proxyspare8.latestcache.com/
301 Moved Permanently 0 B URL HTTP/1.1 proxyspare8.latestcache.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: proxyspare8.latestcache.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 23 Mar 2023 23:31:48 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 24 Mar 2023 00:31:48 GMT
Location: https://proxyspare8.latestcache.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fk4tGDE%2BfadAP%2FUyD%2B%2FTtmSJ62hq7jsUJokna8IZrXInV3ZIKZOgnYT8EBIQ3Wkdeg39Wb16sdMhAfjOiRMq4DfUVhwKaw78eaaGjqKWpXgV%2Fsl764GGhLU4Qh70qVeRJaz6bwmDZaorlj9N2nQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aca7852abea1bfa-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3747
Expires: Fri, 24 Mar 2023 00:34:15 GMT
Date: Thu, 23 Mar 2023 23:31:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 210a2a42cfc4f4aced144f5de9babcc6
ece6ecfb2db8d036c3bfc7f02f8ea387e3f965db
59553a312d3fb34f1f0aea469f7e7cc810ff9993481ddbd73ea5d461cf97ed51
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "59553A312D3FB34F1F0AEA469F7E7CC810FF9993481DDBD73EA5D461CF97ED51"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4187
Expires: Fri, 24 Mar 2023 00:41:35 GMT
Date: Thu, 23 Mar 2023 23:31:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 23 Mar 2023 23:15:09 GMT
content-type: application/json
age: 999
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51a5d4696a6090c295850554508b51ce
c44e143c2223546e64b19f543b8101aaf3b11e97
8794223d5e8d4d276c35e2fdcc24bf99694240634dd749cd9b5bf874dec055cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8794223D5E8D4D276C35E2FDCC24BF99694240634DD749CD9B5BF874DEC055CF"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15237
Expires: Fri, 24 Mar 2023 03:45:45 GMT
Date: Thu, 23 Mar 2023 23:31:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6kEs9IEd75UAj4Z9mj0VEv3bl9Vt40ihtIGOG032LCPSLNUtPxJWyoB6uJC9Jzj0jb8Vt0BWg/M=
x-amz-request-id: ZB4SFVKVRSB3C4F6
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 23 Mar 2023 23:00:08 GMT
age: 1900
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 23 Mar 2023 23:31:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d85a0c5dbdd6105d70f3de5fb5411b68
4f87ba7fb164aca63645b6a4a7fe7e18c4376b0a
41a73fd656a518110f66e2023fc8cb71be5676366710fe2b718d65c1caa58a8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41A73FD656A518110F66E2023FC8CB71BE5676366710FE2B718D65C1CAA58A8C"
Last-Modified: Wed, 22 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4297
Expires: Fri, 24 Mar 2023 00:43:25 GMT
Date: Thu, 23 Mar 2023 23:31:48 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 23 Mar 2023 23:17:23 GMT
age: 866
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: YtyD6JE7j8b4XA9aovXhiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: CWH3hL8VDjWOco6zS1NK/hV8gHw=
Date: Thu, 23 Mar 2023 23:31:49 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdnjs.cloudflare.com/ajax/libs/popper.js/1.11.0/umd/popper.min.js
200 OK 6.1 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/popper.js/1.11.0/umd/popper.min.js
IP
File type ASCII text, with very long lines (18860)
Hash 644b7e1b85739d3ef9b424708cc14fa5
8b84449b04a1f5ca00e7ff1d5ef92aebf1ddb4ef
eaec1c8906a7a577d272afbd87ade62bdf3ca3a4a82a497f818485fe7110a0b4
GET /ajax/libs/popper.js/1.11.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 6098
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4a59"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1231639
expires: Tue, 12 Mar 2024 23:31:49 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xyt1hvCn46%2FfCB9LNSL1YXdAAIspQZS2dhoUhvSO8Si1hFGsWqJjR9tgZb3Iyhj%2F6L0YFZ9pfnI7VSXCEBOLvrf%2BIG2YM07Qmdh8oN4xAKr%2FmajBUXc4KoW9XIFxdPnG7U%2FxKhpw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7aca785a8a6ab524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.2.1.slim.min.js
200 OK 24 kB URL HTTP/2 code.jquery.com/jquery-3.2.1.slim.min.js
IP
File type ASCII text, with very long lines (32012)
Hash 30f5157a965bc792a83e9bacfe265f03
8330886371fe27f3cbac509e0ac9712207574c66
4d12cab1f84ec2ac780bc8e0d865d9c61025be579c78d6532d76f0574d17fca0
GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-encoding: gzip
content-length: 23856
content-type: application/javascript; charset=utf-8
last-modified: Fri, 12 Aug 2022 13:47:02 GMT
accept-ranges: bytes
server: nginx
etag: W/"62f659d6-10fdd"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1679614309.dop228.sk1.t,1679614309.cds259.sk1.hn,1679614309.cds235.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1d54d3c84e73cd1f00a835aa7616c399
e869898915967fb645a7ae3bd711a831329cc792
9cca1d2ea17f54a8688823e6fb8cbb7247c0a808808b382ffdda35b2770a26f8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:31:49 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Dosis
200 OK 873 B URL HTTP/2 fonts.googleapis.com/css?family=Dosis
IP
Hash a8c077ea92da31f6b454277369282948
588fe000c7ad475e18b22ea1e622796a72a679e1
4dd55942d04ed039ed8c385ad56beb57eb7b6c0b4a628699e3aa01bd5e51327b
GET /css?family=Dosis HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 23 Mar 2023 23:31:49 GMT
date: Thu, 23 Mar 2023 23:31:49 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
staticbay.pages.dev/proxy/js/ads/pop.js
200 OK 16 kB URL HTTP/2 staticbay.pages.dev/proxy/js/ads/pop.js
IP
File type ASCII text, with very long lines (46040), with no line terminators
Hash ba05ba1fa0e5d867162eeb8d357c0059
e4f401a9248d37e894622a3b0475ce87d3f54ec6
65cff219654afd24bbe028b1d98f90375f8a2f20db60a427e2850ea846d51593
GET /proxy/js/ads/pop.js HTTP/1.1
