connectionType=broadband&carrier=?&browserVersion=105®ion=03&device=desktop&operatingSystem=windows&osVersion=win10&country=NO&language=en&userAgent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&browser=firefox&zoneId=5460778&cost=0.002240&campaignId=6359297&paid=620624235538424227&rdk=rk1 HTTP/1.1
Host: bnr.thedataclicks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: awselb/2.0
date: Sun, 27 Nov 2022 06:51:08 GMT
content-type: text/html
content-length: 1601
X-Firefox-Spdy: h2
d1aaucsx2ftut2.cloudfront.net/jcm-mm/df65b48d452bb5a2f073ffeb75bffd03.jpg
143.204.42.4200 OK 182 kB URL HTTP/2 d1aaucsx2ftut2.cloudfront.net/jcm-mm/df65b48d452bb5a2f073ffeb75bffd03.jpg
IP 143.204.42.4:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 800x575, components 3\012- data
Size 182 kB (182382 bytes)
Hash f9e641f66ce52e5cd289bc9ec04177a0
8f92da1eea761eeb085c677006807340a080d561
5bfbf5de7aa72c3556ace1009592e5156d5df495f8369be07b4f254cd742034c
GET /jcm-mm/df65b48d452bb5a2f073ffeb75bffd03.jpg HTTP/1.1
Host: d1aaucsx2ftut2.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bnr.thedataclicks.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 182382
last-modified: Wed, 15 Apr 2020 16:55:34 GMT
accept-ranges: bytes
server: AmazonS3
date: Sun, 27 Nov 2022 05:08:38 GMT
etag: "f9e641f66ce52e5cd289bc9ec04177a0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M4Fip7IU9SFa9WIC2d6-6YLMXlHqeUcJUfb9pjqdTAtHaVPxtCWzNg==
age: 6151
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 7b6661601b4e9cacfb91603a032da71d
cea4b497fac81e73615ca1c02f3e5061a65c3c56
6deba7a3f2254f3174e3f85f263b310b23da3a88bd773be5106ddf1393d9ac13
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=145126
Date: Sun, 27 Nov 2022 06:51:08 GMT
Etag: "638294fd-1d7"
Expires: Mon, 28 Nov 2022 23:09:54 GMT
Last-Modified: Sat, 26 Nov 2022 22:36:45 GMT
Server: ECS (dcb/7EA6)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JbQUJsf5ORBcy9hmNWwnnkAtNlg8YduwO3VvlxYKXDXlzPZApZwhIA==
Age: 1989
lnk.clickadsolutions.com/trk/3aaXhDsaBY714mUXMA89pND9?browser=firefox&browserVersion=105&campaignId=6359297&carrier=%3F&connectionType=broadband&cost=0.002240&country=NO&device=desktop&language=en&operatingSystem=windows&osVersion=win10&paid=620624235538424227&rdk=rk1®ion=03&userAgent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&zoneId=5460778&c2=true&vpw=1280&vph=1024
52.202.106.26200 OK 10 kB URL HTTP/2 lnk.clickadsolutions.com/trk/3aaXhDsaBY714mUXMA89pND9?browser=firefox&browserVersion=105&campaignId=6359297&carrier=%3F&connectionType=broadband&cost=0.002240&country=NO&device=desktop&language=en&operatingSystem=windows&osVersion=win10&paid=620624235538424227&rdk=rk1®ion=03&userAgent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&zoneId=5460778&c2=true&vpw=1280&vph=1024
IP 52.202.106.26:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (888)
Hash f3d6d4d5c7db24e385f5e23f75f41745
bbc8f59d99a36b02062d2884cc6d8f04d71d4255
5668c972bb72a5e340a3efbc1e2c16be8263c6b31a368b2f2bdcc774732eaeb8
GET /trk/3aaXhDsaBY714mUXMA89pND9?browser=firefox&browserVersion=105&campaignId=6359297&carrier=%3F&connectionType=broadband&cost=0.002240&country=NO&device=desktop&language=en&operatingSystem=windows&osVersion=win10&paid=620624235538424227&rdk=rk1®ion=03&userAgent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&zoneId=5460778&c2=true&vpw=1280&vph=1024 HTTP/1.1
Host: lnk.clickadsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bnr.thedataclicks.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:08 GMT
content-type: text/html;charset=UTF-8
set-cookie: v=t; Path=/; Domain=lnk.clickadsolutions.com; Max-Age=31536000; Expires=Mon, 27 Nov 2023 06:51:08 GMT; Secure; SameSite=None
cas=2055:1791:1791:1; Path=/; Domain=lnk.clickadsolutions.com; Max-Age=31536000; Expires=Mon, 27 Nov 2023 06:51:08 GMT; Secure; SameSite=None
rls=254051:1791:1791:1|259472:1791:1791:1; Path=/; Domain=lnk.clickadsolutions.com; Max-Age=31536000; Expires=Mon, 27 Nov 2023 06:51:08 GMT; Secure; SameSite=None
com=13220:142:NO:1791:1791:1|9451:166:NO:1791:1791:1; Path=/; Domain=lnk.clickadsolutions.com; Max-Age=31536000; Expires=Mon, 27 Nov 2023 06:51:08 GMT; Secure; SameSite=None
content-language: en-US
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.yourwebbars.com/sb/notifications/software/multi/browsers/ff/3/index.html
172.67.74.218200 OK 534 B URL HTTP/2 cdn.yourwebbars.com/sb/notifications/software/multi/browsers/ff/3/index.html
IP 172.67.74.218:0
File type HTML document text\012- HTML document, ASCII text
Hash 56a9e692a075709dd859083bdee1e5d6
f4eaf39f1e9acba0a3a97154ca35d8335cfa631e
98b5de38ea41d0c58dbbb6380628691c404964a1607ed9c1dc59364b7d3c4468
GET /sb/notifications/software/multi/browsers/ff/3/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:06 GMT
content-type: text/html
last-modified: Thu, 08 Sep 2022 07:49:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 183026
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iLb7b9a7CwT0GGNJCd0FW%2F5JDlfu4J9TlnGjkP5HCgJl2kvU0KldY9qE%2FVXPv%2BbjQj%2FiuWklxeR6FaVcNm5zJFJV1MbLGAQgxxk3Mj90ACm4xtmiEk3Bx5gh7utUatoqJ5ogFsk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708eef3f90cb4fd-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.35200 OK 472 B IP 142.250.74.35:0
Hash 0ee1d1a60ec1770ec3e880a25c257f5d
015b05feff63bdcf8fae4d1a8c0c83c923a2ca67
b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/collect?cs=Adcontext&cc=259472&ck=42259&cm=Advanced+Store1&cn=Lampegiganten&tid=UA-207042490-1&v=1&t=pageview&ds=web&aip=1&dh=www.lampegiganten.no&dp=%2F&dt=Lamper+og+belysning+til+hjemmet+%7C+Lampegiganten.no&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1984434756.1218877585
142.250.74.174200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?cs=Adcontext&cc=259472&ck=42259&cm=Advanced+Store1&cn=Lampegiganten&tid=UA-207042490-1&v=1&t=pageview&ds=web&aip=1&dh=www.lampegiganten.no&dp=%2F&dt=Lamper+og+belysning+til+hjemmet+%7C+Lampegiganten.no&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1984434756.1218877585
IP 142.250.74.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?cs=Adcontext&cc=259472&ck=42259&cm=Advanced+Store1&cn=Lampegiganten&tid=UA-207042490-1&v=1&t=pageview&ds=web&aip=1&dh=www.lampegiganten.no&dp=%2F&dt=Lamper+og+belysning+til+hjemmet+%7C+Lampegiganten.no&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1984434756.1218877585 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lnk.clickadsolutions.com
Connection: keep-alive
Referer: https://lnk.clickadsolutions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Sun, 27 Nov 2022 02:23:12 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 16077
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&tid=UA-96033256-3&t=pageview&ds=web&aip=1&cs=referral&cm=4251&cn=%28not+set%29&cc=%28not+set%29&dh=www.lampegiganten.no&dp=%2F&dt=Lamper+og+belysning+til+hjemmet+%7C+Lampegiganten.no&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1184327567.1561610470
142.250.74.174200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&tid=UA-96033256-3&t=pageview&ds=web&aip=1&cs=referral&cm=4251&cn=%28not+set%29&cc=%28not+set%29&dh=www.lampegiganten.no&dp=%2F&dt=Lamper+og+belysning+til+hjemmet+%7C+Lampegiganten.no&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1184327567.1561610470