Host: staticbay.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bdac5e23c18e97813eaf29f94f5a77d4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3EksTGRscL7lcf1n1OV91wCzBUCCinCrmUEM5MR66GfK3Kbw0pU8hPLVERz0CERhzvh78NhvCwNzuI%2BGW%2FKUKA12ObMr%2BRrU3PL98qvP0xlbrjJx%2BuFCnrekxNtx74C0CMHxC3a0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aca785abf08b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-H55MMD7MCD
200 OK 88 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-H55MMD7MCD
IP
File type ASCII text, with very long lines (3398)
Hash a8c4b49b93160991333e026410ce51d3
53e2a14d7d32f417f777ab063873098d3f8ea792
ad3e831c2199ec13635467b6cabf3c10c6808c3cfdecfd6074840a93457c3b15
GET /gtag/js?id=G-H55MMD7MCD HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 23 Mar 2023 23:31:49 GMT
expires: Thu, 23 Mar 2023 23:31:49 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 83666
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114
200 OK 6.5 kB URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114
IP
Hash cc539632bcb3b4a625590928dafb1271
a617567f14fdbe885bfc660388251759e1f9a800
e25495db7f2c167375511abc7325fb51f49b6d73ed06f76db4ec9d84fe9ca94e
GET /beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2023.3.0
last-modified: Mon, 20 Mar 2023 17:58:49 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aca785abdb91c02-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 89447eb689782162ac5e4dca438e65c0
e1e8cde045a5eae9fbf1b20707fb8935b0418598
cfe3261f46a5fbe4f73fd16259b7c96480912874097ffea3b6bcb6149367a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1136
Cache-Control: max-age=156256
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:31:50 GMT
Etag: "641c9c56-1d7"
Expires: Sat, 25 Mar 2023 18:56:06 GMT
Last-Modified: Thu, 23 Mar 2023 18:37:10 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dd5380daefecc523858637dcbdda1cf3
0ec5910f57d8ab84179a5d0687e6b16d2cacfb1a
e58977b0dceb06edf2a7c752aa433c71b3bca571e814a7a83bbddc75d4428c0f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:31:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
staticbay.pages.dev/proxy/js/ads/invoke.js
200 OK 24 kB URL HTTP/2 staticbay.pages.dev/proxy/js/ads/invoke.js
IP
File type Unicode text, UTF-8 text, with very long lines (25074), with no line terminators
Hash 02eb6aa8a7f049d6c4c753c1a1d0368a
693b8b7d99a31218a1bab82f1856ba6a294010cb
b46954f5f7d8cfda510405acdac992b96d3d802dc5b856e2b14b33e7c2b480a5
GET /proxy/js/ads/invoke.js HTTP/1.1
Host: staticbay.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f3c2aeb7b85ec97fd7234296c9ac37e0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WY2U%2FggDAV8RS5ZSY5qqhle7ADes07C24yMXYk6BH7L%2FN0yKqVHnLARAl1DoZrWzI8X6Ytw1fEBmOIP7Txj%2FNVOvcco2Ku2HN0HckNnJhD1Qjl8jv%2B%2Bios%2FrMr2%2B8mEsUrVQky6f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7aca785acf0eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
proxyspare8.latestcache.com/
200 OK 6.0 kB URL HTTP/2 proxyspare8.latestcache.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (499)
Hash 384a124a24e09cc983700be2631a7196
9985689c119c16988de6a523fb5d6537e2964006
3c99f0d25006f6fc0fa69631b5dc6226652980d9e65cda021aab5a16148c12fd
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: proxyspare8.latestcache.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: text/html; charset=utf-8
cache-control: max-age=315360000
cross-origin-opener-policy: same-origin
expires: Thu, 31 Dec 2037 23:55:55 GMT
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: DENY
x-proxy-cache: HIT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=42gRGAWS8vP5R7B8Siwh%2B%2F7cE8%2FfxpnW5IbzU03x4c6I90L5xnMs2x7UjWgcLJhucvbGQJYQmcrC28s1YKZGqSGL%2B%2F95%2FWhSN3IG0CkqjvT7bsBvYvl2OJoSs%2FObQoD82O5RG1%2BMQB42%2BPZNvqE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7aca7854ba15b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dd5380daefecc523858637dcbdda1cf3
0ec5910f57d8ab84179a5d0687e6b16d2cacfb1a
e58977b0dceb06edf2a7c752aa433c71b3bca571e814a7a83bbddc75d4428c0f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:31:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 89447eb689782162ac5e4dca438e65c0
e1e8cde045a5eae9fbf1b20707fb8935b0418598
cfe3261f46a5fbe4f73fd16259b7c96480912874097ffea3b6bcb6149367a615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1136
Cache-Control: max-age=156256
Content-Type: application/ocsp-response
Date: Thu, 23 Mar 2023 23:31:50 GMT
Etag: "641c9c56-1d7"
Expires: Sat, 25 Mar 2023 18:56:06 GMT
Last-Modified: Thu, 23 Mar 2023 18:37:10 GMT
Server: ECAcc (ska/F7A5)
X-Cache: HIT
Content-Length: 471
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 15bc723362b3356bc5149e8bb850216a
a3a192ec527c0db265b237a89036e4ed3045defd
d660b0a90da034e0c1cab30ca345a6c2d15b50fbc2ed9ae5d7a291ebf2e3572f
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=149713
Date: Thu, 23 Mar 2023 23:31:50 GMT
Etag: "641c7ecf-1d7"
Expires: Sat, 25 Mar 2023 17:07:03 GMT
Last-Modified: Thu, 23 Mar 2023 16:31:11 GMT
Server: ECAcc (nya/1C5E)
X-Cache: Miss from cloudfront
Via: 1.1 3bff78035f818b6a3185b0f5f4586410.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OMI3t1GR8LlfN5V1mVIsYhq6ew43Cv2JypCGjiDNO3ckv7jeKT_rPA==
Age: 2152
ocsp.r2m01.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP
Hash 15bc723362b3356bc5149e8bb850216a
a3a192ec527c0db265b237a89036e4ed3045defd
d660b0a90da034e0c1cab30ca345a6c2d15b50fbc2ed9ae5d7a291ebf2e3572f
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151779
Date: Thu, 23 Mar 2023 23:31:50 GMT
Etag: "641c7ecf-1d7"
Expires: Sat, 25 Mar 2023 17:41:29 GMT
Last-Modified: Thu, 23 Mar 2023 16:31:11 GMT
Server: ECAcc (bsa/EA9D)
X-Cache: Miss from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: W_IyThiG2Mj7nStirnuecEdkG-NLTlsWM2w3P5ejDMkwSaW_X9UbnA==
Age: 4218
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash e9d3ddb3c60246589dd25c6e10b8b4d2
c932e44b37cf137641437b984fd052f0bffa7a3b