IP 142.250.74.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&tid=UA-96033256-3&t=pageview&ds=web&aip=1&cs=referral&cm=4251&cn=%28not+set%29&cc=%28not+set%29&dh=www.lampegiganten.no&dp=%2F&dt=Lamper+og+belysning+til+hjemmet+%7C+Lampegiganten.no&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1184327567.1561610470 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lnk.clickadsolutions.com
Connection: keep-alive
Referer: https://lnk.clickadsolutions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Sun, 27 Nov 2022 02:23:12 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 16077
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/collect?cs=Tredia&cc=254051&ck=42259&cm=Brandreward&cn=Celis&tid=UA-207042490-1&v=1&t=pageview&ds=web&aip=1&dh=celis.no&dp=%2F&dt=Celis.no+-+Pynt%2C+accessories%2C+julebutikk+og+mye+mer&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1798917265.1846313319
142.250.74.174200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?cs=Tredia&cc=254051&ck=42259&cm=Brandreward&cn=Celis&tid=UA-207042490-1&v=1&t=pageview&ds=web&aip=1&dh=celis.no&dp=%2F&dt=Celis.no+-+Pynt%2C+accessories%2C+julebutikk+og+mye+mer&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1798917265.1846313319
IP 142.250.74.174:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?cs=Tredia&cc=254051&ck=42259&cm=Brandreward&cn=Celis&tid=UA-207042490-1&v=1&t=pageview&ds=web&aip=1&dh=celis.no&dp=%2F&dt=Celis.no+-+Pynt%2C+accessories%2C+julebutikk+og+mye+mer&dr=&vp=1280x1024&sr=1280x1024&je=0&ul=en-US&cid=1798917265.1846313319 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lnk.clickadsolutions.com
Connection: keep-alive
Referer: https://lnk.clickadsolutions.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Sun, 27 Nov 2022 02:23:12 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 16077
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lnk.clickadsolutions.com/?bt=jib.rtbtrack.site&ref=&friend=&u=r.brandreward.com%252F%253Fkey%253Dc5cd2aed04ceb28d7f5083426c8b658f%2526url%253Dhttp%25253A%25252F%25252Fcelis.no%2526id%253D638308dc3079b942354581be-RL-254051&log=false&type=ROTATOR_LINK&linkId=254051&clickId=638308dc3079b942354581be&br=false
52.202.106.26200 OK 1.7 kB URL HTTP/2 lnk.clickadsolutions.com/?bt=jib.rtbtrack.site&ref=&friend=&u=r.brandreward.com%252F%253Fkey%253Dc5cd2aed04ceb28d7f5083426c8b658f%2526url%253Dhttp%25253A%25252F%25252Fcelis.no%2526id%253D638308dc3079b942354581be-RL-254051&log=false&type=ROTATOR_LINK&linkId=254051&clickId=638308dc3079b942354581be&br=false
IP 52.202.106.26:0
Hash 0027907c6794374f0be1b71dd5d26a34
c5617c1a31df0f7eaf88b709b62d4fb7612ce3c7
198d3795f3560cee7a0ef54333d5825c0216f2fd96031a98dcd1b5a6d0dd7113
GET /?bt=jib.rtbtrack.site&ref=&friend=&u=r.brandreward.com%252F%253Fkey%253Dc5cd2aed04ceb28d7f5083426c8b658f%2526url%253Dhttp%25253A%25252F%25252Fcelis.no%2526id%253D638308dc3079b942354581be-RL-254051&log=false&type=ROTATOR_LINK&linkId=254051&clickId=638308dc3079b942354581be&br=false HTTP/1.1
Host: lnk.clickadsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lnk.clickadsolutions.com/trk/3aaXhDsaBY714mUXMA89pND9?browser=firefox&browserVersion=105&campaignId=6359297&carrier=%3F&connectionType=broadband&cost=0.002240&country=NO&device=desktop&language=en&operatingSystem=windows&osVersion=win10&paid=620624235538424227&rdk=rk1®ion=03&userAgent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&zoneId=5460778&c2=true&vpw=1280&vph=1024
Cookie: v=t; cas=2055:1791:1791:1; rls=254051:1791:1791:1|259472:1791:1791:1; com=13220:142:NO:1791:1791:1|9451:166:NO:1791:1791:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:09 GMT
content-type: text/html;charset=UTF-8
content-language: en-US
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash aa32c6fe134a4b6abfe6b77647fa5c2f
a7a67a067a9e588df39bfc88a630178470686684
fd56b882c6bc087b17a1cb61878c025ae875efccb86c88bf2b7ad6c5e9608618
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151074
Date: Sun, 27 Nov 2022 06:51:09 GMT
Etag: "6382a74f-1d7"
Expires: Tue, 29 Nov 2022 00:49:03 GMT
Last-Modified: Sat, 26 Nov 2022 23:54:55 GMT
Server: ECS (dcb/7EED)
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KfWN8533cQNFkrIclxqAV8igNDeTGzWcd0itGgVLER3-MeIc3OQJjg==
Age: 3248
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 4b27fe6d43878ad3f33aeab3a80e46c7
054a7918ae8a2345e043182dd5eef6d657321c2e
00995b16138462bd97516e9f386a1a8a1a4bc56708fee1c3aa76235a3fb32952
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=134937
Date: Sun, 27 Nov 2022 06:51:09 GMT
Etag: "638274b1-1d7"
Expires: Mon, 28 Nov 2022 20:20:06 GMT
Last-Modified: Sat, 26 Nov 2022 20:18:57 GMT
Server: ECS (dcb/7F18)
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: tH_zYqxvgb2GCbLbYFzFZdLZiWjLYO1FiE877eGLqvRXF56DBYbqDw==
Age: 69
lnk.clickadsolutions.com/?bt=fnc.contextwidget.tech&ref=&friend=&u=as.ad4m.at%252Fad%252Ftur%253Fa%253D1995%2526c%253Dhttps%25253A%25252F%25252Flampegiganten.no%2526b%253D638308dc3079b942354581be-RL-259472&log=false&type=ROTATOR_LINK&linkId=259472&clickId=638308dc3079b942354581be&br=false
52.202.106.26200 OK 2.1 kB URL HTTP/2 lnk.clickadsolutions.com/?bt=fnc.contextwidget.tech&ref=&friend=&u=as.ad4m.at%252Fad%252Ftur%253Fa%253D1995%2526c%253Dhttps%25253A%25252F%25252Flampegiganten.no%2526b%253D638308dc3079b942354581be-RL-259472&log=false&type=ROTATOR_LINK&linkId=259472&clickId=638308dc3079b942354581be&br=false
IP 52.202.106.26:0
Hash 98250c3f038ab5a6885675dc68964168
ebdd96f001bae3e5629b0b86cedc2b1c6521abbc
a894ef66a38e4144663dc523847f590f57ad0a8d281fc4493deb599745d0e002
GET /?bt=fnc.contextwidget.tech&ref=&friend=&u=as.ad4m.at%252Fad%252Ftur%253Fa%253D1995%2526c%253Dhttps%25253A%25252F%25252Flampegiganten.no%2526b%253D638308dc3079b942354581be-RL-259472&log=false&type=ROTATOR_LINK&linkId=259472&clickId=638308dc3079b942354581be&br=false HTTP/1.1
Host: lnk.clickadsolutions.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lnk.clickadsolutions.com/trk/3aaXhDsaBY714mUXMA89pND9?browser=firefox&browserVersion=105&campaignId=6359297&carrier=%3F&connectionType=broadband&cost=0.002240&country=NO&device=desktop&language=en&operatingSystem=windows&osVersion=win10&paid=620624235538424227&rdk=rk1®ion=03&userAgent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&zoneId=5460778&c2=true&vpw=1280&vph=1024
Cookie: v=t; cas=2055:1791:1791:1; rls=254051:1791:1791:1|259472:1791:1791:1; com=13220:142:NO:1791:1791:1|9451:166:NO:1791:1791:1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:09 GMT
content-type: text/html;charset=UTF-8
content-language: en-US
X-Firefox-Spdy: h2
as.ad4m.at/ad/tur?a=1995&c=https%3A%2F%2Flampegiganten.no&b=638308dc3079b942354581be-RL-259472
172.67.74.129307 Temporary Redirect 280 B URL HTTP/2 as.ad4m.at/ad/tur?a=1995&c=https%3A%2F%2Flampegiganten.no&b=638308dc3079b942354581be-RL-259472
IP 172.67.74.129:0
Hash 6fa0cc0b9efd04e0342d8e1623a96b20
ce3fe61fa792aa845777b4f802280ad71c4bc7b4
2e0f47324e46cf455e08074a4a3f646d1cafb8bf2b42d52499027abc32ae7777
GET /ad/tur?a=1995&c=https%3A%2F%2Flampegiganten.no&b=638308dc3079b942354581be-RL-259472 HTTP/1.1