4c39e686fc44fee4bcbd1056d72379bcd102791693948b5b2da9d6fbaceb0708
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.clicksgear.com
access-control-allow-credentials: true
set-cookie: uid_id2=54b959be-b89a-444e-9e2c-90ca095c89e1:1:1; expires=Sun, 20 Mar 2033 23:31:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 75f431bab8f9c1db079935710cff3ba6
a4e4af760582d497ee8bfd95088b9393673a5088
86f5f9b7645bf8e3278db1f10ace1182408083d41c65ad2f56303564cd93f2fd
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:50 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: http://www.clicksgear.com
access-control-allow-credentials: true
set-cookie: uid_id2=638a999d-5411-42dd-a934-9b93d7c6ee2c:3:1; expires=Sun, 20 Mar 2033 23:31:50 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10190
Expires: Fri, 24 Mar 2023 02:21:40 GMT
Date: Thu, 23 Mar 2023 23:31:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10190
Expires: Fri, 24 Mar 2023 02:21:40 GMT
Date: Thu, 23 Mar 2023 23:31:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10190
Expires: Fri, 24 Mar 2023 02:21:40 GMT
Date: Thu, 23 Mar 2023 23:31:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68798f0963b37143bcbec5c6e08f2efe
00bb4ca04f3e52c8d9eacec7449a9cf49f6c312a
7c54bbd23a76d8b4c15e352b92e33c7164916899a5af71ba34a7af884b8a0944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd357d16d-d40f-4b91-81cc-69aeb80f25fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6403
x-amzn-requestid: aab6628c-f612-4b57-9ae1-0017714e19c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPHyEIkIAMF4JA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc564-2110e0d35561ab794e44e966;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:32:20 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: V4F_j_MuQgkRSKgCVI8OaJH2ZUbo6FcSk6Qv-BB4uAfm84jsQ2qklg==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:43:19 GMT
age: 6511
etag: "00bb4ca04f3e52c8d9eacec7449a9cf49f6c312a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6bfe713-dd17-46d3-afa9-f5f78836b408.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6bfe713-dd17-46d3-afa9-f5f78836b408.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e1c698a6ed426668efaac9f8a907b2f
f529e2fd710f48f8b176fdaa3c3f66446b930d58
6e7e0803f34264257884908e16a1a9d1aa15b96fba2f513a8ab2c57add34dc5f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6bfe713-dd17-46d3-afa9-f5f78836b408.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8852
x-amzn-requestid: c001b294-0a71-4389-9060-b31536c4a6e1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQPt5EQ-IAMF5Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc658-373a1f13254871d145a18579;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:36:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: qWf29BVbQaKGaQcLN6qEcTF3mTY1jS-lNvw04Wlj1uXoPMazK0UYoA==
via: 1.1 17d76c2aee343249585a570f2d36d2ee.cloudfront.net (CloudFront), 1.1 ec2a2c75c16156e4d43504606c118b90.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:43:19 GMT
age: 6511
etag: "f529e2fd710f48f8b176fdaa3c3f66446b930d58"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6bf7d96-8563-4612-89c2-6d00db18f9f6.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6bf7d96-8563-4612-89c2-6d00db18f9f6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d733019c5326d4617096c74ae22fdffd
72bc0b2a19ca257ac974460f81af47fcfa2fee24
6746fcedbf4aad5c94582162e343d160fdc7d127bae807d1a97a9d7a231c9a70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6bf7d96-8563-4612-89c2-6d00db18f9f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6721
x-amzn-requestid: bf32e1c8-cac1-4f04-abe6-fba2e9e824f3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK89vHbyoAMFc7Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa857-5d84ed861375c4ba04a2ae30;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:03:51 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 60VbucTVJnuo0rLzrTvbdbQOIMQmhDMQT8st-Y49_plnM_akqw_V4w==
via: 1.1 59456abf79b201034ab5c9cfef7355e2.cloudfront.net (CloudFront), 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 07:09:35 GMT
age: 58935
etag: "72bc0b2a19ca257ac974460f81af47fcfa2fee24"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83b68a72-4db6-4e13-ab9e-7af99c1275e5.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83b68a72-4db6-4e13-ab9e-7af99c1275e5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5483f1e55bfb1dd7ee50d5c993ce2c43
713be5af68f68936358ad6dc6c2e292ff63fb209
723ee03be195bc93706981369e3df3cbe711f04278f20b02a4da912932896a62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83b68a72-4db6-4e13-ab9e-7af99c1275e5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5593
x-amzn-requestid: 951fbc92-bdf3-4af4-ad5d-20d68add7218
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQP4PEX9IAMFiTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc69a-01309cc42208ab5272768fce;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:37:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: sZ4KMGCKfdrOi6s0dlGdpxcj689G5WU3CDEC_eNJ2crz0DTsj9UMGA==
via: 1.1 185f4b03b711932fc7e735c08fdc5abe.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 21:55:36 GMT
age: 5774
etag: "713be5af68f68936358ad6dc6c2e292ff63fb209"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c831201ad81f55c63c1b101ce854a810
0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5
c854489720d2ca4a95eef00addda0fcdaf481402d044df7725282654a97eb54a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F00ac1765-db6c-42e3-99bf-d857d27a34b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5556
x-amzn-requestid: 6b050645-14aa-47f7-b4a5-2e27abbe5115
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM69eHE3IAMF0Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b71ef-6ab2948e2bf2578f29798372;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:23:59 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: CgU9j02Bnw0UdIwQ3sRCDvJoPitHIAUTRDhLH_PMXYlAPoAwSbv6Iw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 05:35:55 GMT
age: 64555
etag: "0e9b952f6489f0a5f4862d3bea2fbe0ecdd379e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89cd024b8021bb2873b0b8972c77cb47
9aea167a3ebf62d91e705433f13b9fb0194daad4
454e0b9e6e12f7a8a1a87913fb7f539358bbfdb1371e30abd472c897082c2a38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49e3bd59-44bb-4c85-81cb-08614cf98777.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8490
x-amzn-requestid: 7444a745-87e0-4424-92fd-630bf7cacc0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CQP4QFRxoAMF3Yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641cc69a-112bec36430d78e3733e6e12;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 21:37:31 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: PCrktePti3HtIntww9Fq70JsHe6rENG1L_AQX6avgkSNDxnaYOtOSQ==
via: 1.1 626ad4a6bf529166d2aad94a2957694c.cloudfront.net (CloudFront), 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 23 Mar 2023 22:00:43 GMT
etag: "9aea167a3ebf62d91e705433f13b9fb0194daad4"
content-type: image/jpeg
age: 5467
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-H55MMD7MCD>m=45je33m0&_p=97426477&cid=159236526.1679614319&ul=en-us&sr=1280x1024&_s=1&sid=1679614319&sct=1&seg=0&dl=https%3A%2F%2Fproxyspare8.latestcache.com%2F&dt=UnBlocked%20Archive%2C%20Censored%20Website%2C%20Free%20%7C%20Access%20Blocked&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-H55MMD7MCD>m=45je33m0&_p=97426477&cid=159236526.1679614319&ul=en-us&sr=1280x1024&_s=1&sid=1679614319&sct=1&seg=0&dl=https%3A%2F%2Fproxyspare8.latestcache.com%2F&dt=UnBlocked%20Archive%2C%20Censored%20Website%2C%20Free%20%7C%20Access%20Blocked&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-H55MMD7MCD>m=45je33m0&_p=97426477&cid=159236526.1679614319&ul=en-us&sr=1280x1024&_s=1&sid=1679614319&sct=1&seg=0&dl=https%3A%2F%2Fproxyspare8.latestcache.com%2F&dt=UnBlocked%20Archive%2C%20Censored%20Website%2C%20Free%20%7C%20Access%20Blocked&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: null
date: Thu, 23 Mar 2023 23:31:50 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 85ffee1e6aa67b51e2dca3f997eeb752
5a00ca8f0363ed677611999cb8c361d21936a614
ea01d41dcb81621b613b08ecf7ade5c37eb0d9afc56f16fadf989b21b938d755
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EA01D41DCB81621B613B08ECF7ADE5C37EB0D9AFC56F16FADF989B21B938D755"
Last-Modified: Thu, 23 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7023
Expires: Fri, 24 Mar 2023 01:28:54 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ac70b4dc0412a9a25bf3d2087dd04142
9cccfe58c9188c5faf0af9752361f5c2e7df7610
e70ccdb0c90e46f7610d560e57450d9dcc7b65c9ae423b116e7d155ad63a1a4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E70CCDB0C90E46F7610D560E57450D9DCC7B65C9AE423B116E7D155AD63A1A4F"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10054
Expires: Fri, 24 Mar 2023 02:19:25 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3d1ce62d4d6b1ddf5723c554813fa007
7163ca99538528ebf3a06e2fa850520e5602bceb
1fab20966070e4dce3c5880df62a43717360daf429236657f9737bfd82093993
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1FAB20966070E4DCE3C5880DF62A43717360DAF429236657F9737BFD82093993"
Last-Modified: Wed, 22 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20868
Expires: Fri, 24 Mar 2023 05:19:39 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
poshhateful.com/advertisers.js
200 OK 0 B URL HTTP/1.1 poshhateful.com/advertisers.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: poshhateful.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1ba2a59f9f8837c68236a17c1cb44812
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e83d5b3a6e099fc5eace2e61871f6816
3609711670f334c1f130020f4b38a51aae6507c1
db2b00302a8411122301905116241b07a71fc69ccf5ca3e0c511e4d40bc61c39
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB2B00302A8411122301905116241B07A71FC69CCF5CA3E0C511E4D40BC61C39"
Last-Modified: Wed, 22 Mar 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 24 Mar 2023 05:31:51 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
inconveniencepretendboost.com/pixel/pure
204 No Content 0 B URL HTTP/1.1 inconveniencepretendboost.com/pixel/pure
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
OPTIONS /pixel/pure HTTP/1.1
Host: inconveniencepretendboost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 1728000
Content-Type: text/plain; charset=utf-8
Content-Length: 0
greedevolution.com/ntv.json?key=c5f015defb41680bd68a4987925f5537&vstc=4
200 OK 18 kB URL HTTP/1.1 greedevolution.com/ntv.json?key=c5f015defb41680bd68a4987925f5537&vstc=4
IP
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (17934), with no line terminators
Hash 79ebf8f7284d9ab92eb0c95f298af419
9f55f17a685f9c42339c47dfea35fdbe704ada59
79d7af8744abd02eb06eca00a6a88a3d2c0e832d21ed324db3b57c9dc94d4a0e
GET /ntv.json?key=c5f015defb41680bd68a4987925f5537&vstc=4 HTTP/1.1
Host: greedevolution.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Type: application/json
Content-Length: 17982
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://proxyspare8.latestcache.com
Access-Control-Allow-Origin: https://proxyspare8.latestcache.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=18193230; expires=Fri, 24 Mar 2023 23:31:51 GMT; secure; SameSite=None
pdhtkv=true; expires=Fri, 24 Mar 2023 23:31:51 GMT; secure; SameSite=None
uncs=1; expires=Fri, 24 Mar 2023 23:31:51 GMT; secure; SameSite=None
pdhtkv49=true; expires=Fri, 24 Mar 2023 23:31:51 GMT; secure; SameSite=None