Host: as.ad4m.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fnc.contextwidget.tech/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 307 Temporary Redirect
date: Sun, 27 Nov 2022 06:51:09 GMT
location: https://www.smartredirect.de/redir/clickGate.php?u=RkkuMW4M&m=1&p=Fr5xngjWXe&t=iRhdghTT&url=https%3A%2F%2Fwww.lampegiganten.no&r=https%3A%2F%2Fwww.advancedstore.com&s=oneidZZ7pCwfBfRPbpT3tzc4cDCZPMF6SJtRfJoneid_638308dc3079b942354581be-RL-259472
cross-origin-embedder-policy: unsafe-none
cross-origin-opener-policy: unsafe-none
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=86400; includeSubDomains; preload
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
surrogate-control: no-store
x-content-type-options: nosniff
vary: accept-encoding
pragma: no-cache
nel: {"failure_fraction":"1.0","max_age":86400,"report_to":"report-endpoint","success_fraction":"0.0","include_subdomains":true}
referrer-policy: no-referrer-when-downgrade
x-xss-protection: 1; mode=block
expires: 0
x-download-options: noopen
report-to: {"endpoints":[{"url":"/ad/vre"}],"group":"report-endpoint","max_age":86400}
via: 1.1 google
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7708ef0a7a4e0b4d-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 73e80d14de186bc9c97b7d36c4446061
5acf48e1920703e5b1ec4bbf4839a02e7d25ebb2
b540ace8abd015221a41d363d94e6632265fe8c4ad19bf0a67ff980c832ac684
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5469
Cache-Control: max-age=143557
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:09 GMT
Etag: "63828145-116"
Expires: Mon, 28 Nov 2022 22:43:46 GMT
Last-Modified: Sat, 26 Nov 2022 21:12:37 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 73e80d14de186bc9c97b7d36c4446061
5acf48e1920703e5b1ec4bbf4839a02e7d25ebb2
b540ace8abd015221a41d363d94e6632265fe8c4ad19bf0a67ff980c832ac684
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5470
Cache-Control: max-age=143557
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:10 GMT
Etag: "63828145-116"
Expires: Mon, 28 Nov 2022 22:43:47 GMT
Last-Modified: Sat, 26 Nov 2022 21:12:37 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 278
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash e056d532149237e6f240b99e20897d00
93e300cccff0ddf2cc7f16b4c17447b151db6326
0d5e99cb3cb47a46af6c869a69f0f027f168d443fc79869b8feaf2d554d07790
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 27 Nov 2022 06:51:10 GMT
Last-Modified: Sun, 27 Nov 2022 06:20:16 GMT
Server: ECS (dcb/7F16)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: peKUR6ElLUup4HGKSlHg9XOL7bcB-fKLpPF_Mb0-ftF1Pixqjay-2A==
Age: 1854
api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&custom2=3Cen8OcWxakKGhAtiUl7AUGISm9Rr6VWj7d5pMfRT3yI4r&id=e4e2e5c6-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https://www.lampegiganten.no
143.204.55.22303 See Other 0 B URL HTTP/2 api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&custom2=3Cen8OcWxakKGhAtiUl7AUGISm9Rr6VWj7d5pMfRT3yI4r&id=e4e2e5c6-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https://www.lampegiganten.no
IP 143.204.55.22:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /publisher/shopping/v2/link-monetizer/link?country=no&custom2=3Cen8OcWxakKGhAtiUl7AUGISm9Rr6VWj7d5pMfRT3yI4r&id=e4e2e5c6-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https://www.lampegiganten.no HTTP/1.1
Host: api.kelkoogroup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fnc.contextwidget.tech/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 303 See Other
content-length: 0
location: https://www.lampegiganten.no
x-gravitee-transaction-id: 32a261c8-e72c-4387-a261-c8e72cd38781
x-gravitee-request-id: 32a261c8-e72c-4387-a261-c8e72cd38781
clickid: 107698111_1669531870364_5623938
accept-ch: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-Memory
set-cookie: datadome=5QAl-QGy4p3RFmx-F4Dz2Y2~uaHFdxVN_9nusE_JolQ5HbmIv7yGj1pbQcUXi1x-~ABInh8-9WcwIlrk~8UYd0jUmnEAeecVlbNwz1fxQQba9gewDgH7ez3lyOFYLItZ; Max-Age=31536000; Expires=Mon, 27 Nov 2023 06:51:10 GMT; SameSite=Lax; Path=/; Domain=.kelkoo.net; Secure
kelkooID=a4c626f-184b7daa49c-1a97fa; Max-Age=31536000; Expires=Mon, 27 Nov 2023 06:51:10 GMT; SameSite=None; Path=/; Domain=kelkoogroup.net; Secure; HTTPOnly
x-datadome: protected
request-time: PT0.012664S
x-robots-tag: noindex,nofollow
referrer-policy: origin-when-cross-origin
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-permitted-cross-domain-policies: master-only
date: Sun, 27 Nov 2022 06:51:10 GMT
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: etv3pR5YfqPT9ndgWSksGf5m9_QoUCvj-ABZtT1RVyW4Yu1Biy2GpA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 8e31c8bd657b2ed7b8147d0f9e656043
ede4b2ee7965f4c2f3e7dbab72cbf9a67fbe271b
3b49eef7ed6b220488919889275cb308db1a439caeea86fdeed1c457fe8571fa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B49EEF7ED6B220488919889275CB308DB1A439CAEEA86FDEED1C457FE8571FA"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5837
Expires: Sun, 27 Nov 2022 08:28:27 GMT
Date: Sun, 27 Nov 2022 06:51:10 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash d8e8d024300aa4ac49c4a83b2380cbfb
650c3244352068ad029d257f41912261aefb9308
6faaa51c052705aec72ad5513a0236d32dc091b70a67d844c16cf9bee2f1f3ce
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=124445
Content-Type: application/ocsp-response
Date: Sun, 27 Nov 2022 06:51:10 GMT
Etag: "63824bfb-116"
Expires: Mon, 28 Nov 2022 17:25:15 GMT
Last-Modified: Sat, 26 Nov 2022 17:25:15 GMT
Server: nginx
Content-Length: 278
www.lampegiganten.no/
104.18.22.160200 OK 12 kB IP 104.18.22.160:0
Hash 0cdafb361f30efcf1a12a2c1c662cbe5
8c8c69ebcbcef3709ad379d8ccc1f6e148eec181
9ce24c595739c626f2882ab139ebb55d743ba96366c81c7b8e4a3173fb815b04
GET / HTTP/1.1
Host: www.lampegiganten.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://fnc.contextwidget.tech/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:10 GMT
content-type: text/html; charset=UTF-8
p3p: CP="CAO PSA OUR"
x-frame-options: SAMEORIGIN
x-cache-doesi: 1, 1
x-build: 2458
x-content-type-options: : nosniff
x-xss-protection: : 1; mode=block
x-prefresh:
vary: Accept-Encoding
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
expires: Mon, 31 Mar 2008 10:00:00 GMT
age: 0
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7708ef0e7bf00b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r.brandreward.com/?key=c5cd2aed04ceb28d7f5083426c8b658f&url=http%3A%2F%2Fcelis.no&id=638308dc3079b942354581be-RL-254051
169.48.74.205200 OK 254 B URL HTTP/1.1 r.brandreward.com/?key=c5cd2aed04ceb28d7f5083426c8b658f&url=http%3A%2F%2Fcelis.no&id=638308dc3079b942354581be-RL-254051
IP 169.48.74.205:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (385), with no line terminators
Hash 251c5d3ca7aca6d0fa3712f2a1f9e7ec
cc20330aa33f5323f149488bf5c1c5e05cd1e5e4
4d34c0a6af1c1bbb12467aaeddc7605bb45617a8724e1667f8eaff6852a319b7
GET /?key=c5cd2aed04ceb28d7f5083426c8b658f&url=http%3A%2F%2Fcelis.no&id=638308dc3079b942354581be-RL-254051 HTTP/1.1
Host: r.brandreward.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jib.rtbtrack.site/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 27 Nov 2022 06:51:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Set-Cookie: _bd=29188f6b38b7bc21c12687809c2c3c40
Referer:
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