uncs49=1; expires=Fri, 24 Mar 2023 23:31:51 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e10d2bf1597503ea34d8a53e95400927
Strict-Transport-Security: max-age=0; includeSubdomains
inconveniencepretendboost.com/pixel/pure
200 OK 0 B URL HTTP/1.1 inconveniencepretendboost.com/pixel/pure
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /pixel/pure HTTP/1.1
Host: inconveniencepretendboost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 64
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXsfLelL0IIiM4EFBJt0z05kZF1lc15VgTOLuSs5VXdWTMtVdTVXX9CSn4ILswcMcPPjr0Pkm2aCu4v4Bgky8LIGFHVGJaMC%2FQYgepWcHRh%2F0e%2B%2Fr7x2%2B7736cN%2BdER%2BOnm68o3elUnQpbPj1lzZlynVh62s364Hf8C%2FVN2W63L5UH1bJDF4N%2FLDhv1x%2FS0TbeqnpB74f%2BEH9mjQi1sOlGQuZ3e0FjZ7faDcbQdjG0PwfW%2BfBUg98cEaeguTTx7fu34OMJkiT764Ku53r7JU3E6dorg0G%2FOi9dDvVRYpk0cbGQ5wezaeh7ZSQTy5Ap0dzB9CDg8oBmJwS79cALD2aywQbHD5SyhRECsafQDGYQKgJJJ0g0rcg%2BUMCRBxr60iTO2vaFHTnEUsrdkpq539BFlNS%2B%2BNppMm3V5Qc1m9o5XKpU4thXEIOJ5D9CTJ3jHzXgyyOEeUfQPIHZOl8FWlysG6VhuTlzL2UE8h4AiVGoNaDqz7pwcUeXOYh4ad1GvZi3%2B%2FELG61uu0oilqtKAq7yzzkrXY39uGiSt4IeTZCpEaIzB4ys4dtOYJxP8BulbDcg82nxHt3DwNeohAEhSUoKEEhCYqcoBiUh1zZpi3vcGUdC%2Ba1Oa%2Btcqzz%2Fj491HlfpGQ%2FOyNPVnvxnvl8DdvitB6FsR%2BEXMSsHSx3fcaXu7Td63Z6zTAOw1YHVpaQ9sLM6q6ckhdedMjklJBfHoDRY1h1jEh6oC4ALcadpg%2B6NW53feym3yTSGG0Y3Wlo0wfXJbK8hnzH21dn5NnZgXo%2FfwERnVz%2BqTULRKZEZkq8L38k6Kvb4%2Bu6IAfXdWHJvfUsl4ncpdXxbuQ0F4999bbYKbThK1ft6MvXo4qo2rs3hc1Xacpl2rfk6yuSc2GuaRMJ8v2K3RRsw9mtK86kLlvdeOPaSpIZYa3U6QRUPrQfIZJTcjH5bfYsn%2F%2FdQZoJjCuRuBMyD0g9QZTtwWYL9VYTGLWYYZmHwpVj02SLn0oSKLHAlJWw%2F8Fs0e%2Fb2%2BibGmh%2BC2lSYmBKDFQJqkaw7uI4z8zJ5fufVvEZmKqNmTK1A6aM%2Bni22il5bf2fKp1X6W9YeVoXYezHwm8KFvdY3KE%2B78XtHqO9QHRYSAPkdsqf%2B7P%2FLwAAAP%2F%2FAQAA%2F%2F%2FlllrFfQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXsfLelL0IIiM4EFBJt0z05kZF1lc15VgTOLuSs5VXdWTMtVdTVXX9CSn4ILswcMcPPjr0Pkm2aCu4v4Bgky8LIGFHVGJaMC%2FQYgepWcHRh%2F0e%2B%2Fr7x2%2B7736cN%2BdER%2BOnm68o3elUnQpbPj1lzZlynVh62s364Hf8C%2FVN2W63L5UH1bJDF4N%2FLDhv1x%2FS0TbeqnpB74f%2BEH9mjQi1sOlGQuZ3e0FjZ7faDcbQdjG0PwfW%2BfBUg98cEaeguTTx7fu34OMJkiT764Ku53r7JU3E6dorg0G%2FOi9dDvVRYpk0cbGQ5wezaeh7ZSQTy5Ap0dzB9CDg8oBmJwS79cALD2aywQbHD5SyhRECsafQDGYQKgJJJ0g0rcg%2BUMCRBxr60iTO2vaFHTnEUsrdkpq539BFlNS%2B%2BNppMm3V5Qc1m9o5XKpU4thXEIOJ5D9CTJ3jHzXgyyOEeUfQPIHZOl8FWlysG6VhuTlzL2UE8h4AiVGoNaDqz7pwcUeXOYh4ad1GvZi3%2B%2FELG61uu0oilqtKAq7yzzkrXY39uGiSt4IeTZCpEaIzB4ys4dtOYJxP8BulbDcg82nxHt3DwNeohAEhSUoKEEhCYqcoBiUh1zZpi3vcGUdC%2Ba1Oa%2Btcqzz%2Fj491HlfpGQ%2FOyNPVnvxnvl8DdvitB6FsR%2BEXMSsHSx3fcaXu7Td63Z6zTAOw1YHVpaQ9sLM6q6ckhdedMjklJBfHoDRY1h1jEh6oC4ALcadpg%2B6NW53feym3yTSGG0Y3Wlo0wfXJbK8hnzH21dn5NnZgXo%2FfwERnVz%2BqTULRKZEZkq8L38k6Kvb4%2Bu6IAfXdWHJvfUsl4ncpdXxbuQ0F4999bbYKbThK1ft6MvXo4qo2rs3hc1Xacpl2rfk6yuSc2GuaRMJ8v2K3RRsw9mtK86kLlvdeOPaSpIZYa3U6QRUPrQfIZJTcjH5bfYsn%2F%2FdQZoJjCuRuBMyD0g9QZTtwWYL9VYTGLWYYZmHwpVj02SLn0oSKLHAlJWw%2F8Fs0e%2Fb2%2BibGmh%2BC2lSYmBKDFQJqkaw7uI4z8zJ5fufVvEZmKqNmTK1A6aM%2Bni22il5bf2fKp1X6W9YeVoXYezHwm8KFvdY3KE%2B78XtHqO9QHRYSAPkdsqf%2B7P%2FLwAAAP%2F%2FAQAA%2F%2F%2FlllrFfQQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSuXsfLelL0IIiM4EFBJt0z05kZF1lc15VgTOLuSs5VXdWTMtVdTVXX9CSn4ILswcMcPPjr0Pkm2aCu4v4Bgky8LIGFHVGJaMC%2FQYgepWcHRh%2F0e%2B%2Fr7x2%2B7736cN%2BdER%2BOnm68o3elUnQpbPj1lzZlynVh62s364Hf8C%2FVN2W63L5UH1bJDF4N%2FLDhv1x%2FS0TbeqnpB74f%2BEH9mjQi1sOlGQuZ3e0FjZ7faDcbQdjG0PwfW%2BfBUg98cEaeguTTx7fu34OMJkiT764Ku53r7JU3E6dorg0G%2FOi9dDvVRYpk0cbGQ5wezaeh7ZSQTy5Ap0dzB9CDg8oBmJwS79cALD2aywQbHD5SyhRECsafQDGYQKgJJJ0g0rcg%2BUMCRBxr60iTO2vaFHTnEUsrdkpq539BFlNS%2B%2BNppMm3V5Qc1m9o5XKpU4thXEIOJ5D9CTJ3jHzXgyyOEeUfQPIHZOl8FWlysG6VhuTlzL2UE8h4AiVGoNaDqz7pwcUeXOYh4ad1GvZi3%2B%2FELG61uu0oilqtKAq7yzzkrXY39uGiSt4IeTZCpEaIzB4ys4dtOYJxP8BulbDcg82nxHt3DwNeohAEhSUoKEEhCYqcoBiUh1zZpi3vcGUdC%2Ba1Oa%2Btcqzz%2Fj491HlfpGQ%2FOyNPVnvxnvl8DdvitB6FsR%2BEXMSsHSx3fcaXu7Td63Z6zTAOw1YHVpaQ9sLM6q6ckhdedMjklJBfHoDRY1h1jEh6oC4ALcadpg%2B6NW53feym3yTSGG0Y3Wlo0wfXJbK8hnzH21dn5NnZgXo%2FfwERnVz%2BqTULRKZEZkq8L38k6Kvb4%2Bu6IAfXdWHJvfUsl4ncpdXxbuQ0F4999bbYKbThK1ft6MvXo4qo2rs3hc1Xacpl2rfk6yuSc2GuaRMJ8v2K3RRsw9mtK86kLlvdeOPaSpIZYa3U6QRUPrQfIZJTcjH5bfYsn%2F%2FdQZoJjCuRuBMyD0g9QZTtwWYL9VYTGLWYYZmHwpVj02SLn0oSKLHAlJWw%2F8Fs0e%2Fb2%2BibGmh%2BC2lSYmBKDFQJqkaw7uI4z8zJ5fufVvEZmKqNmTK1A6aM%2Bni22il5bf2fKp1X6W9YeVoXYezHwm8KFvdY3KE%2B78XtHqO9QHRYSAPkdsqf%2B7P%2FLwAAAP%2F%2FAQAA%2F%2F%2FlllrFfQQAAA%3D%3D HTTP/1.1
Host: greedevolution.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=18193230; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5f3f23d9bb3dbd261445192bfe766ab4
Strict-Transport-Security: max-age=0; includeSubdomains
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbc482c9e68924aca2d3c0b78f9ffa1d
24af8a9ea51600ce0b5824bc64e663838a212be8
fe9a1b3c4fb8bbb1b0df43875b6d563b7967e2d9fc9529dbb6d4865a9faa7752
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE9A1B3C4FB8BBB1B0DF43875B6D563B7967E2D9FC9529DBB6D4865A9FAA7752"
Last-Modified: Wed, 22 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10575
Expires: Fri, 24 Mar 2023 02:28:06 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbc482c9e68924aca2d3c0b78f9ffa1d
24af8a9ea51600ce0b5824bc64e663838a212be8
fe9a1b3c4fb8bbb1b0df43875b6d563b7967e2d9fc9529dbb6d4865a9faa7752
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE9A1B3C4FB8BBB1B0DF43875B6D563B7967E2D9FC9529DBB6D4865A9FAA7752"
Last-Modified: Wed, 22 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10575
Expires: Fri, 24 Mar 2023 02:28:06 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbc482c9e68924aca2d3c0b78f9ffa1d
24af8a9ea51600ce0b5824bc64e663838a212be8
fe9a1b3c4fb8bbb1b0df43875b6d563b7967e2d9fc9529dbb6d4865a9faa7752
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE9A1B3C4FB8BBB1B0DF43875B6D563B7967E2D9FC9529DBB6D4865A9FAA7752"
Last-Modified: Wed, 22 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10575