54.230.245.39200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.39:0
Hash 871d35467e4ae570b8f01d21d9c238db
dee54f049efe952f8e9e446a96aca1a2621d1515
fd8762757cfca039b225c456ae0eebd8e2abf7224d5dcb6bb060d17291303507
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164204
Date: Sun, 27 Nov 2022 06:51:10 GMT
Etag: "6382db52-1d7"
Expires: Tue, 29 Nov 2022 04:27:54 GMT
Last-Modified: Sun, 27 Nov 2022 03:36:50 GMT
Server: ECS (dcb/7EEF)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0TJUxVxkesCdMl2KH_EK9OaL-0zPHG8HN-gkD_D6f9AxO_6fJjgZgA==
Age: 3064
tc.tradetracker.net/?c=31502&m=0&a=354047&r=221126658f3b37ee143157&u=
52.49.191.3301 Moved Permanently 16 kB URL HTTP/2 tc.tradetracker.net/?c=31502&m=0&a=354047&r=221126658f3b37ee143157&u=
IP 52.49.191.3:0
File type gzip compressed data, from Unix\012- data
Hash f0c79d455eb511a688eef314ea39d194
5c4e5994a0aeef53cd9fb61cf907e0f40ecb603d
c62ced086f4f341f5149a99345e7c232723b8602d526205eb37096de67f99143
GET /?c=31502&m=0&a=354047&r=221126658f3b37ee143157&u= HTTP/1.1
Host: tc.tradetracker.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://r.brandreward.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sun, 27 Nov 2022 06:51:11 GMT
content-type: text/html; charset=UTF-8
location: https://celis.no/
server: nginx
cache-control: no-cache, must-revalidate
set-cookie: uf=3ecgW8Cqr%2BfeNlzI9cblR3RwN3FZb0phZ1k1OG9HWVVJcEpqOGRPOWlYZVR1d2pYeWNoSTFISmZ1V3pvSEZtclA1MEdraWVqUUZrZVhpTnNESGRTbWhpcHVES2djNlNodWJ3K2NRPT0%3D; expires=Mon, 27-Nov-2023 06:51:10 GMT; Max-Age=31536000; path=/; domain=.tradetracker.net; secure; SameSite=None
__tdat31502=MTY2OTUzMTg3MTo6MDo6MzU0MDQ3OjoyMjExMjY2NThmM2IzN2VlMTQzMTU3OjpmOjo0OWViMDMyMDljNTMzNDhjZTc5NTRiMTU3ZjBlODAzOA%3D%3D; expires=Tue, 27-Dec-2022 06:51:11 GMT; Max-Age=2592000; path=/; domain=.tradetracker.net; secure; SameSite=None
X-Firefox-Spdy: h2
www.cloudflare.com/cdn-cgi/trace
104.16.124.96200 OK 0 B URL HTTP/2 www.cloudflare.com/cdn-cgi/trace
IP 104.16.124.96:0
GET /cdn-cgi/trace HTTP/1.1
Host: www.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:04 GMT
content-type: text/plain
access-control-allow-origin: *
server: cloudflare
cf-ray: 7708eeea9f66b512-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=10571718&u1=6219489173564FA3096803E451C9656A&java=1&security=6b4a9073&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.torrentkitty.lol/search/search/konacu&t=search%20-%20Torrent%20Kitty&invisible=1&sc_rum_e_s=2558&sc_rum_e_e=2567&sc_rum_f_s=0&sc_rum_f_e=2544&get_config=true
104.20.229.67200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=10571718&u1=6219489173564FA3096803E451C9656A&java=1&security=6b4a9073&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.torrentkitty.lol/search/search/konacu&t=search%20-%20Torrent%20Kitty&invisible=1&sc_rum_e_s=2558&sc_rum_e_e=2567&sc_rum_f_s=0&sc_rum_f_e=2544&get_config=true
IP 104.20.229.67:0
GET /t.php?sc_project=10571718&u1=6219489173564FA3096803E451C9656A&java=1&security=6b4a9073&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.torrentkitty.lol/search/search/konacu&t=search%20-%20Torrent%20Kitty&invisible=1&sc_rum_e_s=2558&sc_rum_e_e=2567&sc_rum_f_s=0&sc_rum_f_e=2544&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.torrentkitty.lol
Connection: keep-alive
Referer: https://www.torrentkitty.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:05 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc10571718.1669531864.0; SameSite=None; Secure; Expires=Friday, 26-Nov-2027 14:51:04 HKT; Path=/; Domain=.statcounter.com