Expires: Fri, 24 Mar 2023 02:28:06 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dbc482c9e68924aca2d3c0b78f9ffa1d
24af8a9ea51600ce0b5824bc64e663838a212be8
fe9a1b3c4fb8bbb1b0df43875b6d563b7967e2d9fc9529dbb6d4865a9faa7752
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE9A1B3C4FB8BBB1B0DF43875B6D563B7967E2D9FC9529DBB6D4865A9FAA7752"
Last-Modified: Wed, 22 Mar 2023 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10575
Expires: Fri, 24 Mar 2023 02:28:06 GMT
Date: Thu, 23 Mar 2023 23:31:51 GMT
Connection: keep-alive
greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRitTkaEeFL0IHiYgIKCzHbPTO%2FMGCQYYyS47q5JZM9VXdWz5VZ3NVXd07N7WgxIDh7m4MFfh943u1nUKOYPEKTXS1gIpEVlBRf8G4TVo%2FRkYPSD%2Fn70%2Bw7vva8%2B2stOiYuMnqy%2Fq3ekUnTJb7nNlzdkzHVum6u3mp7bci81N2S83L3UHNfJjF7zXL%2FlvtJ8WwRbeqnteq7ruV7zmjQi1OOlGQqZ3Bt4rYHb6rZbnt%2FF2Px%2FtpkDSx3w0Sl5BpJXT2w%2BuA8ZlIij768Ku5Xq5NW3okzRVBuM%2BOH78Vas8xjRog2NgzA%2BnG9D24qQT89Bx4dzBdCj%2FVoBmKyI85sHFh%2FOaYKNDh4zZQoiBuNPIR%2BVEKqEpCUCfRuSPyJAwLG6hji6u6pNTrcfo7RGK9I4%2Bwsyr0jjj2cRR99dUXLcvKlVlkodW4zDAnJcQg5LJNkR0h0HMj9CkH4IyR%2BSpbMVxNH%2BmlUakhcz9VKWkGEJJSag1kFWf9JBFjrIEgcRP2lSfxC6bi9kYafT7wZB0OkEgd9f5j7vdPuhiyyo6U2QJhMEaoLA7CIxu9iSE5jsR9jNApY7sGlFnPd2MeIFckGQW4KcEuSSIE8J8lFxwJVt2%2BIuVzZj3ry257VTTHU63KMHOh2KmOwlp%2BTp2hfnuS9WsSVOmoEfup7PRci63nLfZXy5T7uDfm%2FQ9kPf7%2FRgZQFpz82k7siKXHwxQyIrQn59CEaPYNURAumAZh5oPu21XdDNabfvYif%2BNpLGaMPodkubIbgukKQNpNvOnjolz88O9PraGURwfPnnziwQmAKJKfCB%2FIlgqO5Mb%2Bic7N%2FQuSX315JURnKH1se7mdJUnP%2F6HbGda8OvX7WTr94IaqBu790SNl2hMZfx0JJvrkjOhbmmTSDID9fthmDrmd28kpk4S1bW37x2PUqMsFbquASVj%2BzHCGRFLkS%2Fz57lxZeehDQlTFYgyo7JPCB1iSDZhU0W7K0mMGqxw5LzyLNiatps8VNJAiUWM2UF7H9mtuj37B0MTQM0vY04KjAyBUaqAFUT2OzCNE3M8eUHn9XxOZhqTJkyjX2mjPqkIoNfvqz9%2FWdmcp3%2BhpUnTeGHbijctmDhgIU96vJB2B0wOvBEj%2FnUQ2or%2FsKfw38BAAD%2F%2FwEAAP%2F%2F1dPoU30EAAA%3D
200 OK 7 B URL HTTP/1.1 greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRitTkaEeFL0IHiYgIKCzHbPTO%2FMGCQYYyS47q5JZM9VXdWz5VZ3NVXd07N7WgxIDh7m4MFfh943u1nUKOYPEKTXS1gIpEVlBRf8G4TVo%2FRkYPSD%2Fn70%2Bw7vva8%2B2stOiYuMnqy%2Fq3ekUnTJb7nNlzdkzHVum6u3mp7bci81N2S83L3UHNfJjF7zXL%2FlvtJ8WwRbeqnteq7ruV7zmjQi1OOlGQqZ3Bt4rYHb6rZbnt%2FF2Px%2FtpkDSx3w0Sl5BpJXT2w%2BuA8ZlIij768Ku5Xq5NW3okzRVBuM%2BOH78Vas8xjRog2NgzA%2BnG9D24qQT89Bx4dzBdCj%2FVoBmKyI85sHFh%2FOaYKNDh4zZQoiBuNPIR%2BVEKqEpCUCfRuSPyJAwLG6hji6u6pNTrcfo7RGK9I4%2Bwsyr0jjj2cRR99dUXLcvKlVlkodW4zDAnJcQg5LJNkR0h0HMj9CkH4IyR%2BSpbMVxNH%2BmlUakhcz9VKWkGEJJSag1kFWf9JBFjrIEgcRP2lSfxC6bi9kYafT7wZB0OkEgd9f5j7vdPuhiyyo6U2QJhMEaoLA7CIxu9iSE5jsR9jNApY7sGlFnPd2MeIFckGQW4KcEuSSIE8J8lFxwJVt2%2BIuVzZj3ry257VTTHU63KMHOh2KmOwlp%2BTp2hfnuS9WsSVOmoEfup7PRci63nLfZXy5T7uDfm%2FQ9kPf7%2FRgZQFpz82k7siKXHwxQyIrQn59CEaPYNURAumAZh5oPu21XdDNabfvYif%2BNpLGaMPodkubIbgukKQNpNvOnjolz88O9PraGURwfPnnziwQmAKJKfCB%2FIlgqO5Mb%2Bic7N%2FQuSX315JURnKH1se7mdJUnP%2F6HbGda8OvX7WTr94IaqBu790SNl2hMZfx0JJvrkjOhbmmTSDID9fthmDrmd28kpk4S1bW37x2PUqMsFbquASVj%2BzHCGRFLkS%2Fz57lxZeehDQlTFYgyo7JPCB1iSDZhU0W7K0mMGqxw5LzyLNiatps8VNJAiUWM2UF7H9mtuj37B0MTQM0vY04KjAyBUaqAFUT2OzCNE3M8eUHn9XxOZhqTJkyjX2mjPqkIoNfvqz9%2FWdmcp3%2BhpUnTeGHbijctmDhgIU96vJB2B0wOvBEj%2FnUQ2or%2FsKfw38BAAD%2F%2FwEAAP%2F%2F1dPoU30EAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRitTkaEeFL0IHiYgIKCzHbPTO%2FMGCQYYyS47q5JZM9VXdWz5VZ3NVXd07N7WgxIDh7m4MFfh943u1nUKOYPEKTXS1gIpEVlBRf8G4TVo%2FRkYPSD%2Fn70%2Bw7vva8%2B2stOiYuMnqy%2Fq3ekUnTJb7nNlzdkzHVum6u3mp7bci81N2S83L3UHNfJjF7zXL%2FlvtJ8WwRbeqnteq7ruV7zmjQi1OOlGQqZ3Bt4rYHb6rZbnt%2FF2Px%2FtpkDSx3w0Sl5BpJXT2w%2BuA8ZlIij768Ku5Xq5NW3okzRVBuM%2BOH78Vas8xjRog2NgzA%2BnG9D24qQT89Bx4dzBdCj%2FVoBmKyI85sHFh%2FOaYKNDh4zZQoiBuNPIR%2BVEKqEpCUCfRuSPyJAwLG6hji6u6pNTrcfo7RGK9I4%2Bwsyr0jjj2cRR99dUXLcvKlVlkodW4zDAnJcQg5LJNkR0h0HMj9CkH4IyR%2BSpbMVxNH%2BmlUakhcz9VKWkGEJJSag1kFWf9JBFjrIEgcRP2lSfxC6bi9kYafT7wZB0OkEgd9f5j7vdPuhiyyo6U2QJhMEaoLA7CIxu9iSE5jsR9jNApY7sGlFnPd2MeIFckGQW4KcEuSSIE8J8lFxwJVt2%2BIuVzZj3ry257VTTHU63KMHOh2KmOwlp%2BTp2hfnuS9WsSVOmoEfup7PRci63nLfZXy5T7uDfm%2FQ9kPf7%2FRgZQFpz82k7siKXHwxQyIrQn59CEaPYNURAumAZh5oPu21XdDNabfvYif%2BNpLGaMPodkubIbgukKQNpNvOnjolz88O9PraGURwfPnnziwQmAKJKfCB%2FIlgqO5Mb%2Bic7N%2FQuSX315JURnKH1se7mdJUnP%2F6HbGda8OvX7WTr94IaqBu790SNl2hMZfx0JJvrkjOhbmmTSDID9fthmDrmd28kpk4S1bW37x2PUqMsFbquASVj%2BzHCGRFLkS%2Fz57lxZeehDQlTFYgyo7JPCB1iSDZhU0W7K0mMGqxw5LzyLNiatps8VNJAiUWM2UF7H9mtuj37B0MTQM0vY04KjAyBUaqAFUT2OzCNE3M8eUHn9XxOZhqTJkyjX2mjPqkIoNfvqz9%2FWdmcp3%2BhpUnTeGHbijctmDhgIU96vJB2B0wOvBEj%2FnUQ2or%2FsKfw38BAAD%2F%2FwEAAP%2F%2F1dPoU30EAAA%3D HTTP/1.1
Host: greedevolution.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=18193230; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 99fcda192ad7d1ac9afd4ffe4da67594
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.cloudimagesb.com/si/eb/a9/82/eba982fa890e5ac9af43d3f6e85be79c/1676369590.png
200 OK 167 kB URL HTTP/2 cdn.cloudimagesb.com/si/eb/a9/82/eba982fa890e5ac9af43d3f6e85be79c/1676369590.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 167 kB (166594 bytes)
Hash 620f910b6abeaf629682d4aca37fda55
d43a90e1689317434d83f251fd1114d4f8becf80
0bc771e5a6c6970a154d26169d5210947a0ac36700f42b31d3eb8eb23a5406da
GET /si/eb/a9/82/eba982fa890e5ac9af43d3f6e85be79c/1676369590.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:51 GMT
content-type: image/png
content-length: 166594
server: nginx/1.17.6
last-modified: Tue, 14 Feb 2023 10:13:19 GMT
etag: "63eb5ebf-28ac2"
expires: Sat, 25 Mar 2023 23:31:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/13/4c/6c/134c6caa70aa94070a6178e59262ac9c/1676369480.png
200 OK 134 kB URL HTTP/2 cdn.cloudimagesb.com/si/13/4c/6c/134c6caa70aa94070a6178e59262ac9c/1676369480.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 134 kB (133557 bytes)
Hash 62341b00d1d9138d158a6317b012d186
e3fef23ceaa00973bacd2ac9647b2618662baa90
ded6c1b3ba059cf62e5fa019f89a37ec91c906181307de7e16094761e14d299b
GET /si/13/4c/6c/134c6caa70aa94070a6178e59262ac9c/1676369480.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:51 GMT
content-type: image/png
content-length: 133557
server: nginx/1.17.6
last-modified: Tue, 14 Feb 2023 10:11:29 GMT
etag: "63eb5e51-209b5"
expires: Sat, 25 Mar 2023 23:31:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/05/ad/dd/05addd62695f348ef4439268d6563f04/1668496169.png
200 OK 144 kB URL HTTP/2 cdn.cloudimagesb.com/si/05/ad/dd/05addd62695f348ef4439268d6563f04/1668496169.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 144 kB (144325 bytes)
Hash d76c93ff8a660d41a613c8ef00e2d201
b62383271edfc4b32b571059bcf67c4c33680303
83d31a43474028aa1fe7244059469065fd98dfddca0b11eb04002fa45c039e26
GET /si/05/ad/dd/05addd62695f348ef4439268d6563f04/1668496169.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:51 GMT
content-type: image/png
content-length: 144325
server: nginx/1.17.6
last-modified: Tue, 15 Nov 2022 07:09:36 GMT
etag: "63733b30-233c5"
expires: Sat, 25 Mar 2023 23:31:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/25/04/02/250402c4e83d0b2cde05a87380b1e6db/1676369460.png
200 OK 139 kB URL HTTP/2 cdn.cloudimagesb.com/si/25/04/02/250402c4e83d0b2cde05a87380b1e6db/1676369460.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 139 kB (139124 bytes)
Hash 730ff329faa6047f6e2aefa7f8833cdf
ceb4494aed62bce1d70152b378fd236835aaefd0
218c391db327d9b37a8eafbed9805d03faa3778994721a17013933af70ad663d
GET /si/25/04/02/250402c4e83d0b2cde05a87380b1e6db/1676369460.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:51 GMT
content-type: image/png
content-length: 139124
server: nginx/1.17.6
last-modified: Tue, 14 Feb 2023 10:11:09 GMT
etag: "63eb5e3d-21f74"
expires: Sat, 25 Mar 2023 23:31:51 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXkeQ9aToQfAwCwoKMumemc7MuMhiXCPBmMTdlZyruqonZaq7mqru6UlOwQXZg4c5ePDXofMm2aCu4v4Bgky8LIGFbVGJYMC%2FQYgepScD437Q349%2B3%2BG999XH%2B9kZcZHR04339K5Uii74Dbf%2ByqaMuc5tfe1W3XMb7tX6powX21frwyqZweue6zfcV%2BvviGBbLzRdz3U916svSyNCPVyYopDJvZ7X6LmNdrPh%2BW0MzeOzzRxY6oAPzsizkLx8cuvBfchggjj64bqw26lOXns7yhRNtcGAH30Qb8c6jxHN29A4COOj2Ta0LQn57BJ0fDRTAD04qBSAyZI4v3tg8dGMJtjg8IIpUxAxGH8a%2BWACoSaQdIJA34bkjwgQcKytI47urmmT050LlFZoSWrnf0PmJan9%2BRzi6PslJYf1m1plqdSxxTAsIIcTyP4ESXaMdNeBzI8RpB9B8odk4XwVcXSwbpWG5MVUvZQTyHACJUag1kFWfdJBFjrIEgcRP61Tvxe6bidkYavVbQdB0GoFgd9d5D5vtbuhiyyo6I2QJiMEaoTA7CExe9iWI5jsJ9itApY7sGlJnPf3MOAFckGQW4KcEuSSIE8J8kFxyJVt2uIuVzZj3qw2Z7VVjHXa36eHOu2LmOwnZ%2BSZyhfn%2BS%2FXsC1O64Efup7PRcja3mLXZXyxS9u9bqfX9EPfb3VgZQFpL02l7sqSXHkpQyJLQn57CEaPYdUxAumAZh5oPu40XdCtcbvrYjf%2BLpLGaMPoTkObPrgukKQ1pDvOvjojL0wP9Mb6PxDBybVfWtNAYAokpsCH8meCvrozvqFzcnBD55bcX09SGcldWh3vZkpT8cQ374qdXBu%2Bct2Ovn4zqICqvXdL2HSVxlzGfUu%2BXZKcC7OsTSDIjyt2U7CNzG4tZSbOktWNt5ZXosQIa6WOJ6Dykf0EgSzJ5eiP6bO88vJTkGYCkxWIshMyC0g9QZDswSZz9lYTGDXfYUkNeVaMTZPNfypJoMR8pqyA%2Fd%2FM5v2%2BvYO%2BqYGmtxFHBQamwEAVoGoEm10ep4k5ufbg8yq%2BAFO1MVOmdsCUUZ%2BWpPfrV5W%2F%2F1bp%2FMJpK0%2Frwg%2FdULhNwcIeCzvU5b2w3WO054kO86mH1Jb8xb%2F6%2FwEAAP%2F%2FAQAA%2F%2F92NZR6fQQAAA%3D%3D
200 OK 7 B URL HTTP/1.1 greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXkeQ9aToQfAwCwoKMumemc7MuMhiXCPBmMTdlZyruqonZaq7mqru6UlOwQXZg4c5ePDXofMm2aCu4v4Bgky8LIGFbVGJYMC%2FQYgepScD437Q349%2B3%2BG999XH%2B9kZcZHR04339K5Uii74Dbf%2ByqaMuc5tfe1W3XMb7tX6powX21frwyqZweue6zfcV%2BvviGBbLzRdz3U916svSyNCPVyYopDJvZ7X6LmNdrPh%2BW0MzeOzzRxY6oAPzsizkLx8cuvBfchggjj64bqw26lOXns7yhRNtcGAH30Qb8c6jxHN29A4COOj2Ta0LQn57BJ0fDRTAD04qBSAyZI4v3tg8dGMJtjg8IIpUxAxGH8a%2BWACoSaQdIJA34bkjwgQcKytI47urmmT050LlFZoSWrnf0PmJan9%2BRzi6PslJYf1m1plqdSxxTAsIIcTyP4ESXaMdNeBzI8RpB9B8odk4XwVcXSwbpWG5MVUvZQTyHACJUag1kFWfdJBFjrIEgcRP61Tvxe6bidkYavVbQdB0GoFgd9d5D5vtbuhiyyo6I2QJiMEaoTA7CExe9iWI5jsJ9itApY7sGlJnPf3MOAFckGQW4KcEuSSIE8J8kFxyJVt2uIuVzZj3qw2Z7VVjHXa36eHOu2LmOwnZ%2BSZyhfn%2BS%2FXsC1O64Efup7PRcja3mLXZXyxS9u9bqfX9EPfb3VgZQFpL02l7sqSXHkpQyJLQn57CEaPYdUxAumAZh5oPu40XdCtcbvrYjf%2BLpLGaMPoTkObPrgukKQ1pDvOvjojL0wP9Mb6PxDBybVfWtNAYAokpsCH8meCvrozvqFzcnBD55bcX09SGcldWh3vZkpT8cQ374qdXBu%2Bct2Ovn4zqICqvXdL2HSVxlzGfUu%2BXZKcC7OsTSDIjyt2U7CNzG4tZSbOktWNt5ZXosQIa6WOJ6Dykf0EgSzJ5eiP6bO88vJTkGYCkxWIshMyC0g9QZDswSZz9lYTGDXfYUkNeVaMTZPNfypJoMR8pqyA%2Fd%2FM5v2%2BvYO%2BqYGmtxFHBQamwEAVoGoEm10ep4k5ufbg8yq%2BAFO1MVOmdsCUUZ%2BWpPfrV5W%2F%2F1bp%2FMJpK0%2Frwg%2FdULhNwcIeCzvU5b2w3WO054kO86mH1Jb8xb%2F6%2FwEAAP%2F%2FAQAA%2F%2F92NZR6fQQAAA%3D%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRitXkeQ9aToQfAwCwoKMumemc7MuMhiXCPBmMTdlZyruqonZaq7mqru6UlOwQXZg4c5ePDXofMm2aCu4v4Bgky8LIGFbVGJYMC%2FQYgepScD437Q349%2B3%2BG999XH%2B9kZcZHR04339K5Uii74Dbf%2ByqaMuc5tfe1W3XMb7tX6powX21frwyqZweue6zfcV%2BvviGBbLzRdz3U916svSyNCPVyYopDJvZ7X6LmNdrPh%2BW0MzeOzzRxY6oAPzsizkLx8cuvBfchggjj64bqw26lOXns7yhRNtcGAH30Qb8c6jxHN29A4COOj2Ta0LQn57BJ0fDRTAD04qBSAyZI4v3tg8dGMJtjg8IIpUxAxGH8a%2BWACoSaQdIJA34bkjwgQcKytI47urmmT050LlFZoSWrnf0PmJan9%2BRzi6PslJYf1m1plqdSxxTAsIIcTyP4ESXaMdNeBzI8RpB9B8odk4XwVcXSwbpWG5MVUvZQTyHACJUag1kFWfdJBFjrIEgcRP61Tvxe6bidkYavVbQdB0GoFgd9d5D5vtbuhiyyo6I2QJiMEaoTA7CExe9iWI5jsJ9itApY7sGlJnPf3MOAFckGQW4KcEuSSIE8J8kFxyJVt2uIuVzZj3qw2Z7VVjHXa36eHOu2LmOwnZ%2BSZyhfn%2BS%2FXsC1O64Efup7PRcja3mLXZXyxS9u9bqfX9EPfb3VgZQFpL02l7sqSXHkpQyJLQn57CEaPYdUxAumAZh5oPu40XdCtcbvrYjf%2BLpLGaMPoTkObPrgukKQ1pDvOvjojL0wP9Mb6PxDBybVfWtNAYAokpsCH8meCvrozvqFzcnBD55bcX09SGcldWh3vZkpT8cQ374qdXBu%2Bct2Ovn4zqICqvXdL2HSVxlzGfUu%2BXZKcC7OsTSDIjyt2U7CNzG4tZSbOktWNt5ZXosQIa6WOJ6Dykf0EgSzJ5eiP6bO88vJTkGYCkxWIshMyC0g9QZDswSZz9lYTGDXfYUkNeVaMTZPNfypJoMR8pqyA%2Fd%2FM5v2%2BvYO%2BqYGmtxFHBQamwEAVoGoEm10ep4k5ufbg8yq%2BAFO1MVOmdsCUUZ%2BWpPfrV5W%2F%2F1bp%2FMJpK0%2Frwg%2FdULhNwcIeCzvU5b2w3WO054kO86mH1Jb8xb%2F6%2FwEAAP%2F%2FAQAA%2F%2F92NZR6fQQAAA%3D%3D HTTP/1.1