is_visitor_unique=1669531864314262908; SameSite=None; Secure; Expires=Tuesday, 26-Nov-2024 14:51:04 HKT; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://www.torrentkitty.lol
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7708eeeb5fc6b512-OSL
content-encoding: br
X-Firefox-Spdy: h2
jib.rtbtrack.site/
52.202.106.26200 OK 0 B IP 52.202.106.26:0
POST / HTTP/1.1
Host: jib.rtbtrack.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 231
Origin: https://lnk.clickadsolutions.com
Connection: keep-alive
Referer: https://lnk.clickadsolutions.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:09 GMT
content-type: text/html;charset=UTF-8
content-language: en-US
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.10:0
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Nov 2022 06:51:06 GMT
date: Sun, 27 Nov 2022 06:51:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/jquery.min.js
172.64.109.13200 OK 0 B URL HTTP/2 cdn.creative-bars1.com/sb/notifications/software/multi/browsers/ff/3/js/jquery.min.js
IP 172.64.109.13:0
GET /sb/notifications/software/multi/browsers/ff/3/js/jquery.min.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:06 GMT
content-type: application/javascript
last-modified: Thu, 08 Sep 2022 07:49:59 GMT
etag: W/"63199ea7-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 306486
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XidjPuFn3FWb9gQFapvUAr6xPBlYRMOu0h7ka%2FUj2XlDYP0P8xiijAtF4vxHJP6m0cFzDdXikVAdR209YX3j69vti8ckYQ343jn12A3jBf%2FCCFqY9Qf6t1Tl8TEUSxZP1lyaKX5sT957"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708eef539b87443-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.torrentkitty.lol/search/search/konacu
172.67.217.107200 OK 0 B URL HTTP/2 www.torrentkitty.lol/search/search/konacu
IP 172.67.217.107:0
GET /search/search/konacu HTTP/1.1
Host: www.torrentkitty.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sun, 27 Nov 2022 06:51:03 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: max-age=14400, must-revalidate
pragma: no-cache
cf-cache-status: MISS
last-modified: Sun, 27 Nov 2022 06:51:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BvfwhvuweNCQ%2B30HBgJOP%2F9WiRX%2FOH%2BFTofPVkkD2Ryca7WVcqrjW3%2Fqwn9HFafZBv0K4nNVjh0VUBs3C9pMXpM4x2X0nS9bUG9njIDekVgYgDsSu7BitolyWzAd%2FlyfLXNkUWdTJA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7708eedd7b1eb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
de.trck.one/redir/clickGate.php?u=RkkuMW4M&m=1&p=Fr5xngjWXe&t=iRhdghTT&url=https%3A%2F%2Fwww.lampegiganten.no&r=https%3A%2F%2Fwww.advancedstore.com&s=oneidZZ7pCwfBfRPbpT3tzc4cDCZPMF6SJtRfJoneid_638308dc3079b942354581be-RL-259472
52.28.10.54302 Found 0 B URL HTTP/2 de.trck.one/redir/clickGate.php?u=RkkuMW4M&m=1&p=Fr5xngjWXe&t=iRhdghTT&url=https%3A%2F%2Fwww.lampegiganten.no&r=https%3A%2F%2Fwww.advancedstore.com&s=oneidZZ7pCwfBfRPbpT3tzc4cDCZPMF6SJtRfJoneid_638308dc3079b942354581be-RL-259472
IP 52.28.10.54:0
GET /redir/clickGate.php?u=RkkuMW4M&m=1&p=Fr5xngjWXe&t=iRhdghTT&url=https%3A%2F%2Fwww.lampegiganten.no&r=https%3A%2F%2Fwww.advancedstore.com&s=oneidZZ7pCwfBfRPbpT3tzc4cDCZPMF6SJtRfJoneid_638308dc3079b942354581be-RL-259472 HTTP/1.1
Host: de.trck.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fnc.contextwidget.tech/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sun, 27 Nov 2022 06:51:10 GMT
content-type: text/html; charset=UTF-8
location: https://api.kelkoogroup.net/publisher/shopping/v2/link-monetizer/link?country=no&custom2=3Cen8OcWxakKGhAtiUl7AUGISm9Rr6VWj7d5pMfRT3yI4r&id=e4e2e5c6-03eb-11eb-bf21-ba5ec25d7100&merchantUrl=https://www.lampegiganten.no
server: nginx
cache-control: no-cache, private
X-Firefox-Spdy: h2