Host: greedevolution.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=18193230; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 355b8e35dbc7cc4883edeed1fe7b3813
Strict-Transport-Security: max-age=0; includeSubdomains
greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujuPB9aToQfAwCwoKMumemc7MuMhiXCPBmMTdlZyruqonZaq7mqru6UlOwQXZg4c5ePDXofNNskFdxf0DBJl4WQIL26ISwYB%2FgxA9Ss8OjPug33tff%2B%2Fwfe%2FVxwfZOXGR0bPN9%2FSeVIou%2Bg23%2FsqWjLnObX39Zt1zG%2B6V%2BpaMl9pX6sMqmcHrnus33Ffr74hgRy82Xc91Pderr0gjQj1cnLKQyd2e1%2Bi5jXaz4fltDM3j2GYOLHXAB%2BfkWUhePrl9%2Fx5kMEEc%2FXBN2J1UJ6%2B9HWWKptpgwI8%2FiHdinceI5m1oHITx8Wwa2paEfLYAHR%2FPHEAPDisHYLIkzu8eWHw8kwk2OHqklCmIGIw%2FjXwwgVATSDpBoG9B8ocECDjWNxBHd9a1yenuI5ZWbElqF39D5iWp%2Ffkc4uj7ZSWH9RtaZanUscUwLCCHE8j%2BBEl2gnTPgcxPEKQfQfIHZPFiDXF0uGGVhuTF1L2UE8hwAiVGoNZBVn3SQRY6yBIHET%2BrU78Xum4nZGGr1W0HQdBqBYHfXeI%2Bb7W7oYssqOSNkCYjBGqEwOwjMfvYkSOY7CfY7QKWO7BpSZz39zHgBXJBkFuCnBLkkiBPCfJBccSVbdriDlc2Y96sNme1VYx12j%2BgRzrti5gcJOfkmWovzvNfrmNHnNUDP3Q9n4uQtb2lrsv4Upe2e91Or%2BmHvt%2FqwMoC0i5Mre7Jklx%2BKUMiS0J%2BewBGT2DVCQLpgGYeaD7uNF3Q7XG762Iv%2Fi6SxmjD6G5Dmz64LpCkNaS7zoE6Jy9MD%2FTGxr8QwenVX1rTQGAKJKbAh%2FJngr66Pb6uc3J4XeeW3NtIUhnJPVod70ZKU%2FHEN%2B%2BK3VwbvnrNjr5%2BM6iIqr17U9h0jcZcxn1Lvl2WnAuzok0gyI%2BrdkuwzcxuL2cmzpK1zbdWVqPECGuljieg8qH9BIEsyaXoj%2BmzvPzyU5BmApMViLJTMgtIPUGQ7MMmc%2FVWExg1n2HJAvKsGJsmm%2F9UkkCJOaasgP0fZvP%2BwN5G39RA01uIowIDU2CgClA1gs0ujdPEnF69%2F3kVX4Cp2pgpUztkyqhPS9L79avpfqt0UaV%2FYOVZXfihGwq3KVjYY2GHurwXtnuM9jzRYT71kNqSv%2FhX%2Fz8AAAD%2F%2FwEAAP%2F%2Fr0AI%2FH0EAAA%3D
200 OK 7 B URL HTTP/1.1 greedevolution.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujuPB9aToQfAwCwoKMumemc7MuMhiXCPBmMTdlZyruqonZaq7mqru6UlOwQXZg4c5ePDXofNNskFdxf0DBJl4WQIL26ISwYB%2FgxA9Ss8OjPug33tff%2B%2Fwfe%2FVxwfZOXGR0bPN9%2FSeVIou%2Bg23%2FsqWjLnObX39Zt1zG%2B6V%2BpaMl9pX6sMqmcHrnus33Ffr74hgRy82Xc91Pderr0gjQj1cnLKQyd2e1%2Bi5jXaz4fltDM3j2GYOLHXAB%2BfkWUhePrl9%2Fx5kMEEc%2FXBN2J1UJ6%2B9HWWKptpgwI8%2FiHdinceI5m1oHITx8Wwa2paEfLYAHR%2FPHEAPDisHYLIkzu8eWHw8kwk2OHqklCmIGIw%2FjXwwgVATSDpBoG9B8ocECDjWNxBHd9a1yenuI5ZWbElqF39D5iWp%2Ffkc4uj7ZSWH9RtaZanUscUwLCCHE8j%2BBEl2gnTPgcxPEKQfQfIHZPFiDXF0uGGVhuTF1L2UE8hwAiVGoNZBVn3SQRY6yBIHET%2BrU78Xum4nZGGr1W0HQdBqBYHfXeI%2Bb7W7oYssqOSNkCYjBGqEwOwjMfvYkSOY7CfY7QKWO7BpSZz39zHgBXJBkFuCnBLkkiBPCfJBccSVbdriDlc2Y96sNme1VYx12j%2BgRzrti5gcJOfkmWovzvNfrmNHnNUDP3Q9n4uQtb2lrsv4Upe2e91Or%2BmHvt%2FqwMoC0i5Mre7Jklx%2BKUMiS0J%2BewBGT2DVCQLpgGYeaD7uNF3Q7XG762Iv%2Fi6SxmjD6G5Dmz64LpCkNaS7zoE6Jy9MD%2FTGxr8QwenVX1rTQGAKJKbAh%2FJngr66Pb6uc3J4XeeW3NtIUhnJPVod70ZKU%2FHEN%2B%2BK3VwbvnrNjr5%2BM6iIqr17U9h0jcZcxn1Lvl2WnAuzok0gyI%2BrdkuwzcxuL2cmzpK1zbdWVqPECGuljieg8qH9BIEsyaXoj%2BmzvPzyU5BmApMViLJTMgtIPUGQ7MMmc%2FVWExg1n2HJAvKsGJsmm%2F9UkkCJOaasgP0fZvP%2BwN5G39RA01uIowIDU2CgClA1gs0ujdPEnF69%2F3kVX4Cp2pgpUztkyqhPS9L79avpfqt0UaV%2FYOVZXfihGwq3KVjYY2GHurwXtnuM9jzRYT71kNqSv%2FhX%2Fz8AAAD%2F%2FwEAAP%2F%2Fr0AI%2FH0EAAA%3D
IP
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSujuPB9aToQfAwCwoKMumemc7MuMhiXCPBmMTdlZyruqonZaq7mqru6UlOwQXZg4c5ePDXofNNskFdxf0DBJl4WQIL26ISwYB%2FgxA9Ss8OjPug33tff%2B%2Fwfe%2FVxwfZOXGR0bPN9%2FSeVIou%2Bg23%2FsqWjLnObX39Zt1zG%2B6V%2BpaMl9pX6sMqmcHrnus33Ffr74hgRy82Xc91Pderr0gjQj1cnLKQyd2e1%2Bi5jXaz4fltDM3j2GYOLHXAB%2BfkWUhePrl9%2Fx5kMEEc%2FXBN2J1UJ6%2B9HWWKptpgwI8%2FiHdinceI5m1oHITx8Wwa2paEfLYAHR%2FPHEAPDisHYLIkzu8eWHw8kwk2OHqklCmIGIw%2FjXwwgVATSDpBoG9B8ocECDjWNxBHd9a1yenuI5ZWbElqF39D5iWp%2Ffkc4uj7ZSWH9RtaZanUscUwLCCHE8j%2BBEl2gnTPgcxPEKQfQfIHZPFiDXF0uGGVhuTF1L2UE8hwAiVGoNZBVn3SQRY6yBIHET%2BrU78Xum4nZGGr1W0HQdBqBYHfXeI%2Bb7W7oYssqOSNkCYjBGqEwOwjMfvYkSOY7CfY7QKWO7BpSZz39zHgBXJBkFuCnBLkkiBPCfJBccSVbdriDlc2Y96sNme1VYx12j%2BgRzrti5gcJOfkmWovzvNfrmNHnNUDP3Q9n4uQtb2lrsv4Upe2e91Or%2BmHvt%2FqwMoC0i5Mre7Jklx%2BKUMiS0J%2BewBGT2DVCQLpgGYeaD7uNF3Q7XG762Iv%2Fi6SxmjD6G5Dmz64LpCkNaS7zoE6Jy9MD%2FTGxr8QwenVX1rTQGAKJKbAh%2FJngr66Pb6uc3J4XeeW3NtIUhnJPVod70ZKU%2FHEN%2B%2BK3VwbvnrNjr5%2BM6iIqr17U9h0jcZcxn1Lvl2WnAuzok0gyI%2BrdkuwzcxuL2cmzpK1zbdWVqPECGuljieg8qH9BIEsyaXoj%2BmzvPzyU5BmApMViLJTMgtIPUGQ7MMmc%2FVWExg1n2HJAvKsGJsmm%2F9UkkCJOaasgP0fZvP%2BwN5G39RA01uIowIDU2CgClA1gs0ujdPEnF69%2F3kVX4Cp2pgpUztkyqhPS9L79avpfqt0UaV%2FYOVZXfihGwq3KVjYY2GHurwXtnuM9jzRYT71kNqSv%2FhX%2Fz8AAAD%2F%2FwEAAP%2F%2Fr0AI%2FH0EAAA%3D HTTP/1.1
Host: greedevolution.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: u_pl=18193230; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 23 Mar 2023 23:31:51 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a886f7409d8b08232ed51fbb7e096d8a
Strict-Transport-Security: max-age=0; includeSubdomains
maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta/js/bootstrap.min.js
IP
GET /bootstrap/4.0.0-beta/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"baaadea4492b059f284187d75af46063"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 08/20/2022 02:49:23
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 755
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 80abff40f4e68a8f955e3aa961338d69
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7aca785a8956b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0-beta/css/bootstrap.min.css
IP
GET /bootstrap/4.0.0-beta/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://proxyspare8.latestcache.com
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 23 Mar 2023 23:31:49 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"3ffbab350748e841d3768b5d1ca48933"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 05/04/2022 04:18:25
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 865
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 7d4ba026205b452dfad3d9e039b18058
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7aca785aa96db4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.36.134
188.114.98.234
35.241.9.150
3.123.95.62
95.101.11.115